This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/y2rXYGdhCjEkmnUl0PeolJbzOaM.roa File: y2rXYGdhCjEkmnUl0PeolJbzOaM.roa (raw, json) Hash identifier: 6XOn8STp7Q+kEa8OhXzoVLxtQnq0lIv634Hfc+Qy5eE= Subject key identifier: CB:6A:D7:60:67:61:0A:31:24:9A:75:25:D0:F7:A8:94:96:F3:39:A3 Certificate issuer: /CN=070483d3d62f19c0835746dcb721c8832c3b7926 Certificate serial: 019A7D3E2AFF09FEA10BE106621F659F67D3 Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/y2rXYGdhCjEkmnUl0PeolJbzOaM.roa Signing time: Thu 13 Nov 2025 12:43:37 +0000 ROA not before: Thu 13 Nov 2025 12:43:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 2914 IP address blocks: 45.85.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7d:3e:2a:ff:09:fe:a1:0b:e1:06:62:1f:65:9f:67:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926 Validity Not Before: Nov 13 12:43:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cb6ad76067610a31249a7525d0f7a89496f339a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0d:03:0b:64:18:57:62:45:a6:c7:62:82:f1: ab:56:5e:2a:3e:23:dc:23:64:c2:c4:c2:ec:19:99: 27:b7:cf:e3:3b:c1:67:02:48:bc:45:db:23:d4:8e: 90:d7:08:a7:40:67:ef:f8:25:df:55:3e:54:bc:b2: 5a:4b:72:7a:d9:7b:13:dd:fd:66:e0:df:3f:1b:30: fa:ad:1a:44:40:5e:bc:51:d0:7d:e2:8e:3b:03:fb: 1f:4b:9c:31:41:24:2d:89:9f:7b:8e:04:38:6a:46: d1:7a:b7:ce:53:3d:9e:5c:43:1d:a4:ef:e1:6d:d5: b3:76:8c:7a:5b:64:00:3a:b8:4c:fd:34:cb:72:58: 3d:30:29:78:6a:b6:ba:d4:d8:ea:31:c9:f2:48:12: 18:4b:19:b7:c3:d4:43:e2:91:89:6d:77:ff:4f:b8: f5:07:b4:56:b3:2d:a7:05:4c:85:01:c9:e4:88:9e: 58:a9:34:18:03:da:e9:42:3a:40:e8:0c:44:67:93: 57:c3:24:46:e4:79:9b:e6:9d:7b:56:0f:1c:8b:c6: ca:17:84:a2:b8:2d:63:34:0e:d2:b9:db:77:e7:fc: aa:be:3e:0c:ac:c5:9a:f1:18:b2:5d:b1:02:36:0c: 01:d3:ee:da:2c:d3:d5:48:58:ef:16:4f:cc:76:89: a3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6A:D7:60:67:61:0A:31:24:9A:75:25:D0:F7:A8:94:96:F3:39:A3 X509v3 Authority Key Identifier: keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/y2rXYGdhCjEkmnUl0PeolJbzOaM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.204.0/22 Signature Algorithm: sha256WithRSAEncryption 12:30:22:04:83:85:e9:32:ae:ab:97:76:bb:e6:3e:7e:9a:4d: f1:9f:e4:b2:ad:4d:fb:f9:78:e4:a4:eb:86:1b:9b:ea:d7:e8: d2:a2:af:df:20:ff:9c:40:e0:d3:a5:9f:f2:0b:1f:ac:6c:b6: ae:0a:1d:84:17:99:b5:42:d6:2e:79:95:ed:0d:39:b9:d3:fa: 83:58:97:ab:5d:91:29:0d:4d:ec:e0:fb:46:36:9d:98:9e:8a: 49:fc:e9:c2:54:8c:9e:d0:7c:4a:3d:a1:82:fa:1c:0b:02:67: e5:18:2c:42:d7:7e:65:ec:90:69:03:77:e4:ca:41:aa:fd:1d: c4:e8:d5:97:af:39:16:d3:87:d5:d2:43:3f:37:cc:23:bc:c6: 73:2f:a3:a9:fc:d6:d6:4e:ba:ed:58:f3:e1:65:86:7d:19:35: 34:f3:5c:8f:68:2f:18:e5:c0:af:4f:52:3f:c4:9c:76:93:a9: 78:e3:5f:29:f7:a4:3d:34:df:1a:5c:8c:07:2d:45:f6:ed:ff: 9d:fb:94:34:22:5f:d1:ed:84:61:3f:71:19:b1:fc:24:98:ef: 9d:17:f9:02:d5:20:00:99:2f:ac:3a:6b:34:83:05:34:14:04: 68:b5:0c:e6:75:33:fd:a7:cb:ca:59:1b:a9:36:e2:11:98:bd: 92:ce:fd:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp9Pir/Cf6hC+EGYh9ln2fTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MDQ4M2QzZDYyZjE5YzA4MzU3NDZkY2I3MjFjODgzMmMz Yjc5MjYwHhcNMjUxMTEzMTI0MzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjZhZDc2MDY3NjEwYTMxMjQ5YTc1MjVkMGY3YTg5NDk2ZjMzOWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ0DC2QYV2JFpsdigvGrVl4qPiPc I2TCxMLsGZknt8/jO8FnAki8Rdsj1I6Q1winQGfv+CXfVT5UvLJaS3J62XsT3f1m 4N8/GzD6rRpEQF68UdB94o47A/sfS5wxQSQtiZ97jgQ4akbRerfOUz2eXEMdpO/h bdWzdox6W2QAOrhM/TTLclg9MCl4ara61NjqMcnySBIYSxm3w9RD4pGJbXf/T7j1 B7RWsy2nBUyFAcnkiJ5YqTQYA9rpQjpA6AxEZ5NXwyRG5Hmb5p17Vg8ci8bKF4Si uC1jNA7Sudt35/yqvj4MrMWa8RiyXbECNgwB0+7aLNPVSFjvFk/MdomjjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMtq12BnYQoxJJp1JdD3qJSW8zmjMB8GA1UdIwQY MBaAFAcEg9PWLxnAg1dG3LchyIMsO3kmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQndTRDA5WXZHY0NEVjBiY3R5SElneXc3ZVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82NDUxYzEtMmJjZC00NDYzLWE3MDAt ZDQ0MmM0ZjllOWJkLzEveTJyWFlHZGhDakVrbW5VbDBQZW9sSmJ6T2FNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS82NDUxYzEtMmJjZC00NDYzLWE3MDAtZDQ0MmM0ZjllOWJk LzEvQndTRDA5WXZHY0NEVjBiY3R5SElneXc3ZVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVXMMA0G CSqGSIb3DQEBCwUAA4IBAQASMCIEg4XpMq6rl3a75j5+mk3xn+SyrU37+XjkpOuG G5vq1+jSoq/fIP+cQODTpZ/yCx+sbLauCh2EF5m1QtYueZXtDTm50/qDWJerXZEp DU3s4PtGNp2YnopJ/OnCVIye0HxKPaGC+hwLAmflGCxC135l7JBpA3fkykGq/R3E 6NWXrzkW04fV0kM/N8wjvMZzL6Op/NbWTrrtWPPhZYZ9GTU081yPaC8Y5cCvT1I/ xJx2k6l4418p96Q9NN8aXIwHLUX27f+d+5Q0Il/R7YRhP3EZsfwkmO+dF/kC1SAA mS+sOms0gwU0FARotQzmdTP9p8vKWRupNuIRmL2Szv2m -----END CERTIFICATE-----Generated at Sat Nov 22 20:47:34 2025 by rpki-client