This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/TC0Y0MRiVGuCk9KeE2YTdQkSY5g.roa File: TC0Y0MRiVGuCk9KeE2YTdQkSY5g.roa (raw, json) Hash identifier: A9A/+N3cfY5tTyxnkmJjtjdfLKr1kUCtTIA5PMEPYUY= Subject key identifier: 4C:2D:18:D0:C4:62:54:6B:82:93:D2:9E:13:66:13:75:09:12:63:98 Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c Certificate serial: 019ABBB46E92F2093A344DAEAF7D76362626 Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/TC0Y0MRiVGuCk9KeE2YTdQkSY5g.roa Signing time: Tue 25 Nov 2025 15:49:15 +0000 ROA not before: Tue 25 Nov 2025 15:49:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13347 IP address blocks: 91.246.43.0/24 maxlen: 24 213.177.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bb:b4:6e:92:f2:09:3a:34:4d:ae:af:7d:76:36:26:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c Validity Not Before: Nov 25 15:49:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4c2d18d0c462546b8293d29e1366137509126398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:52:64:e5:e9:21:10:5a:68:16:24:6f:37:b2: 5c:1e:4b:33:45:89:02:57:dc:43:e8:5b:43:63:8d: ee:74:e7:50:fc:af:9a:2c:f6:9d:0f:75:00:e9:58: 63:dd:b7:67:bc:18:bd:cb:3c:ce:96:71:c5:ac:17: 7b:84:c7:b6:63:ae:cd:22:8c:4c:11:80:23:0a:68: 35:74:9a:a1:7e:67:43:b8:fb:c3:d3:f8:5e:9c:1b: 1c:d9:c8:ad:2a:76:8d:c3:23:6f:6e:1b:79:cc:4e: 30:20:23:06:14:83:54:6a:2f:68:38:75:0a:f4:30: 06:f7:b3:45:df:2c:eb:38:86:f9:63:74:ed:f7:1e: ef:6b:13:3a:8c:ba:94:94:df:02:7f:a4:89:53:b2: fe:aa:de:30:e6:c0:82:8b:3c:09:51:95:ee:c0:1f: 58:95:07:bb:5c:a0:2f:19:54:41:14:6f:6e:aa:f0: 85:fa:de:4d:29:70:db:92:f7:ef:59:bc:0c:0f:77: 41:6e:c8:bd:06:f4:a1:25:4b:56:d3:40:e1:8e:7f: 49:88:42:b1:d7:32:38:83:35:0d:72:6d:c3:c0:57: 81:0e:99:74:d2:38:2a:45:6b:1f:68:20:fc:c5:a9: e3:c5:d4:3d:5a:39:c5:ee:07:32:12:b5:82:38:02: 3d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2D:18:D0:C4:62:54:6B:82:93:D2:9E:13:66:13:75:09:12:63:98 X509v3 Authority Key Identifier: keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/TC0Y0MRiVGuCk9KeE2YTdQkSY5g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.246.43.0/24 213.177.174.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:d6:d4:b3:ee:4b:d9:a3:02:4e:ae:24:f3:1e:48:60:67:2e: af:59:70:ba:d3:47:e9:fa:10:65:21:2c:2b:38:ce:b4:4d:22: 81:85:70:36:8d:52:4a:de:00:60:90:34:2f:65:14:2b:30:84: 0c:f5:3b:dc:a2:94:ad:e6:47:06:54:a1:4c:7b:22:4d:10:35: f2:29:75:1a:03:77:7c:1a:94:85:a9:f5:b6:49:39:6e:6a:9f: f0:80:54:d2:97:18:78:ca:fa:97:2f:5f:5f:35:34:f6:5c:60: 6c:4c:16:40:43:45:b9:c5:b3:f7:80:70:7b:e3:1e:74:e4:d8: 9b:f9:ae:ab:3d:81:6b:8d:5b:ab:64:7a:c1:8a:d5:dc:c3:16: 04:c7:a0:05:30:10:3c:8f:ae:3f:78:26:35:b4:e7:fe:ed:ef: fa:10:0b:f7:31:bb:30:bf:12:30:55:5a:ec:e1:ed:18:3f:6b: 9e:96:86:a6:db:49:3a:ee:b0:93:81:62:20:2a:58:27:aa:e7: 93:47:13:86:a6:41:61:82:9c:7f:b5:7e:df:a1:45:29:f4:f7: af:fa:7a:c7:bd:b4:4b:dd:b5:63:49:70:5b:01:c0:a6:4a:9b: f2:5a:01:95:64:4f:45:1e:f6:56:6d:01:67:bb:54:06:ab:30: ca:c0:6e:04 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZq7tG6S8gk6NE2ur312NiYmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNmJkMWE2YjA0NjI1YzU3MWQ4MzBmODc4YjFjMDIzODI0 NzQwOGMwHhcNMjUxMTI1MTU0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzJkMThkMGM0NjI1NDZiODI5M2QyOWUxMzY2MTM3NTA5MTI2Mzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FJk5ekhEFpoFiRvN7JcHkszRYkC V9xD6FtDY43udOdQ/K+aLPadD3UA6Vhj3bdnvBi9yzzOlnHFrBd7hMe2Y67NIoxM EYAjCmg1dJqhfmdDuPvD0/henBsc2citKnaNwyNvbht5zE4wICMGFINUai9oOHUK 9DAG97NF3yzrOIb5Y3Tt9x7vaxM6jLqUlN8Cf6SJU7L+qt4w5sCCizwJUZXuwB9Y lQe7XKAvGVRBFG9uqvCF+t5NKXDbkvfvWbwMD3dBbsi9BvShJUtW00Dhjn9JiEKx 1zI4gzUNcm3DwFeBDpl00jgqRWsfaCD8xanjxdQ9WjnF7gcyErWCOAI9EQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEwtGNDEYlRrgpPSnhNmE3UJEmOYMB8GA1UdIwQY MBaAFH9r0aawRiXFcdgw+HixwCOCR0CMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEt ODliNmMzMjMxNWMyLzEvVEMwWTBNUmlWR3VDazlLZUUyWVRkUWtTWTVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEtODliNmMzMjMxNWMy LzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW/YrAwQA 1bGuMA0GCSqGSIb3DQEBCwUAA4IBAQAu1tSz7kvZowJOriTzHkhgZy6vWXC600fp +hBlISwrOM60TSKBhXA2jVJK3gBgkDQvZRQrMIQM9TvcopSt5kcGVKFMeyJNEDXy KXUaA3d8GpSFqfW2STluap/wgFTSlxh4yvqXL19fNTT2XGBsTBZAQ0W5xbP3gHB7 4x505Nib+a6rPYFrjVurZHrBitXcwxYEx6AFMBA8j64/eCY1tOf+7e/6EAv3Mbsw vxIwVVrs4e0YP2ueloam20k67rCTgWIgKlgnqueTRxOGpkFhgpx/tX7foUUp9Pev +nrHvbRL3bVjSXBbAcCmSpvyWgGVZE9FHvZWbQFnu1QGqzDKwG4E -----END CERTIFICATE-----Generated at Sat Dec 6 17:16:33 2025 by rpki-client