This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/y1QEMoAn1kbEgcrMGhdz3gpbrMM.roa File: y1QEMoAn1kbEgcrMGhdz3gpbrMM.roa (raw, json) Hash identifier: bGE9K9rLblLDT6IpFR02k1OFchHvzU4YEP8dOSUQVvM= Subject key identifier: CB:54:04:32:80:27:D6:46:C4:81:CA:CC:1A:17:73:DE:0A:5B:AC:C3 Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019AA0C1EE73FE63D9B36862153B2DBEF164 Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/y1QEMoAn1kbEgcrMGhdz3gpbrMM.roa Signing time: Thu 20 Nov 2025 10:14:15 +0000 ROA not before: Thu 20 Nov 2025 10:14:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 395793 IP address blocks: 155.254.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 21:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:c1:ee:73:fe:63:d9:b3:68:62:15:3b:2d:be:f1:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Nov 20 10:14:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cb5404328027d646c481cacc1a1773de0a5bacc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:13:12:90:ff:85:ca:af:29:82:71:dc:c4:7a: 15:f3:6b:cd:bb:28:f7:08:64:93:0d:06:0b:22:b5: 5b:19:31:25:8d:1e:ab:0b:49:9a:39:16:9b:13:59: 19:7b:58:2b:dc:77:e3:e4:bb:72:7f:ea:af:74:16: 9b:fc:db:00:35:32:01:27:87:04:b5:71:53:d9:43: 66:2d:1a:72:fa:5f:c5:79:7d:47:9a:e1:e4:58:bc: e8:d4:1d:6d:89:74:52:28:89:f2:34:2e:c6:79:cc: 9c:8f:fc:dd:09:99:c7:c4:70:df:75:22:10:0f:64: 55:db:8b:07:fc:5a:7d:89:0e:2c:d9:18:76:22:6d: ef:56:6c:d6:fb:b3:26:1f:81:bd:82:d2:9f:d3:ff: 20:f9:11:fc:a0:a0:03:8e:3c:91:8d:d4:08:33:a0: 4f:f4:32:de:d6:22:6e:0b:64:42:aa:76:e2:f2:0e: 39:d5:26:27:75:2e:f9:6a:60:6b:8f:61:c0:d5:e2: 19:32:26:43:21:8b:9e:f0:bc:18:96:1e:18:b4:84: f3:60:8d:8a:7c:52:4b:bf:4d:df:b9:c9:57:c1:18: df:40:69:8a:81:f8:d5:c7:d3:31:76:6b:93:69:b8: d5:1c:54:6f:17:30:16:3e:8b:85:8a:ba:9f:72:12: f8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:54:04:32:80:27:D6:46:C4:81:CA:CC:1A:17:73:DE:0A:5B:AC:C3 X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/y1QEMoAn1kbEgcrMGhdz3gpbrMM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.254.112.0/21 Signature Algorithm: sha256WithRSAEncryption 0d:19:3b:01:f9:54:c5:6d:f2:9d:c0:cb:15:8a:6b:7f:67:6c: 7a:fd:04:71:f8:01:6e:9f:95:a4:f4:f0:41:a5:ca:eb:6a:9f: 4e:48:a3:6c:a7:ff:06:a2:13:9f:2c:1d:68:bc:51:43:b4:65: 9d:bc:f5:fc:b9:c7:a5:4a:f2:b2:89:a5:19:15:f7:ab:f8:92: f3:39:87:62:34:1e:a4:f9:5f:f6:f7:79:df:11:b9:d8:a7:c1: 2d:69:52:8a:20:6f:4d:4d:33:ea:27:88:f2:da:ab:f4:0c:04: df:e4:3a:f3:98:59:7d:c6:cd:c9:a4:8f:51:b0:96:ca:6c:58: 15:d0:e7:e5:40:fd:7e:d0:02:74:72:9d:af:9d:7b:a3:1e:6d: 31:7c:da:bd:0a:02:00:ff:ae:de:fe:28:d1:bb:7e:15:d7:a9: 1e:e2:ce:55:04:1e:45:bb:aa:cd:10:25:e2:01:03:c7:23:81: 53:73:09:6c:7b:6a:a2:1d:f1:1d:47:68:16:8b:e1:74:d1:ce: f9:88:88:58:b5:2f:c9:21:94:96:6c:1e:f2:84:96:07:48:14: e7:58:ab:8d:c0:f3:6b:c4:90:15:07:a8:f9:f0:d9:96:d9:be: 33:3c:80:14:f6:91:dd:3a:ff:f3:04:81:c4:79:02:00:d4:b1: 97:7e:33:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqgwe5z/mPZs2hiFTstvvFkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjUxMTIwMTAxNDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjU0MDQzMjgwMjdkNjQ2YzQ4MWNhY2MxYTE3NzNkZTBhNWJhY2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hMSkP+Fyq8pgnHcxHoV82vNuyj3 CGSTDQYLIrVbGTEljR6rC0maORabE1kZe1gr3Hfj5Ltyf+qvdBab/NsANTIBJ4cE tXFT2UNmLRpy+l/FeX1HmuHkWLzo1B1tiXRSKInyNC7Gecycj/zdCZnHxHDfdSIQ D2RV24sH/Fp9iQ4s2Rh2Im3vVmzW+7MmH4G9gtKf0/8g+RH8oKADjjyRjdQIM6BP 9DLe1iJuC2RCqnbi8g451SYndS75amBrj2HA1eIZMiZDIYue8LwYlh4YtITzYI2K fFJLv03fuclXwRjfQGmKgfjVx9MxdmuTabjVHFRvFzAWPouFirqfchL4ewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMtUBDKAJ9ZGxIHKzBoXc94KW6zDMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEveTFRRU1vQW4xa2JFZ2NyTUdoZHozZ3Bick1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDm/5wMA0G CSqGSIb3DQEBCwUAA4IBAQANGTsB+VTFbfKdwMsVimt/Z2x6/QRx+AFun5Wk9PBB pcrrap9OSKNsp/8GohOfLB1ovFFDtGWdvPX8ucelSvKyiaUZFfer+JLzOYdiNB6k +V/293nfEbnYp8EtaVKKIG9NTTPqJ4jy2qv0DATf5DrzmFl9xs3JpI9RsJbKbFgV 0OflQP1+0AJ0cp2vnXujHm0xfNq9CgIA/67e/ijRu34V16ke4s5VBB5Fu6rNECXi AQPHI4FTcwlse2qiHfEdR2gWi+F00c75iIhYtS/JIZSWbB7yhJYHSBTnWKuNwPNr xJAVB6j58NmW2b4zPIAU9pHdOv/zBIHEeQIA1LGXfjM6 -----END CERTIFICATE-----Generated at Sat Nov 29 07:11:52 2025 by rpki-client