This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/Ywf4tG-Rigcqa8HX7aZrd5b3TQ8.roa File: Ywf4tG-Rigcqa8HX7aZrd5b3TQ8.roa (raw, json) Hash identifier: gbpmp9sOw0ELAE4p2v2T5NOLdq9kFVgvXjj906Dwz6k= Subject key identifier: 63:07:F8:B4:6F:91:8A:07:2A:6B:C1:D7:ED:A6:6B:77:96:F7:4D:0F Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B0386450A5BE52E67B334BB33A57BB0B4 Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/Ywf4tG-Rigcqa8HX7aZrd5b3TQ8.roa Signing time: Tue 09 Dec 2025 14:31:29 +0000 ROA not before: Tue 09 Dec 2025 14:31:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49070 IP address blocks: 178.170.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:86:45:0a:5b:e5:2e:67:b3:34:bb:33:a5:7b:b0:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Dec 9 14:31:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6307f8b46f918a072a6bc1d7eda66b7796f74d0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:41:f3:05:5e:cc:e2:81:d9:b0:ad:92:9f:df: 6a:05:a2:70:24:1b:56:f3:e7:94:8d:04:01:3c:91: 4e:60:e4:88:a1:63:32:e8:90:4c:72:c7:3a:fe:9a: fb:1e:7c:07:09:9c:17:47:78:da:6d:46:16:46:c9: b1:06:f2:9d:c4:e0:28:7c:d5:e6:2a:98:ba:d5:bd: 2a:3a:52:f1:08:12:3d:18:80:11:63:2b:9f:2f:95: d9:d1:e2:fa:99:5f:7e:96:5c:e5:f8:fe:b0:29:cd: 1a:66:44:84:62:b0:f7:61:18:fe:c7:01:b7:36:94: a7:db:b0:48:9a:85:29:81:08:9c:54:a1:c4:4a:c4: 73:47:c3:bc:b4:ad:23:3c:b9:b3:09:b8:43:a3:a4: 37:c2:b5:be:90:c9:30:39:e4:d5:3e:55:55:a4:79: 75:4d:dc:99:c9:64:14:71:d1:4a:ad:1d:16:a9:96: de:6e:a3:8e:fb:ff:16:e0:92:3d:ab:9e:f6:35:e5: e5:f1:74:bc:c5:c3:b5:84:4c:e6:48:0b:1e:b5:28: ab:9a:cf:8e:c9:ef:72:30:2c:7c:31:dc:23:ee:18: c1:1e:0a:bd:4c:e4:59:5b:b9:86:28:43:e6:4e:6b: 81:b8:b1:ec:81:5b:01:39:fb:60:44:2a:e3:04:25: 3c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:07:F8:B4:6F:91:8A:07:2A:6B:C1:D7:ED:A6:6B:77:96:F7:4D:0F X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/Ywf4tG-Rigcqa8HX7aZrd5b3TQ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.170.235.0/24 Signature Algorithm: sha256WithRSAEncryption 42:6c:16:2e:97:fd:a2:ef:05:29:61:3e:13:d6:92:d1:9c:b9: 68:f9:92:71:ab:60:21:9e:38:73:de:7d:4c:b2:b6:44:6a:3f: 4b:ea:41:a8:74:e2:5f:58:e7:95:8b:11:2a:ea:35:18:15:ee: 13:ee:d3:6e:bf:bc:53:b6:97:61:41:b7:4a:71:e1:89:8f:2e: b3:1a:7f:e7:52:8c:a2:05:63:ed:49:b8:e8:6a:75:a2:b8:e7: 1f:16:58:c8:2c:71:06:02:90:14:d9:41:85:3d:ce:dc:95:e5: a2:42:d7:8a:6e:81:08:4d:c1:d4:7d:13:ae:cf:63:a0:ec:a0: f8:55:2a:11:97:4b:eb:ca:8f:b0:54:39:09:34:a2:72:da:cb: 6f:4f:88:4b:c7:1a:30:44:04:87:25:b5:d3:82:90:8c:ec:c7: 0e:06:63:7a:ad:16:f2:f3:bf:10:db:ed:74:d5:4c:23:df:9f: e0:c7:4c:c8:01:ee:b6:f6:29:60:71:ee:c5:76:9e:cb:73:c8: a1:d7:65:c9:be:f4:ef:32:37:65:dc:9e:d6:0b:1c:f6:35:73: fc:46:c9:e0:58:93:17:bf:f5:c4:cf:8e:02:35:34:a8:95:21: 26:5c:d5:d2:69:88:ed:17:5a:e5:e4:ed:c8:43:ce:81:18:0f: 81:b8:aa:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsDhkUKW+UuZ7M0uzOle7C0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjUxMjA5MTQzMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzA3ZjhiNDZmOTE4YTA3MmE2YmMxZDdlZGE2NmI3Nzk2Zjc0ZDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUHzBV7M4oHZsK2Sn99qBaJwJBtW 8+eUjQQBPJFOYOSIoWMy6JBMcsc6/pr7HnwHCZwXR3jabUYWRsmxBvKdxOAofNXm Kpi61b0qOlLxCBI9GIARYyufL5XZ0eL6mV9+llzl+P6wKc0aZkSEYrD3YRj+xwG3 NpSn27BImoUpgQicVKHESsRzR8O8tK0jPLmzCbhDo6Q3wrW+kMkwOeTVPlVVpHl1 TdyZyWQUcdFKrR0WqZbebqOO+/8W4JI9q572NeXl8XS8xcO1hEzmSAsetSirms+O ye9yMCx8Mdwj7hjBHgq9TORZW7mGKEPmTmuBuLHsgVsBOftgRCrjBCU8UQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGMH+LRvkYoHKmvB1+2ma3eW900PMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvWXdmNHRHLVJpZ2NxYThIWDdhWnJkNWIzVFE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsqrrMA0G CSqGSIb3DQEBCwUAA4IBAQBCbBYul/2i7wUpYT4T1pLRnLlo+ZJxq2Ahnjhz3n1M srZEaj9L6kGodOJfWOeVixEq6jUYFe4T7tNuv7xTtpdhQbdKceGJjy6zGn/nUoyi BWPtSbjoanWiuOcfFljILHEGApAU2UGFPc7cleWiQteKboEITcHUfROuz2Og7KD4 VSoRl0vryo+wVDkJNKJy2stvT4hLxxowRASHJbXTgpCM7McOBmN6rRby878Q2+10 1Uwj35/gx0zIAe629ilgce7Fdp7Lc8ih12XJvvTvMjdl3J7WCxz2NXP8RsngWJMX v/XEz44CNTSolSEmXNXSaYjtF1rl5O3IQ86BGA+BuKpm -----END CERTIFICATE-----Generated at Wed Dec 10 10:36:16 2025 by rpki-client