This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/yYaBmwB7DjfivfsKFkJ9IS1hVaQ.roa File: yYaBmwB7DjfivfsKFkJ9IS1hVaQ.roa (raw, json) Hash identifier: x+tR3XKn/wCpvioUTFB6tESCgf4J8Psl/nM2q8MOSc4= Subject key identifier: C9:86:81:9B:00:7B:0E:37:E2:BD:FB:0A:16:42:7D:21:2D:61:55:A4 Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257 Certificate serial: 019A5EA8BC51A4FA355267D68736B94ABDBC Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/yYaBmwB7DjfivfsKFkJ9IS1hVaQ.roa Signing time: Fri 07 Nov 2025 14:11:47 +0000 ROA not before: Fri 07 Nov 2025 14:11:47 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6461 IP address blocks: 31.99.0.0/18 maxlen: 18 79.141.32.0/20 maxlen: 20 82.98.192.0/21 maxlen: 21 82.98.232.0/21 maxlen: 21 82.98.240.0/20 maxlen: 20 94.31.0.0/18 maxlen: 18 193.28.62.0/23 maxlen: 23 193.28.104.0/23 maxlen: 23 193.160.88.0/22 maxlen: 22 213.152.224.0/19 maxlen: 19 213.161.64.0/19 maxlen: 19 2a00:16f8::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 08:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5e:a8:bc:51:a4:fa:35:52:67:d6:87:36:b9:4a:bd:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257 Validity Not Before: Nov 7 14:11:47 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c986819b007b0e37e2bdfb0a16427d212d6155a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ea:d3:7a:07:45:10:23:76:87:1b:18:3a:e5: 4e:f4:54:73:7f:39:e9:a1:59:2d:4b:e5:b7:64:ed: e3:ff:dd:ad:87:04:6c:5f:47:4f:59:cc:4d:90:87: 91:1d:a5:30:18:bd:4a:eb:5b:d0:97:71:93:a5:10: 18:7e:22:10:36:30:b1:68:77:dd:a5:c7:e1:c9:f5: 22:a8:cb:00:0a:b3:0c:e4:b1:b0:4f:dd:64:c4:f5: aa:4b:e7:81:d1:f0:87:cf:96:66:87:ce:36:d8:5e: 88:a4:55:67:4c:52:70:54:e8:50:d7:4f:ff:17:86: 74:e2:13:9c:89:f6:6b:03:17:ec:ef:d9:19:d4:59: c3:a7:64:e2:86:8d:d6:3c:28:7a:98:0e:da:73:dd: 5f:df:f0:53:11:c1:91:79:50:d2:33:9a:f9:66:e9: 83:d7:a1:c5:f7:25:1f:00:76:cf:f3:24:ed:da:16: 13:49:bb:47:fc:91:fd:7d:28:b2:d1:12:0c:34:84: dd:78:ae:fd:79:ad:03:bd:91:27:a9:68:6f:5a:dd: 62:d4:a4:0b:eb:67:1d:3e:ef:bb:cf:62:2a:70:7d: ec:9e:a6:77:3b:93:2d:12:35:1a:e9:42:0e:c0:71: 25:5b:36:47:c6:a5:07:06:30:c7:9f:ef:8b:38:a4: 65:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:86:81:9B:00:7B:0E:37:E2:BD:FB:0A:16:42:7D:21:2D:61:55:A4 X509v3 Authority Key Identifier: keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/yYaBmwB7DjfivfsKFkJ9IS1hVaQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.99.0.0/18 79.141.32.0/20 82.98.192.0/21 82.98.232.0-82.98.255.255 94.31.0.0/18 193.28.62.0/23 193.28.104.0/23 193.160.88.0/22 213.152.224.0/19 213.161.64.0/19 IPv6: 2a00:16f8::/29 Signature Algorithm: sha256WithRSAEncryption 43:3b:bf:90:ad:1b:cc:b5:e2:55:13:3e:f5:18:b6:74:b6:39: 56:01:1e:f0:85:da:e1:93:e6:75:aa:cf:ad:9d:b0:be:9c:7b: 0d:49:a6:10:ee:c3:cc:2a:eb:17:90:61:30:8e:20:34:03:8e: c5:71:c5:4f:c4:55:a3:b3:c8:fc:c9:cb:6d:c6:5f:c6:91:77: b4:0c:a1:08:3e:8d:16:06:de:f4:e7:1b:a9:de:b2:22:1e:97: 9c:19:da:54:68:7b:74:d5:62:10:53:60:9d:ed:fa:ba:c0:97: 8a:77:80:09:5d:2f:6d:19:ee:54:64:18:05:af:21:80:ee:cd: a6:c2:fe:91:39:97:e6:ac:ff:07:7e:96:eb:61:b0:f4:b4:57: 21:1b:95:fe:f4:eb:ac:64:a5:c5:29:ff:b7:b0:d2:db:49:81: c5:61:6d:43:74:67:fd:b3:fa:b6:2c:cb:74:fb:aa:3d:32:5c: 36:e2:6a:8b:7a:c5:3a:d9:06:10:3a:58:70:55:d8:7c:a6:47: 0c:3e:61:b6:7e:50:9c:f7:8a:86:7b:20:da:bb:97:ee:7f:23: 7e:03:42:1a:df:6f:78:f4:31:71:f3:45:5d:a1:36:e7:3f:6d: fd:51:45:19:8e:ec:a7:d7:f6:0b:e1:93:36:0b:a2:bf:c7:48: bb:5d:c1:04 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgISAZpeqLxRpPo1UmfWhza5Sr28MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMGNjOTQyOWI2MzM4MmU5YjE3MTRkMjFiM2M5NmQyZTVl YmUyNTcwHhcNMjUxMTA3MTQxMTQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTg2ODE5YjAwN2IwZTM3ZTJiZGZiMGExNjQyN2QyMTJkNjE1NWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+rTegdFECN2hxsYOuVO9FRzfznp oVktS+W3ZO3j/92thwRsX0dPWcxNkIeRHaUwGL1K61vQl3GTpRAYfiIQNjCxaHfd pcfhyfUiqMsACrMM5LGwT91kxPWqS+eB0fCHz5Zmh8422F6IpFVnTFJwVOhQ10// F4Z04hOcifZrAxfs79kZ1FnDp2Tiho3WPCh6mA7ac91f3/BTEcGReVDSM5r5ZumD 16HF9yUfAHbP8yTt2hYTSbtH/JH9fSiy0RIMNITdeK79ea0DvZEnqWhvWt1i1KQL 62cdPu+7z2IqcH3snqZ3O5MtEjUa6UIOwHElWzZHxqUHBjDHn++LOKRlJQIDAQAB o4ICVTCCAlEwHQYDVR0OBBYEFMmGgZsAew434r37ChZCfSEtYVWkMB8GA1UdIwQY MBaAFOMMyUKbYzgumxcU0hs8ltLl6+JXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUt ZGI0ZjM1MmU5YWQzLzEveVlhQm13QjdEamZpdmZzS0ZrSjlJUzFoVmFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUtZGI0ZjM1MmU5YWQz LzEvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBJBAIAATBDAwQGH2MAAwQE T40gAwQDUmLAMAsDBANSYugDAwBSYgMEBl4fAAMEAcEcPgMEAcEcaAMEAsGgWAME BdWY4AMEBdWhQDANBAIAAjAHAwUDKgAW+DANBgkqhkiG9w0BAQsFAAOCAQEAQzu/ kK0bzLXiVRM+9Ri2dLY5VgEe8IXa4ZPmdarPrZ2wvpx7DUmmEO7DzCrrF5BhMI4g NAOOxXHFT8RVo7PI/MnLbcZfxpF3tAyhCD6NFgbe9Ocbqd6yIh6XnBnaVGh7dNVi EFNgne36usCXineACV0vbRnuVGQYBa8hgO7NpsL+kTmX5qz/B36W62Gw9LRXIRuV /vTrrGSlxSn/t7DS20mBxWFtQ3Rn/bP6tizLdPuqPTJcNuJqi3rFOtkGEDpYcFXY fKZHDD5htn5QnPeKhnsg2ruX7n8jfgNCGt9vePQxcfNFXaE25z9t/VFFGY7sp9f2 C+GTNguiv8dIu13BBA== -----END CERTIFICATE-----Generated at Fri Dec 5 18:11:53 2025 by rpki-client