This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/dkalZuhkXvwmIupORosbz0_QuDk.roa File: dkalZuhkXvwmIupORosbz0_QuDk.roa (raw, json) Hash identifier: zivsX5txTkDFC4Y1VfrYve6SjqG+jiiSQsRuGY7HqQI= Subject key identifier: 76:46:A5:66:E8:64:5E:FC:26:22:EA:4E:46:8B:1B:CF:4F:D0:B8:39 Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e Certificate serial: 019B3200762DEF261344CE9314FAF71742BB Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/dkalZuhkXvwmIupORosbz0_QuDk.roa Signing time: Thu 18 Dec 2025 15:07:29 +0000 ROA not before: Thu 18 Dec 2025 15:07:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 45.15.104.0/23 maxlen: 24 45.15.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:00:76:2d:ef:26:13:44:ce:93:14:fa:f7:17:42:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e Validity Not Before: Dec 18 15:07:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7646a566e8645efc2622ea4e468b1bcf4fd0b839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ec:8d:c6:52:92:a2:b4:c5:d3:dd:ae:2c:83: b8:48:89:a0:43:12:e2:72:c9:6e:ae:50:4f:91:42: 64:df:ea:24:34:57:fd:45:67:05:d9:af:31:93:4f: 8c:81:d5:0c:7e:de:fa:c2:5b:30:be:f5:e2:1f:bf: 27:f9:00:a7:37:ce:97:73:40:8b:c4:76:a4:0e:65: 6c:e5:3d:70:cc:be:f9:c3:b3:3a:6f:2f:99:8c:4a: 38:95:c3:74:36:b2:9d:27:50:2c:db:bb:9a:b4:c8: 4a:ec:06:bf:c1:1f:9a:83:89:3b:44:90:56:59:3a: 46:a0:1b:ae:39:49:8e:25:4d:29:1e:44:07:5a:87: c7:0c:90:c6:cd:44:9d:67:f0:17:a6:66:f0:e6:b7: 4b:bb:af:d9:87:64:9b:b2:31:54:32:05:66:66:ea: b4:ca:ad:62:8b:f0:ef:d9:64:5e:55:89:e1:3e:b2: 6e:54:ad:08:45:f6:31:70:61:6f:53:2e:9f:13:f6: e5:c0:6e:af:07:89:c9:50:b3:6e:79:2a:53:fc:01: 0b:3b:36:a3:a2:d9:cb:e2:09:72:7d:a8:ad:4a:c0: a0:56:d4:0c:ce:34:ff:25:45:cb:b1:60:cf:77:e3: 55:24:40:11:83:c4:40:d6:9b:31:5c:c4:44:7c:f9: 82:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:46:A5:66:E8:64:5E:FC:26:22:EA:4E:46:8B:1B:CF:4F:D0:B8:39 X509v3 Authority Key Identifier: keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/dkalZuhkXvwmIupORosbz0_QuDk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.104.0/22 Signature Algorithm: sha256WithRSAEncryption 84:58:87:8a:16:de:19:b7:24:fb:e5:08:ec:62:42:f5:1b:1b: f9:a5:fd:44:66:23:27:3d:a5:38:49:22:ee:d3:0f:4a:13:fd: 78:59:73:ec:66:49:8c:15:96:d8:5a:9c:30:b8:ae:7d:3e:7c: b5:d8:14:17:89:01:91:d5:ad:08:6d:9a:5a:e9:60:05:38:24: 61:31:ad:83:fb:23:3e:e1:7f:b3:0f:24:a1:81:12:56:ef:69: e7:c0:71:22:6e:f5:da:66:4b:12:63:32:69:26:1c:ff:ec:c0: 7c:1d:35:70:89:25:22:d5:92:75:a7:ea:80:f4:ed:d4:92:62: 7a:e3:83:b9:53:85:c5:7f:0f:24:3c:b1:2c:66:86:0d:71:24: 4d:67:c9:28:3c:b5:8f:07:a9:cb:21:a0:15:39:04:82:91:52: b6:88:3e:44:48:1c:20:bc:e4:d6:7d:a3:c1:4f:5c:7f:e8:b9: b7:3c:85:b5:78:6a:3e:a2:c7:83:75:bd:ce:70:a6:a5:34:26: 3a:f5:9b:a8:35:6f:9f:a4:cc:a6:f1:31:28:69:6f:25:36:0f: f6:83:c5:11:be:4b:24:a7:b9:80:e7:94:78:52:6d:2e:54:96: 98:09:59:96:f1:7d:95:4b:ca:1b:dc:43:09:5e:06:b2:59:01: c8:e2:e7:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsyAHYt7yYTRM6TFPr3F0K7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOGQwN2I0NWY3ZDgzMTI0YzlmOGMwZmFjMDNiZWMwMjQ2 OGIzN2UwHhcNMjUxMjE4MTUwNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjQ2YTU2NmU4NjQ1ZWZjMjYyMmVhNGU0NjhiMWJjZjRmZDBiODM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+yNxlKSorTF092uLIO4SImgQxLi cslurlBPkUJk3+okNFf9RWcF2a8xk0+MgdUMft76wlswvvXiH78n+QCnN86Xc0CL xHakDmVs5T1wzL75w7M6by+ZjEo4lcN0NrKdJ1As27uatMhK7Aa/wR+ag4k7RJBW WTpGoBuuOUmOJU0pHkQHWofHDJDGzUSdZ/AXpmbw5rdLu6/Zh2SbsjFUMgVmZuq0 yq1ii/Dv2WReVYnhPrJuVK0IRfYxcGFvUy6fE/blwG6vB4nJULNueSpT/AELOzaj otnL4glyfaitSsCgVtQMzjT/JUXLsWDPd+NVJEARg8RA1psxXMREfPmCcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHZGpWboZF78JiLqTkaLG89P0Lg5MB8GA1UdIwQY MBaAFF6NB7RffYMSTJ+MD6wDvsAkaLN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG8wSHRGOTlneEpNbjR3UHJBTy13Q1JvczM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9hMTY4ZTktZDA3MC00NGUwLTk0YTQt NmM4ZmQ4NGJiNWY1LzEvZGthbFp1aGtYdndtSXVwT1Jvc2J6MF9RdURrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9hMTY4ZTktZDA3MC00NGUwLTk0YTQtNmM4ZmQ4NGJiNWY1 LzEvWG8wSHRGOTlneEpNbjR3UHJBTy13Q1JvczM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ9oMA0G CSqGSIb3DQEBCwUAA4IBAQCEWIeKFt4ZtyT75QjsYkL1Gxv5pf1EZiMnPaU4SSLu 0w9KE/14WXPsZkmMFZbYWpwwuK59Pny12BQXiQGR1a0IbZpa6WAFOCRhMa2D+yM+ 4X+zDyShgRJW72nnwHEibvXaZksSYzJpJhz/7MB8HTVwiSUi1ZJ1p+qA9O3UkmJ6 44O5U4XFfw8kPLEsZoYNcSRNZ8koPLWPB6nLIaAVOQSCkVK2iD5ESBwgvOTWfaPB T1x/6Lm3PIW1eGo+oseDdb3OcKalNCY69ZuoNW+fpMym8TEoaW8lNg/2g8URvksk p7mA55R4Um0uVJaYCVmW8X2VS8ob3EMJXgayWQHI4ucL -----END CERTIFICATE-----Generated at Sat Dec 20 16:07:39 2025 by rpki-client