This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fIrEZuVZGb4LXH-hc4hmwMHhefA.roa File: fIrEZuVZGb4LXH-hc4hmwMHhefA.roa (raw, json) Hash identifier: vxCChDzVxvkz47xEw5Ax+H7rfsfoBApZ/6NcofmR64s= Subject key identifier: 7C:8A:C4:66:E5:59:19:BE:0B:5C:7F:A1:73:88:66:C0:C1:E1:79:F0 Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Certificate serial: 019B2E9D7572C978B55C87847F1942F5AA8D Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fIrEZuVZGb4LXH-hc4hmwMHhefA.roa Signing time: Wed 17 Dec 2025 23:20:29 +0000 ROA not before: Wed 17 Dec 2025 23:20:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 46261 IP address blocks: 45.139.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:9d:75:72:c9:78:b5:5c:87:84:7f:19:42:f5:aa:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Validity Not Before: Dec 17 23:20:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7c8ac466e55919be0b5c7fa1738866c0c1e179f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d8:9a:ac:73:5d:fd:81:73:f5:88:cb:ba:74: f5:42:7b:1f:1e:8d:42:07:0f:f0:ea:5e:d5:15:4e: a0:1f:55:af:1f:1e:10:8e:cb:07:4b:a6:9b:9e:d6: e0:9e:2f:5a:bd:1c:ef:5a:4a:42:33:e6:46:dc:5f: a5:75:28:ff:28:b4:10:04:58:7c:ba:f5:a0:78:70: 07:3c:43:0a:13:0d:5b:cf:3e:2d:70:ef:b4:c6:19: e8:08:25:98:66:01:32:59:a4:37:c4:7f:58:89:62: a1:aa:33:69:6a:5d:90:aa:43:93:53:a2:76:dc:6f: 44:00:bf:33:59:60:23:3e:d6:f2:b7:ed:f2:40:8c: 11:7f:6e:d6:18:7d:df:95:27:e8:a2:f2:79:90:e3: 6d:17:79:72:42:e2:63:e0:12:75:f0:27:cf:1f:c3: a8:78:41:96:6c:e9:71:d1:19:d5:2e:84:88:31:e2: 4d:b6:6a:af:85:cd:dd:8c:a1:f8:c6:1b:ca:bd:fe: f2:c7:db:a8:9f:da:5e:e5:fb:8a:0c:43:13:10:37: 9d:92:77:2e:0c:b4:d1:b6:38:6e:66:d5:99:0e:03: 6f:74:84:b0:b2:2b:0b:c3:c4:f3:2f:c1:64:06:8a: a0:e9:b7:d6:d1:04:0a:44:89:8c:0b:df:bb:4e:11: 4e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:8A:C4:66:E5:59:19:BE:0B:5C:7F:A1:73:88:66:C0:C1:E1:79:F0 X509v3 Authority Key Identifier: keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fIrEZuVZGb4LXH-hc4hmwMHhefA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.3.0/24 Signature Algorithm: sha256WithRSAEncryption 96:ca:0f:08:f2:88:ad:a0:d0:98:cf:69:a6:f5:fc:f3:66:70: 3a:2e:67:e4:bb:66:4f:73:20:fc:22:40:c3:29:70:f8:37:66: 7b:fc:c0:44:89:fc:11:38:14:b0:b7:4a:c2:d7:6d:13:e1:9c: cf:d0:9c:05:0f:5a:41:9e:e0:12:2b:67:b1:a3:ca:22:66:63: ec:05:6f:e0:2f:ee:39:b3:84:3d:e9:56:56:de:01:d3:1b:ca: 6a:4c:38:d0:54:b0:5f:f8:ab:7d:9f:c3:81:e0:3f:30:ad:fe: b5:07:8b:41:1b:d5:2e:5a:62:e9:22:33:6a:ce:07:18:c0:78: ac:2a:1b:7e:fc:1e:d2:06:cd:ca:e8:f3:9b:a1:67:2f:8e:7f: fb:12:1b:dc:72:32:04:97:18:4d:6e:88:a1:a0:1a:75:d2:37: 8f:4f:94:8b:15:c8:42:03:16:50:c2:99:81:99:99:f7:57:4f: 7b:bc:11:ee:33:ce:20:6c:d3:b9:cc:ec:1d:c7:b5:eb:92:26: 66:e3:23:d5:82:93:b2:08:66:16:4b:9c:de:1e:96:46:64:af: 9d:c6:6f:83:56:78:25:bf:31:e6:3e:e0:81:84:c8:fe:25:35: b3:b8:f5:4d:85:62:1b:38:82:49:43:3c:b9:c2:54:42:85:7e: 24:38:d2:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsunXVyyXi1XIeEfxlC9aqNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTY0M2JiMzk5YzZkODdhZGM0YzdjYmE1ZDJiNzJmYmQw MGQwNDYwHhcNMjUxMjE3MjMyMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzhhYzQ2NmU1NTkxOWJlMGI1YzdmYTE3Mzg4NjZjMGMxZTE3OWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtiarHNd/YFz9YjLunT1QnsfHo1C Bw/w6l7VFU6gH1WvHx4QjssHS6abntbgni9avRzvWkpCM+ZG3F+ldSj/KLQQBFh8 uvWgeHAHPEMKEw1bzz4tcO+0xhnoCCWYZgEyWaQ3xH9YiWKhqjNpal2QqkOTU6J2 3G9EAL8zWWAjPtbyt+3yQIwRf27WGH3flSfoovJ5kONtF3lyQuJj4BJ18CfPH8Oo eEGWbOlx0RnVLoSIMeJNtmqvhc3djKH4xhvKvf7yx9uon9pe5fuKDEMTEDedkncu DLTRtjhuZtWZDgNvdISwsisLw8TzL8FkBoqg6bfW0QQKRImMC9+7ThFO8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHyKxGblWRm+C1x/oXOIZsDB4XnwMB8GA1UdIwQY MBaAFHymQ7s5nG2HrcTHy6XSty+9ANBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMt NDRlYTY0NzIxYzllLzEvZklyRVp1VlpHYjRMWEgtaGM0aG13TUhoZWZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMtNDRlYTY0NzIxYzll LzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYsDMA0G CSqGSIb3DQEBCwUAA4IBAQCWyg8I8oitoNCYz2mm9fzzZnA6Lmfku2ZPcyD8IkDD KXD4N2Z7/MBEifwROBSwt0rC120T4ZzP0JwFD1pBnuASK2exo8oiZmPsBW/gL+45 s4Q96VZW3gHTG8pqTDjQVLBf+Kt9n8OB4D8wrf61B4tBG9UuWmLpIjNqzgcYwHis Kht+/B7SBs3K6POboWcvjn/7EhvccjIElxhNboihoBp10jePT5SLFchCAxZQwpmB mZn3V097vBHuM84gbNO5zOwdx7XrkiZm4yPVgpOyCGYWS5zeHpZGZK+dxm+DVngl vzHmPuCBhMj+JTWzuPVNhWIbOIJJQzy5wlRChX4kONJx -----END CERTIFICATE-----Generated at Sat Dec 20 11:46:54 2025 by rpki-client