This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/cB9xqUxjR_79aecOOGTzKVEOeHA.roa File: cB9xqUxjR_79aecOOGTzKVEOeHA.roa (raw, json) Hash identifier: 9DUWHqOG8gb/DeXTd26wEcsU2zpp7UNCMb6aEl1X4eo= Subject key identifier: 70:1F:71:A9:4C:63:47:FE:FD:69:E7:0E:38:64:F3:29:51:0E:78:70 Certificate issuer: /CN=2fba003756d1013b943eb4f507fb4e7c74778269 Certificate serial: 019B3745098B96B987C60A044FBBAD0894D4 Authority key identifier: 2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/cB9xqUxjR_79aecOOGTzKVEOeHA.roa Signing time: Fri 19 Dec 2025 15:40:29 +0000 ROA not before: Fri 19 Dec 2025 15:40:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56380 IP address blocks: 45.83.178.0/24 maxlen: 24 45.83.179.0/24 maxlen: 24 193.36.38.0/24 maxlen: 32 2a0b:bcc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:45:09:8b:96:b9:87:c6:0a:04:4f:bb:ad:08:94:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fba003756d1013b943eb4f507fb4e7c74778269 Validity Not Before: Dec 19 15:40:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=701f71a94c6347fefd69e70e3864f329510e7870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:17:d8:1d:83:5e:8c:98:1e:c5:f9:63:7e:e2: 79:2a:6e:60:5c:92:91:22:4c:14:fc:b3:98:02:23: 93:91:12:51:8b:f3:b6:12:c7:c6:6b:5d:78:6a:d2: 59:8e:67:9d:cb:71:15:2c:bf:87:da:97:22:cc:d4: a9:2d:53:90:6c:c1:2d:83:5c:6c:2b:95:65:e9:2a: 01:46:64:b3:7a:07:3d:7c:0d:a2:89:a9:df:86:77: 10:4b:fa:af:2e:e9:27:3b:dd:80:05:a5:07:ea:13: 52:1c:b4:c3:f9:70:54:8f:ac:61:c0:80:d7:39:4e: be:01:39:b0:f9:96:40:a7:c7:76:81:5e:f1:21:ef: a0:cc:0a:6d:c2:f5:a1:32:22:f8:88:a5:fd:0c:7a: ca:ef:14:b3:e6:0c:ec:fe:b8:01:88:87:f1:8c:8f: 9b:e2:d5:1d:55:6a:fd:37:3c:0d:4b:48:47:9a:39: f1:24:5e:ea:18:5c:43:66:9d:5f:60:6c:2a:9d:07: fc:bd:85:a1:81:41:8b:6c:28:86:af:fd:a1:85:58: 80:fd:35:11:be:30:c4:f4:d3:dd:be:96:da:e0:e6: 81:f6:0c:98:fa:ca:41:25:f0:8a:d9:b0:93:de:4a: 48:6a:53:c1:b8:9f:c4:f8:ed:ad:c4:c3:1e:f8:2d: 89:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1F:71:A9:4C:63:47:FE:FD:69:E7:0E:38:64:F3:29:51:0E:78:70 X509v3 Authority Key Identifier: keyid:2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/cB9xqUxjR_79aecOOGTzKVEOeHA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.178.0/23 193.36.38.0/24 IPv6: 2a0b:bcc0::/29 Signature Algorithm: sha256WithRSAEncryption de:9a:d7:50:a6:a7:03:6a:af:a6:17:f9:dc:d5:39:7b:42:94: 6e:e3:76:d5:59:d5:f0:15:3c:ad:bc:e4:fd:b1:9a:de:63:d3: d5:b6:73:98:97:8c:0a:a6:02:2a:3a:d6:bd:3a:2d:a0:19:e7: 38:8c:2a:33:29:d2:b4:dc:2e:cd:12:f3:34:b8:70:57:89:ef: 50:86:69:1e:37:b6:5b:85:94:58:06:9b:db:a8:ab:dd:81:11: 30:8e:15:6a:82:b5:52:e0:2e:df:27:4d:b3:06:e4:5f:e4:85: dd:c4:4a:cc:65:fc:96:c2:ce:4b:1c:ce:ae:a4:39:e4:e5:f4: 24:e0:58:44:0f:b7:31:c2:e7:32:d0:69:f0:75:97:4d:41:55: 6e:bc:47:44:33:e2:6c:16:3e:d1:44:a5:e6:75:fb:11:8d:c4: e4:cf:34:37:38:3e:0f:fc:43:29:76:53:a0:5b:12:96:9b:75: 10:9c:32:bd:9c:32:7a:f3:25:8d:9a:e6:4d:52:7a:b1:31:76: a3:2f:56:9b:52:2f:e0:49:f9:ed:ac:1d:44:be:d9:00:50:9a: bc:e7:8b:85:3c:cc:5f:43:62:f2:b8:49:82:97:94:79:13:4a: 3b:84:3e:fe:b9:d7:90:19:9b:a1:ef:7a:eb:1b:67:16:2d:1e: 96:0f:35:24 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZs3RQmLlrmHxgoET7utCJTUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYmEwMDM3NTZkMTAxM2I5NDNlYjRmNTA3ZmI0ZTdjNzQ3 NzgyNjkwHhcNMjUxMjE5MTU0MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDFmNzFhOTRjNjM0N2ZlZmQ2OWU3MGUzODY0ZjMyOTUxMGU3ODcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRfYHYNejJgexfljfuJ5Km5gXJKR IkwU/LOYAiOTkRJRi/O2EsfGa114atJZjmedy3EVLL+H2pcizNSpLVOQbMEtg1xs K5Vl6SoBRmSzegc9fA2iianfhncQS/qvLuknO92ABaUH6hNSHLTD+XBUj6xhwIDX OU6+ATmw+ZZAp8d2gV7xIe+gzAptwvWhMiL4iKX9DHrK7xSz5gzs/rgBiIfxjI+b 4tUdVWr9NzwNS0hHmjnxJF7qGFxDZp1fYGwqnQf8vYWhgUGLbCiGr/2hhViA/TUR vjDE9NPdvpba4OaB9gyY+spBJfCK2bCT3kpIalPBuJ/E+O2txMMe+C2JuwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFHAfcalMY0f+/WnnDjhk8ylRDnhwMB8GA1UdIwQY MBaAFC+6ADdW0QE7lD609Qf7Tnx0d4JpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDdvQU4xYlJBVHVVUHJUMUJfdE9mSFIzZ21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy82MjJmZGItMGU1Ni00Yzg3LTg2NmIt YjMxZjI1MmYxOTY5LzEvY0I5eHFVeGpSXzc5YWVjT09HVHpLVkVPZUhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy82MjJmZGItMGU1Ni00Yzg3LTg2NmItYjMxZjI1MmYxOTY5 LzEvTDdvQU4xYlJBVHVVUHJUMUJfdE9mSFIzZ21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBLVOyAwQA wSQmMA0EAgACMAcDBQMqC7zAMA0GCSqGSIb3DQEBCwUAA4IBAQDemtdQpqcDaq+m F/nc1Tl7QpRu43bVWdXwFTytvOT9sZreY9PVtnOYl4wKpgIqOta9Oi2gGec4jCoz KdK03C7NEvM0uHBXie9QhmkeN7ZbhZRYBpvbqKvdgREwjhVqgrVS4C7fJ02zBuRf 5IXdxErMZfyWws5LHM6upDnk5fQk4FhED7cxwucy0GnwdZdNQVVuvEdEM+JsFj7R RKXmdfsRjcTkzzQ3OD4P/EMpdlOgWxKWm3UQnDK9nDJ68yWNmuZNUnqxMXajL1ab Ui/gSfntrB1EvtkAUJq854uFPMxfQ2LyuEmCl5R5E0o7hD7+udeQGZuh73rrG2cW LR6WDzUk -----END CERTIFICATE-----Generated at Sat Dec 20 11:46:52 2025 by rpki-client