This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/Y6QWgXTpeLPn1e8n1l4mHR83lSE.roa File: Y6QWgXTpeLPn1e8n1l4mHR83lSE.roa (raw, json) Hash identifier: IiSsaoKV3I++ruI14Gbf+VxqNzggtFglqYsuNhAxFgk= Subject key identifier: 63:A4:16:81:74:E9:78:B3:E7:D5:EF:27:D6:5E:26:1D:1F:37:95:21 Certificate issuer: /CN=54ac0ddec30e24e457e16e6507d219728310893d Certificate serial: 019AA09D4F25B866C75E6457E773E0F0249A Authority key identifier: 54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/Y6QWgXTpeLPn1e8n1l4mHR83lSE.roa Signing time: Thu 20 Nov 2025 09:34:15 +0000 ROA not before: Thu 20 Nov 2025 09:34:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8368 IP address blocks: 45.149.96.0/22 maxlen: 24 95.36.80.0/20 maxlen: 24 212.85.56.0/21 maxlen: 24 217.18.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:9d:4f:25:b8:66:c7:5e:64:57:e7:73:e0:f0:24:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54ac0ddec30e24e457e16e6507d219728310893d Validity Not Before: Nov 20 09:34:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=63a4168174e978b3e7d5ef27d65e261d1f379521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ee:0e:6b:6c:7e:d4:17:ee:0d:af:68:d3:4c: f1:13:6f:0e:6d:03:b5:b3:28:c8:05:34:4f:5c:bd: 06:29:2f:2a:c5:65:c8:b3:90:10:e6:f8:62:d3:16: 54:4c:73:1d:d4:75:b6:b0:f3:72:7c:ea:03:74:36: 9c:d6:ef:dd:7e:d7:08:06:7f:a8:64:ee:65:69:89: 8a:5c:11:a9:49:b7:61:11:a3:5b:6b:88:c7:6e:fa: 51:33:73:c6:04:d1:77:f3:05:0a:5d:c8:a4:e7:b7: 4b:73:38:d2:51:1f:7c:a3:15:f1:26:db:0a:a2:9f: 01:84:9c:ca:31:ea:60:53:c1:c7:13:e8:50:24:5a: 2e:ac:6b:64:de:9b:5f:8d:45:af:f3:f0:85:26:42: 39:d3:b0:0e:80:f9:6d:6c:a6:7a:04:dc:0f:c4:7f: 03:16:77:80:2f:81:88:f0:89:db:49:c7:3a:48:d0: 42:55:25:ea:86:4a:55:18:89:2a:e3:2a:07:4d:76: 75:a3:e8:62:b6:43:62:3d:40:99:9f:0a:b9:7f:06: 68:43:9d:05:a4:31:1b:76:ae:ef:17:1e:1d:b3:65: 79:78:c3:54:ac:af:1c:f1:90:30:bd:0e:b3:7d:48: 98:26:f0:0c:e9:29:35:d9:4d:44:1e:5f:91:c4:aa: bd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A4:16:81:74:E9:78:B3:E7:D5:EF:27:D6:5E:26:1D:1F:37:95:21 X509v3 Authority Key Identifier: keyid:54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/Y6QWgXTpeLPn1e8n1l4mHR83lSE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.96.0/22 95.36.80.0/20 212.85.56.0/21 217.18.80.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:d0:20:1d:c8:66:47:fb:7b:7a:bf:fd:38:33:7e:9c:da:be: 52:4f:ee:af:3e:99:6c:f4:bf:a9:a0:d3:cb:a9:c6:35:f2:4d: d5:1c:67:6f:fe:a4:4b:92:b0:35:52:a2:43:99:d8:3c:19:64: 9b:b3:63:90:79:90:e4:69:3c:16:a9:e6:92:38:4c:3d:a8:57: 90:d0:e0:03:8c:30:cb:24:00:14:2a:74:30:fe:ac:2c:38:59: 8a:0f:4b:79:7a:d6:3b:da:7a:4c:47:0c:69:b3:87:70:a0:35: b0:54:c7:42:4d:f2:31:ac:88:49:44:c2:0b:16:e3:68:95:4f: e6:a5:14:76:8f:e3:a1:64:51:94:a7:ba:9a:27:91:ac:51:ec: c7:59:61:5a:c4:41:3c:91:d9:10:5d:a9:af:fa:51:43:11:5c: 60:39:bc:6f:0a:8a:37:90:88:a9:a5:db:a9:80:63:e2:f4:1c: 41:b1:c2:19:82:82:9a:3e:a9:83:0e:a9:3d:f9:92:47:75:18: 3e:9e:12:98:cc:c9:0e:d6:34:19:d2:96:a7:02:bb:92:11:33: 16:e3:07:a3:ec:8f:65:91:bb:1b:f9:51:c1:b3:32:ac:b2:57: fd:d5:e9:9c:06:4d:6e:1f:1a:13:19:a7:fe:c0:4e:57:fa:cd: f4:09:f6:a7 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZqgnU8luGbHXmRX53Pg8CSaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YWMwZGRlYzMwZTI0ZTQ1N2UxNmU2NTA3ZDIxOTcyODMx MDg5M2QwHhcNMjUxMTIwMDkzNDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2E0MTY4MTc0ZTk3OGIzZTdkNWVmMjdkNjVlMjYxZDFmMzc5NTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+4Oa2x+1BfuDa9o00zxE28ObQO1 syjIBTRPXL0GKS8qxWXIs5AQ5vhi0xZUTHMd1HW2sPNyfOoDdDac1u/dftcIBn+o ZO5laYmKXBGpSbdhEaNba4jHbvpRM3PGBNF38wUKXcik57dLczjSUR98oxXxJtsK op8BhJzKMepgU8HHE+hQJFourGtk3ptfjUWv8/CFJkI507AOgPltbKZ6BNwPxH8D FneAL4GI8InbScc6SNBCVSXqhkpVGIkq4yoHTXZ1o+hitkNiPUCZnwq5fwZoQ50F pDEbdq7vFx4ds2V5eMNUrK8c8ZAwvQ6zfUiYJvAM6Sk12U1EHl+RxKq9FwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGOkFoF06Xiz59XvJ9ZeJh0fN5UhMB8GA1UdIwQY MBaAFFSsDd7DDiTkV+FuZQfSGXKDEIk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkt3TjNzTU9KT1JYNFc1bEI5SVpjb01RaVQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yZGRkMzktZTdiZC00NGJhLWFiMjEt MmYwNjU1ZjAxMDI5LzEvWTZRV2dYVHBlTFBuMWU4bjFsNG1IUjgzbFNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8yZGRkMzktZTdiZC00NGJhLWFiMjEtMmYwNjU1ZjAxMDI5 LzEvVkt3TjNzTU9KT1JYNFc1bEI5SVpjb01RaVQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCLZVgAwQE XyRQAwQD1FU4AwQA2RJQMA0GCSqGSIb3DQEBCwUAA4IBAQA90CAdyGZH+3t6v/04 M36c2r5ST+6vPpls9L+poNPLqcY18k3VHGdv/qRLkrA1UqJDmdg8GWSbs2OQeZDk aTwWqeaSOEw9qFeQ0OADjDDLJAAUKnQw/qwsOFmKD0t5etY72npMRwxps4dwoDWw VMdCTfIxrIhJRMILFuNolU/mpRR2j+OhZFGUp7qaJ5GsUezHWWFaxEE8kdkQXamv +lFDEVxgObxvCoo3kIippdupgGPi9BxBscIZgoKaPqmDDqk9+ZJHdRg+nhKYzMkO 1jQZ0panAruSETMW4wej7I9lkbsb+VHBszKsslf91emcBk1uHxoTGaf+wE5X+s30 Cfan -----END CERTIFICATE-----Generated at Thu Dec 4 07:45:27 2025 by rpki-client