This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/fWsQfXTwChCVdlDOlOXfesWeWqM.roa File: fWsQfXTwChCVdlDOlOXfesWeWqM.roa (raw, json) Hash identifier: c4AxEEQ54tqjlHruGrVXcwWSaIZbRWz+mayrtEvyH2g= Subject key identifier: 7D:6B:10:7D:74:F0:0A:10:95:76:50:CE:94:E5:DF:7A:C5:9E:5A:A3 Certificate issuer: /CN=70ba446b275f1fb0778242c0d63362a59aacf353 Certificate serial: 019B3B6F9F69701034FC11EE30B5C4DA6615 Authority key identifier: 70:BA:44:6B:27:5F:1F:B0:77:82:42:C0:D6:33:62:A5:9A:AC:F3:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/fWsQfXTwChCVdlDOlOXfesWeWqM.roa Signing time: Sat 20 Dec 2025 11:05:29 +0000 ROA not before: Sat 20 Dec 2025 11:05:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205340 IP address blocks: 46.251.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6f:9f:69:70:10:34:fc:11:ee:30:b5:c4:da:66:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70ba446b275f1fb0778242c0d63362a59aacf353 Validity Not Before: Dec 20 11:05:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7d6b107d74f00a10957650ce94e5df7ac59e5aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:91:41:40:95:a0:5c:29:c7:ca:0a:80:79:d5: 46:2f:93:25:68:07:1c:a1:8a:89:da:f6:1c:25:69: 62:6f:38:39:84:73:f9:98:e9:be:c1:d7:e8:8a:d4: f3:1a:0d:c9:46:fd:87:1e:32:3a:d6:72:a9:63:3b: a6:6a:26:22:c2:e4:77:45:bf:a0:93:95:9f:39:16: 19:45:54:f8:73:45:06:f9:77:df:45:c1:55:be:be: 81:09:93:29:89:e9:df:04:c6:38:a5:44:af:99:32: a3:e1:10:e6:fe:6a:4c:6a:bf:c8:60:dd:28:d7:be: 2e:fb:31:29:48:71:84:7f:cd:aa:67:8f:ca:0e:c6: 76:a2:e8:5d:33:06:e5:87:b8:7c:55:5b:a7:a9:5f: ed:9f:ec:b7:71:ba:e7:17:40:55:db:de:2b:69:c9: e4:dc:ff:d7:c5:e9:62:b1:23:7f:e7:2f:62:d1:24: b8:38:47:a7:48:e0:b5:82:29:1e:a0:1a:4b:bb:43: 7c:ee:d0:e1:6f:2c:86:1a:e5:05:26:c5:64:e1:94: 07:4b:5d:ca:be:a2:bf:35:64:7c:09:c0:e2:e5:97: 5c:5b:86:a6:29:8e:ec:c8:a7:61:bf:01:ed:2a:f4: ba:b3:3a:b7:3d:53:d1:f5:a2:6c:82:2e:ff:13:d7: 51:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6B:10:7D:74:F0:0A:10:95:76:50:CE:94:E5:DF:7A:C5:9E:5A:A3 X509v3 Authority Key Identifier: keyid:70:BA:44:6B:27:5F:1F:B0:77:82:42:C0:D6:33:62:A5:9A:AC:F3:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/fWsQfXTwChCVdlDOlOXfesWeWqM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.251.250.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:79:de:ba:d4:b6:71:5a:bc:c9:a6:39:77:52:da:c2:1c:8a: c4:af:23:9b:d8:1c:bc:4b:0f:be:79:e4:49:b2:0b:7f:73:36: 1d:ab:7e:56:38:7e:d4:2c:89:95:f0:d7:78:05:1e:84:93:01: 14:56:88:7d:7f:3d:1b:86:65:af:65:ed:9a:f3:2b:6a:fa:e9: b3:59:68:bf:01:ef:b6:bb:f8:40:8d:74:23:2f:9b:00:97:42: e8:c3:4d:e4:dc:74:4d:ed:da:b8:da:f0:40:2f:d6:aa:c2:56: d7:52:74:5f:98:fe:41:18:4d:08:df:8a:47:16:b0:3a:9a:5d: 39:9d:2f:c0:6e:65:bf:30:9e:13:da:da:7d:ce:1d:4a:8c:71: 59:74:d5:16:dd:7a:6a:d8:95:5f:6a:f2:ea:c3:0b:b5:78:e4: d9:d0:8c:29:28:42:34:50:db:8e:4d:29:9b:f7:68:f5:d4:cf: 17:24:68:9a:4f:46:ae:9e:2f:0f:c7:62:2f:5c:1b:c7:a1:8f: ed:ab:75:fe:51:86:19:e7:d7:93:da:1f:02:d4:9c:41:76:2f: 54:3b:fe:33:0e:b4:26:50:2e:b1:4d:b1:c1:67:c0:fe:4b:d5: 71:8e:6c:4c:14:5c:38:59:1e:44:32:38:08:6e:ed:22:1a:4a: 00:b7:f6:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZs7b59pcBA0/BHuMLXE2mYVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYmE0NDZiMjc1ZjFmYjA3NzgyNDJjMGQ2MzM2MmE1OWFh Y2YzNTMwHhcNMjUxMjIwMTEwNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDZiMTA3ZDc0ZjAwYTEwOTU3NjUwY2U5NGU1ZGY3YWM1OWU1YWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZFBQJWgXCnHygqAedVGL5MlaAcc oYqJ2vYcJWlibzg5hHP5mOm+wdfoitTzGg3JRv2HHjI61nKpYzumaiYiwuR3Rb+g k5WfORYZRVT4c0UG+XffRcFVvr6BCZMpienfBMY4pUSvmTKj4RDm/mpMar/IYN0o 174u+zEpSHGEf82qZ4/KDsZ2ouhdMwblh7h8VVunqV/tn+y3cbrnF0BV294racnk 3P/XxelisSN/5y9i0SS4OEenSOC1gikeoBpLu0N87tDhbyyGGuUFJsVk4ZQHS13K vqK/NWR8CcDi5ZdcW4amKY7syKdhvwHtKvS6szq3PVPR9aJsgi7/E9dRKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH1rEH108AoQlXZQzpTl33rFnlqjMB8GA1UdIwQY MBaAFHC6RGsnXx+wd4JCwNYzYqWarPNTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0xwRWF5ZGZIN0IzZ2tMQTFqTmlwWnFzODFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9lMzIyOTMtNjczYi00ZmNlLTkxY2Yt MjAyZDI0NTM5NDVjLzEvZldzUWZYVHdDaENWZGxET2xPWGZlc1dlV3FNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9lMzIyOTMtNjczYi00ZmNlLTkxY2YtMjAyZDI0NTM5NDVj LzEvY0xwRWF5ZGZIN0IzZ2tMQTFqTmlwWnFzODFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALvv6MA0G CSqGSIb3DQEBCwUAA4IBAQA7ed661LZxWrzJpjl3UtrCHIrEryOb2By8Sw++eeRJ sgt/czYdq35WOH7ULImV8Nd4BR6EkwEUVoh9fz0bhmWvZe2a8ytq+umzWWi/Ae+2 u/hAjXQjL5sAl0Low03k3HRN7dq42vBAL9aqwlbXUnRfmP5BGE0I34pHFrA6ml05 nS/AbmW/MJ4T2tp9zh1KjHFZdNUW3Xpq2JVfavLqwwu1eOTZ0IwpKEI0UNuOTSmb 92j11M8XJGiaT0auni8Px2IvXBvHoY/tq3X+UYYZ59eT2h8C1JxBdi9UO/4zDrQm UC6xTbHBZ8D+S9VxjmxMFFw4WR5EMjgIbu0iGkoAt/YP -----END CERTIFICATE-----Generated at Sun Dec 21 07:17:30 2025 by rpki-client