This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/Y6IsSQFH-5TdXfl4QIbDE9L9Rdo.roa File: Y6IsSQFH-5TdXfl4QIbDE9L9Rdo.roa (raw, json) Hash identifier: MetjRxXUXJLB1gnLx6nfjI+l+2EmfCeYOO3l9CpLgtw= Subject key identifier: 63:A2:2C:49:01:47:FB:94:DD:5D:F9:78:40:86:C3:13:D2:FD:45:DA Certificate issuer: /CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1 Certificate serial: 019B0E1759ED9026DADA2B1BAFAC27801665 Authority key identifier: AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/Y6IsSQFH-5TdXfl4QIbDE9L9Rdo.roa Signing time: Thu 11 Dec 2025 15:46:09 +0000 ROA not before: Thu 11 Dec 2025 15:46:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215559 IP address blocks: 45.129.166.0/24 maxlen: 24 2a13:1140::/29 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:17:59:ed:90:26:da:da:2b:1b:af:ac:27:80:16:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1 Validity Not Before: Dec 11 15:46:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=63a22c490147fb94dd5df9784086c313d2fd45da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:88:63:84:8f:fa:f7:a8:a6:bc:69:c2:44:26: 13:7d:90:07:ee:ab:67:f3:86:9e:75:8d:64:2d:1d: 5e:91:4c:8a:7a:c7:d3:78:25:df:f7:fc:98:7f:01: 12:07:c9:d3:97:ab:ad:17:7b:c0:7e:f0:cf:8c:cf: 2c:6a:03:8a:cb:57:11:21:87:c5:88:93:7e:76:14: ad:26:aa:7a:ec:dc:09:ed:01:8c:a9:d1:46:38:6d: e8:08:0e:44:81:9b:17:b8:c1:c9:f7:fe:a0:32:ab: b0:3f:eb:b0:97:4b:78:3a:a9:58:06:a1:11:37:0e: 4f:9a:6e:76:8f:01:84:36:82:75:42:57:ae:b5:1e: ad:11:05:8c:4b:0b:04:f0:6e:3f:e5:2c:7c:10:5b: 34:9b:74:c9:0e:73:53:dc:36:39:dc:17:af:d9:b9: bc:eb:9c:03:99:27:0c:e7:ed:20:ea:8e:f7:5e:0d: 75:33:95:e1:69:95:da:cb:e8:24:a7:0b:56:9f:b9: 35:6b:b4:dc:cb:ce:fe:1f:93:fb:42:6b:67:7c:33: 22:a7:bb:d5:55:cf:42:e1:63:45:c0:c5:17:42:38: 88:ed:59:31:f6:d6:87:d4:14:46:f4:e8:63:11:3b: 78:12:8f:de:84:30:e8:04:30:3b:aa:42:61:47:85: 94:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A2:2C:49:01:47:FB:94:DD:5D:F9:78:40:86:C3:13:D2:FD:45:DA X509v3 Authority Key Identifier: keyid:AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/Y6IsSQFH-5TdXfl4QIbDE9L9Rdo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.166.0/24 IPv6: 2a13:1140::/29 Signature Algorithm: sha256WithRSAEncryption 5e:d8:e9:97:45:43:20:4f:96:bd:20:bf:2b:81:c0:73:d5:d4: d6:84:4e:e0:2f:e5:64:53:00:05:f9:4b:fb:7b:0e:1a:a1:3b: c3:e2:f5:c5:f4:03:15:fe:ff:69:9e:29:5a:9e:31:34:de:60: e8:d2:3f:ab:d4:dc:c3:60:8e:68:7e:8d:0a:3f:a1:8c:43:d3: 69:5f:81:15:35:34:fa:ea:e3:8b:e4:27:80:bd:52:90:00:22: 06:06:37:48:0f:9c:b6:a0:0d:4f:3a:d8:95:50:31:23:39:2d: 49:f7:ab:59:03:ff:48:b5:52:a4:e0:7d:97:53:26:56:da:21: 71:28:2b:88:0f:aa:01:b9:03:11:a0:36:bf:49:c6:ac:7c:ed: 45:9c:02:13:dc:b9:37:63:3c:3a:55:11:c7:58:7d:f1:c2:76: 9b:cb:e5:12:43:8f:03:32:c4:22:6d:5c:81:9a:30:da:1e:54: 4c:4c:79:7a:4d:66:39:61:e8:9a:18:c1:c1:39:2e:23:49:db: 13:e0:84:27:f3:ef:73:45:61:72:43:c8:31:81:8c:1f:1d:9f: 40:70:74:21:3c:2e:8a:2a:86:a2:c6:7c:29:b4:e0:06:b5:cc: 54:bf:32:ea:fa:7a:cf:17:ea:93:a8:c8:03:44:ec:86:68:04: eb:4e:9c:9f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZsOF1ntkCba2isbr6wngBZlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZWRjM2E2M2RmMTdiYjRiZjM0NTYwOTU3OTY3ZTU5YThi M2UzYTEwHhcNMjUxMjExMTU0NjA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2EyMmM0OTAxNDdmYjk0ZGQ1ZGY5Nzg0MDg2YzMxM2QyZmQ0NWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4hjhI/696imvGnCRCYTfZAH7qtn 84aedY1kLR1ekUyKesfTeCXf9/yYfwESB8nTl6utF3vAfvDPjM8sagOKy1cRIYfF iJN+dhStJqp67NwJ7QGMqdFGOG3oCA5EgZsXuMHJ9/6gMquwP+uwl0t4OqlYBqER Nw5Pmm52jwGENoJ1QleutR6tEQWMSwsE8G4/5Sx8EFs0m3TJDnNT3DY53Bev2bm8 65wDmScM5+0g6o73Xg11M5XhaZXay+gkpwtWn7k1a7Tcy87+H5P7QmtnfDMip7vV Vc9C4WNFwMUXQjiI7Vkx9taH1BRG9OhjETt4Eo/ehDDoBDA7qkJhR4WUtwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGOiLEkBR/uU3V35eECGwxPS/UXaMB8GA1UdIwQY MBaAFK/tw6Y98Xu0vzRWCVeWflmos+OhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvci0zRHBqM3hlN1NfTkZZSlY1Wi1XYWl6NDZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi84MjRkOGQtYjA0Ni00NmY2LTg2Yjgt OWI4YWNlNDI4MWYzLzEvWTZJc1NRRkgtNVRkWGZsNFFJYkRFOUw5UmRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi84MjRkOGQtYjA0Ni00NmY2LTg2YjgtOWI4YWNlNDI4MWYz LzEvci0zRHBqM3hlN1NfTkZZSlY1Wi1XYWl6NDZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALYGmMA0E AgACMAcDBQMqExFAMA0GCSqGSIb3DQEBCwUAA4IBAQBe2OmXRUMgT5a9IL8rgcBz 1dTWhE7gL+VkUwAF+Uv7ew4aoTvD4vXF9AMV/v9pnilanjE03mDo0j+r1NzDYI5o fo0KP6GMQ9NpX4EVNTT66uOL5CeAvVKQACIGBjdID5y2oA1POtiVUDEjOS1J96tZ A/9ItVKk4H2XUyZW2iFxKCuID6oBuQMRoDa/ScasfO1FnAIT3Lk3Yzw6VRHHWH3x wnaby+USQ48DMsQibVyBmjDaHlRMTHl6TWY5YeiaGMHBOS4jSdsT4IQn8+9zRWFy Q8gxgYwfHZ9AcHQhPC6KKoaixnwptOAGtcxUvzLq+nrPF+qTqMgDROyGaATrTpyf -----END CERTIFICATE-----Generated at Wed Dec 17 04:10:13 2025 by rpki-client