This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/aI_UneSfGpMF6CwjYr6mU73ZVn8.roa File: aI_UneSfGpMF6CwjYr6mU73ZVn8.roa (raw, json) Hash identifier: R+2f4HzdP1shvW/LfltBSV7Kf5zU0FpTEdk+QJV8UFg= Subject key identifier: 68:8F:D4:9D:E4:9F:1A:93:05:E8:2C:23:62:BE:A6:53:BD:D9:56:7F Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Certificate serial: 019B2AFA5EB612C09C7589F9C5808C16376F Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/aI_UneSfGpMF6CwjYr6mU73ZVn8.roa Signing time: Wed 17 Dec 2025 06:23:29 +0000 ROA not before: Wed 17 Dec 2025 06:23:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206592 IP address blocks: 45.131.2.0/24 maxlen: 24 2a13:a440:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 02:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:fa:5e:b6:12:c0:9c:75:89:f9:c5:80:8c:16:37:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Validity Not Before: Dec 17 06:23:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=688fd49de49f1a9305e82c2362bea653bdd9567f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:61:c4:7b:bc:dd:c3:bd:6b:be:45:de:d4:65: 0a:8a:26:f8:7f:11:df:0f:78:c1:21:11:2d:7f:0a: 88:e1:1b:ff:6d:59:a3:7d:d0:5b:c5:22:97:d2:4d: 2a:04:2b:e2:fd:59:01:ed:67:48:dd:dc:48:48:3f: cf:88:15:91:52:bb:73:63:7b:08:48:98:d3:bc:ad: be:e2:58:60:ae:95:9e:fa:3b:a4:f6:b4:66:30:5a: 38:db:8e:24:36:43:73:62:18:77:ab:c0:9d:18:6a: 54:1c:b6:53:65:af:1b:f7:aa:a3:c4:f8:63:31:59: 49:74:41:cd:cb:d3:29:5e:5c:7f:d6:4b:e5:7e:f8: b6:c7:56:6a:a5:c8:da:dd:1c:e1:2a:b8:27:63:38: b3:df:4f:46:9f:ab:12:f7:71:4f:2c:cd:a6:ff:d0: fc:e3:7d:0c:58:13:40:ce:8b:e4:d4:4d:2c:28:d7: d4:98:c9:32:92:6d:ea:9c:50:ac:38:bf:50:fd:01: 1f:63:02:0f:56:2d:d3:e5:7b:fa:de:eb:e0:73:44: 84:7d:28:22:37:ca:1c:aa:1a:8c:06:fd:db:65:ca: 6a:ae:7b:cf:c7:ac:01:45:af:91:e5:e1:c5:91:bd: 6c:17:8a:ed:f6:3d:56:19:0b:dc:de:69:44:4d:37: 38:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8F:D4:9D:E4:9F:1A:93:05:E8:2C:23:62:BE:A6:53:BD:D9:56:7F X509v3 Authority Key Identifier: keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/aI_UneSfGpMF6CwjYr6mU73ZVn8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.2.0/24 IPv6: 2a13:a440:6::/48 Signature Algorithm: sha256WithRSAEncryption 77:38:a7:4b:a1:1f:ed:07:6c:9a:67:d1:0f:86:aa:de:84:34: c4:3a:fa:1e:d3:61:e5:3b:8f:66:dd:0c:ea:a8:35:8e:45:11: 72:63:9f:d0:72:74:ad:ee:be:dd:c5:18:13:50:00:63:1c:0e: ad:47:4b:7b:c1:ab:e4:48:d6:75:7d:24:e5:cf:9d:92:1b:f5: 96:4f:5f:7a:48:b9:76:09:7f:aa:a2:8b:fd:5b:aa:b3:44:a8: c8:45:77:0e:24:63:55:d3:0e:73:d0:0f:cd:60:08:40:20:99: 17:32:02:04:ee:86:e3:57:3c:45:60:48:ef:1b:aa:79:d6:3c: a9:49:cd:07:3f:3d:ac:2c:83:98:b6:25:53:23:d0:90:fb:c3: 30:01:e8:ea:95:de:c9:5f:36:84:87:e9:95:ce:80:06:61:27: c2:65:d1:c4:54:02:57:da:e5:69:3d:b2:40:03:dc:6a:97:a5: e9:0b:5d:e5:65:c5:83:db:78:ae:e1:42:e2:c6:aa:9d:f7:7a: cb:eb:75:bc:e3:8c:12:14:f9:93:87:9b:5c:a5:f4:63:4e:ce: 5a:6b:00:51:3a:29:cf:0a:ca:3d:89:df:53:ef:88:31:1f:99: 2d:b3:65:6d:f2:f5:af:4d:40:b7:f2:82:bc:a2:9e:e6:f8:a1: bb:ce:61:96 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZsq+l62EsCcdYn5xYCMFjdvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl ZjVkYWYwHhcNMjUxMjE3MDYyMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODhmZDQ5ZGU0OWYxYTkzMDVlODJjMjM2MmJlYTY1M2JkZDk1NjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mHEe7zdw71rvkXe1GUKiib4fxHf D3jBIREtfwqI4Rv/bVmjfdBbxSKX0k0qBCvi/VkB7WdI3dxISD/PiBWRUrtzY3sI SJjTvK2+4lhgrpWe+juk9rRmMFo4244kNkNzYhh3q8CdGGpUHLZTZa8b96qjxPhj MVlJdEHNy9MpXlx/1kvlfvi2x1Zqpcja3RzhKrgnYziz309Gn6sS93FPLM2m/9D8 430MWBNAzovk1E0sKNfUmMkykm3qnFCsOL9Q/QEfYwIPVi3T5Xv63uvgc0SEfSgi N8ocqhqMBv3bZcpqrnvPx6wBRa+R5eHFkb1sF4rt9j1WGQvc3mlETTc4bwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGiP1J3knxqTBegsI2K+plO92VZ/MB8GA1UdIwQY MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt NWRkNmUyMmViYWIwLzEvYUlfVW5lU2ZHcE1GNkN3allyNm1VNzNaVm44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALYMCMA8E AgACMAkDBwAqE6RAAAYwDQYJKoZIhvcNAQELBQADggEBAHc4p0uhH+0HbJpn0Q+G qt6ENMQ6+h7TYeU7j2bdDOqoNY5FEXJjn9BydK3uvt3FGBNQAGMcDq1HS3vBq+RI 1nV9JOXPnZIb9ZZPX3pIuXYJf6qii/1bqrNEqMhFdw4kY1XTDnPQD81gCEAgmRcy AgTuhuNXPEVgSO8bqnnWPKlJzQc/Pawsg5i2JVMj0JD7wzAB6OqV3slfNoSH6ZXO gAZhJ8Jl0cRUAlfa5Wk9skAD3GqXpekLXeVlxYPbeK7hQuLGqp33esvrdbzjjBIU +ZOHm1yl9GNOzlprAFE6Kc8Kyj2J31PviDEfmS2zZW3y9a9NQLfygryinub4obvO YZY= -----END CERTIFICATE-----Generated at Sat Dec 20 11:47:12 2025 by rpki-client