This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bh7ybNsD5vTKe0GXsa8lSml3Uqo.roa File: bh7ybNsD5vTKe0GXsa8lSml3Uqo.roa (raw, json) Hash identifier: b1DGOZh5BxHeN33PnkBfi27Bv34cw7hI6tx39Ht3Lr8= Subject key identifier: 6E:1E:F2:6C:DB:03:E6:F4:CA:7B:41:97:B1:AF:25:4A:69:77:52:AA Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019AD0C1BB782B7C19F1CD42A3FD51EF217B Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bh7ybNsD5vTKe0GXsa8lSml3Uqo.roa Signing time: Sat 29 Nov 2025 17:55:48 +0000 ROA not before: Sat 29 Nov 2025 17:55:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 19318 IP address blocks: 5.231.203.0/24 maxlen: 24 89.106.87.0/24 maxlen: 24 94.249.180.0/24 maxlen: 24 94.249.181.0/24 maxlen: 24 94.249.182.0/24 maxlen: 24 94.249.184.0/24 maxlen: 24 94.249.185.0/24 maxlen: 24 94.249.186.0/24 maxlen: 24 94.249.187.0/24 maxlen: 24 94.249.243.0/24 maxlen: 24 94.249.244.0/24 maxlen: 24 94.249.246.0/24 maxlen: 24 94.249.248.0/24 maxlen: 24 94.249.249.0/24 maxlen: 24 185.119.18.0/24 maxlen: 24 185.119.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d0:c1:bb:78:2b:7c:19:f1:cd:42:a3:fd:51:ef:21:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 29 17:55:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6e1ef26cdb03e6f4ca7b4197b1af254a697752aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0c:18:8d:93:0e:da:51:be:be:89:30:99:df: 25:34:46:b5:97:24:12:95:16:05:9b:01:89:01:22: 40:e2:6f:e6:c0:1d:03:79:4d:06:a9:65:30:1b:34: 85:cb:3f:d3:d3:1f:fb:e6:e0:30:20:3e:fd:51:fe: 32:b1:7c:3a:67:23:f3:a4:4b:49:22:20:72:9b:31: 6d:80:ff:9a:3d:f0:2d:b1:64:c3:17:8d:43:35:7f: 29:64:b1:44:a2:db:74:f3:3c:9e:a4:f9:b3:a5:90: 16:da:07:02:2c:0d:4f:51:15:f6:5f:73:b6:62:79: 5e:d6:b5:8a:f8:aa:99:a4:86:74:b3:a9:c7:14:59: 8b:94:56:99:0e:0e:65:b0:eb:59:60:50:2c:b3:fe: 35:01:a3:0d:79:68:ae:5a:35:b1:2f:c8:de:ca:9f: 7b:96:eb:dc:33:c1:ea:19:cf:a6:9c:a1:bf:8b:28: ed:b2:35:b0:55:38:00:bf:0a:aa:cb:8d:40:9c:13: 9b:22:56:39:86:5a:40:da:bc:78:ad:ff:f6:35:55: 44:79:b6:f8:79:8e:9b:4b:68:8d:1d:fd:ef:11:9d: 1b:b7:00:57:1e:fa:74:0c:75:b9:18:2d:b0:1b:0c: 4f:9c:f5:84:03:7c:9b:85:d6:e4:c8:01:e7:eb:ee: 4e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:1E:F2:6C:DB:03:E6:F4:CA:7B:41:97:B1:AF:25:4A:69:77:52:AA X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bh7ybNsD5vTKe0GXsa8lSml3Uqo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.203.0/24 89.106.87.0/24 94.249.180.0-94.249.182.255 94.249.184.0/22 94.249.243.0-94.249.244.255 94.249.246.0/24 94.249.248.0/23 185.119.18.0/23 Signature Algorithm: sha256WithRSAEncryption 01:27:6d:69:de:5f:74:33:52:f1:58:11:88:25:7d:03:31:c8: 23:b4:26:89:bc:b7:51:9f:c4:1a:06:40:3b:31:de:b2:32:eb: b2:62:d0:f0:58:96:c6:43:4f:11:3b:7a:67:34:60:e7:b9:0d: 64:d6:ca:84:ba:3c:66:f1:6d:b3:f5:4a:9b:b8:9e:41:55:d3: b7:b2:1c:fb:f7:25:09:96:5a:74:ae:d0:e2:57:39:2e:ad:ac: 16:f6:43:8e:e5:c1:99:43:2d:65:d5:6f:e4:d9:92:cb:fe:fb: 64:29:32:4f:dc:a6:65:2a:d0:be:af:5e:9f:d2:0d:e0:08:fe: 0e:bf:61:d3:97:22:95:13:1f:38:59:7f:f5:0a:99:b4:a2:f4: 48:99:29:09:d7:11:b0:b0:c7:5f:c5:e4:ef:f4:86:81:d7:f1: 13:cc:54:75:d0:ac:41:2e:11:13:81:53:85:bf:26:bc:07:43: 69:0d:6d:ce:b0:5d:86:77:1c:9d:39:b8:60:12:38:79:1a:4f: 76:46:93:34:5b:1a:26:c3:1f:3e:76:54:bd:fb:f1:05:66:58: bc:24:ea:a8:53:0d:cb:1a:91:78:02:66:53:d0:ac:9c:e3:8e: 87:e9:b8:14:20:a1:0d:8c:d1:39:f7:5c:36:95:8f:65:d4:cf: d5:6a:41:79 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZrQwbt4K3wZ8c1Co/1R7yF7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTI5MTc1NTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTFlZjI2Y2RiMDNlNmY0Y2E3YjQxOTdiMWFmMjU0YTY5Nzc1MmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgwYjZMO2lG+vokwmd8lNEa1lyQS lRYFmwGJASJA4m/mwB0DeU0GqWUwGzSFyz/T0x/75uAwID79Uf4ysXw6ZyPzpEtJ IiBymzFtgP+aPfAtsWTDF41DNX8pZLFEott08zyepPmzpZAW2gcCLA1PURX2X3O2 Ynle1rWK+KqZpIZ0s6nHFFmLlFaZDg5lsOtZYFAss/41AaMNeWiuWjWxL8jeyp97 luvcM8HqGc+mnKG/iyjtsjWwVTgAvwqqy41AnBObIlY5hlpA2rx4rf/2NVVEebb4 eY6bS2iNHf3vEZ0btwBXHvp0DHW5GC2wGwxPnPWEA3ybhdbkyAHn6+5O5wIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFG4e8mzbA+b0yntBl7GvJUppd1KqMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvYmg3eWJOc0Q1dlRLZTBHWHNhOGxTbWwzVXFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQABefLAwQA WWpXMAwDBAJe+bQDBABe+bYDBAJe+bgwDAMEAF758wMEAF759AMEAF759gMEAV75 +AMEAbl3EjANBgkqhkiG9w0BAQsFAAOCAQEAASdtad5fdDNS8VgRiCV9AzHII7Qm iby3UZ/EGgZAOzHesjLrsmLQ8FiWxkNPETt6ZzRg57kNZNbKhLo8ZvFts/VKm7ie QVXTt7Ic+/clCZZadK7Q4lc5Lq2sFvZDjuXBmUMtZdVv5NmSy/77ZCkyT9ymZSrQ vq9en9IN4Aj+Dr9h05cilRMfOFl/9QqZtKL0SJkpCdcRsLDHX8Xk7/SGgdfxE8xU ddCsQS4RE4FThb8mvAdDaQ1tzrBdhnccnTm4YBI4eRpPdkaTNFsaJsMfPnZUvfvx BWZYvCTqqFMNyxqReAJmU9CsnOOOh+m4FCChDYzROfdcNpWPZdTP1WpBeQ== -----END CERTIFICATE-----Generated at Fri Dec 5 15:37:41 2025 by rpki-client