This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/yNC8pxpiaSZoyM4LKG1XiYUN5bU.roa File: yNC8pxpiaSZoyM4LKG1XiYUN5bU.roa (raw, json) Hash identifier: R6sSwar2+yL3t8+JjWS9YzWsgxd6mJctsAx8UQoEU1U= Subject key identifier: C8:D0:BC:A7:1A:62:69:26:68:C8:CE:0B:28:6D:57:89:85:0D:E5:B5 Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Certificate serial: 019AA185DC554BA2BF6A9F37A9D33BC3268B Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/yNC8pxpiaSZoyM4LKG1XiYUN5bU.roa Signing time: Thu 20 Nov 2025 13:48:15 +0000 ROA not before: Thu 20 Nov 2025 13:48:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 26548 IP address blocks: 45.140.206.0/23 maxlen: 23 45.145.128.0/23 maxlen: 23 45.145.130.0/23 maxlen: 23 45.148.232.0/23 maxlen: 23 45.148.234.0/23 maxlen: 23 45.155.166.0/23 maxlen: 23 83.142.52.0/23 maxlen: 23 83.142.54.0/23 maxlen: 23 193.187.92.0/23 maxlen: 23 193.187.94.0/23 maxlen: 23 193.202.10.0/23 maxlen: 23 193.202.12.0/23 maxlen: 23 193.202.14.0/23 maxlen: 23 193.202.80.0/23 maxlen: 23 193.202.84.0/23 maxlen: 23 193.202.86.0/23 maxlen: 23 193.203.8.0/23 maxlen: 23 193.203.10.0/23 maxlen: 23 212.119.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a1:85:dc:55:4b:a2:bf:6a:9f:37:a9:d3:3b:c3:26:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Validity Not Before: Nov 20 13:48:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c8d0bca71a62692668c8ce0b286d5789850de5b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7c:4f:35:9f:58:97:f9:98:40:dd:b8:c7:75: 0e:42:14:e4:76:d3:e6:16:d9:d1:4d:58:82:2d:60: bd:a6:06:90:93:c9:8f:ad:95:45:6e:ee:ee:c9:f2: 0d:aa:d8:6c:ac:4c:b5:44:ed:96:6d:27:f5:2a:22: 5b:5e:58:74:61:28:cc:6f:be:48:55:d7:e5:fd:e2: c3:f2:4f:0b:a5:26:7a:27:99:f5:9c:49:a3:e1:92: a4:1f:ae:f6:af:ac:b2:6b:54:78:e3:a7:4f:29:75: c9:59:0f:bf:ab:ee:4d:16:18:cc:16:37:87:95:fe: 9e:d7:e4:81:33:7b:cf:36:7b:78:7d:3a:4a:62:c7: b5:21:9e:12:2a:74:bd:3f:c1:8a:c9:6c:78:13:e0: 15:db:07:55:86:5a:ec:5e:ea:9c:d0:f9:b5:d8:93: 9e:2d:d0:17:50:81:d1:51:a9:d9:89:e9:ef:ac:03: 9d:9a:ec:7d:e8:76:93:99:11:df:cd:99:27:c4:5b: 39:70:a6:47:4d:91:5d:a0:a2:4e:76:30:1b:a6:ea: b3:f4:62:19:0c:cd:2c:e9:b0:84:6b:58:53:f2:d9: 81:27:fe:ec:30:ba:f3:f5:2f:53:20:32:d5:60:a5: 64:fa:26:87:b4:e9:bd:8e:92:fd:9b:92:af:6d:38: 74:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D0:BC:A7:1A:62:69:26:68:C8:CE:0B:28:6D:57:89:85:0D:E5:B5 X509v3 Authority Key Identifier: keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/yNC8pxpiaSZoyM4LKG1XiYUN5bU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.206.0/23 45.145.128.0/22 45.148.232.0/22 45.155.166.0/23 83.142.52.0/22 193.187.92.0/22 193.202.10.0-193.202.15.255 193.202.80.0/23 193.202.84.0/22 193.203.8.0/22 212.119.46.0/23 Signature Algorithm: sha256WithRSAEncryption 29:81:01:03:c0:90:4f:e3:06:94:2e:66:a5:16:bf:b1:53:9c: aa:fe:f4:15:3b:ab:8c:02:a5:0e:0d:ee:1d:bd:4d:fe:ff:57: 4a:99:be:19:c2:e6:3e:21:1b:63:2c:ad:c4:40:bb:80:a6:72: 8f:44:05:f4:14:cc:fc:cf:56:61:35:4b:05:5c:54:08:aa:b1: ad:40:72:4a:1c:a5:68:c8:65:ac:fa:10:00:15:12:02:26:2e: f6:ea:63:61:c7:2a:90:10:0c:54:b7:e4:e9:2b:0e:c7:7f:bf: cf:6c:eb:43:d3:3c:4b:1c:34:a6:c1:5d:6a:e6:49:60:7d:06: 8d:79:76:49:70:22:8b:a0:02:cb:89:39:05:67:d8:86:26:7d: e0:57:80:23:23:f6:86:8f:21:2a:78:66:99:71:84:39:63:50: ea:12:95:d9:83:7a:ff:3c:d0:84:fb:ec:25:1a:2d:25:f5:cc: ee:de:c3:3f:ba:94:63:ab:e4:98:c1:39:0c:e8:7a:41:8e:d4: c3:d1:34:66:9b:37:1b:48:d1:79:37:7e:bf:c4:59:67:84:19: 61:47:87:2d:d6:5f:8a:1b:b8:1c:16:29:8f:63:1b:33:9d:a9: 56:c6:63:02:b5:6f:e5:ca:7f:39:5d:7a:45:c8:ec:ed:cd:4e: 34:b4:e2:c8 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZqhhdxVS6K/ap83qdM7wyaLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3 Y2Q0MjMwHhcNMjUxMTIwMTM0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGQwYmNhNzFhNjI2OTI2NjhjOGNlMGIyODZkNTc4OTg1MGRlNWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnxPNZ9Yl/mYQN24x3UOQhTkdtPm FtnRTViCLWC9pgaQk8mPrZVFbu7uyfINqthsrEy1RO2WbSf1KiJbXlh0YSjMb75I Vdfl/eLD8k8LpSZ6J5n1nEmj4ZKkH672r6yya1R446dPKXXJWQ+/q+5NFhjMFjeH lf6e1+SBM3vPNnt4fTpKYse1IZ4SKnS9P8GKyWx4E+AV2wdVhlrsXuqc0Pm12JOe LdAXUIHRUanZienvrAOdmux96HaTmRHfzZknxFs5cKZHTZFdoKJOdjAbpuqz9GIZ DM0s6bCEa1hT8tmBJ/7sMLrz9S9TIDLVYKVk+iaHtOm9jpL9m5KvbTh0eQIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFMjQvKcaYmkmaMjOCyhtV4mFDeW1MB8GA1UdIwQY MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli LWExYjdjZWVmYTE2Yy8xL3lOQzhweHBpYVNab3lNNExLRzFYaVlVTjViVS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjliLWExYjdjZWVmYTE2 Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwYwYIKwYBBQUHAQcBAf8EVDBSMFAEAgABMEoDBAEtjM4D BAItkYADBAItlOgDBAEtm6YDBAJTjjQDBALBu1wwDAMEAcHKCgMEBMHKAAMEAcHK UAMEAsHKVAMEAsHLCAMEAdR3LjANBgkqhkiG9w0BAQsFAAOCAQEAKYEBA8CQT+MG lC5mpRa/sVOcqv70FTurjAKlDg3uHb1N/v9XSpm+GcLmPiEbYyytxEC7gKZyj0QF 9BTM/M9WYTVLBVxUCKqxrUByShylaMhlrPoQABUSAiYu9upjYccqkBAMVLfk6SsO x3+/z2zrQ9M8Sxw0psFdauZJYH0GjXl2SXAii6ACy4k5BWfYhiZ94FeAIyP2ho8h KnhmmXGEOWNQ6hKV2YN6/zzQhPvsJRotJfXM7t7DP7qUY6vkmME5DOh6QY7Uw9E0 Zps3G0jReTd+v8RZZ4QZYUeHLdZfihu4HBYpj2MbM52pVsZjArVv5cp/OV16Rcjs 7c1ONLTiyA== -----END CERTIFICATE-----Generated at Fri Dec 5 15:05:18 2025 by rpki-client