This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/Yq0huFswklaPitVVLqZv-O2tkbM.roa File: Yq0huFswklaPitVVLqZv-O2tkbM.roa (raw, json) Hash identifier: C0opR6K7G1AduUhRe7rn8bDCZJFjjfJanw4aLtFBkSU= Subject key identifier: 62:AD:21:B8:5B:30:92:56:8F:8A:D5:55:2E:A6:6F:F8:ED:AD:91:B3 Certificate issuer: /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8 Certificate serial: 019B1730C0520B8B440BD01A3E47EAF8AC0A Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/Yq0huFswklaPitVVLqZv-O2tkbM.roa Signing time: Sat 13 Dec 2025 10:10:29 +0000 ROA not before: Sat 13 Dec 2025 10:10:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203997 IP address blocks: 185.205.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:30:c0:52:0b:8b:44:0b:d0:1a:3e:47:ea:f8:ac:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8 Validity Not Before: Dec 13 10:10:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=62ad21b85b3092568f8ad5552ea66ff8edad91b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:28:f8:e2:6d:b3:85:36:b2:7a:07:a0:d2:68: 0a:37:6b:7b:95:51:a8:c1:a9:a0:54:f9:b9:2e:5e: ff:75:2c:78:35:2b:2d:7e:11:45:e4:b5:f6:84:88: 78:44:f0:8c:ec:70:b6:96:63:ba:80:cb:93:cf:c3: b3:dc:77:19:5f:2e:34:59:e3:88:af:b8:39:6a:6d: 4b:e2:94:86:4d:8d:25:09:19:c5:59:99:4e:91:01: 92:53:c7:d5:3e:bc:55:c8:6e:11:bb:e1:36:6f:35: 59:fc:d0:21:6c:a6:d9:f0:d3:87:90:62:0f:99:89: 3c:4c:bf:5f:7d:dc:e0:3e:93:af:ed:d3:a5:44:35: 2c:4a:31:78:2b:f2:df:33:c9:7b:59:d5:51:68:c9: 8a:97:56:ad:1a:ae:6a:63:a8:ee:a7:ca:3e:35:d2: 7d:ed:20:08:72:9e:ee:ad:ad:49:68:65:76:8c:ae: e6:5b:91:4b:9b:c3:12:0c:8f:3c:4e:2a:9f:3b:0f: 5b:6c:7d:27:d4:dd:56:4b:60:66:d1:61:fb:8b:9b: cb:42:ab:ad:64:0c:a0:59:cf:a5:77:11:18:9d:10: cc:3a:da:83:09:cf:10:8f:b3:bf:18:87:8e:81:77: 41:ff:9d:ca:a7:08:21:48:35:77:72:7e:62:56:e9: cd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:AD:21:B8:5B:30:92:56:8F:8A:D5:55:2E:A6:6F:F8:ED:AD:91:B3 X509v3 Authority Key Identifier: keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/Yq0huFswklaPitVVLqZv-O2tkbM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.205.32.0/24 Signature Algorithm: sha256WithRSAEncryption 99:cc:b8:aa:49:cf:06:ad:50:9f:e5:7e:ea:4c:00:40:2d:be: 74:2f:78:9e:53:66:4f:e1:b5:7a:7c:f6:ad:07:67:ee:64:28: 64:f6:41:29:78:f4:43:06:43:cf:a5:15:df:b1:6d:4f:c9:c9: 31:df:e7:ac:61:8d:fc:90:f1:92:1e:83:68:46:12:b6:0d:ab: 21:78:8a:46:dc:d6:7a:81:a6:cd:71:04:65:dd:a5:de:73:fd: 0a:a2:d7:c1:eb:79:9c:56:33:5e:03:fb:53:46:0d:35:31:3d: 95:76:2d:53:07:35:1c:bc:4f:f4:94:14:8c:dd:bb:ee:f4:0c: 13:71:f9:1f:2a:b2:5d:e6:d8:a5:bc:5e:53:ce:f9:75:a7:19: 33:6a:93:d6:25:74:a6:86:2c:0e:5e:05:90:38:02:58:a2:6a: 23:a3:70:35:1b:33:0a:20:62:4a:bc:4d:f8:0f:63:00:bd:2b: 03:1a:cc:c8:9f:00:a5:db:a0:09:5c:e5:5d:22:bf:9f:d1:e9: 16:be:64:bb:f7:f1:8d:f4:e1:78:00:f3:d3:48:25:3a:e3:b3: 13:e2:84:e7:b9:e5:4b:3e:90:0e:a8:39:3b:b3:4e:2f:62:38: 2b:82:57:43:cd:21:7a:73:99:a6:6f:b4:01:cb:c6:92:a3:7c: d9:83:f3:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsXMMBSC4tEC9AaPkfq+KwKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZDk0NDc3YzhiNTRkMTJlYzhiM2Y3YjZkOWFlNzhlNTEw YjIzZDgwHhcNMjUxMjEzMTAxMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmFkMjFiODViMzA5MjU2OGY4YWQ1NTUyZWE2NmZmOGVkYWQ5MWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryj44m2zhTayegeg0mgKN2t7lVGo wamgVPm5Ll7/dSx4NSstfhFF5LX2hIh4RPCM7HC2lmO6gMuTz8Oz3HcZXy40WeOI r7g5am1L4pSGTY0lCRnFWZlOkQGSU8fVPrxVyG4Ru+E2bzVZ/NAhbKbZ8NOHkGIP mYk8TL9ffdzgPpOv7dOlRDUsSjF4K/LfM8l7WdVRaMmKl1atGq5qY6jup8o+NdJ9 7SAIcp7ura1JaGV2jK7mW5FLm8MSDI88TiqfOw9bbH0n1N1WS2Bm0WH7i5vLQqut ZAygWc+ldxEYnRDMOtqDCc8Qj7O/GIeOgXdB/53KpwghSDV3cn5iVunNVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGKtIbhbMJJWj4rVVS6mb/jtrZGzMB8GA1UdIwQY MBaAFEbZRHfItU0S7Is/e22a545RCyPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81NGE0NTctM2M0OC00ZTAxLTkwYjAt NWViNzVjMjMxOGFhLzEvWXEwaHVGc3drbGFQaXRWVkxxWnYtTzJ0a2JNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81NGE0NTctM2M0OC00ZTAxLTkwYjAtNWViNzVjMjMxOGFh LzEvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc0gMA0G CSqGSIb3DQEBCwUAA4IBAQCZzLiqSc8GrVCf5X7qTABALb50L3ieU2ZP4bV6fPat B2fuZChk9kEpePRDBkPPpRXfsW1Pyckx3+esYY38kPGSHoNoRhK2DasheIpG3NZ6 gabNcQRl3aXec/0KotfB63mcVjNeA/tTRg01MT2Vdi1TBzUcvE/0lBSM3bvu9AwT cfkfKrJd5tilvF5Tzvl1pxkzapPWJXSmhiwOXgWQOAJYomojo3A1GzMKIGJKvE34 D2MAvSsDGszInwCl26AJXOVdIr+f0ekWvmS79/GN9OF4APPTSCU647MT4oTnueVL PpAOqDk7s04vYjgrgldDzSF6c5mmb7QBy8aSo3zZg/Pg -----END CERTIFICATE-----Generated at Wed Dec 17 07:37:36 2025 by rpki-client