This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/yiXXrhyaxhfXatKc7_bNkH_M4s8.roa File: yiXXrhyaxhfXatKc7_bNkH_M4s8.roa (raw, json) Hash identifier: YP3DGPhdtNaty3/6AwBCjMpCva/9gdYAELImTQKnPzg= Subject key identifier: CA:25:D7:AE:1C:9A:C6:17:D7:6A:D2:9C:EF:F6:CD:90:7F:CC:E2:CF Certificate issuer: /CN=a42a9ef62b0c2bf1d3416539b2a04a26598c2c43 Certificate serial: 019B366E9076CA069054CB6388F8008C2B4D Authority key identifier: A4:2A:9E:F6:2B:0C:2B:F1:D3:41:65:39:B2:A0:4A:26:59:8C:2C:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/yiXXrhyaxhfXatKc7_bNkH_M4s8.roa Signing time: Fri 19 Dec 2025 11:46:14 +0000 ROA not before: Fri 19 Dec 2025 11:46:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43406 IP address blocks: 91.102.80.0/21 maxlen: 21 94.230.96.0/20 maxlen: 20 178.16.192.0/20 maxlen: 20 185.34.120.0/22 maxlen: 22 2a01:bc00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:6e:90:76:ca:06:90:54:cb:63:88:f8:00:8c:2b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a42a9ef62b0c2bf1d3416539b2a04a26598c2c43 Validity Not Before: Dec 19 11:46:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ca25d7ae1c9ac617d76ad29ceff6cd907fcce2cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:df:09:64:e6:65:c7:63:39:ab:9b:e7:57:34: ac:e0:c5:07:af:c5:5e:67:9a:8e:da:8a:34:d9:1f: 91:98:71:67:44:73:c1:4f:51:26:b6:64:c4:76:b9: df:13:90:03:11:ff:3d:96:7a:0e:63:f0:51:d5:ea: e4:4f:de:86:aa:d1:20:a2:94:0d:10:48:24:b6:dd: c7:81:f2:6c:9d:31:7c:65:9c:d3:c9:fc:44:bb:f2: 9f:dc:85:70:c0:f4:01:5a:03:53:6b:93:0e:7b:c1: 0a:aa:e6:f8:06:3f:1b:0d:6a:e4:5d:9a:86:ef:9d: 78:4c:38:7b:e5:be:2a:bf:20:48:8c:81:55:40:d3: f7:80:33:1f:6e:4f:47:5d:54:00:ea:76:ab:fb:89: 54:2a:b7:3d:08:bb:78:b3:9a:cc:ad:23:05:bc:ba: e2:f7:24:34:e5:96:e4:a4:8b:78:4c:59:f3:7d:97: f3:c5:85:88:75:ec:24:4c:f0:48:fd:3c:a0:4d:ad: 4a:ec:d3:c1:d4:a1:1c:58:7d:a1:d0:eb:57:84:0e: 33:32:75:24:e0:ce:18:57:71:79:71:77:9c:30:24: f5:8d:8a:7d:15:ae:f3:af:e8:7e:99:70:42:30:ef: 63:2c:bf:6b:b6:6a:04:3e:60:d9:85:3d:f5:31:8f: 63:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:25:D7:AE:1C:9A:C6:17:D7:6A:D2:9C:EF:F6:CD:90:7F:CC:E2:CF X509v3 Authority Key Identifier: keyid:A4:2A:9E:F6:2B:0C:2B:F1:D3:41:65:39:B2:A0:4A:26:59:8C:2C:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/yiXXrhyaxhfXatKc7_bNkH_M4s8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.102.80.0/21 94.230.96.0/20 178.16.192.0/20 185.34.120.0/22 IPv6: 2a01:bc00::/29 Signature Algorithm: sha256WithRSAEncryption 45:b7:04:9c:92:82:d0:34:b0:f6:bb:5f:a0:ff:bb:04:70:86: 60:34:b4:21:7b:67:a8:2c:a8:71:28:9f:0c:f6:c3:55:81:4b: 35:19:be:e0:d9:57:8c:99:fb:fc:70:20:ec:49:d0:fb:d4:9a: 4a:a7:59:ee:eb:a1:3b:66:33:ae:5a:39:b6:43:98:4a:16:fa: 67:77:63:b6:3e:ba:f3:4e:0e:76:aa:95:ae:1b:24:ab:10:79: b8:d5:b9:ee:c7:e9:0c:01:cc:56:33:81:f0:a5:a5:59:17:78: 4e:5e:9b:96:35:d1:18:90:7d:c9:87:8c:39:6b:d4:ee:f9:47: 24:50:57:13:f4:7c:28:43:e6:52:4f:2a:66:69:e0:fb:26:54: 04:60:27:09:b7:bb:c9:7f:3a:f0:22:58:d9:37:ff:4e:88:7c: fa:a8:be:d5:52:fc:da:0c:f4:86:6d:45:d9:bf:29:bd:0f:7f: fd:1a:b8:c2:0f:09:e7:6f:12:f5:c2:11:9c:f0:9a:32:0f:91: 84:e6:b8:e4:ca:0e:75:a2:6f:e9:1e:b5:31:b2:5c:b8:08:f5: b8:d3:a2:1d:44:b9:5a:e5:92:55:d3:05:85:89:13:27:b7:e7: 23:05:72:3e:17:cd:36:47:25:d2:d6:a5:d2:d0:e6:6e:e7:18: 91:49:fd:d1 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZs2bpB2ygaQVMtjiPgAjCtNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MmE5ZWY2MmIwYzJiZjFkMzQxNjUzOWIyYTA0YTI2NTk4 YzJjNDMwHhcNMjUxMjE5MTE0NjE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTI1ZDdhZTFjOWFjNjE3ZDc2YWQyOWNlZmY2Y2Q5MDdmY2NlMmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN8JZOZlx2M5q5vnVzSs4MUHr8Ve Z5qO2oo02R+RmHFnRHPBT1EmtmTEdrnfE5ADEf89lnoOY/BR1erkT96GqtEgopQN EEgktt3HgfJsnTF8ZZzTyfxEu/Kf3IVwwPQBWgNTa5MOe8EKqub4Bj8bDWrkXZqG 7514TDh75b4qvyBIjIFVQNP3gDMfbk9HXVQA6nar+4lUKrc9CLt4s5rMrSMFvLri 9yQ05ZbkpIt4TFnzfZfzxYWIdewkTPBI/TygTa1K7NPB1KEcWH2h0OtXhA4zMnUk 4M4YV3F5cXecMCT1jYp9Fa7zr+h+mXBCMO9jLL9rtmoEPmDZhT31MY9jNwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFMol164cmsYX12rSnO/2zZB/zOLPMB8GA1UdIwQY MBaAFKQqnvYrDCvx00FlObKgSiZZjCxDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcENxZTlpc01LX0hUUVdVNXNxQktKbG1NTEVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8yZDUyYWUtMzkyOC00NDllLTg2ZWIt NjZmMDUzZjZhNGY4LzEveWlYWHJoeWF4aGZYYXRLYzdfYk5rSF9NNHM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8yZDUyYWUtMzkyOC00NDllLTg2ZWItNjZmMDUzZjZhNGY4 LzEvcENxZTlpc01LX0hUUVdVNXNxQktKbG1NTEVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDW2ZQAwQE XuZgAwQEshDAAwQCuSJ4MA0EAgACMAcDBQMqAbwAMA0GCSqGSIb3DQEBCwUAA4IB AQBFtwSckoLQNLD2u1+g/7sEcIZgNLQhe2eoLKhxKJ8M9sNVgUs1Gb7g2VeMmfv8 cCDsSdD71JpKp1nu66E7ZjOuWjm2Q5hKFvpnd2O2PrrzTg52qpWuGySrEHm41bnu x+kMAcxWM4HwpaVZF3hOXpuWNdEYkH3Jh4w5a9Tu+UckUFcT9HwoQ+ZSTypmaeD7 JlQEYCcJt7vJfzrwIljZN/9OiHz6qL7VUvzaDPSGbUXZvym9D3/9GrjCDwnnbxL1 whGc8JoyD5GE5rjkyg51om/pHrUxsly4CPW406IdRLla5ZJV0wWFiRMnt+cjBXI+ F802RyXS1qXS0OZu5xiRSf3R -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:14 2025 by rpki-client