This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/5axqmBu68SWPthXHgZ7-ufRF7t4.roa File: 5axqmBu68SWPthXHgZ7-ufRF7t4.roa (raw, json) Hash identifier: LaVG/k9wDk1fSbPLPYvcgmtjwuS4h1Egzlo7UIwt1h0= Subject key identifier: E5:AC:6A:98:1B:BA:F1:25:8F:B6:15:C7:81:9E:FE:B9:F4:45:EE:DE Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c Certificate serial: 019B260831BE177841015B79CC60E3A7E6E5 Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/5axqmBu68SWPthXHgZ7-ufRF7t4.roa Signing time: Tue 16 Dec 2025 07:20:29 +0000 ROA not before: Tue 16 Dec 2025 07:20:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 61317 IP address blocks: 45.85.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:08:31:be:17:78:41:01:5b:79:cc:60:e3:a7:e6:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c Validity Not Before: Dec 16 07:20:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e5ac6a981bbaf1258fb615c7819efeb9f445eede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:44:43:be:ca:c9:62:ff:ff:5a:2f:f2:8f:f5: 3d:18:cf:d7:b7:27:a2:93:ca:8f:96:a0:ae:23:30: 79:0e:52:f8:c2:f3:61:41:cf:f8:cf:8b:0e:81:e8: fb:29:59:ab:9b:7d:14:bc:e3:bc:c7:a9:63:dd:d3: 55:cf:ce:3f:e3:06:02:75:d4:ff:93:1b:6d:25:ce: 53:ef:bf:a7:9f:b7:25:5d:87:01:fc:af:e5:23:2b: 7b:ac:b9:28:4a:6b:49:3b:45:cb:ea:aa:67:c2:a5: 04:80:c5:94:71:2d:e6:87:ad:53:51:d5:ce:c1:e1: 54:1c:0f:8c:90:a6:a8:64:eb:35:b0:78:39:5f:b8: 02:60:07:d2:83:79:1d:c1:07:3b:31:98:72:a8:a9: 31:f0:77:81:2d:43:b0:00:17:b7:09:2d:46:ac:fe: 05:91:da:b7:cf:c7:a4:13:2d:3c:d0:5f:c5:a8:a4: 2c:09:0e:16:fa:ff:06:f1:28:7a:47:29:2f:6e:cc: 3a:a6:67:1b:3b:02:48:c7:55:74:65:d2:d5:36:1a: 5f:b7:e0:85:40:09:a2:2f:cc:e6:23:f4:81:f3:2a: e8:1c:de:5b:ca:a1:5b:47:75:5d:8a:f6:e6:cd:29: 49:f3:33:39:21:4f:66:17:3e:1d:d4:46:14:b1:91: 65:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AC:6A:98:1B:BA:F1:25:8F:B6:15:C7:81:9E:FE:B9:F4:45:EE:DE X509v3 Authority Key Identifier: keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/5axqmBu68SWPthXHgZ7-ufRF7t4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.12.0/23 Signature Algorithm: sha256WithRSAEncryption ab:ea:f9:43:fa:80:17:c3:0f:80:70:0b:a4:8a:87:21:12:30: 5f:be:33:c7:68:6e:5d:ef:4c:e0:ce:12:5b:8f:f2:cd:8a:f9: 01:e9:ab:f2:b8:fd:85:7d:f6:17:4c:6d:d2:16:01:74:ab:43: 79:a1:b2:0c:67:a0:dd:88:07:79:4c:ec:c1:59:14:5d:ac:f7: a4:c2:15:7f:f8:16:c8:3b:f1:e0:7a:e0:1c:1e:1f:29:f3:95: 01:b9:56:7b:69:64:b5:4b:03:b4:36:8e:f4:5e:79:59:82:1a: e1:31:44:b8:f8:8d:48:76:51:63:07:06:95:06:c7:76:79:e3: 1e:5c:4c:46:34:72:ba:c0:6b:30:7a:90:6b:17:a0:f5:51:a1: 97:0e:d3:b9:e3:9e:26:2a:35:20:ed:1b:7c:6b:5a:96:62:16: 27:11:f1:ca:cc:82:a0:96:80:c1:0e:75:cd:8e:f7:a8:4a:81: 59:13:75:f2:e7:00:3f:ab:61:de:39:98:53:21:ef:b2:0f:f2: 33:6f:ab:09:41:e6:fc:de:02:58:38:f0:60:2a:de:07:99:ec: 05:0d:25:53:63:d4:06:47:1d:25:a1:f5:b0:ee:75:62:2f:75: 0b:64:ad:a1:25:80:55:9d:a9:44:8c:4a:c8:96:ef:5f:14:6d: b6:01:81:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsmCDG+F3hBAVt5zGDjp+blMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZmM4ODdjOTc3MzkzNTc1ZGU2MjU3ZTc1ZmE5OWNkZTIw MzdjNmMwHhcNMjUxMjE2MDcyMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWFjNmE5ODFiYmFmMTI1OGZiNjE1Yzc4MTllZmViOWY0NDVlZWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqERDvsrJYv//Wi/yj/U9GM/Xtyei k8qPlqCuIzB5DlL4wvNhQc/4z4sOgej7KVmrm30UvOO8x6lj3dNVz84/4wYCddT/ kxttJc5T77+nn7clXYcB/K/lIyt7rLkoSmtJO0XL6qpnwqUEgMWUcS3mh61TUdXO weFUHA+MkKaoZOs1sHg5X7gCYAfSg3kdwQc7MZhyqKkx8HeBLUOwABe3CS1GrP4F kdq3z8ekEy080F/FqKQsCQ4W+v8G8Sh6Rykvbsw6pmcbOwJIx1V0ZdLVNhpft+CF QAmiL8zmI/SB8yroHN5byqFbR3VdivbmzSlJ8zM5IU9mFz4d1EYUsZFlewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOWsapgbuvElj7YVx4Ge/rn0Re7eMB8GA1UdIwQY MBaAFET8iHyXc5NXXeYlfnX6mc3iA3xsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMt YzM2OWMxZDRjMzM3LzEvNWF4cW1CdTY4U1dQdGhYSGdaNy11ZlJGN3Q0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMtYzM2OWMxZDRjMzM3 LzEvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVUMMA0G CSqGSIb3DQEBCwUAA4IBAQCr6vlD+oAXww+AcAukiochEjBfvjPHaG5d70zgzhJb j/LNivkB6avyuP2FffYXTG3SFgF0q0N5obIMZ6DdiAd5TOzBWRRdrPekwhV/+BbI O/HgeuAcHh8p85UBuVZ7aWS1SwO0No70XnlZghrhMUS4+I1IdlFjBwaVBsd2eeMe XExGNHK6wGswepBrF6D1UaGXDtO5454mKjUg7Rt8a1qWYhYnEfHKzIKgloDBDnXN jveoSoFZE3Xy5wA/q2HeOZhTIe+yD/Izb6sJQeb83gJYOPBgKt4HmewFDSVTY9QG Rx0lofWw7nViL3ULZK2hJYBVnalEjErIlu9fFG22AYGm -----END CERTIFICATE-----Generated at Fri Dec 19 23:21:49 2025 by rpki-client