This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/_jGk8i7xc1vS22HakgE7yfJm500.roa File: _jGk8i7xc1vS22HakgE7yfJm500.roa (raw, json) Hash identifier: IwuL0hX4iJHgEjc2APA5tMZR/QQaHLg/IHYK7L6FjWI= Subject key identifier: FE:31:A4:F2:2E:F1:73:5B:D2:DB:61:DA:92:01:3B:C9:F2:66:E7:4D Certificate issuer: /CN=03c80157b56426ce3a5f43c89feb1d437c77cbce Certificate serial: 019B2C616E793DEAE055C5F02CD3C9C6F39B Authority key identifier: 03:C8:01:57:B5:64:26:CE:3A:5F:43:C8:9F:EB:1D:43:7C:77:CB:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/_jGk8i7xc1vS22HakgE7yfJm500.roa Signing time: Wed 17 Dec 2025 12:55:41 +0000 ROA not before: Wed 17 Dec 2025 12:55:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43366 IP address blocks: 185.45.148.0/24 maxlen: 24 193.189.89.0/24 maxlen: 24 2a13:bdc0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.crl rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:61:6e:79:3d:ea:e0:55:c5:f0:2c:d3:c9:c6:f3:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03c80157b56426ce3a5f43c89feb1d437c77cbce Validity Not Before: Dec 17 12:55:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fe31a4f22ef1735bd2db61da92013bc9f266e74d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:17:c7:f5:d1:8b:03:68:d4:b1:4a:d8:a2:b7: 8c:b0:7b:20:11:c1:50:e2:50:64:34:0b:55:92:ac: 0a:ac:9b:12:3c:a4:5e:08:89:f9:b2:0f:52:89:c0: ae:37:05:6f:a7:5d:16:67:c4:a1:8d:8f:b3:4a:46: 2b:52:27:43:87:fc:d6:b8:c7:3c:c0:24:3c:b2:65: b6:ef:62:bf:91:4b:44:0c:6e:9a:e5:f2:a5:9f:7e: 43:d4:b3:dd:90:87:be:10:16:10:2b:97:bf:a9:88: 75:3b:c7:62:86:66:04:fb:cd:93:43:8d:49:ab:c8: 60:07:a7:82:70:61:4d:6a:a1:8b:bb:09:1f:f1:1b: e2:3b:f5:b9:d6:65:a9:91:82:5e:80:99:8d:4b:c4: b3:2d:5a:04:75:c4:3e:a5:0f:09:52:7f:18:7a:ab: 88:44:97:96:69:e5:16:71:92:7a:89:a4:d0:28:ee: f0:1f:18:c5:8c:92:2f:30:eb:c4:40:26:01:be:90: a3:dc:61:09:e4:03:3a:1c:06:fd:d9:6e:8e:1d:72: 04:ee:c5:84:bc:60:76:21:95:1c:b7:26:33:fe:4f: 8d:dd:5a:24:e2:4a:e3:be:45:58:d0:ef:63:94:e8: 5e:59:43:87:c8:3f:6c:b5:a2:e1:89:18:93:5c:0d: 79:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:31:A4:F2:2E:F1:73:5B:D2:DB:61:DA:92:01:3B:C9:F2:66:E7:4D X509v3 Authority Key Identifier: keyid:03:C8:01:57:B5:64:26:CE:3A:5F:43:C8:9F:EB:1D:43:7C:77:CB:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/_jGk8i7xc1vS22HakgE7yfJm500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.45.148.0/24 193.189.89.0/24 IPv6: 2a13:bdc0::/29 Signature Algorithm: sha256WithRSAEncryption 74:56:cf:ba:9c:39:e6:58:50:d2:52:6e:d8:c3:35:81:09:a3: ef:68:b5:c0:f2:0f:20:19:56:07:3c:ba:5f:fa:6d:64:75:df: ef:13:2b:0a:a4:76:3f:16:02:83:b9:2f:ae:59:ef:28:3b:b6: a4:47:dd:37:eb:a4:bb:41:ec:e3:ba:c5:a5:2f:7a:ac:fe:fc: 47:db:29:9a:4a:ef:e5:ee:9f:ce:ac:fb:f7:25:10:e1:3b:f8: 81:13:59:c4:db:82:be:1c:eb:7b:10:d3:98:f8:9b:c2:36:65: ea:be:8d:15:12:59:98:d9:ee:d8:da:28:9d:65:b2:4f:98:3a: 83:61:36:49:54:8c:8d:1c:d8:aa:9d:b1:4f:95:36:aa:f7:0e: 16:18:9a:42:39:59:23:5d:68:fc:f1:e6:5b:93:69:37:e3:42: c4:0d:fc:64:a4:5f:f9:31:7f:1c:45:29:20:02:7f:af:31:bf: a0:01:87:05:f3:3f:6d:e3:cb:63:60:76:7b:02:2c:d2:78:5c: b5:d4:ca:73:0b:a2:8f:d8:cf:9c:90:a2:e5:7f:7d:0d:a4:ad: f3:6d:c9:ef:ac:96:9f:67:f1:4c:5b:a4:e9:f4:87:f5:27:5a: 6a:64:db:35:7e:bb:d2:7f:cc:c3:e7:ff:6f:c1:b2:a4:f8:d1: 08:48:49:b3 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZssYW55PergVcXwLNPJxvObMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYzgwMTU3YjU2NDI2Y2UzYTVmNDNjODlmZWIxZDQzN2M3 N2NiY2UwHhcNMjUxMjE3MTI1NTQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTMxYTRmMjJlZjE3MzViZDJkYjYxZGE5MjAxM2JjOWYyNjZlNzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxfH9dGLA2jUsUrYoreMsHsgEcFQ 4lBkNAtVkqwKrJsSPKReCIn5sg9SicCuNwVvp10WZ8ShjY+zSkYrUidDh/zWuMc8 wCQ8smW272K/kUtEDG6a5fKln35D1LPdkIe+EBYQK5e/qYh1O8dihmYE+82TQ41J q8hgB6eCcGFNaqGLuwkf8RviO/W51mWpkYJegJmNS8SzLVoEdcQ+pQ8JUn8YequI RJeWaeUWcZJ6iaTQKO7wHxjFjJIvMOvEQCYBvpCj3GEJ5AM6HAb92W6OHXIE7sWE vGB2IZUctyYz/k+N3Vok4krjvkVY0O9jlOheWUOHyD9staLhiRiTXA159wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFP4xpPIu8XNb0tth2pIBO8nyZudNMB8GA1UdIwQY MBaAFAPIAVe1ZCbOOl9DyJ/rHUN8d8vOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQThnQlY3VmtKczQ2WDBQSW4tc2RRM3gzeTg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kNzE2YWEtZGE4MC00OTNiLWFkZjEt ZjAxNGY4MTc3OTZhLzEvX2pHazhpN3hjMXZTMjJIYWtnRTd5ZkptNTAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9kNzE2YWEtZGE4MC00OTNiLWFkZjEtZjAxNGY4MTc3OTZh LzEvQThnQlY3VmtKczQ2WDBQSW4tc2RRM3gzeTg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAuS2UAwQA wb1ZMA0EAgACMAcDBQMqE73AMA0GCSqGSIb3DQEBCwUAA4IBAQB0Vs+6nDnmWFDS Um7YwzWBCaPvaLXA8g8gGVYHPLpf+m1kdd/vEysKpHY/FgKDuS+uWe8oO7akR903 66S7QezjusWlL3qs/vxH2ymaSu/l7p/OrPv3JRDhO/iBE1nE24K+HOt7ENOY+JvC NmXqvo0VElmY2e7Y2iidZbJPmDqDYTZJVIyNHNiqnbFPlTaq9w4WGJpCOVkjXWj8 8eZbk2k340LEDfxkpF/5MX8cRSkgAn+vMb+gAYcF8z9t48tjYHZ7AizSeFy11Mpz C6KP2M+ckKLlf30NpK3zbcnvrJafZ/FMW6Tp9If1J1pqZNs1frvSf8zD5/9vwbKk +NEISEmz -----END CERTIFICATE-----Generated at Sat Dec 20 19:43:41 2025 by rpki-client