This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/YW5y5usoTQiLpmzQvCUyRj8cuug.roa File: YW5y5usoTQiLpmzQvCUyRj8cuug.roa (raw, json) Hash identifier: 5m2wahUSKxltYiSybHNnUMgIAkEZacf1G1VAJvHHhFI= Subject key identifier: 61:6E:72:E6:EB:28:4D:08:8B:A6:6C:D0:BC:25:32:46:3F:1C:BA:E8 Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019B04526F11878287C4E290DAA7EFFB48CD Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/YW5y5usoTQiLpmzQvCUyRj8cuug.roa Signing time: Tue 09 Dec 2025 18:14:29 +0000 ROA not before: Tue 09 Dec 2025 18:14:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29802 IP address blocks: 45.11.188.0/24 maxlen: 24 188.209.132.0/24 maxlen: 24 194.15.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 18:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:52:6f:11:87:82:87:c4:e2:90:da:a7:ef:fb:48:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Dec 9 18:14:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=616e72e6eb284d088ba66cd0bc2532463f1cbae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bc:78:ee:60:35:43:7c:d2:6a:32:09:a5:45: 1f:c0:0d:bb:ab:24:bd:b6:f9:36:b7:08:c4:aa:54: 02:36:21:94:99:18:5f:f1:7d:67:fc:1d:e5:11:fe: 6c:7c:58:84:78:1c:0e:5a:4e:32:98:43:d8:da:69: 93:b0:98:b9:bf:97:31:9d:74:cb:1f:61:e8:c2:8d: 92:29:e4:fd:0c:0a:b9:9e:d3:45:82:75:78:b2:71: 7e:76:e7:b8:17:b3:ea:0c:4f:1d:17:48:3d:fd:1e: 1f:0e:26:97:25:b2:6b:79:f5:79:93:5a:0b:06:ca: 6b:b9:3c:c7:59:bf:d3:b6:90:4f:78:2d:82:0d:64: ed:63:9f:24:0d:ac:77:11:00:d9:b6:77:ff:46:b9: dd:ce:1e:5d:9c:f4:95:27:b0:e5:ea:34:b8:78:b8: 79:2d:fb:c4:4c:5b:9c:04:ab:77:01:c1:57:1f:ce: 96:fb:fb:b3:37:f9:f0:59:30:52:ab:0c:c8:23:48: 2c:a7:53:52:22:5f:77:95:41:8b:33:9f:80:e1:39: a9:60:01:e5:d2:58:cd:3f:0e:41:f0:30:a8:66:17: 8f:fb:10:13:05:aa:73:9e:38:6b:b4:2b:2d:56:35: 53:bc:4d:09:f6:1f:03:f5:4d:33:a6:cb:fd:ac:ec: 7b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:6E:72:E6:EB:28:4D:08:8B:A6:6C:D0:BC:25:32:46:3F:1C:BA:E8 X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/YW5y5usoTQiLpmzQvCUyRj8cuug.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.188.0/24 188.209.132.0/24 194.15.96.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:08:19:09:24:e5:67:6a:4e:85:bf:15:e2:ef:dd:7e:e2:cc: 33:ed:25:08:a4:3a:3f:f1:a7:49:10:15:a6:59:c4:9a:77:7f: 5c:a2:8a:c1:57:9f:61:d8:9a:c5:be:3c:c3:7b:a9:06:19:86: 00:b7:ec:1a:f9:5f:5b:af:f2:69:26:f0:d2:94:a5:68:08:08: 04:3c:c0:18:63:5a:04:62:a7:03:88:89:2e:f0:bb:b7:84:bf: 9a:59:bd:29:c6:2a:d8:20:69:26:59:27:07:c8:58:b8:8c:69: 17:c6:e5:73:bc:01:20:be:f0:a3:9c:50:e2:1f:2a:15:f3:35: 2c:63:2c:d7:24:16:51:88:64:d5:ae:39:46:d3:64:13:aa:d7: d9:0d:9f:ae:1b:c4:b9:ae:3b:43:49:49:8c:c7:e6:4d:01:1b: c3:81:0a:f0:98:04:20:f5:4e:d6:2b:e5:ea:08:50:f6:8c:5b: bd:f0:28:d2:b7:d7:fd:6a:56:ed:11:aa:52:17:6f:5b:0c:ee: 8f:80:8e:a3:ef:06:c9:3e:05:41:8c:65:d3:c1:b4:6d:29:66: f6:28:ae:f6:8f:9c:ee:f3:d5:2c:87:c2:0a:17:e0:1c:c6:15: ce:18:5f:c6:14:a7:b8:51:64:6c:24:e0:e0:e5:7d:1e:c2:12: 41:3c:b8:b3 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsEUm8Rh4KHxOKQ2qfv+0jNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjUxMjA5MTgxNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTZlNzJlNmViMjg0ZDA4OGJhNjZjZDBiYzI1MzI0NjNmMWNiYWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbx47mA1Q3zSajIJpUUfwA27qyS9 tvk2twjEqlQCNiGUmRhf8X1n/B3lEf5sfFiEeBwOWk4ymEPY2mmTsJi5v5cxnXTL H2Howo2SKeT9DAq5ntNFgnV4snF+due4F7PqDE8dF0g9/R4fDiaXJbJrefV5k1oL BspruTzHWb/TtpBPeC2CDWTtY58kDax3EQDZtnf/Rrndzh5dnPSVJ7Dl6jS4eLh5 LfvETFucBKt3AcFXH86W+/uzN/nwWTBSqwzII0gsp1NSIl93lUGLM5+A4TmpYAHl 0ljNPw5B8DCoZheP+xATBapznjhrtCstVjVTvE0J9h8D9U0zpsv9rOx7ewIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGFucubrKE0Ii6Zs0LwlMkY/HLroMB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvWVc1eTV1c29UUWlMcG16UXZDVXlSajhjdXVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALQu8AwQA vNGEAwQAwg9gMA0GCSqGSIb3DQEBCwUAA4IBAQA/CBkJJOVnak6FvxXi791+4swz 7SUIpDo/8adJEBWmWcSad39coorBV59h2JrFvjzDe6kGGYYAt+wa+V9br/JpJvDS lKVoCAgEPMAYY1oEYqcDiIku8Lu3hL+aWb0pxirYIGkmWScHyFi4jGkXxuVzvAEg vvCjnFDiHyoV8zUsYyzXJBZRiGTVrjlG02QTqtfZDZ+uG8S5rjtDSUmMx+ZNARvD gQrwmAQg9U7WK+XqCFD2jFu98CjSt9f9albtEapSF29bDO6PgI6j7wbJPgVBjGXT wbRtKWb2KK72j5zu89Ush8IKF+AcxhXOGF/GFKe4UWRsJODg5X0ewhJBPLiz -----END CERTIFICATE-----Generated at Tue Dec 16 04:03:09 2025 by rpki-client