This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/cPYsRSNSYwvq0Z84Mqzu11tyspY.roa File: cPYsRSNSYwvq0Z84Mqzu11tyspY.roa (raw, json) Hash identifier: 7w/JKo/QpTGbOA4TgQ+zRI1bBx4gqPGIhie45CT52Rc= Subject key identifier: 70:F6:2C:45:23:52:63:0B:EA:D1:9F:38:32:AC:EE:D7:5B:72:B2:96 Certificate issuer: /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94 Certificate serial: 019ABFFFFD6198E88D6B1D693F8F3EC01653 Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/cPYsRSNSYwvq0Z84Mqzu11tyspY.roa Signing time: Wed 26 Nov 2025 11:50:15 +0000 ROA not before: Wed 26 Nov 2025 11:50:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151704 IP address blocks: 46.70.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:ff:fd:61:98:e8:8d:6b:1d:69:3f:8f:3e:c0:16:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94 Validity Not Before: Nov 26 11:50:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=70f62c452352630bead19f3832aceed75b72b296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6e:f9:7c:5c:71:75:7b:60:0d:52:13:cd:45: b2:a9:6d:ec:f4:c1:dd:84:a7:e3:ce:15:ed:32:84: 5a:34:35:6c:03:c6:08:a9:a8:81:e5:39:dc:80:4f: ea:c8:ea:38:3d:61:5c:aa:9f:15:b4:83:cd:a4:37: 4a:e3:c9:3c:92:04:aa:76:3a:a5:6f:4a:1a:19:f5: 78:68:cf:64:a1:d4:34:bc:a8:7e:3e:f8:c0:d9:57: 06:c2:ea:da:86:1b:69:f0:39:ad:38:49:ce:1d:db: 43:b1:9f:ab:fb:d6:27:0f:d1:99:2e:90:8b:91:c8: 6a:0b:b3:98:c0:0e:88:26:49:0e:3b:9a:a7:fe:ca: 76:e6:07:b4:5c:e2:65:ab:62:30:8d:90:20:0b:4d: 7c:c6:e0:53:c4:09:ee:bf:38:fc:79:5e:1c:24:b4: 0e:dc:ee:93:e7:eb:2c:73:f4:97:7d:6d:c1:15:c4: 4a:e1:9c:63:6c:95:60:d0:2b:93:f5:4b:91:36:ee: 53:b2:d2:53:d5:2d:b3:84:10:51:7d:d3:8d:a1:ec: 64:ba:6f:fd:ba:68:e8:52:2f:8d:46:10:50:91:06: 2d:59:b9:9d:70:e2:a9:c4:2f:f3:87:5a:46:a1:38: 20:58:2a:30:03:ab:cb:48:40:07:2c:93:06:91:7c: d9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F6:2C:45:23:52:63:0B:EA:D1:9F:38:32:AC:EE:D7:5B:72:B2:96 X509v3 Authority Key Identifier: keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/cPYsRSNSYwvq0Z84Mqzu11tyspY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.70.192.0/19 Signature Algorithm: sha256WithRSAEncryption 8f:ec:54:a3:6c:5b:6a:9b:c3:f9:6a:96:e3:d9:6a:4b:a3:d1: cc:68:30:41:b9:23:fb:cf:b7:4c:e6:e3:4f:40:40:01:4d:46: 03:c0:0b:d4:38:3c:d3:0a:28:ba:9e:06:44:8e:ec:f3:5e:6e: 45:73:90:5a:51:d8:81:ec:0c:33:bd:35:9b:ec:81:72:1f:3f: 85:17:1d:06:91:9d:cc:cc:26:49:f6:7b:f6:33:64:45:ba:2f: 36:79:47:3a:d1:52:eb:aa:29:7c:82:00:1c:a8:a9:f6:dc:02: 9f:f2:26:7d:2f:bd:08:7d:ab:b4:01:96:51:c0:3d:5a:93:28: b9:ae:e0:37:1d:3e:ee:ed:0c:d9:45:79:c2:53:d3:ec:97:a2: 66:86:5a:b7:2d:15:20:9f:18:02:c7:48:7d:7b:0c:af:2b:8c: b1:ae:12:9d:c5:58:ae:db:6c:ef:d4:f8:c1:eb:21:b7:ff:85: a9:fd:03:1f:d6:71:cc:4f:d1:68:28:2b:65:4e:ac:78:d4:14: 32:5a:fd:5d:0e:46:43:9a:c2:dc:44:79:60:df:d2:09:c6:8d: c7:38:21:26:b5:54:e1:24:3b:45:b8:21:35:d6:ab:2d:ee:4b: 56:fc:7b:13:7b:66:01:82:31:eb:48:84:1b:c8:49:5f:74:01: cf:75:ad:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq///1hmOiNax1pP48+wBZTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZmYxNTI3OGY1M2Y3NzYxYzJmM2QzM2RkOWJlNzdhOGE0 ZmJkOTQwHhcNMjUxMTI2MTE1MDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGY2MmM0NTIzNTI2MzBiZWFkMTlmMzgzMmFjZWVkNzViNzJiMjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW75fFxxdXtgDVITzUWyqW3s9MHd hKfjzhXtMoRaNDVsA8YIqaiB5TncgE/qyOo4PWFcqp8VtIPNpDdK48k8kgSqdjql b0oaGfV4aM9kodQ0vKh+PvjA2VcGwurahhtp8DmtOEnOHdtDsZ+r+9YnD9GZLpCL kchqC7OYwA6IJkkOO5qn/sp25ge0XOJlq2IwjZAgC018xuBTxAnuvzj8eV4cJLQO 3O6T5+ssc/SXfW3BFcRK4ZxjbJVg0CuT9UuRNu5TstJT1S2zhBBRfdONoexkum/9 umjoUi+NRhBQkQYtWbmdcOKpxC/zh1pGoTggWCowA6vLSEAHLJMGkXzZ6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHD2LEUjUmML6tGfODKs7tdbcrKWMB8GA1UdIwQY MBaAFJv/FSePU/d2HC89M92b53qKT72UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDIt NTY5NzI0OWY1MTI0LzEvY1BZc1JTTlNZd3ZxMFo4NE1xenUxMXR5c3BZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDItNTY5NzI0OWY1MTI0 LzEvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLkbAMA0G CSqGSIb3DQEBCwUAA4IBAQCP7FSjbFtqm8P5apbj2WpLo9HMaDBBuSP7z7dM5uNP QEABTUYDwAvUODzTCii6ngZEjuzzXm5Fc5BaUdiB7AwzvTWb7IFyHz+FFx0GkZ3M zCZJ9nv2M2RFui82eUc60VLrqil8ggAcqKn23AKf8iZ9L70Ifau0AZZRwD1akyi5 ruA3HT7u7QzZRXnCU9Psl6Jmhlq3LRUgnxgCx0h9ewyvK4yxrhKdxViu22zv1PjB 6yG3/4Wp/QMf1nHMT9FoKCtlTqx41BQyWv1dDkZDmsLcRHlg39IJxo3HOCEmtVTh JDtFuCE11qst7ktW/HsTe2YBgjHrSIQbyElfdAHPda13 -----END CERTIFICATE-----Generated at Sun Dec 7 20:04:30 2025 by rpki-client