This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/uY6_dW7xllxNNLI9RxIMLVNoRps.roa File: uY6_dW7xllxNNLI9RxIMLVNoRps.roa (raw, json) Hash identifier: xCs8EcZmjDS5ljwpI6+s80NCHhYZur9SyNXNWQL3yKA= Subject key identifier: B9:8E:BF:75:6E:F1:96:5C:4D:34:B2:3D:47:12:0C:2D:53:68:46:9B Certificate issuer: /CN=c09fc8a067fa6d2476bdce24afffad17131d9e86 Certificate serial: 019AFEF43980329E1E40E66CA55902138DE0 Authority key identifier: C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/uY6_dW7xllxNNLI9RxIMLVNoRps.roa Signing time: Mon 08 Dec 2025 17:13:29 +0000 ROA not before: Mon 08 Dec 2025 17:13:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 14618 IP address blocks: 216.25.124.0/24 maxlen: 24 216.25.125.0/24 maxlen: 24 216.25.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:f4:39:80:32:9e:1e:40:e6:6c:a5:59:02:13:8d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c09fc8a067fa6d2476bdce24afffad17131d9e86 Validity Not Before: Dec 8 17:13:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b98ebf756ef1965c4d34b23d47120c2d5368469b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4d:a2:50:7a:c2:b8:8e:bf:e3:f4:86:0e:34: cb:2e:aa:70:68:c9:b7:06:c4:8f:9b:f6:68:63:ab: fa:36:67:25:72:71:be:63:38:b2:a4:c1:24:67:df: 4a:42:70:53:8f:89:0f:94:2a:b3:41:d4:f4:de:2b: 47:74:22:77:80:e4:cd:5c:64:fa:6a:9f:6c:67:17: 48:47:5a:3e:3a:26:34:48:8d:ab:dd:76:12:8d:e0: 51:c9:17:87:a1:7f:5d:6a:7a:87:26:57:5f:82:cd: af:6d:ef:af:8e:3e:87:60:78:ad:d5:76:bc:ad:37: ee:f4:60:83:6a:07:66:24:b2:13:f8:67:fb:d4:cc: 41:3a:02:fb:09:e4:d5:47:99:d3:3c:6a:16:cd:58: 8c:29:4f:26:8e:ee:82:a6:06:48:6c:c7:9c:10:07: 8a:88:fe:42:c2:a1:fb:be:b1:0a:49:e3:df:bf:9a: e8:37:40:52:f8:5c:b7:0f:1b:c6:78:ee:5b:28:43: b9:ae:7c:3d:32:54:6e:7f:9c:00:0a:3b:24:c4:85: 09:5a:db:57:a3:f9:44:2f:9c:aa:a9:a4:cf:30:16: 7c:44:df:16:7c:1b:84:8c:07:6a:6a:79:6c:49:18: bd:36:b2:11:07:0b:f5:ae:d0:06:6e:fc:eb:e1:83: 91:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8E:BF:75:6E:F1:96:5C:4D:34:B2:3D:47:12:0C:2D:53:68:46:9B X509v3 Authority Key Identifier: keyid:C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/uY6_dW7xllxNNLI9RxIMLVNoRps.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.25.124.0-216.25.126.255 Signature Algorithm: sha256WithRSAEncryption 73:f0:0e:23:00:02:02:63:87:b8:70:71:21:25:83:86:64:69: 5a:1a:0f:c5:91:5a:64:cd:9c:fd:39:c6:95:89:e4:66:8d:33: c2:65:11:45:24:2c:71:b5:a8:55:50:78:e4:01:ca:c1:cc:e6: cc:d0:d2:1a:0e:a7:54:4f:5c:c7:62:5e:58:af:2b:53:91:b3: 62:8a:c2:bc:5b:d9:d2:ca:94:e2:9f:21:bf:65:cb:c0:08:52: 57:54:b1:13:f3:9b:ac:47:a1:82:53:33:03:8b:c4:5e:44:ad: fe:0b:25:7c:47:0a:7d:8f:4c:e4:4e:e5:38:52:be:5c:bd:83: ee:db:31:ac:41:f5:b3:4e:e3:01:a2:5a:c0:3a:e5:25:78:6f: b0:f9:d6:ea:53:cd:45:d4:68:c2:9a:7e:bf:50:eb:d8:8b:2b: 8b:d6:6b:9a:fc:a9:52:05:10:b4:66:55:b7:66:9b:ea:f0:74: 46:fc:78:93:61:94:c2:4d:10:ae:48:7b:57:23:55:14:fa:e4: 00:07:bf:57:b3:9c:e7:46:e5:19:50:30:e2:d7:54:be:c6:f5: a9:6b:b0:2d:a2:02:4e:dd:d0:ce:bd:b3:75:a0:af:c6:af:19: c5:96:6c:20:60:77:67:17:b1:57:14:6b:60:b8:95:68:c9:8f: 2e:ab:25:0e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZr+9DmAMp4eQOZspVkCE43gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwOWZjOGEwNjdmYTZkMjQ3NmJkY2UyNGFmZmZhZDE3MTMx ZDllODYwHhcNMjUxMjA4MTcxMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOThlYmY3NTZlZjE5NjVjNGQzNGIyM2Q0NzEyMGMyZDUzNjg0NjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk2iUHrCuI6/4/SGDjTLLqpwaMm3 BsSPm/ZoY6v6NmclcnG+YziypMEkZ99KQnBTj4kPlCqzQdT03itHdCJ3gOTNXGT6 ap9sZxdIR1o+OiY0SI2r3XYSjeBRyReHoX9danqHJldfgs2vbe+vjj6HYHit1Xa8 rTfu9GCDagdmJLIT+Gf71MxBOgL7CeTVR5nTPGoWzViMKU8mju6CpgZIbMecEAeK iP5CwqH7vrEKSePfv5roN0BS+Fy3DxvGeO5bKEO5rnw9MlRuf5wACjskxIUJWttX o/lEL5yqqaTPMBZ8RN8WfBuEjAdqanlsSRi9NrIRBwv1rtAGbvzr4YOR7wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLmOv3Vu8ZZcTTSyPUcSDC1TaEabMB8GA1UdIwQY MBaAFMCfyKBn+m0kdr3OJK//rRcTHZ6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0pfSW9HZjZiU1IydmM0a3JfLXRGeE1kbm9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9hNzMzYmMtNjhmOC00OTlmLTg1MGYt OGU5MjRmZmJlNTg0LzEvdVk2X2RXN3hsbHhOTkxJOVJ4SU1MVk5vUnBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9hNzMzYmMtNjhmOC00OTlmLTg1MGYtOGU5MjRmZmJlNTg0 LzEvd0pfSW9HZjZiU1IydmM0a3JfLXRGeE1kbm9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALYGXwD BADYGX4wDQYJKoZIhvcNAQELBQADggEBAHPwDiMAAgJjh7hwcSElg4ZkaVoaD8WR WmTNnP05xpWJ5GaNM8JlEUUkLHG1qFVQeOQBysHM5szQ0hoOp1RPXMdiXlivK1OR s2KKwrxb2dLKlOKfIb9ly8AIUldUsRPzm6xHoYJTMwOLxF5Erf4LJXxHCn2PTORO 5ThSvly9g+7bMaxB9bNO4wGiWsA65SV4b7D51upTzUXUaMKafr9Q69iLK4vWa5r8 qVIFELRmVbdmm+rwdEb8eJNhlMJNEK5Ie1cjVRT65AAHv1eznOdG5RlQMOLXVL7G 9alrsC2iAk7d0M69s3Wgr8avGcWWbCBgd2cXsVcUa2C4lWjJjy6rJQ4= -----END CERTIFICATE-----Generated at Sat Dec 20 10:30:50 2025 by rpki-client