This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/g0YY92HB-YCWattx6T8fl_ciHpI.roa File: g0YY92HB-YCWattx6T8fl_ciHpI.roa (raw, json) Hash identifier: CIxIPtHnsGF+NrFcvjJ6L8NOhuchaSB3MXm80vdXxTU= Subject key identifier: 83:46:18:F7:61:C1:F9:80:96:6A:DB:71:E9:3F:1F:97:F7:22:1E:92 Certificate issuer: /CN=93503061e1ae503ec63d970b30875dd93ffabbdf Certificate serial: 019A785092D254B2DA6BC1408FDBF1DFBC4F Authority key identifier: 93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/g0YY92HB-YCWattx6T8fl_ciHpI.roa Signing time: Wed 12 Nov 2025 13:45:37 +0000 ROA not before: Wed 12 Nov 2025 13:45:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206834 IP address blocks: 185.53.179.0/24 maxlen: 24 2a01:bb20:2000::/36 maxlen: 36 2a01:bb20:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:50:92:d2:54:b2:da:6b:c1:40:8f:db:f1:df:bc:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93503061e1ae503ec63d970b30875dd93ffabbdf Validity Not Before: Nov 12 13:45:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=834618f761c1f980966adb71e93f1f97f7221e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:06:a8:50:cf:be:31:46:35:e4:5f:7a:aa:64: b7:4d:f1:3a:f1:cd:2a:7b:a2:38:7d:3c:e5:b2:f9: 0d:08:97:e9:7a:95:b2:d6:59:e1:a5:26:59:01:f2: 0e:b3:8b:b8:ea:06:0e:93:c4:7b:2c:fc:37:ab:a8: f2:eb:8f:49:3b:8a:ab:5d:ec:d0:27:cf:02:3c:46: d1:13:ce:db:8a:a9:fa:ae:3b:d7:b7:51:ae:8f:8f: e2:75:6f:af:af:48:8f:4a:bb:5c:18:9b:03:7d:a1: 42:e8:26:af:ab:c3:40:6c:f5:bd:3f:f0:56:c0:5d: 7b:6c:d1:c5:b2:8c:ce:a8:d4:9a:c4:f9:c8:b2:69: 4d:08:8c:94:07:94:53:82:5d:61:65:ce:01:a1:01: 61:c9:d4:9e:6b:f4:08:b5:72:4b:b9:00:4f:4c:35: c3:6e:7b:d2:76:db:6c:c9:e7:b4:4c:2d:44:e7:0d: b1:74:74:97:10:8f:2d:6e:20:35:e0:9d:0e:e7:1b: 7d:2f:16:45:fe:8c:f5:9b:40:e9:94:5c:91:ed:3d: 5b:31:c6:c0:58:28:83:0e:e4:14:52:3c:11:60:85: b3:45:66:9f:d5:23:3d:45:55:d0:6c:06:da:1e:76: f5:0c:98:37:0f:7e:31:ef:dc:44:d0:f5:fc:d5:1f: 99:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:46:18:F7:61:C1:F9:80:96:6A:DB:71:E9:3F:1F:97:F7:22:1E:92 X509v3 Authority Key Identifier: keyid:93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/g0YY92HB-YCWattx6T8fl_ciHpI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.53.179.0/24 IPv6: 2a01:bb20:2000::/35 Signature Algorithm: sha256WithRSAEncryption b0:03:f4:16:17:32:c3:ea:bb:5d:18:45:84:c9:31:93:f8:17: b4:8f:11:2d:6e:67:03:63:f0:e6:10:ba:16:5d:ff:e6:af:28: 0d:bc:6f:c5:00:38:52:9a:1e:5b:ce:94:1f:95:b8:9e:9a:13: 2b:ae:90:87:91:71:9c:77:b6:9e:d4:85:fb:62:6a:a2:a4:5c: de:a4:99:4d:82:eb:d9:ee:ba:61:bc:5d:63:9e:8d:84:ee:dd: 3f:e2:ca:0d:8b:87:6a:bd:b1:51:9a:8e:65:f5:09:e9:be:a5: ec:62:cd:fd:42:33:a3:c2:ab:06:0d:eb:87:08:32:9b:4b:48: ec:cf:e4:10:f2:73:e7:94:7a:c3:77:02:56:53:71:6c:f4:69: 5f:75:57:3d:4c:d3:10:89:5e:4d:aa:38:e4:bf:a1:60:27:38: 18:5c:d3:c8:9f:a9:02:a4:e3:95:57:7b:3d:6a:19:01:00:87: 04:9a:3f:13:0b:29:8e:a5:92:8b:6b:42:89:1d:d0:e7:b3:dc: 37:55:e8:e5:4c:c2:64:5d:f7:61:b8:b1:6c:7c:09:aa:b6:d6: 1b:f2:de:b6:6e:d5:df:38:1a:4c:b4:bb:af:10:79:e9:99:71: 2c:f7:22:e2:ce:81:6c:03:ad:76:00:63:f9:93:27:b3:45:aa: ce:b7:c4:5d -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZp4UJLSVLLaa8FAj9vx37xPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNTAzMDYxZTFhZTUwM2VjNjNkOTcwYjMwODc1ZGQ5M2Zm YWJiZGYwHhcNMjUxMTEyMTM0NTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzQ2MThmNzYxYzFmOTgwOTY2YWRiNzFlOTNmMWY5N2Y3MjIxZTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgaoUM++MUY15F96qmS3TfE68c0q e6I4fTzlsvkNCJfpepWy1lnhpSZZAfIOs4u46gYOk8R7LPw3q6jy649JO4qrXezQ J88CPEbRE87biqn6rjvXt1Guj4/idW+vr0iPSrtcGJsDfaFC6Cavq8NAbPW9P/BW wF17bNHFsozOqNSaxPnIsmlNCIyUB5RTgl1hZc4BoQFhydSea/QItXJLuQBPTDXD bnvSdttsyee0TC1E5w2xdHSXEI8tbiA14J0O5xt9LxZF/oz1m0DplFyR7T1bMcbA WCiDDuQUUjwRYIWzRWaf1SM9RVXQbAbaHnb1DJg3D34x79xE0PX81R+ZUQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFINGGPdhwfmAlmrbcek/H5f3Ih6SMB8GA1UdIwQY MBaAFJNQMGHhrlA+xj2XCzCHXdk/+rvfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazFBd1llR3VVRDdHUFpjTE1JZGQyVF82dTk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hNzZhYzEtNWYyMi00N2QxLWI4YzEt YzYyM2VkOGYyZjI4LzEvZzBZWTkySEItWUNXYXR0eDZUOGZsX2NpSHBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9hNzZhYzEtNWYyMi00N2QxLWI4YzEtYzYyM2VkOGYyZjI4 LzEvazFBd1llR3VVRDdHUFpjTE1JZGQyVF82dTk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAuTWzMA4E AgACMAgDBgUqAbsgIDANBgkqhkiG9w0BAQsFAAOCAQEAsAP0Fhcyw+q7XRhFhMkx k/gXtI8RLW5nA2Pw5hC6Fl3/5q8oDbxvxQA4UpoeW86UH5W4npoTK66Qh5FxnHe2 ntSF+2JqoqRc3qSZTYLr2e66YbxdY56NhO7dP+LKDYuHar2xUZqOZfUJ6b6l7GLN /UIzo8KrBg3rhwgym0tI7M/kEPJz55R6w3cCVlNxbPRpX3VXPUzTEIleTao45L+h YCc4GFzTyJ+pAqTjlVd7PWoZAQCHBJo/EwspjqWSi2tCiR3Q57PcN1Xo5UzCZF33 YbixbHwJqrbWG/Letm7V3zgaTLS7rxB56ZlxLPci4s6BbAOtdgBj+ZMns0WqzrfE XQ== -----END CERTIFICATE-----Generated at Sat Nov 22 21:53:47 2025 by rpki-client