This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SsijfBtyjuhB2RmtXalg_I8ocKw.roa File: SsijfBtyjuhB2RmtXalg_I8ocKw.roa (raw, json) Hash identifier: ssRGt/0nLXUEoyBatAAOkOVBdvc89RmNbXfdsIIx4Hw= Subject key identifier: 4A:C8:A3:7C:1B:72:8E:E8:41:D9:19:AD:5D:A9:60:FC:8F:28:70:AC Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B30E9326C0CA8D6D0A9710558E68F714E Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SsijfBtyjuhB2RmtXalg_I8ocKw.roa Signing time: Thu 18 Dec 2025 10:02:27 +0000 ROA not before: Thu 18 Dec 2025 10:02:27 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13335 IP address blocks: 45.128.76.0/24 maxlen: 24 45.130.125.0/24 maxlen: 24 45.146.130.0/24 maxlen: 24 45.148.100.0/24 maxlen: 24 45.158.187.0/24 maxlen: 24 185.126.66.0/24 maxlen: 24 193.8.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e9:32:6c:0c:a8:d6:d0:a9:71:05:58:e6:8f:71:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Dec 18 10:02:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4ac8a37c1b728ee841d919ad5da960fc8f2870ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:df:02:70:29:f5:e0:9c:c7:8d:60:6d:fb:b5: 73:f1:2c:fe:e8:64:57:4b:37:93:d3:af:64:6c:86: 98:15:26:4f:4d:eb:09:16:9e:e7:01:06:99:68:f4: 89:bf:d0:bc:c2:fb:98:6f:a4:1b:e0:a5:a7:76:dd: d9:71:74:73:65:e7:f2:5e:5f:04:30:59:38:92:67: 04:64:b9:59:a0:d0:54:b0:aa:6b:0b:c0:0e:30:33: 27:63:ea:04:bb:cc:c9:7c:07:1f:9c:0f:8d:81:e9: ce:66:b7:10:01:57:1b:2e:51:11:8b:d2:43:a6:df: 5c:e0:43:01:ef:67:aa:e9:92:67:6f:ee:10:8c:6e: 66:df:58:cd:ed:cc:ce:05:85:3e:e0:10:3d:74:b8: e3:46:da:ac:30:07:77:c8:80:1a:ff:37:26:10:87: 3f:3e:ff:cf:6a:28:ee:f1:39:c2:0c:5a:b1:58:ff: 21:b9:4a:d5:69:61:a5:fc:34:76:d1:68:74:15:59: 9e:65:4d:86:1c:73:05:d7:0e:5a:1e:94:6b:50:a3: db:e8:85:8e:d0:07:24:9b:dd:e4:9b:b5:de:c0:21: fc:e1:ae:b2:a4:c5:6f:74:43:82:c9:b1:62:0e:b9: 86:21:83:b1:06:62:14:12:ac:f8:41:08:d2:45:3f: 57:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C8:A3:7C:1B:72:8E:E8:41:D9:19:AD:5D:A9:60:FC:8F:28:70:AC X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SsijfBtyjuhB2RmtXalg_I8ocKw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.76.0/24 45.130.125.0/24 45.146.130.0/24 45.148.100.0/24 45.158.187.0/24 185.126.66.0/24 193.8.231.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:24:d9:96:4d:2b:dd:d6:e6:9d:96:85:c8:f6:ab:66:84:f6: d9:ea:98:60:4b:72:63:32:dd:df:8a:0f:e1:98:7d:55:b0:e6: 3d:3b:a1:40:99:6e:de:0f:bd:71:61:87:9b:52:72:ce:a1:50: 90:b3:1b:f5:e1:26:ac:f9:a5:d4:5d:b0:5e:df:7e:8b:8a:a7: a7:8c:05:81:98:8d:6f:4e:a9:6d:2f:df:bf:f0:52:3f:8d:3e: 5f:6f:dd:61:88:98:1c:58:0a:8d:4b:c8:e7:cc:e2:6d:b3:8b: 5d:17:5c:61:28:99:99:12:96:2d:12:31:cb:65:a1:82:e2:a6: bf:5c:4c:1c:47:78:ca:50:13:42:03:14:de:85:b2:ab:a4:6e: 3a:13:81:07:52:c7:5c:06:4f:4d:46:70:27:a7:0f:2a:1d:41: db:10:f5:42:ef:81:92:9d:2e:36:60:6e:15:ec:0b:96:94:26: 7e:6f:7f:5e:a8:ae:7f:eb:f8:16:4d:5c:40:3f:40:72:ef:18: 15:17:6e:4b:1a:fc:ee:c5:59:9c:0d:6e:51:41:ea:bd:16:f5: c9:b7:04:8d:0d:4a:5b:e6:89:b5:b8:52:1f:d4:e4:60:97:52: b4:82:1d:90:9f:11:f5:b7:38:ec:35:b2:39:25:60:e6:f2:9e: 43:97:26:3a -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZsw6TJsDKjW0KlxBVjmj3FOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMjE4MTAwMjI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWM4YTM3YzFiNzI4ZWU4NDFkOTE5YWQ1ZGE5NjBmYzhmMjg3MGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs98CcCn14JzHjWBt+7Vz8Sz+6GRX SzeT069kbIaYFSZPTesJFp7nAQaZaPSJv9C8wvuYb6Qb4KWndt3ZcXRzZefyXl8E MFk4kmcEZLlZoNBUsKprC8AOMDMnY+oEu8zJfAcfnA+NgenOZrcQAVcbLlERi9JD pt9c4EMB72eq6ZJnb+4QjG5m31jN7czOBYU+4BA9dLjjRtqsMAd3yIAa/zcmEIc/ Pv/Paiju8TnCDFqxWP8huUrVaWGl/DR20Wh0FVmeZU2GHHMF1w5aHpRrUKPb6IWO 0Ackm93km7XewCH84a6ypMVvdEOCybFiDrmGIYOxBmIUEqz4QQjSRT9XaQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFErIo3wbco7oQdkZrV2pYPyPKHCsMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvU3NpamZCdHlqdWhCMlJtdFhhbGdfSThvY0t3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALYBMAwQA LYJ9AwQALZKCAwQALZRkAwQALZ67AwQAuX5CAwQAwQjnMA0GCSqGSIb3DQEBCwUA A4IBAQB6JNmWTSvd1uadloXI9qtmhPbZ6phgS3JjMt3fig/hmH1VsOY9O6FAmW7e D71xYYebUnLOoVCQsxv14Sas+aXUXbBe336LiqenjAWBmI1vTqltL9+/8FI/jT5f b91hiJgcWAqNS8jnzOJts4tdF1xhKJmZEpYtEjHLZaGC4qa/XEwcR3jKUBNCAxTe hbKrpG46E4EHUsdcBk9NRnAnpw8qHUHbEPVC74GSnS42YG4V7AuWlCZ+b39eqK5/ 6/gWTVxAP0By7xgVF25LGvzuxVmcDW5RQeq9FvXJtwSNDUpb5om1uFIf1ORgl1K0 gh2QnxH1tzjsNbI5JWDm8p5DlyY6 -----END CERTIFICATE-----Generated at Fri Dec 19 23:29:27 2025 by rpki-client