This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/By-vIgtlNA1AuVsao_EDdOg5iQI.roa File: By-vIgtlNA1AuVsao_EDdOg5iQI.roa (raw, json) Hash identifier: vsYRb/uSQRslkrU7T10AuFEojII/XgBcKAw1jGa/pN4= Subject key identifier: 07:2F:AF:22:0B:65:34:0D:40:B9:5B:1A:A3:F1:03:74:E8:39:89:02 Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Certificate serial: 019B227CE85A957DF0E968F6BC94E40CC119 Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/By-vIgtlNA1AuVsao_EDdOg5iQI.roa Signing time: Mon 15 Dec 2025 14:49:29 +0000 ROA not before: Mon 15 Dec 2025 14:49:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 45.153.164.0/24 maxlen: 24 45.153.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 02:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:7c:e8:5a:95:7d:f0:e9:68:f6:bc:94:e4:0c:c1:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Validity Not Before: Dec 15 14:49:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=072faf220b65340d40b95b1aa3f10374e8398902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ea:f8:f2:fe:80:18:1a:94:62:66:95:cb:08: a1:b9:9a:97:ed:89:ef:f3:5d:d6:41:42:df:91:22: 93:db:24:bd:c1:c7:44:d2:7d:0b:97:84:3c:4b:fa: 40:a3:a1:b7:43:47:89:a0:b2:c1:d4:5b:1c:60:ea: 10:05:34:45:60:d9:a2:da:04:d0:34:e0:88:d9:d3: 8f:10:a5:8f:d4:49:28:88:f0:37:c8:bf:ee:b8:46: 09:a8:c9:c0:a9:e6:64:58:11:98:4a:ae:49:d7:75: 6f:55:47:72:73:18:d7:33:f1:a1:8e:a3:a9:2d:fb: 9e:3d:01:e5:b9:26:90:60:4c:96:61:1e:8a:9b:d6: 12:53:3a:bb:db:60:7d:3b:16:ce:87:5b:15:d8:83: 9e:ea:25:1e:57:7b:c5:fe:99:25:29:ad:fe:2b:c3: 23:75:f1:69:1c:41:27:a8:fa:31:f3:f8:df:c1:b6: 7a:26:bd:26:64:c0:84:ef:15:b4:06:6a:03:89:39: b8:a8:48:a6:6e:b4:3f:ee:bb:d8:2c:b0:4f:24:d0: eb:ca:ef:5f:06:b4:43:c7:15:20:4c:18:8e:3a:ec: 69:a4:1c:25:10:09:42:fb:75:64:96:a8:f7:8c:94: ed:3a:02:f5:e0:b3:10:4a:47:f7:f3:c8:6f:ca:52: ca:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:2F:AF:22:0B:65:34:0D:40:B9:5B:1A:A3:F1:03:74:E8:39:89:02 X509v3 Authority Key Identifier: keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/By-vIgtlNA1AuVsao_EDdOg5iQI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.164.0/24 45.153.166.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:03:80:8e:78:92:45:c5:ee:fc:43:3b:4e:10:5c:2d:2e:57: 56:62:8b:36:cc:a2:57:35:18:fc:e7:12:6c:15:01:fd:28:8e: 30:4b:1c:6d:10:32:d9:31:3c:a3:ca:1b:5c:cc:95:f9:ff:3c: 9e:00:82:f4:0c:96:7a:42:a7:f1:40:20:09:4b:81:e8:a9:b9: 69:0e:0f:31:aa:6f:12:2f:ec:01:82:e0:42:00:17:9a:7c:f4: 75:fe:49:69:ab:2f:a5:1c:08:05:ff:44:e5:7b:55:29:c3:9e: 77:b8:42:22:33:27:14:55:28:d7:5e:d0:e1:6a:dd:f2:1f:f1: 50:20:cc:dd:1f:8a:9f:e3:71:47:7b:eb:4f:ac:98:a3:bf:aa: a0:9d:6b:25:c0:63:41:4d:9d:e3:e5:0e:70:84:32:90:4e:f4: b9:6b:0c:05:e8:77:7a:36:b5:97:ec:95:07:e2:a8:5d:c8:06: 35:2a:20:44:f7:51:1c:0d:51:97:63:ce:a7:d2:75:e8:f9:de: ac:6c:2b:6c:b9:13:97:89:c0:0e:52:06:d1:41:94:f6:4b:c1: c2:82:17:75:a3:51:ce:0d:81:a1:8c:25:9e:5a:3d:f5:54:80: ef:59:6b:f0:0a:06:99:d3:26:06:f9:b9:90:03:f9:b9:de:7f: 02:b2:90:84 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsifOhalX3w6Wj2vJTkDMEZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZDk4YzJjNTRiMGNiZWExMzRlMjdhOTgxY2ZkZGU3MzIz NmUwNTUwHhcNMjUxMjE1MTQ0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzJmYWYyMjBiNjUzNDBkNDBiOTViMWFhM2YxMDM3NGU4Mzk4OTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoer48v6AGBqUYmaVywihuZqX7Ynv 813WQULfkSKT2yS9wcdE0n0Ll4Q8S/pAo6G3Q0eJoLLB1FscYOoQBTRFYNmi2gTQ NOCI2dOPEKWP1EkoiPA3yL/uuEYJqMnAqeZkWBGYSq5J13VvVUdycxjXM/GhjqOp LfuePQHluSaQYEyWYR6Km9YSUzq722B9OxbOh1sV2IOe6iUeV3vF/pklKa3+K8Mj dfFpHEEnqPox8/jfwbZ6Jr0mZMCE7xW0BmoDiTm4qEimbrQ/7rvYLLBPJNDryu9f BrRDxxUgTBiOOuxppBwlEAlC+3Vklqj3jJTtOgL14LMQSkf388hvylLKuQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAcvryILZTQNQLlbGqPxA3ToOYkCMB8GA1UdIwQY MBaAFGzZjCxUsMvqE04nqYHP3ecyNuBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWIt ZDM3ZGY2MzRhOTI5LzEvQnktdklndGxOQTFBdVZzYW9fRURkT2c1aVFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWItZDM3ZGY2MzRhOTI5 LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZmkAwQA LZmmMA0GCSqGSIb3DQEBCwUAA4IBAQAdA4COeJJFxe78QztOEFwtLldWYos2zKJX NRj85xJsFQH9KI4wSxxtEDLZMTyjyhtczJX5/zyeAIL0DJZ6QqfxQCAJS4Hoqblp Dg8xqm8SL+wBguBCABeafPR1/klpqy+lHAgF/0Tle1Upw553uEIiMycUVSjXXtDh at3yH/FQIMzdH4qf43FHe+tPrJijv6qgnWslwGNBTZ3j5Q5whDKQTvS5awwF6Hd6 NrWX7JUH4qhdyAY1KiBE91EcDVGXY86n0nXo+d6sbCtsuROXicAOUgbRQZT2S8HC ghd1o1HODYGhjCWeWj31VIDvWWvwCgaZ0yYG+bmQA/m53n8CspCE -----END CERTIFICATE-----Generated at Sat Dec 20 11:09:44 2025 by rpki-client