This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/rY4J3ex8XHD-SeKJ32dXLlXi6B8.roa File: rY4J3ex8XHD-SeKJ32dXLlXi6B8.roa (raw, json) Hash identifier: 7mXypKLOry1gFZR+sG5buJmL86+amtUKcVCQazkAiWk= Subject key identifier: AD:8E:09:DD:EC:7C:5C:70:FE:49:E2:89:DF:67:57:2E:55:E2:E8:1F Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019AC64F7B26D2581362B7EF627A00CDD523 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/rY4J3ex8XHD-SeKJ32dXLlXi6B8.roa Signing time: Thu 27 Nov 2025 17:14:48 +0000 ROA not before: Thu 27 Nov 2025 17:14:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 63018 IP address blocks: 84.236.193.0/24 maxlen: 24 88.148.16.0/24 maxlen: 24 88.148.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c6:4f:7b:26:d2:58:13:62:b7:ef:62:7a:00:cd:d5:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Nov 27 17:14:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ad8e09ddec7c5c70fe49e289df67572e55e2e81f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:87:39:d6:09:66:36:11:b6:1c:17:61:d2:b5: da:42:8f:53:84:e4:1c:ab:c3:f9:61:6e:3a:59:d1: 4a:fe:5c:61:31:a6:d7:cf:4c:9b:02:75:35:c7:82: 8c:38:92:d7:05:33:fa:3c:e8:6c:11:7f:30:e0:2c: 86:25:ce:5c:a8:42:98:fa:a6:7a:5c:d6:ef:4e:26: 59:f9:10:05:5d:1f:ac:83:29:da:be:65:ca:a9:2e: 7f:e1:fd:68:2f:00:d3:50:04:8d:a8:8b:37:c3:18: 5c:f3:01:3b:95:40:50:02:be:43:c7:34:6c:46:bb: 60:4d:51:39:2b:6f:68:69:ca:c2:19:1f:0c:98:1e: e8:6a:d1:ce:a2:d3:39:61:19:5a:20:d9:b3:ff:4e: a6:1c:9f:8e:61:a5:27:08:82:54:3d:e7:76:1a:1b: 2e:14:2c:33:6f:ae:62:29:5d:27:4e:14:81:c2:a3: d1:85:13:d8:4f:98:99:ce:f8:1f:83:25:d1:fe:35: 1d:d7:17:af:dc:e4:2a:30:26:d8:6b:62:6f:1a:b3: 1a:9a:c9:9e:4b:1d:14:3f:13:1f:e0:4d:88:b7:98: ae:51:cb:cc:19:33:6e:3f:5a:90:4f:19:5f:ec:90: 0e:f6:9a:37:8f:df:d7:34:74:77:0d:19:ad:aa:30: 89:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8E:09:DD:EC:7C:5C:70:FE:49:E2:89:DF:67:57:2E:55:E2:E8:1F X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/rY4J3ex8XHD-SeKJ32dXLlXi6B8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.236.193.0/24 88.148.16.0/24 88.148.33.0/24 Signature Algorithm: sha256WithRSAEncryption 49:52:74:54:58:93:a9:b9:79:fe:5e:1d:61:8b:2c:ab:79:90: b0:7e:63:7c:e6:65:35:fc:5d:0e:c2:9a:c3:69:e9:f4:c4:e3: 84:be:11:77:c8:03:c4:e8:0e:ea:d3:7e:aa:65:d0:85:5a:ba: d2:4a:24:76:c4:cd:11:9e:ff:be:24:69:f3:c8:1a:a2:4e:af: 38:32:a4:3b:f5:37:68:be:ac:81:61:52:41:6a:c0:2c:b4:36: ed:9b:a4:1b:c1:58:16:8b:e5:47:55:4e:09:83:68:2b:29:79: f3:43:a2:49:91:11:91:b1:aa:aa:ff:c9:c9:d9:12:71:47:33: 49:59:72:27:e1:3b:92:54:d9:55:c3:6a:ef:e7:6a:9b:22:a4: ca:da:9b:04:7e:41:ed:54:2c:97:d1:2a:e6:74:6a:49:b2:87: 66:10:cb:ce:ac:62:98:d8:78:0b:9d:77:30:2c:03:cb:47:54: 85:83:4a:0b:2b:8f:5b:96:69:97:ad:77:d7:fd:b8:79:90:db: 75:b5:c0:7f:e9:4e:82:40:b2:1c:3c:78:65:25:8f:63:78:7b: d4:20:39:85:0b:af:a1:cb:e7:3e:44:89:22:bf:09:72:c1:64: 5b:4a:ec:48:9c:33:0d:83:1f:e0:fe:ab:47:5d:a6:24:84:20: e9:4c:22:e6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrGT3sm0lgTYrfvYnoAzdUjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjUxMTI3MTcxNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDhlMDlkZGVjN2M1YzcwZmU0OWUyODlkZjY3NTcyZTU1ZTJlODFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYc51glmNhG2HBdh0rXaQo9ThOQc q8P5YW46WdFK/lxhMabXz0ybAnU1x4KMOJLXBTP6POhsEX8w4CyGJc5cqEKY+qZ6 XNbvTiZZ+RAFXR+sgynavmXKqS5/4f1oLwDTUASNqIs3wxhc8wE7lUBQAr5DxzRs RrtgTVE5K29oacrCGR8MmB7oatHOotM5YRlaINmz/06mHJ+OYaUnCIJUPed2Ghsu FCwzb65iKV0nThSBwqPRhRPYT5iZzvgfgyXR/jUd1xev3OQqMCbYa2JvGrMamsme Sx0UPxMf4E2It5iuUcvMGTNuP1qQTxlf7JAO9po3j9/XNHR3DRmtqjCJfwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFK2OCd3sfFxw/kniid9nVy5V4ugfMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvclk0SjNleDhYSEQtU2VLSjMyZFhMbFhpNkI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVOzBAwQA WJQQAwQAWJQhMA0GCSqGSIb3DQEBCwUAA4IBAQBJUnRUWJOpuXn+Xh1hiyyreZCw fmN85mU1/F0OwprDaen0xOOEvhF3yAPE6A7q036qZdCFWrrSSiR2xM0Rnv++JGnz yBqiTq84MqQ79TdovqyBYVJBasAstDbtm6QbwVgWi+VHVU4Jg2grKXnzQ6JJkRGR saqq/8nJ2RJxRzNJWXIn4TuSVNlVw2rv52qbIqTK2psEfkHtVCyX0SrmdGpJsodm EMvOrGKY2HgLnXcwLAPLR1SFg0oLK49blmmXrXfX/bh5kNt1tcB/6U6CQLIcPHhl JY9jeHvUIDmFC6+hy+c+RIkivwlywWRbSuxInDMNgx/g/qtHXaYkhCDpTCLm -----END CERTIFICATE-----Generated at Sun Dec 7 00:09:59 2025 by rpki-client