This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/33e200-886b-427f-b9ed-ad9cffcebf1b/1/tS1ymYZ2CRr4AeSmBTuFkFFCbJQ.roa File: tS1ymYZ2CRr4AeSmBTuFkFFCbJQ.roa (raw, json) Hash identifier: N1jAAPqCDpOLE4LlhlpfdOi2tS8IlWX1povqxRFoIJ0= Subject key identifier: B5:2D:72:99:86:76:09:1A:F8:01:E4:A6:05:3B:85:90:51:42:6C:94 Certificate issuer: /CN=63c35c89ed4ae9a3d641b11cbe6ad0fcbe932655 Certificate serial: 019B3159D6E94051053DE75F65FEA74E04B8 Authority key identifier: 63:C3:5C:89:ED:4A:E9:A3:D6:41:B1:1C:BE:6A:D0:FC:BE:93:26:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/33e200-886b-427f-b9ed-ad9cffcebf1b/1/tS1ymYZ2CRr4AeSmBTuFkFFCbJQ.roa Signing time: Thu 18 Dec 2025 12:05:29 +0000 ROA not before: Thu 18 Dec 2025 12:05:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199061 IP address blocks: 176.122.212.0/22 maxlen: 24 176.122.224.0/20 maxlen: 24 176.122.225.0/24 maxlen: 32 2001:67c:618::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/33e200-886b-427f-b9ed-ad9cffcebf1b/1/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/33e200-886b-427f-b9ed-ad9cffcebf1b/1/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.mft rsync://rpki.ripe.net/repository/DEFAULT/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 09:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:59:d6:e9:40:51:05:3d:e7:5f:65:fe:a7:4e:04:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63c35c89ed4ae9a3d641b11cbe6ad0fcbe932655 Validity Not Before: Dec 18 12:05:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b52d72998676091af801e4a6053b859051426c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a7:1c:30:df:78:14:18:bf:94:c6:ff:6b:fb: b8:05:60:37:29:58:9c:c8:46:42:c7:b4:4a:c6:69: 24:d7:22:03:e2:ed:94:50:b0:df:c0:59:b5:12:ce: e8:b7:1f:5d:4a:a7:1b:9b:3f:7e:cd:11:75:0b:65: 7d:f9:0d:94:28:1a:20:53:8d:89:bb:c4:c7:70:b3: e8:d2:df:8e:fa:58:24:b3:1f:19:17:45:08:01:38: 24:83:da:38:27:8a:83:de:be:f5:d8:99:e3:94:43: 85:56:1c:33:4d:55:2c:6e:dc:85:e7:ca:a7:83:1e: 18:4f:84:96:45:d1:ce:b0:3b:08:23:98:b1:d4:69: 73:0d:2a:10:9c:4b:a3:cd:99:39:c9:e3:d7:86:f7: 75:f1:58:bb:27:84:63:d4:d3:4d:0b:bb:21:d1:d8: bc:23:40:a4:9c:d4:fc:56:93:ed:fd:c7:4f:43:84: d8:3e:f1:6e:2b:2a:1b:41:0f:9c:d7:da:5b:f8:33: a1:85:d2:82:f5:25:cc:e1:46:93:4e:b3:9d:21:0e: 02:88:49:41:f1:84:67:5e:e0:af:b7:ec:b0:29:b5: dd:05:92:1b:f5:10:90:8c:d6:e8:60:0d:33:3a:70: a0:54:96:fb:8f:9c:3f:ab:ba:9e:92:9d:03:11:a2: 00:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:2D:72:99:86:76:09:1A:F8:01:E4:A6:05:3B:85:90:51:42:6C:94 X509v3 Authority Key Identifier: keyid:63:C3:5C:89:ED:4A:E9:A3:D6:41:B1:1C:BE:6A:D0:FC:BE:93:26:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/33e200-886b-427f-b9ed-ad9cffcebf1b/1/tS1ymYZ2CRr4AeSmBTuFkFFCbJQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/33e200-886b-427f-b9ed-ad9cffcebf1b/1/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.122.212.0/22 176.122.224.0/20 IPv6: 2001:67c:618::/48 Signature Algorithm: sha256WithRSAEncryption c7:f7:bb:18:d2:6a:be:09:d2:c9:1d:ea:ce:71:c4:ca:ba:f8: 23:12:43:c1:c2:6c:13:b7:be:a1:76:94:95:68:ad:80:63:29: 54:da:82:59:4e:25:e0:9a:dd:65:0a:c6:62:a6:59:33:91:9b: c8:4e:ec:6f:20:35:af:33:53:84:0e:0f:e4:81:10:b5:57:4e: a9:90:00:2a:f4:16:9b:1c:44:e0:f6:c8:b7:c0:62:9c:0d:e0: 24:f8:00:b0:18:84:34:eb:27:e4:a1:6c:cc:fb:7d:c5:a1:88: 86:34:af:ba:ca:cd:1e:90:ad:ab:3e:20:c7:fe:f9:a8:66:69: 2d:ef:44:5f:0e:80:a4:6c:7f:be:67:43:71:5b:95:0a:6c:af: 87:0e:fa:a8:21:dd:f9:10:44:28:cd:85:97:0a:9f:2b:a2:30: b6:03:75:c6:b6:d8:d7:03:0d:10:f8:fe:46:9f:c7:f1:a6:62: 49:f0:da:93:79:07:4b:53:13:ef:8a:14:35:61:7d:87:17:a4: 95:39:4a:b0:d5:86:ec:41:f6:81:bd:59:01:8a:ba:22:17:9d: 54:a6:d5:7e:6e:ff:99:e2:e1:82:75:f3:0b:8f:54:d3:75:53: 2d:9b:8d:a9:8e:d3:9f:4d:08:4b:99:48:01:30:0a:aa:7c:0f: 3d:bd:15:ff -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZsxWdbpQFEFPedfZf6nTgS4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzYzM1Yzg5ZWQ0YWU5YTNkNjQxYjExY2JlNmFkMGZjYmU5 MzI2NTUwHhcNMjUxMjE4MTIwNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTJkNzI5OTg2NzYwOTFhZjgwMWU0YTYwNTNiODU5MDUxNDI2Yzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKccMN94FBi/lMb/a/u4BWA3KVic yEZCx7RKxmkk1yID4u2UULDfwFm1Es7otx9dSqcbmz9+zRF1C2V9+Q2UKBogU42J u8THcLPo0t+O+lgksx8ZF0UIATgkg9o4J4qD3r712JnjlEOFVhwzTVUsbtyF58qn gx4YT4SWRdHOsDsII5ix1GlzDSoQnEujzZk5yePXhvd18Vi7J4Rj1NNNC7sh0di8 I0CknNT8VpPt/cdPQ4TYPvFuKyobQQ+c19pb+DOhhdKC9SXM4UaTTrOdIQ4CiElB 8YRnXuCvt+ywKbXdBZIb9RCQjNboYA0zOnCgVJb7j5w/q7qekp0DEaIAuwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFLUtcpmGdgka+AHkpgU7hZBRQmyUMB8GA1UdIwQY MBaAFGPDXIntSumj1kGxHL5q0Py+kyZVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWThOY2llMUs2YVBXUWJFY3ZtclFfTDZUSmxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zM2UyMDAtODg2Yi00MjdmLWI5ZWQt YWQ5Y2ZmY2ViZjFiLzEvdFMxeW1ZWjJDUnI0QWVTbUJUdUZrRkZDYkpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8zM2UyMDAtODg2Yi00MjdmLWI5ZWQtYWQ5Y2ZmY2ViZjFi LzEvWThOY2llMUs2YVBXUWJFY3ZtclFfTDZUSmxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCsHrUAwQE sHrgMA8EAgACMAkDBwAgAQZ8BhgwDQYJKoZIhvcNAQELBQADggEBAMf3uxjSar4J 0skd6s5xxMq6+CMSQ8HCbBO3vqF2lJVorYBjKVTagllOJeCa3WUKxmKmWTORm8hO 7G8gNa8zU4QOD+SBELVXTqmQACr0FpscROD2yLfAYpwN4CT4ALAYhDTrJ+ShbMz7 fcWhiIY0r7rKzR6Qras+IMf++ahmaS3vRF8OgKRsf75nQ3FblQpsr4cO+qgh3fkQ RCjNhZcKnyuiMLYDdca22NcDDRD4/kafx/GmYknw2pN5B0tTE++KFDVhfYcXpJU5 SrDVhuxB9oG9WQGKuiIXnVSm1X5u/5ni4YJ18wuPVNN1Uy2bjamO059NCEuZSAEw Cqp8Dz29Ff8= -----END CERTIFICATE-----Generated at Fri Dec 26 17:19:35 2025 by rpki-client