This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/AD8C3dtB8i_Z7yq4BM2AgO0_OC0.roa File: AD8C3dtB8i_Z7yq4BM2AgO0_OC0.roa (raw, json) Hash identifier: V5sSVJx2PT2STWnI++vqSgC2sYqppPyEBWtHAnLkXPg= Subject key identifier: 00:3F:02:DD:DB:41:F2:2F:D9:EF:2A:B8:04:CD:80:80:ED:3F:38:2D Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B03FA8B3D68D714ADD2A8C5D912AF78F2 Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/AD8C3dtB8i_Z7yq4BM2AgO0_OC0.roa Signing time: Tue 09 Dec 2025 16:38:29 +0000 ROA not before: Tue 09 Dec 2025 16:38:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211588 IP address blocks: 45.83.205.0/24 maxlen: 24 45.131.60.0/24 maxlen: 24 2a07:e345::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 03:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:fa:8b:3d:68:d7:14:ad:d2:a8:c5:d9:12:af:78:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Dec 9 16:38:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=003f02dddb41f22fd9ef2ab804cd8080ed3f382d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e3:e2:13:0c:e3:02:32:61:c7:af:52:60:a7: 7b:40:a0:df:9e:2c:e9:36:14:c6:49:c5:6c:eb:d5: 4c:a1:fe:51:1d:ce:92:0a:cf:c1:fa:12:94:c1:e0: 78:ab:9e:7d:89:4d:6c:68:4a:27:7c:ec:ce:51:39: 8c:ad:c4:cf:0c:9c:ce:7f:de:db:fc:31:38:03:af: 80:68:1d:a4:c2:22:63:62:c6:4d:a1:8e:f2:c0:8f: 61:31:62:37:39:a1:ed:ae:cb:76:ed:c1:c4:5d:f0: 17:f1:f0:25:fa:bf:77:60:05:85:cd:52:a7:64:bf: 8d:d4:7a:a2:ef:03:b6:f5:8b:2a:80:a3:11:76:f2: 6f:13:18:11:54:c0:a7:70:94:ce:aa:af:d5:32:03: bd:ca:49:67:81:f8:5e:78:5a:e6:cb:cf:bf:2d:38: 11:25:ef:70:79:d7:df:72:76:7a:6f:e1:f8:ab:88: 47:7c:b1:eb:0b:90:2d:64:7b:56:af:16:2a:18:58: b3:db:45:b6:5d:54:9f:6b:01:3c:df:7a:54:2d:4d: 88:28:55:b0:c0:08:d8:8b:c7:c5:3c:f8:2f:df:c0: 3e:bd:dd:39:e9:b3:4c:5e:46:1b:d7:80:1d:34:41: a0:de:4a:0c:86:20:31:bb:2b:eb:66:95:35:d7:04: 84:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:3F:02:DD:DB:41:F2:2F:D9:EF:2A:B8:04:CD:80:80:ED:3F:38:2D X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/AD8C3dtB8i_Z7yq4BM2AgO0_OC0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.205.0/24 45.131.60.0/24 IPv6: 2a07:e345::/32 Signature Algorithm: sha256WithRSAEncryption 44:e7:67:e1:22:bb:5c:93:bf:8d:ad:9b:53:7d:97:6f:e0:ba: b1:8b:12:07:aa:f3:bc:a3:8b:7c:d8:bc:e8:d8:f9:6b:55:d6: 0c:0e:c9:3f:73:82:45:b5:97:1d:83:07:1e:87:4f:1c:a9:08: e0:91:b2:a8:d2:5a:86:ab:c7:14:e4:6f:20:f5:7f:27:d8:0b: e9:3a:26:a9:8c:c5:67:11:4b:a5:7d:f7:86:e6:4c:00:4c:cd: 71:4a:af:cc:98:60:b2:2b:c2:f3:3a:12:69:e0:73:0f:99:69: c3:2a:d9:0e:30:7f:e2:8e:81:0c:af:b5:07:94:14:df:37:27: c3:0c:d3:43:6d:46:5b:6f:e8:e1:4e:f9:e4:3a:4b:6b:90:71: 7c:6e:e1:35:b9:9b:b4:50:91:a3:22:d6:be:dd:b7:5b:34:5b: 7e:89:02:8e:f1:c6:e8:01:79:98:ad:1a:96:43:61:d9:4d:aa: f5:4d:13:63:1b:f6:23:69:c7:62:d0:34:be:18:70:8e:63:ce: c0:25:af:92:ea:82:9a:04:bf:2b:29:57:99:0e:cd:17:20:5a: 26:83:e2:d8:1c:7a:37:2e:05:61:10:9a:37:40:99:42:23:15: 70:a6:74:39:cb:88:1a:f4:84:1d:dc:e4:ee:95:f3:04:78:21: 74:e7:64:cc -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZsD+os9aNcUrdKoxdkSr3jyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjUxMjA5MTYzODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDNmMDJkZGRiNDFmMjJmZDllZjJhYjgwNGNkODA4MGVkM2YzODJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+PiEwzjAjJhx69SYKd7QKDfnizp NhTGScVs69VMof5RHc6SCs/B+hKUweB4q559iU1saEonfOzOUTmMrcTPDJzOf97b /DE4A6+AaB2kwiJjYsZNoY7ywI9hMWI3OaHtrst27cHEXfAX8fAl+r93YAWFzVKn ZL+N1Hqi7wO29YsqgKMRdvJvExgRVMCncJTOqq/VMgO9yklngfheeFrmy8+/LTgR Je9wedffcnZ6b+H4q4hHfLHrC5AtZHtWrxYqGFiz20W2XVSfawE833pULU2IKFWw wAjYi8fFPPgv38A+vd056bNMXkYb14AdNEGg3koMhiAxuyvrZpU11wSE0wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAA/At3bQfIv2e8quATNgIDtPzgtMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvQUQ4QzNkdEI4aV9aN3lxNEJNMkFnTzBfT0MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALVPNAwQA LYM8MA0EAgACMAcDBQAqB+NFMA0GCSqGSIb3DQEBCwUAA4IBAQBE52fhIrtck7+N rZtTfZdv4LqxixIHqvO8o4t82Lzo2PlrVdYMDsk/c4JFtZcdgwceh08cqQjgkbKo 0lqGq8cU5G8g9X8n2AvpOiapjMVnEUulffeG5kwATM1xSq/MmGCyK8LzOhJp4HMP mWnDKtkOMH/ijoEMr7UHlBTfNyfDDNNDbUZbb+jhTvnkOktrkHF8buE1uZu0UJGj Ita+3bdbNFt+iQKO8cboAXmYrRqWQ2HZTar1TRNjG/Yjacdi0DS+GHCOY87AJa+S 6oKaBL8rKVeZDs0XIFomg+LYHHo3LgVhEJo3QJlCIxVwpnQ5y4ga9IQd3OTulfME eCF052TM -----END CERTIFICATE-----Generated at Sat Dec 20 12:54:45 2025 by rpki-client