This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/Ce8ARkA4IMdSJfA3iQkeDsLWpmA.roa File: Ce8ARkA4IMdSJfA3iQkeDsLWpmA.roa (raw, json) Hash identifier: aPACdMylakeiCBnW2vGcgKKrR6BCif2F2hfa2zLHonM= Subject key identifier: 09:EF:00:46:40:38:20:C7:52:25:F0:37:89:09:1E:0E:C2:D6:A6:60 Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c Certificate serial: 019B260831364BEB8CA87BD4F632710C2B02 Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/Ce8ARkA4IMdSJfA3iQkeDsLWpmA.roa Signing time: Tue 16 Dec 2025 07:20:29 +0000 ROA not before: Tue 16 Dec 2025 07:20:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 45.85.12.0/24 maxlen: 24 193.43.142.0/23 maxlen: 24 193.43.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:08:31:36:4b:eb:8c:a8:7b:d4:f6:32:71:0c:2b:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c Validity Not Before: Dec 16 07:20:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=09ef0046403820c75225f03789091e0ec2d6a660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c3:0a:32:6c:0e:3e:48:0b:0e:92:64:d2:d7: 11:a9:19:f9:9b:5d:25:1b:ef:19:7b:4a:cc:ea:b1: 48:77:5a:53:7b:44:cb:fa:d2:49:dd:22:25:be:3e: 20:d2:07:69:76:0e:c7:25:90:41:e3:09:4f:01:f5: 68:36:ed:c7:8f:52:78:a5:85:9a:50:c4:99:f1:81: cc:78:55:c8:91:78:7a:45:09:f3:eb:54:27:d8:ec: 62:0b:0b:1f:bd:d2:8b:9f:5a:69:6b:be:9b:ce:72: d9:b6:c0:31:37:1c:d1:13:53:b2:f0:2f:97:dd:31: d9:89:ab:34:fe:f5:c8:3e:17:0a:e2:e8:b8:36:de: 8a:b4:2d:df:51:60:06:06:d8:7c:e8:4c:4b:74:fd: f0:e7:63:f9:9a:00:d8:1e:3d:c6:82:d0:eb:50:e6: 14:99:61:7b:83:cf:94:b7:ca:33:ee:33:d4:c5:06: 47:71:a6:79:34:ec:74:7f:66:51:bc:10:d5:48:9f: a6:f0:6f:bc:16:65:c1:34:dd:41:e4:9a:54:f6:8d: 0f:ec:1f:d5:1d:b6:ce:38:94:c7:00:b3:ea:b8:4c: a1:6c:dc:24:13:c1:5b:b8:09:85:b7:1d:00:10:58: ef:73:46:17:86:a5:09:9c:ad:87:6e:40:59:f1:7f: c7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EF:00:46:40:38:20:C7:52:25:F0:37:89:09:1E:0E:C2:D6:A6:60 X509v3 Authority Key Identifier: keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/Ce8ARkA4IMdSJfA3iQkeDsLWpmA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.12.0/24 193.43.142.0/23 Signature Algorithm: sha256WithRSAEncryption af:67:81:f2:e9:e7:cc:91:af:98:db:b9:ba:b7:db:51:8d:ee: b3:d4:b7:e4:d6:17:18:fa:4c:c0:91:66:f4:52:57:c6:30:51: 5f:0a:ce:01:df:cf:ec:d5:e9:c0:0f:10:83:f6:70:db:e1:a2: 4d:c6:a4:a5:2c:db:43:9b:7b:c9:6b:5a:2b:f8:1d:12:d4:08: cc:e5:3b:b2:53:91:e4:e2:c7:22:97:c6:05:de:b8:ef:b7:09: 69:ac:33:a5:cd:b6:e5:b1:66:70:fa:21:b1:47:01:e3:39:ef: f2:68:2e:97:6f:3e:37:ea:dc:80:50:c5:b1:cd:8f:57:37:6b: fa:0a:c6:78:3c:51:4c:d5:7d:b5:68:2c:94:a6:1a:2e:69:8f: af:51:94:3b:1c:e1:57:c2:a8:b3:ad:b7:15:70:7b:4c:fa:13: 6d:3d:8f:f0:14:2b:a7:77:da:78:c3:84:a1:08:26:c8:13:67: df:2f:7e:eb:1b:15:ea:25:4b:50:c1:64:d4:79:67:6c:13:f0: e2:57:e7:83:77:05:94:b2:93:12:97:30:4a:57:cd:f3:bd:ee: e1:3f:6b:81:66:d4:b3:da:83:47:07:0b:5b:fb:51:b4:c4:9e: d9:eb:25:7f:40:4b:ee:82:a2:2d:06:45:47:37:4f:96:ac:6d: f8:e1:23:0d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsmCDE2S+uMqHvU9jJxDCsCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZmM4ODdjOTc3MzkzNTc1ZGU2MjU3ZTc1ZmE5OWNkZTIw MzdjNmMwHhcNMjUxMjE2MDcyMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWVmMDA0NjQwMzgyMGM3NTIyNWYwMzc4OTA5MWUwZWMyZDZhNjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsMKMmwOPkgLDpJk0tcRqRn5m10l G+8Ze0rM6rFId1pTe0TL+tJJ3SIlvj4g0gdpdg7HJZBB4wlPAfVoNu3Hj1J4pYWa UMSZ8YHMeFXIkXh6RQnz61Qn2OxiCwsfvdKLn1ppa76bznLZtsAxNxzRE1Oy8C+X 3THZias0/vXIPhcK4ui4Nt6KtC3fUWAGBth86ExLdP3w52P5mgDYHj3GgtDrUOYU mWF7g8+Ut8oz7jPUxQZHcaZ5NOx0f2ZRvBDVSJ+m8G+8FmXBNN1B5JpU9o0P7B/V HbbOOJTHALPquEyhbNwkE8FbuAmFtx0AEFjvc0YXhqUJnK2HbkBZ8X/HCwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAnvAEZAOCDHUiXwN4kJHg7C1qZgMB8GA1UdIwQY MBaAFET8iHyXc5NXXeYlfnX6mc3iA3xsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMt YzM2OWMxZDRjMzM3LzEvQ2U4QVJrQTRJTWRTSmZBM2lRa2VEc0xXcG1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMtYzM2OWMxZDRjMzM3 LzEvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVUMAwQB wSuOMA0GCSqGSIb3DQEBCwUAA4IBAQCvZ4Hy6efMka+Y27m6t9tRje6z1Lfk1hcY +kzAkWb0UlfGMFFfCs4B38/s1enADxCD9nDb4aJNxqSlLNtDm3vJa1or+B0S1AjM 5TuyU5Hk4scil8YF3rjvtwlprDOlzbblsWZw+iGxRwHjOe/yaC6Xbz436tyAUMWx zY9XN2v6CsZ4PFFM1X21aCyUphouaY+vUZQ7HOFXwqizrbcVcHtM+hNtPY/wFCun d9p4w4ShCCbIE2ffL37rGxXqJUtQwWTUeWdsE/DiV+eDdwWUspMSlzBKV83zve7h P2uBZtSz2oNHBwtb+1G0xJ7Z6yV/QEvugqItBkVHN0+WrG344SMN -----END CERTIFICATE-----Generated at Sat Dec 20 06:16:38 2025 by rpki-client