This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SyOPx0I_-jQTL80zAWjPIbun-yo.roa File: SyOPx0I_-jQTL80zAWjPIbun-yo.roa (raw, json) Hash identifier: F2C03Q7ELgpW+y6Wx1rE36uvFuVMc5XeYXyZOVwMRJ4= Subject key identifier: 4B:23:8F:C7:42:3F:FA:34:13:2F:CD:33:01:68:CF:21:BB:A7:FB:2A Certificate issuer: /CN=485f76274c805d25b115a3adba1d2ea154deead7 Certificate serial: 019ADA2FF82D3A420EF0DD7EAEA0999D1C4D Authority key identifier: 48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SyOPx0I_-jQTL80zAWjPIbun-yo.roa Signing time: Mon 01 Dec 2025 13:52:48 +0000 ROA not before: Mon 01 Dec 2025 13:52:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202799 IP address blocks: 91.220.163.0/24 maxlen: 24 194.26.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:2f:f8:2d:3a:42:0e:f0:dd:7e:ae:a0:99:9d:1c:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485f76274c805d25b115a3adba1d2ea154deead7 Validity Not Before: Dec 1 13:52:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4b238fc7423ffa34132fcd330168cf21bba7fb2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b4:24:75:94:c0:c3:c6:bc:bc:05:a1:1c:ae: 7f:75:34:bf:f1:b0:8e:2d:81:26:d5:3e:3d:fc:d0: bd:f3:ca:3c:fb:8d:5b:43:5c:8d:50:7c:5f:34:9d: 97:6b:73:b0:af:83:d7:6d:e1:7d:18:4f:a5:46:e7: aa:b0:f7:90:c7:fc:55:e3:c0:1d:23:dd:c2:a1:87: 33:39:39:6d:aa:f2:69:7f:6b:2e:f1:50:03:80:b2: e0:e4:45:bb:62:e8:cc:70:40:f2:42:73:f2:46:a1: 50:dd:c5:15:81:5b:0c:4b:7b:94:02:11:99:69:3a: a5:97:a3:2d:27:b0:0f:72:3f:7f:5b:75:f9:e0:03: c1:93:dc:d1:83:4d:4a:50:89:6d:65:10:0d:b1:c8: 48:60:f4:4e:e6:ec:3b:d0:1d:70:7d:46:7c:45:b6: ef:ab:48:12:70:14:f4:23:65:e7:d4:dd:97:cd:c4: 1f:65:d1:37:5a:ee:48:2d:dd:f3:44:19:a7:80:1e: d6:80:1e:a6:2a:5d:97:7b:d6:7e:08:aa:19:9b:92: fb:34:17:2f:4a:12:dc:04:f8:6c:c2:eb:49:9a:1d: 8a:0d:56:76:e3:ce:a9:0c:78:b7:28:da:df:c9:e7: 0c:62:fa:53:99:d6:ed:c6:1b:20:23:ba:aa:20:4a: 49:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:23:8F:C7:42:3F:FA:34:13:2F:CD:33:01:68:CF:21:BB:A7:FB:2A X509v3 Authority Key Identifier: keyid:48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SyOPx0I_-jQTL80zAWjPIbun-yo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.163.0/24 194.26.25.0/24 Signature Algorithm: sha256WithRSAEncryption 11:ea:76:0e:9d:c2:ea:db:88:56:fe:e0:5a:be:68:ff:85:ab: 1f:ce:35:6f:c5:0e:5d:19:0e:66:8e:0e:b7:be:85:41:23:b6: d1:39:12:ef:89:f2:1a:eb:ce:9a:4f:0c:d9:62:da:27:d3:b8: 7a:4f:99:81:0c:55:04:80:24:c5:91:ca:62:06:a3:d7:2d:e7: 72:ed:02:f5:ae:f3:2c:6b:7d:81:eb:f4:8b:55:4c:f1:05:9f: dc:29:1c:4a:0e:c9:d0:b6:a7:49:b6:df:ff:48:87:4f:24:d9: 9a:e5:3a:d1:96:30:79:cd:77:90:14:73:81:47:83:eb:c5:cd: b5:a2:1e:ed:67:49:5a:3c:99:0c:df:35:8c:17:7c:49:58:7a: 3e:3d:b2:7e:f5:ef:44:f6:e6:57:b9:fb:6e:b4:f4:1c:51:d1: 2d:e9:91:88:66:35:4b:a7:0a:38:b7:87:d9:ec:7a:f2:3c:31: 8c:5b:18:85:29:a7:09:00:3f:ea:21:cd:c6:84:28:46:e9:3b: c1:3b:b2:9f:27:b5:40:11:4f:95:50:4d:d4:9a:2d:ee:a9:28: 50:01:f3:c3:87:5e:c9:b7:3e:f0:ae:43:26:d3:c0:bb:dc:d4: 96:ef:c4:1d:40:80:d8:46:1f:35:9d:fd:f2:c1:2e:89:08:db: db:ee:1f:00 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZraL/gtOkIO8N1+rqCZnRxNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NWY3NjI3NGM4MDVkMjViMTE1YTNhZGJhMWQyZWExNTRk ZWVhZDcwHhcNMjUxMjAxMTM1MjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjIzOGZjNzQyM2ZmYTM0MTMyZmNkMzMwMTY4Y2YyMWJiYTdmYjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrQkdZTAw8a8vAWhHK5/dTS/8bCO LYEm1T49/NC988o8+41bQ1yNUHxfNJ2Xa3Owr4PXbeF9GE+lRueqsPeQx/xV48Ad I93CoYczOTltqvJpf2su8VADgLLg5EW7YujMcEDyQnPyRqFQ3cUVgVsMS3uUAhGZ aTqll6MtJ7APcj9/W3X54APBk9zRg01KUIltZRANschIYPRO5uw70B1wfUZ8Rbbv q0gScBT0I2Xn1N2XzcQfZdE3Wu5ILd3zRBmngB7WgB6mKl2Xe9Z+CKoZm5L7NBcv ShLcBPhswutJmh2KDVZ2486pDHi3KNrfyecMYvpTmdbtxhsgI7qqIEpJiwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEsjj8dCP/o0Ey/NMwFozyG7p/sqMB8GA1UdIwQY MBaAFEhfdidMgF0lsRWjrbodLqFU3urXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0Y5MkoweUFYU1d4RmFPdHVoMHVvVlRlNnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ODViNTMtNmYxMS00MWRiLWJlYWQt NDNlYWY3NTY3Y2FhLzEvU3lPUHgwSV8talFUTDgwekFXalBJYnVuLXlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ODViNTMtNmYxMS00MWRiLWJlYWQtNDNlYWY3NTY3Y2Fh LzEvU0Y5MkoweUFYU1d4RmFPdHVoMHVvVlRlNnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9yjAwQA whoZMA0GCSqGSIb3DQEBCwUAA4IBAQAR6nYOncLq24hW/uBavmj/hasfzjVvxQ5d GQ5mjg63voVBI7bRORLvifIa686aTwzZYton07h6T5mBDFUEgCTFkcpiBqPXLedy 7QL1rvMsa32B6/SLVUzxBZ/cKRxKDsnQtqdJtt//SIdPJNma5TrRljB5zXeQFHOB R4Prxc21oh7tZ0laPJkM3zWMF3xJWHo+PbJ+9e9E9uZXuftutPQcUdEt6ZGIZjVL pwo4t4fZ7HryPDGMWxiFKacJAD/qIc3GhChG6TvBO7KfJ7VAEU+VUE3Umi3uqShQ AfPDh17Jtz7wrkMm08C73NSW78QdQIDYRh81nf3ywS6JCNvb7h8A -----END CERTIFICATE-----Generated at Fri Dec 5 18:11:56 2025 by rpki-client