This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/4X9zKpM0fzVE9wv8WP9X1bnQ1uM.roa File: 4X9zKpM0fzVE9wv8WP9X1bnQ1uM.roa (raw, json) Hash identifier: f+FU6utJDlIeoEMokf16CI5SGqAM0UoUv6lKNDA9Xzc= Subject key identifier: E1:7F:73:2A:93:34:7F:35:44:F7:0B:FC:58:FF:57:D5:B9:D0:D6:E3 Certificate issuer: /CN=661691ca9c58d0859b6b870230b0f581be66a58a Certificate serial: 019B0CEE1A9F621AA93D2F26BFC02AE92F49 Authority key identifier: 66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/4X9zKpM0fzVE9wv8WP9X1bnQ1uM.roa Signing time: Thu 11 Dec 2025 10:21:29 +0000 ROA not before: Thu 11 Dec 2025 10:21:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206264 IP address blocks: 45.84.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:ee:1a:9f:62:1a:a9:3d:2f:26:bf:c0:2a:e9:2f:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=661691ca9c58d0859b6b870230b0f581be66a58a Validity Not Before: Dec 11 10:21:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e17f732a93347f3544f70bfc58ff57d5b9d0d6e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e0:8b:c0:e3:97:dd:a6:68:b4:ec:5c:12:95: 1d:e9:23:f8:c7:38:13:e5:51:30:69:10:a5:d5:15: 49:42:37:5b:1d:d7:95:f8:c6:f4:ee:c7:4a:66:69: 88:86:5f:45:63:14:48:94:8b:86:ce:04:0a:d7:ac: 6e:d0:fe:70:4a:49:7e:5d:8d:d3:f6:ea:88:d2:c2: 2a:44:64:2d:10:44:bc:e4:8b:b8:2f:e9:26:42:9d: ee:aa:fb:aa:0f:40:0a:21:0d:69:ce:18:73:54:18: a1:a6:45:c7:57:65:f1:a4:0f:c0:20:c3:05:c9:96: fc:4e:f9:f8:ef:da:6f:45:43:30:54:b2:ef:1e:c9: d5:93:93:72:93:f0:fe:78:23:91:a0:57:8f:00:b4: ee:a5:79:ba:74:65:64:b4:f5:d4:15:a0:da:54:80: 9a:4a:86:f0:35:12:1f:9e:e3:f1:2f:55:3e:9a:67: 64:76:df:d4:6d:94:dd:9d:0d:18:bb:17:75:74:62: 4e:3c:b1:75:a0:b3:7f:3f:6b:e1:81:f9:3b:7c:8f: 7c:8d:49:f7:45:41:9f:40:ee:1b:f5:25:54:36:dd: 69:23:e3:e6:96:7c:e1:0c:23:0d:85:ec:1c:eb:e9: 42:d4:4a:22:50:f2:1e:ac:71:8b:a8:ed:6d:8c:e4: f8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:7F:73:2A:93:34:7F:35:44:F7:0B:FC:58:FF:57:D5:B9:D0:D6:E3 X509v3 Authority Key Identifier: keyid:66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/4X9zKpM0fzVE9wv8WP9X1bnQ1uM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.192.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:74:03:26:4a:a9:86:e1:18:55:ab:02:53:a1:aa:51:27:13: 9c:d0:15:d0:67:1f:48:14:ab:9b:8e:db:fe:8e:97:c6:7b:0c: 6f:f0:e1:87:e7:91:9b:b8:cf:aa:ff:90:cb:98:9e:50:d0:a2: 7a:3a:32:1b:db:54:fb:36:fb:73:2a:27:45:47:35:79:9f:6b: ca:da:54:7b:50:ed:cf:3e:d7:03:69:6d:e0:f5:24:2c:a4:ea: 49:89:80:09:c4:5f:5b:45:41:a0:1b:ec:e3:b4:7b:08:72:6f: 61:e7:9e:46:be:f0:15:9c:b8:62:f4:a6:3b:e8:31:c3:e9:a9: 07:1e:22:9f:cd:7e:9b:5a:cf:9f:b2:9e:9b:5a:87:f6:e2:19: fc:ed:4f:02:9b:3c:44:5e:51:fb:94:fa:d7:68:72:58:3f:65: 1f:4c:9d:87:ed:0e:c9:6a:cc:ed:4f:f7:58:f8:dc:b4:e6:64: f5:ec:58:01:75:93:84:da:49:7c:db:e5:c9:69:cd:2a:47:3d: 7a:e1:fc:21:fa:22:3b:50:55:35:0b:fb:40:c1:21:02:d7:db: ae:dd:4c:62:1a:e0:fb:1d:e2:6e:75:70:5b:30:a0:0a:8e:c2: 0c:c4:06:b9:95:9e:9e:03:77:7a:e2:dd:6b:a5:98:76:8c:7c: 96:1b:5e:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsM7hqfYhqpPS8mv8Aq6S9JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MTY5MWNhOWM1OGQwODU5YjZiODcwMjMwYjBmNTgxYmU2 NmE1OGEwHhcNMjUxMjExMTAyMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTdmNzMyYTkzMzQ3ZjM1NDRmNzBiZmM1OGZmNTdkNWI5ZDBkNmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuCLwOOX3aZotOxcEpUd6SP4xzgT 5VEwaRCl1RVJQjdbHdeV+Mb07sdKZmmIhl9FYxRIlIuGzgQK16xu0P5wSkl+XY3T 9uqI0sIqRGQtEES85Iu4L+kmQp3uqvuqD0AKIQ1pzhhzVBihpkXHV2XxpA/AIMMF yZb8Tvn479pvRUMwVLLvHsnVk5Nyk/D+eCORoFePALTupXm6dGVktPXUFaDaVICa SobwNRIfnuPxL1U+mmdkdt/UbZTdnQ0Yuxd1dGJOPLF1oLN/P2vhgfk7fI98jUn3 RUGfQO4b9SVUNt1pI+PmlnzhDCMNhewc6+lC1EoiUPIerHGLqO1tjOT4bQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOF/cyqTNH81RPcL/Fj/V9W50NbjMB8GA1UdIwQY MBaAFGYWkcqcWNCFm2uHAjCw9YG+ZqWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmhhUnlweFkwSVdiYTRjQ01MRDFnYjVtcFlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS84ZjAyNTktOWJjOC00ZmRjLTkyNmQt MWE4MGRhZmZkNzk2LzEvNFg5ektwTTBmelZFOXd2OFdQOVgxYm5RMXVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS84ZjAyNTktOWJjOC00ZmRjLTkyNmQtMWE4MGRhZmZkNzk2 LzEvWmhhUnlweFkwSVdiYTRjQ01MRDFnYjVtcFlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVTAMA0G CSqGSIb3DQEBCwUAA4IBAQAPdAMmSqmG4RhVqwJToapRJxOc0BXQZx9IFKubjtv+ jpfGewxv8OGH55GbuM+q/5DLmJ5Q0KJ6OjIb21T7NvtzKidFRzV5n2vK2lR7UO3P PtcDaW3g9SQspOpJiYAJxF9bRUGgG+zjtHsIcm9h555GvvAVnLhi9KY76DHD6akH HiKfzX6bWs+fsp6bWof24hn87U8CmzxEXlH7lPrXaHJYP2UfTJ2H7Q7JasztT/dY +Ny05mT17FgBdZOE2kl82+XJac0qRz164fwh+iI7UFU1C/tAwSEC19uu3UxiGuD7 HeJudXBbMKAKjsIMxAa5lZ6eA3d64t1rpZh2jHyWG140 -----END CERTIFICATE-----Generated at Fri Dec 19 23:51:40 2025 by rpki-client