This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/A48VLfLas4GofoONy0y-iW32tS0.roa File: A48VLfLas4GofoONy0y-iW32tS0.roa (raw, json) Hash identifier: XUwjPqoCqVEzVNtm5ilLL312ff7h/TufDYbq8BzMhcE= Subject key identifier: 03:8F:15:2D:F2:DA:B3:81:A8:7E:83:8D:CB:4C:BE:89:6D:F6:B5:2D Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13 Certificate serial: 019B092923A9CE6A07FD3D0BA29A4CD8C38D Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/A48VLfLas4GofoONy0y-iW32tS0.roa Signing time: Wed 10 Dec 2025 16:47:29 +0000 ROA not before: Wed 10 Dec 2025 16:47:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9009 IP address blocks: 45.12.205.0/24 maxlen: 24 45.12.206.0/24 maxlen: 24 45.12.207.0/24 maxlen: 24 45.66.132.0/24 maxlen: 24 45.85.3.0/24 maxlen: 24 45.144.240.0/24 maxlen: 24 45.144.241.0/24 maxlen: 24 45.144.242.0/24 maxlen: 24 45.144.243.0/24 maxlen: 24 81.90.190.0/24 maxlen: 24 185.126.119.0/24 maxlen: 24 185.126.139.0/24 maxlen: 24 185.160.25.0/24 maxlen: 24 185.172.115.0/24 maxlen: 24 2a0c:8a40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:29:23:a9:ce:6a:07:fd:3d:0b:a2:9a:4c:d8:c3:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13 Validity Not Before: Dec 10 16:47:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=038f152df2dab381a87e838dcb4cbe896df6b52d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4c:64:a6:61:5a:e8:3b:11:98:d3:b0:d5:b9: 4c:4e:92:2a:22:6f:da:8d:be:a9:96:c4:e3:26:8b: b3:66:20:fb:f9:0d:2e:30:b8:e3:2b:ea:99:ab:2c: ef:fe:91:a9:a0:35:f6:96:79:1c:8f:91:c2:61:b5: db:9f:18:e3:4b:5d:e3:bd:fe:5f:35:08:2d:1b:6d: 9e:91:35:43:4d:0f:02:ae:fe:65:a8:85:d4:e9:24: a8:42:59:41:34:9b:b4:32:31:7f:81:8f:e7:1f:c8: ba:a4:9f:21:96:e6:68:19:06:aa:9b:5a:1b:3b:bc: 72:9a:fd:3e:89:50:52:b1:97:94:ad:39:bd:21:f4: 95:c2:29:14:c5:a7:64:62:55:2d:5d:06:f6:c7:dc: 3a:7b:7a:1a:db:ba:41:42:e2:4a:8e:96:3e:0b:d1: db:41:a2:eb:1b:21:1a:cc:b4:f8:17:55:b5:c1:f1: 72:9c:a1:60:25:eb:88:da:8a:a5:cc:4d:bb:06:e0: 3d:ff:55:fd:1d:ab:c8:b7:5d:c2:56:2d:13:4e:49: 71:9b:35:00:9c:bc:6f:2c:0a:e4:38:63:a4:0b:20: 25:53:3d:0b:e3:45:7f:e3:7a:16:01:82:d4:ce:b6: b7:8a:49:27:e4:21:dc:1e:3e:71:80:f5:45:3c:32: 23:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:8F:15:2D:F2:DA:B3:81:A8:7E:83:8D:CB:4C:BE:89:6D:F6:B5:2D X509v3 Authority Key Identifier: keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/A48VLfLas4GofoONy0y-iW32tS0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.205.0-45.12.207.255 45.66.132.0/24 45.85.3.0/24 45.144.240.0/22 81.90.190.0/24 185.126.119.0/24 185.126.139.0/24 185.160.25.0/24 185.172.115.0/24 IPv6: 2a0c:8a40:2::/48 Signature Algorithm: sha256WithRSAEncryption b0:17:53:db:76:ed:2b:a6:81:fe:53:58:d3:b5:6b:1d:36:07: 69:16:5f:fe:d2:33:b1:4f:bf:13:65:83:9d:bb:34:62:2e:7b: 5f:61:cb:4c:82:52:c5:f5:2f:57:30:12:ee:3d:54:82:b7:33: 89:a9:e5:43:dd:1c:1a:ed:7d:20:30:15:b2:03:8f:78:31:ce: a6:66:9b:eb:14:f2:71:6f:10:bc:c1:01:cc:ce:97:54:49:3a: b6:ce:3d:95:42:2c:e0:82:12:04:83:82:a3:0d:93:21:1a:3e: 20:a7:06:06:39:a8:08:00:5d:c8:37:ea:77:4d:b2:43:d1:c9: d9:b8:6f:e2:a4:f2:70:be:a3:e0:26:c3:5e:c9:8c:55:f9:82: c4:79:f6:33:4d:7f:7c:e8:47:7c:83:d6:d3:c4:42:53:11:5e: f5:11:57:8b:84:da:cd:7d:51:13:c7:b4:21:4d:00:ba:c0:db: 41:bb:a9:f6:7e:7e:4f:14:22:8d:05:8d:78:f9:7b:b7:68:52: a1:19:ef:f7:f1:76:5d:eb:d1:f2:1a:12:aa:cf:3c:14:bb:8d: 8f:18:e8:6d:46:ef:74:c1:b7:ef:54:7c:fc:8e:5d:cf:8d:ca: 1d:78:d7:d7:86:df:95:7e:83:5c:4d:07:ec:48:08:f0:25:19: 8c:5e:7b:44 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgISAZsJKSOpzmoH/T0LoppM2MONMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMjQ3ZTczMzkxZWM5ZDZhMmE0NmYyY2IwYjAyZmM5OTQy ODhmMTMwHhcNMjUxMjEwMTY0NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzhmMTUyZGYyZGFiMzgxYTg3ZTgzOGRjYjRjYmU4OTZkZjZiNTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0xkpmFa6DsRmNOw1blMTpIqIm/a jb6plsTjJouzZiD7+Q0uMLjjK+qZqyzv/pGpoDX2lnkcj5HCYbXbnxjjS13jvf5f NQgtG22ekTVDTQ8Crv5lqIXU6SSoQllBNJu0MjF/gY/nH8i6pJ8hluZoGQaqm1ob O7xymv0+iVBSsZeUrTm9IfSVwikUxadkYlUtXQb2x9w6e3oa27pBQuJKjpY+C9Hb QaLrGyEazLT4F1W1wfFynKFgJeuI2oqlzE27BuA9/1X9HavIt13CVi0TTklxmzUA nLxvLArkOGOkCyAlUz0L40V/43oWAYLUzra3ikkn5CHcHj5xgPVFPDIjvwIDAQAB o4ICUjCCAk4wHQYDVR0OBBYEFAOPFS3y2rOBqH6DjctMvolt9rUtMB8GA1UdIwQY MBaAFAskfnM5HsnWoqRvLLCwL8mUKI8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMt NzM2Nzg5ZWU2ZmQwLzEvQTQ4VkxmTGFzNEdvZm9PTnkweS1pVzMydFMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMtNzM2Nzg5ZWU2ZmQw LzEvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzBEBAIAATA+MAwDBAAtDM0D BAQtDMADBAAtQoQDBAAtVQMDBAItkPADBABRWr4DBAC5fncDBAC5fosDBAC5oBkD BAC5rHMwDwQCAAIwCQMHACoMikAAAjANBgkqhkiG9w0BAQsFAAOCAQEAsBdT23bt K6aB/lNY07VrHTYHaRZf/tIzsU+/E2WDnbs0Yi57X2HLTIJSxfUvVzAS7j1Ugrcz ianlQ90cGu19IDAVsgOPeDHOpmab6xTycW8QvMEBzM6XVEk6ts49lUIs4IISBIOC ow2TIRo+IKcGBjmoCABdyDfqd02yQ9HJ2bhv4qTycL6j4CbDXsmMVfmCxHn2M01/ fOhHfIPW08RCUxFe9RFXi4TazX1RE8e0IU0AusDbQbup9n5+TxQijQWNePl7t2hS oRnv9/F2XevR8hoSqs88FLuNjxjobUbvdMG371R8/I5dz43KHXjX14bflX6DXE0H 7EgI8CUZjF57RA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:42:57 2025 by rpki-client