This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/9O4IBBfmEECPTdHl1EfJXdQViDA.roa File: 9O4IBBfmEECPTdHl1EfJXdQViDA.roa (raw, json) Hash identifier: Sse+xDRukI4H9zJNAkpRk2yXjCfDGUfbJDIbylBubc0= Subject key identifier: F4:EE:08:04:17:E6:10:40:8F:4D:D1:E5:D4:47:C9:5D:D4:15:88:30 Certificate issuer: /CN=7384e508e3adf8edd6f2a242cdad6bde9a5ad018 Certificate serial: 019B0DAD733BE55CC2E3B21E940D94589A58 Authority key identifier: 73:84:E5:08:E3:AD:F8:ED:D6:F2:A2:42:CD:AD:6B:DE:9A:5A:D0:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/9O4IBBfmEECPTdHl1EfJXdQViDA.roa Signing time: Thu 11 Dec 2025 13:50:29 +0000 ROA not before: Thu 11 Dec 2025 13:50:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59550 IP address blocks: 46.245.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:ad:73:3b:e5:5c:c2:e3:b2:1e:94:0d:94:58:9a:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7384e508e3adf8edd6f2a242cdad6bde9a5ad018 Validity Not Before: Dec 11 13:50:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f4ee080417e610408f4dd1e5d447c95dd4158830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:76:6b:f4:13:23:35:d9:e4:28:87:c9:07:2e: 76:a4:bc:94:98:36:e7:df:7e:2d:22:30:15:d5:f0: a9:cd:07:dd:25:a9:0a:61:16:cc:e8:d7:75:bf:15: 3f:7e:35:8d:15:48:85:36:98:3a:2b:46:c6:82:b5: 15:35:98:c4:b1:e9:0e:e7:a9:de:54:04:b7:a4:d6: ea:a5:29:16:e9:97:b2:aa:e3:9b:0f:e6:93:3b:08: 38:eb:fc:d3:30:cd:ce:94:72:48:fd:2b:15:a3:a3: 91:28:62:1b:78:ac:3b:08:a4:c0:bd:8f:e0:f8:7d: 6e:4a:8b:8a:b6:7f:d9:78:01:7e:76:70:ff:39:d3: 1e:22:76:c5:60:34:db:96:a9:06:1c:9c:e1:af:70: 83:27:44:f6:06:0f:b8:c2:de:8d:cc:fa:81:cc:75: 71:9e:09:97:cc:f0:c0:0a:3a:14:4b:20:42:1b:00: 70:df:95:43:2e:ab:7e:d8:0b:d9:f6:12:7d:5c:08: 52:21:1f:76:2c:c5:c5:3b:c7:65:18:8a:cd:0e:da: 92:fd:1f:5c:8b:57:9d:cc:27:08:ed:6d:00:b9:e6: 96:b5:ab:bb:2b:fa:29:d5:4e:4f:41:ee:26:5b:bb: 5b:7d:f0:df:b6:47:2d:94:68:3a:54:98:42:6f:18: 18:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:EE:08:04:17:E6:10:40:8F:4D:D1:E5:D4:47:C9:5D:D4:15:88:30 X509v3 Authority Key Identifier: keyid:73:84:E5:08:E3:AD:F8:ED:D6:F2:A2:42:CD:AD:6B:DE:9A:5A:D0:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/9O4IBBfmEECPTdHl1EfJXdQViDA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.245.238.0/24 Signature Algorithm: sha256WithRSAEncryption 59:b6:de:2f:a6:c5:4c:9d:e7:92:2f:c1:b1:8c:77:10:c9:28: 6f:48:0e:c6:88:ab:4e:6c:d0:b0:3f:c1:b9:e0:e2:73:43:2c: a1:de:d7:b3:5a:93:ff:bc:df:1a:8a:cd:fb:c9:0d:57:1d:d0: ea:f3:6e:04:f2:4e:42:29:8d:38:d1:9a:b1:89:85:7a:62:3b: 8e:a5:39:49:43:c7:5e:85:39:f1:00:91:79:76:64:7d:00:23: f8:5f:c1:d0:b6:a1:7c:b4:c0:a8:7c:24:93:65:62:fd:5f:7d: 20:8f:b4:78:e7:80:26:a6:ab:40:a2:a3:4d:7f:f9:6b:b7:f2: 9e:52:e4:31:6d:c0:a5:7f:67:e1:fc:80:eb:33:3a:f1:ee:f7: 89:cc:b8:9f:c2:a1:4b:7b:5c:15:81:85:a9:6c:a8:25:f2:e6: 1c:2a:ba:6c:fb:c0:3f:d0:a3:93:90:72:f4:ba:dd:45:43:6c: 6c:07:d6:bf:b4:5f:f9:08:3d:51:3b:fb:72:0f:c7:5f:e6:97: b9:38:9d:d0:37:26:cc:66:1d:7a:5f:66:44:f1:eb:2f:ca:0c: 55:2e:18:3a:a0:f3:bf:ad:61:2e:b7:97:af:4f:fd:9d:0c:ad: 0f:08:66:b9:3d:ee:26:eb:9c:d3:dc:bf:26:7c:8f:cc:00:b2: 19:fe:ee:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsNrXM75VzC47IelA2UWJpYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczODRlNTA4ZTNhZGY4ZWRkNmYyYTI0MmNkYWQ2YmRlOWE1 YWQwMTgwHhcNMjUxMjExMTM1MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGVlMDgwNDE3ZTYxMDQwOGY0ZGQxZTVkNDQ3Yzk1ZGQ0MTU4ODMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXZr9BMjNdnkKIfJBy52pLyUmDbn 334tIjAV1fCpzQfdJakKYRbM6Nd1vxU/fjWNFUiFNpg6K0bGgrUVNZjEsekO56ne VAS3pNbqpSkW6ZeyquObD+aTOwg46/zTMM3OlHJI/SsVo6ORKGIbeKw7CKTAvY/g +H1uSouKtn/ZeAF+dnD/OdMeInbFYDTblqkGHJzhr3CDJ0T2Bg+4wt6NzPqBzHVx ngmXzPDACjoUSyBCGwBw35VDLqt+2AvZ9hJ9XAhSIR92LMXFO8dlGIrNDtqS/R9c i1edzCcI7W0AueaWtau7K/op1U5PQe4mW7tbffDftkctlGg6VJhCbxgYwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPTuCAQX5hBAj03R5dRHyV3UFYgwMB8GA1UdIwQY MBaAFHOE5Qjjrfjt1vKiQs2ta96aWtAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzRUbENPT3QtTzNXOHFKQ3phMXIzcHBhMEJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wNjZkYjItZDM1Yy00ODFmLWJhNTUt NTViNjc3MjM1ZWIzLzEvOU80SUJCZm1FRUNQVGRIbDFFZkpYZFFWaURBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8wNjZkYjItZDM1Yy00ODFmLWJhNTUtNTViNjc3MjM1ZWIz LzEvYzRUbENPT3QtTzNXOHFKQ3phMXIzcHBhMEJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALvXuMA0G CSqGSIb3DQEBCwUAA4IBAQBZtt4vpsVMneeSL8GxjHcQyShvSA7GiKtObNCwP8G5 4OJzQyyh3tezWpP/vN8ais37yQ1XHdDq824E8k5CKY040ZqxiYV6YjuOpTlJQ8de hTnxAJF5dmR9ACP4X8HQtqF8tMCofCSTZWL9X30gj7R454AmpqtAoqNNf/lrt/Ke UuQxbcClf2fh/IDrMzrx7veJzLifwqFLe1wVgYWpbKgl8uYcKrps+8A/0KOTkHL0 ut1FQ2xsB9a/tF/5CD1RO/tyD8df5pe5OJ3QNybMZh16X2ZE8esvygxVLhg6oPO/ rWEut5evT/2dDK0PCGa5Pe4m65zT3L8mfI/MALIZ/u7G -----END CERTIFICATE-----Generated at Sun Dec 21 02:18:14 2025 by rpki-client