This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/yhhCzt4IpqhONpxIRsB9W6AXEGY.roa File: yhhCzt4IpqhONpxIRsB9W6AXEGY.roa (raw, json) Hash identifier: njnq+R46IxMluyP1lNXUl3Hmykg2ym4U9EP0GSKKu5k= Subject key identifier: CA:18:42:CE:DE:08:A6:A8:4E:36:9C:48:46:C0:7D:5B:A0:17:10:66 Certificate issuer: /CN=9f7a47be773a8cad6d75980e739b7841ad4d9b91 Certificate serial: 019AFDFFC6ECF4161BD37B935E40F3B7E996 Authority key identifier: 9F:7A:47:BE:77:3A:8C:AD:6D:75:98:0E:73:9B:78:41:AD:4D:9B:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/yhhCzt4IpqhONpxIRsB9W6AXEGY.roa Signing time: Mon 08 Dec 2025 12:46:29 +0000 ROA not before: Mon 08 Dec 2025 12:46:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58123 IP address blocks: 46.19.4.0/24 maxlen: 24 46.19.5.0/24 maxlen: 24 2a01:7040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:ff:c6:ec:f4:16:1b:d3:7b:93:5e:40:f3:b7:e9:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f7a47be773a8cad6d75980e739b7841ad4d9b91 Validity Not Before: Dec 8 12:46:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ca1842cede08a6a84e369c4846c07d5ba0171066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bf:92:7d:0c:b6:b2:7e:d2:28:89:2b:d2:35: 9e:ad:a1:58:76:65:77:4a:51:cb:e1:cf:d0:77:f2: d6:4a:2a:23:10:fb:05:53:d1:6a:51:f3:7c:1e:29: eb:ba:a4:2c:2c:9e:bf:a2:b6:31:4a:8c:6d:ea:8b: f7:f5:86:d7:fa:5b:02:d5:3e:41:3f:ae:7f:a0:bb: 2c:2f:be:79:2c:32:a3:ce:a1:a1:67:6b:09:c7:6e: c8:b8:eb:93:22:a5:0e:e2:2e:3d:a3:f8:12:a9:3b: 92:db:07:db:cb:fc:77:fb:4a:56:fc:8a:09:cf:c6: 50:76:9b:76:31:89:e3:ef:f8:ce:25:31:24:80:48: 73:e0:ad:83:43:5a:93:69:6b:c1:66:41:dc:b2:67: 2b:36:2f:6e:9b:2b:3f:83:b1:c4:76:68:ee:93:16: e1:de:b0:2e:69:1d:1e:39:53:83:70:b8:ed:0f:81: fe:51:f7:29:fc:9d:e2:7e:d5:06:e0:a8:78:a2:1d: 57:cb:83:e9:f0:e6:05:97:e7:c8:4f:fe:6e:00:44: 0c:2f:12:ec:33:1c:56:ef:e2:d8:fc:98:22:74:fb: fa:59:af:d8:20:6d:eb:68:16:6b:4b:fb:a2:7b:8c: 55:18:ad:d7:92:e3:20:4d:8a:11:31:a4:fa:e5:7e: 8a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:18:42:CE:DE:08:A6:A8:4E:36:9C:48:46:C0:7D:5B:A0:17:10:66 X509v3 Authority Key Identifier: keyid:9F:7A:47:BE:77:3A:8C:AD:6D:75:98:0E:73:9B:78:41:AD:4D:9B:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/yhhCzt4IpqhONpxIRsB9W6AXEGY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.19.4.0/23 IPv6: 2a01:7040::/32 Signature Algorithm: sha256WithRSAEncryption 77:14:87:83:1f:f6:f4:69:e0:b9:0c:55:30:aa:84:5d:8b:dd: a9:dc:c6:7c:76:b5:d8:c9:cc:23:ad:7d:83:ac:a3:9c:66:f3: d3:ab:b8:74:c7:ba:8f:2f:c9:ef:85:82:a5:ca:e9:a5:e0:18: 2e:a8:97:9a:03:67:44:49:48:c3:e9:34:d3:1f:d9:cd:32:0d: 64:58:c5:47:8d:fe:ed:2b:e2:63:c6:d2:e6:6f:4a:f3:2f:88: a4:ad:a1:3a:43:bd:ef:29:1e:39:f7:93:ae:03:93:41:41:83: 41:68:47:a8:8e:22:1a:14:a1:e3:42:b5:62:36:1b:3d:1c:14: 93:7d:d4:f0:6a:79:1b:a6:54:eb:27:6b:ad:bc:ac:dc:a0:d3: 3a:89:e1:73:72:76:d0:e4:0c:d7:17:b0:cf:b1:0e:a8:38:09: 9c:36:34:ac:42:22:c7:05:e8:69:2a:ba:cf:d1:1a:c0:91:15: 9b:ae:a2:40:1e:96:26:b8:89:6d:48:a1:03:37:b1:46:0e:b1: 61:6c:8e:77:b3:13:fa:64:10:bb:1f:89:a9:cb:e7:ce:53:85: 3a:20:25:3e:d8:c8:84:b3:75:f9:27:43:98:70:6b:b5:17:ce: 04:c7:f2:29:6a:69:5c:05:30:c4:d8:f8:26:8c:d3:c6:66:6f: b1:7a:bf:e1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZr9/8bs9BYb03uTXkDzt+mWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmN2E0N2JlNzczYThjYWQ2ZDc1OTgwZTczOWI3ODQxYWQ0 ZDliOTEwHhcNMjUxMjA4MTI0NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTE4NDJjZWRlMDhhNmE4NGUzNjljNDg0NmMwN2Q1YmEwMTcxMDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7+SfQy2sn7SKIkr0jWeraFYdmV3 SlHL4c/Qd/LWSiojEPsFU9FqUfN8HinruqQsLJ6/orYxSoxt6ov39YbX+lsC1T5B P65/oLssL755LDKjzqGhZ2sJx27IuOuTIqUO4i49o/gSqTuS2wfby/x3+0pW/IoJ z8ZQdpt2MYnj7/jOJTEkgEhz4K2DQ1qTaWvBZkHcsmcrNi9umys/g7HEdmjukxbh 3rAuaR0eOVODcLjtD4H+Ufcp/J3iftUG4Kh4oh1Xy4Pp8OYFl+fIT/5uAEQMLxLs MxxW7+LY/JgidPv6Wa/YIG3raBZrS/uie4xVGK3XkuMgTYoRMaT65X6KkQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMoYQs7eCKaoTjacSEbAfVugFxBmMB8GA1UdIwQY MBaAFJ96R753OoytbXWYDnObeEGtTZuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjNwSHZuYzZqSzF0ZFpnT2M1dDRRYTFObTVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81OWExMmMtY2M3Zi00MjcxLTgzMWEt ZTdmMmMwN2ZjMGY4LzEveWhoQ3p0NElwcWhPTnB4SVJzQjlXNkFYRUdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi81OWExMmMtY2M3Zi00MjcxLTgzMWEtZTdmMmMwN2ZjMGY4 LzEvbjNwSHZuYzZqSzF0ZFpnT2M1dDRRYTFObTVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBLhMEMA0E AgACMAcDBQAqAXBAMA0GCSqGSIb3DQEBCwUAA4IBAQB3FIeDH/b0aeC5DFUwqoRd i92p3MZ8drXYycwjrX2DrKOcZvPTq7h0x7qPL8nvhYKlyuml4BguqJeaA2dESUjD 6TTTH9nNMg1kWMVHjf7tK+JjxtLmb0rzL4ikraE6Q73vKR4595OuA5NBQYNBaEeo jiIaFKHjQrViNhs9HBSTfdTwankbplTrJ2utvKzcoNM6ieFzcnbQ5AzXF7DPsQ6o OAmcNjSsQiLHBehpKrrP0RrAkRWbrqJAHpYmuIltSKEDN7FGDrFhbI53sxP6ZBC7 H4mpy+fOU4U6ICU+2MiEs3X5J0OYcGu1F84Ex/IpamlcBTDE2PgmjNPGZm+xer/h -----END CERTIFICATE-----Generated at Tue Dec 16 13:55:45 2025 by rpki-client