This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/cL2szEg3kUOIFWtQAmcbCSZtZYc.roa File: cL2szEg3kUOIFWtQAmcbCSZtZYc.roa (raw, json) Hash identifier: YCMeAPrDxZioM4h2/KihOj1lHfdiZW0Yj47e7CzBvTE= Subject key identifier: 70:BD:AC:CC:48:37:91:43:88:15:6B:50:02:67:1B:09:26:6D:65:87 Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a Certificate serial: 019B1D68DD30F383E8995A1901BCC7E4A35C Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/cL2szEg3kUOIFWtQAmcbCSZtZYc.roa Signing time: Sun 14 Dec 2025 15:09:29 +0000 ROA not before: Sun 14 Dec 2025 15:09:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 45.92.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:68:dd:30:f3:83:e8:99:5a:19:01:bc:c7:e4:a3:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a Validity Not Before: Dec 14 15:09:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=70bdaccc4837914388156b5002671b09266d6587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ce:a1:15:5d:d2:71:a4:fe:b5:18:f2:f2:d2: 76:24:56:5b:64:cc:be:76:57:cc:de:60:a5:20:a5: a6:01:fa:19:42:d6:67:55:cf:f7:2e:50:ed:f8:b6: 2b:a9:3c:95:73:b2:df:ab:be:43:6d:ea:37:43:71: 6b:b8:b4:fe:03:83:eb:15:36:f1:2d:ac:01:a0:3f: 8b:55:9d:65:a0:a0:cc:3f:87:37:d9:a7:ea:8f:02: 18:0a:33:14:2e:4c:04:6e:e6:2d:be:7e:30:52:2e: a3:a6:e5:b4:ef:5a:ad:fc:70:b2:2f:21:4a:be:9f: b4:68:69:ee:4c:e8:2b:3d:b6:bf:8d:d3:10:90:35: a3:25:d1:cf:01:1a:ff:f5:7d:eb:df:52:1c:a6:f3: 5b:65:5c:7f:eb:9d:ac:52:57:01:1c:b7:16:6c:08: f4:f1:1c:56:a4:37:37:9a:df:98:68:c3:f7:ea:a9: c1:52:61:f2:f1:60:6a:9a:0f:eb:4a:cf:7a:e8:a9: f9:53:e6:b5:fc:dc:7a:f9:43:07:af:5f:5a:fe:ef: 16:78:87:8d:60:2c:08:7b:10:3b:7e:99:fa:f5:24: 05:7e:78:4a:f0:0b:95:ac:00:b1:1c:d9:9e:db:72: 15:1b:48:79:eb:19:26:59:ed:b8:91:e7:e1:b5:57: 5d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:BD:AC:CC:48:37:91:43:88:15:6B:50:02:67:1B:09:26:6D:65:87 X509v3 Authority Key Identifier: keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/cL2szEg3kUOIFWtQAmcbCSZtZYc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.40.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:26:f5:7a:5d:30:23:3a:e1:5e:c3:d3:c5:b1:48:4b:d0:c1: 1a:53:f8:1e:52:31:6f:d5:ae:5d:64:a7:e0:28:8c:6a:4d:c3: c7:51:bc:16:ad:de:c6:8c:fe:f5:76:f4:49:54:08:c5:b7:13: ba:89:76:06:7e:b8:b3:b8:40:34:dd:68:39:19:93:30:4f:d1: c5:9a:9f:9b:ab:2f:f3:44:eb:5a:ec:ad:a4:a8:41:57:f6:34: a6:7f:f2:45:44:22:e0:42:ac:5c:f3:55:22:19:97:79:f2:f2: d6:e6:43:f3:b4:42:40:d9:68:22:71:e0:7d:b5:47:6a:1e:c8: 7f:3f:52:18:87:dd:ea:f9:1a:b8:94:69:63:ac:e1:1e:03:ef: 1b:db:e7:fb:ae:df:31:bf:6d:84:e1:e5:0f:8e:59:f3:cf:10: e5:31:03:5e:b7:18:7b:54:ed:6a:70:e6:74:20:27:18:e2:36: ca:b2:d1:6d:85:6a:b6:16:b6:cd:fc:19:8a:92:ce:b5:81:6a: bd:b8:c1:90:1f:83:09:98:83:26:8e:a5:35:37:77:9f:c3:04: 54:24:32:b6:26:cf:c5:e3:fb:d2:65:67:86:52:ba:dc:fa:fa: 71:21:9b:de:55:73:42:8a:ad:42:99:74:16:00:a0:8f:dd:83: 93:85:52:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsdaN0w84PomVoZAbzH5KNcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzEzNjdkZjZkMTg2MTA3MWM5MmJhZTcyNjUyMzMyNmY0 NWJhMmEwHhcNMjUxMjE0MTUwOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGJkYWNjYzQ4Mzc5MTQzODgxNTZiNTAwMjY3MWIwOTI2NmQ2NTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc6hFV3ScaT+tRjy8tJ2JFZbZMy+ dlfM3mClIKWmAfoZQtZnVc/3LlDt+LYrqTyVc7Lfq75Dbeo3Q3FruLT+A4PrFTbx LawBoD+LVZ1loKDMP4c32afqjwIYCjMULkwEbuYtvn4wUi6jpuW071qt/HCyLyFK vp+0aGnuTOgrPba/jdMQkDWjJdHPARr/9X3r31IcpvNbZVx/652sUlcBHLcWbAj0 8RxWpDc3mt+YaMP36qnBUmHy8WBqmg/rSs966Kn5U+a1/Nx6+UMHr19a/u8WeIeN YCwIexA7fpn69SQFfnhK8AuVrACxHNme23IVG0h56xkmWe24kefhtVddYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHC9rMxIN5FDiBVrUAJnGwkmbWWHMB8GA1UdIwQY MBaAFO4xNn320YYQcckrrnJlIzJvRboqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2It MTE1OWRiZmJlZDU0LzEvY0wyc3pFZzNrVU9JRld0UUFtY2JDU1p0WlljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2ItMTE1OWRiZmJlZDU0 LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVwoMA0G CSqGSIb3DQEBCwUAA4IBAQCaJvV6XTAjOuFew9PFsUhL0MEaU/geUjFv1a5dZKfg KIxqTcPHUbwWrd7GjP71dvRJVAjFtxO6iXYGfrizuEA03Wg5GZMwT9HFmp+bqy/z ROta7K2kqEFX9jSmf/JFRCLgQqxc81UiGZd58vLW5kPztEJA2WgiceB9tUdqHsh/ P1IYh93q+Rq4lGljrOEeA+8b2+f7rt8xv22E4eUPjlnzzxDlMQNetxh7VO1qcOZ0 ICcY4jbKstFthWq2FrbN/BmKks61gWq9uMGQH4MJmIMmjqU1N3efwwRUJDK2Js/F 4/vSZWeGUrrc+vpxIZveVXNCiq1CmXQWAKCP3YOThVKO -----END CERTIFICATE-----Generated at Fri Dec 19 23:19:39 2025 by rpki-client