This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/wYwgDdjdQ28avan23ojI6QcK18g.roa File: wYwgDdjdQ28avan23ojI6QcK18g.roa (raw, json) Hash identifier: sGOMVKUTVh1FU0Qhv0kN8JvcgBmx6p/iylvqbFYaDyM= Subject key identifier: C1:8C:20:0D:D8:DD:43:6F:1A:BD:A9:F6:DE:88:C8:E9:07:0A:D7:C8 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019AD93D5C3A387FF51C8632C5EE37EE7DAF Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/wYwgDdjdQ28avan23ojI6QcK18g.roa Signing time: Mon 01 Dec 2025 09:27:48 +0000 ROA not before: Mon 01 Dec 2025 09:27:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 78.135.72.0/24 maxlen: 24 78.135.74.0/24 maxlen: 24 78.135.78.0/24 maxlen: 24 78.135.88.0/24 maxlen: 24 188.132.141.0/24 maxlen: 24 188.132.146.0/24 maxlen: 24 188.132.152.0/24 maxlen: 24 188.132.163.0/24 maxlen: 24 188.132.171.0/24 maxlen: 24 188.132.189.0/24 maxlen: 24 188.132.191.0/24 maxlen: 24 188.132.203.0/24 maxlen: 24 188.132.212.0/24 maxlen: 24 188.132.213.0/24 maxlen: 24 188.132.216.0/24 maxlen: 24 188.132.217.0/24 maxlen: 24 188.132.229.0/24 maxlen: 24 188.132.236.0/24 maxlen: 24 212.68.55.0/24 maxlen: 24 212.68.59.0/24 maxlen: 24 212.68.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:3d:5c:3a:38:7f:f5:1c:86:32:c5:ee:37:ee:7d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Dec 1 09:27:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c18c200dd8dd436f1abda9f6de88c8e9070ad7c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:41:74:dd:8d:77:44:41:6b:e4:4e:51:14:11: 8f:42:1c:cb:6b:ce:ad:2f:8e:cd:93:0f:10:02:06: 53:5c:fa:4b:fd:44:33:73:a4:6b:93:76:70:3d:ef: d9:03:dc:4f:72:9b:55:50:43:44:e8:5e:5d:6f:e7: c9:fd:d5:78:ab:27:4c:24:a6:90:64:b9:f5:e6:be: dc:cd:59:c7:92:ce:b7:bb:45:ff:fd:dc:3b:84:97: 1c:b5:26:6a:fb:95:4d:fd:e3:ba:70:7f:ac:70:0c: cf:9a:d4:fd:ad:ea:af:6e:0f:34:ff:fa:89:29:47: b4:5d:a7:60:1c:4f:e7:4c:7f:bf:2c:06:9f:33:97: 86:58:6d:55:4f:56:69:72:0d:24:0d:d2:36:6a:ac: 97:3f:44:9c:17:8f:33:05:21:77:bc:62:e2:11:b2: 1a:f7:06:34:31:ed:15:be:9a:a2:6b:22:07:24:21: 80:bc:53:3d:c8:aa:ed:94:2d:da:26:51:40:38:71: 35:91:02:d5:d3:2d:fc:cc:5d:bc:de:48:71:d5:12: 05:0b:ee:c7:4b:c0:2a:b0:b3:c3:bb:7e:37:6c:51: 4b:da:75:85:da:72:29:6e:35:91:eb:e8:98:44:88: 6d:24:65:0f:f6:d0:24:a6:7c:54:49:09:2d:b0:51: 88:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8C:20:0D:D8:DD:43:6F:1A:BD:A9:F6:DE:88:C8:E9:07:0A:D7:C8 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/wYwgDdjdQ28avan23ojI6QcK18g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.135.72.0/24 78.135.74.0/24 78.135.78.0/24 78.135.88.0/24 188.132.141.0/24 188.132.146.0/24 188.132.152.0/24 188.132.163.0/24 188.132.171.0/24 188.132.189.0/24 188.132.191.0/24 188.132.203.0/24 188.132.212.0/23 188.132.216.0/23 188.132.229.0/24 188.132.236.0/24 212.68.55.0/24 212.68.59.0-212.68.60.255 Signature Algorithm: sha256WithRSAEncryption 30:22:5f:ed:5f:be:3d:cb:6b:56:8f:64:33:73:79:00:f5:10: c9:06:58:8c:26:36:6b:55:63:0f:fa:7d:f7:41:56:59:a8:26: ad:a8:d6:0a:44:45:f0:48:5b:14:15:42:e5:32:48:01:8c:b0: 66:96:80:86:79:5f:e3:c8:9c:e9:9e:63:a5:8f:3f:7b:01:6b: 77:47:ea:a0:c0:12:3d:96:b9:69:38:d0:ab:f8:bb:a7:91:97: 88:24:09:8c:43:ea:5b:33:51:5d:b2:20:2d:1e:f1:8e:27:55: a0:c3:54:18:ef:3d:43:b2:52:3d:4f:70:c0:37:01:01:21:82: bd:46:90:b5:e0:1a:d7:f1:02:8a:07:da:27:14:06:cd:08:33: 87:48:cf:96:60:2c:79:f4:d8:95:70:5e:11:16:83:7b:1e:80: d6:c4:cf:b6:ba:ee:32:17:3e:a7:b0:46:ea:1a:fc:a1:de:e9: 80:92:5a:93:2c:d0:d0:0c:30:10:d4:9c:bc:0a:76:72:41:6e: 84:0b:45:ae:27:0d:f8:cb:93:fb:ec:0b:82:cc:d2:cc:89:24: 6f:52:71:ee:e8:23:91:28:47:c6:59:23:88:2a:14:fd:4b:8c: e8:e5:f6:3a:32:b4:97:d9:61:fb:a2:aa:8c:fb:f4:c6:a6:a6: 20:8a:8d:c7 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgISAZrZPVw6OH/1HIYyxe437n2vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjUxMjAxMDkyNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMThjMjAwZGQ4ZGQ0MzZmMWFiZGE5ZjZkZTg4YzhlOTA3MGFkN2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50F03Y13REFr5E5RFBGPQhzLa86t L47Nkw8QAgZTXPpL/UQzc6Rrk3ZwPe/ZA9xPcptVUENE6F5db+fJ/dV4qydMJKaQ ZLn15r7czVnHks63u0X//dw7hJcctSZq+5VN/eO6cH+scAzPmtT9reqvbg80//qJ KUe0XadgHE/nTH+/LAafM5eGWG1VT1Zpcg0kDdI2aqyXP0ScF48zBSF3vGLiEbIa 9wY0Me0VvpqiayIHJCGAvFM9yKrtlC3aJlFAOHE1kQLV0y38zF283khx1RIFC+7H S8AqsLPDu343bFFL2nWF2nIpbjWR6+iYRIhtJGUP9tAkpnxUSQktsFGIRQIDAQAB o4ICeDCCAnQwHQYDVR0OBBYEFMGMIA3Y3UNvGr2p9t6IyOkHCtfIMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvd1l3Z0RkamRRMjhhdmFuMjNvakk2UWNLMThnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEAE6HSAME AE6HSgMEAE6HTgMEAE6HWAMEALyEjQMEALyEkgMEALyEmAMEALyEowMEALyEqwME ALyEvQMEALyEvwMEALyEywMEAbyE1AMEAbyE2AMEALyE5QMEALyE7AMEANRENzAM AwQA1EQ7AwQA1EQ8MA0GCSqGSIb3DQEBCwUAA4IBAQAwIl/tX749y2tWj2Qzc3kA 9RDJBliMJjZrVWMP+n33QVZZqCatqNYKREXwSFsUFULlMkgBjLBmloCGeV/jyJzp nmOljz97AWt3R+qgwBI9lrlpONCr+LunkZeIJAmMQ+pbM1FdsiAtHvGOJ1Wgw1QY 7z1DslI9T3DANwEBIYK9RpC14BrX8QKKB9onFAbNCDOHSM+WYCx59NiVcF4RFoN7 HoDWxM+2uu4yFz6nsEbqGvyh3umAklqTLNDQDDAQ1Jy8CnZyQW6EC0WuJw34y5P7 7AuCzNLMiSRvUnHu6CORKEfGWSOIKhT9S4zo5fY6MrSX2WH7oqqM+/TGpqYgio3H -----END CERTIFICATE-----Generated at Sun Dec 7 03:27:02 2025 by rpki-client