This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jhykoP_xvS0tB4nE4X-PobUKKs8.roa File: jhykoP_xvS0tB4nE4X-PobUKKs8.roa (raw, json) Hash identifier: aWglGyCaTUIMqW+WHfBnXZbNRkZFSaAstR6XuqjGxTA= Subject key identifier: 8E:1C:A4:A0:FF:F1:BD:2D:2D:07:89:C4:E1:7F:8F:A1:B5:0A:2A:CF Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019AB5691B6D219ACDF5A8C909B20AFF3244 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jhykoP_xvS0tB4nE4X-PobUKKs8.roa Signing time: Mon 24 Nov 2025 10:29:15 +0000 ROA not before: Mon 24 Nov 2025 10:29:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 46261 IP address blocks: 5.253.38.0/24 maxlen: 24 45.15.143.0/24 maxlen: 24 45.92.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 09:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:69:1b:6d:21:9a:cd:f5:a8:c9:09:b2:0a:ff:32:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Nov 24 10:29:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8e1ca4a0fff1bd2d2d0789c4e17f8fa1b50a2acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:aa:20:ce:e4:2f:e5:42:61:39:88:f5:4e:46: 8f:8a:dc:c2:42:7b:14:45:b6:35:00:19:76:7d:8a: 1f:91:12:e5:08:fa:3a:cc:3e:a2:29:e6:10:89:22: cb:91:74:b9:80:26:15:de:bb:ab:d1:98:e0:9a:de: f4:72:dd:b9:49:cd:13:40:f6:d6:00:f2:f2:23:75: a9:14:d1:5b:e1:7a:af:0a:06:18:42:da:c1:d9:c2: 99:b9:35:0c:07:07:28:b5:7c:8d:94:77:d2:e7:66: 01:70:27:64:27:23:53:3a:93:c5:89:eb:16:27:b0: 4d:59:c3:74:ac:a4:7f:cd:db:c5:e9:ac:14:02:66: 73:63:b6:a2:d1:a7:28:98:b2:02:37:0f:a8:45:c8: b9:4a:ea:43:3e:94:45:68:ed:d0:c4:e0:34:47:cf: 43:85:12:54:5f:f5:56:00:0b:71:2d:e0:6b:87:66: 6e:ec:fe:25:59:a9:08:33:7f:97:52:42:87:01:0d: b7:30:c4:db:67:27:72:04:a5:f1:a7:6d:80:08:cb: f6:3f:90:6f:83:9c:04:3b:45:06:7b:59:87:a8:14: 4b:d2:13:a3:49:b5:08:f9:8c:55:bc:04:1b:b8:dd: dd:23:d6:38:8a:90:37:a1:f5:33:b6:87:ff:47:79: 12:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1C:A4:A0:FF:F1:BD:2D:2D:07:89:C4:E1:7F:8F:A1:B5:0A:2A:CF X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jhykoP_xvS0tB4nE4X-PobUKKs8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.38.0/24 45.15.143.0/24 45.92.195.0/24 Signature Algorithm: sha256WithRSAEncryption 24:e6:5e:1c:4c:b4:c6:1b:4c:92:33:9d:43:96:c3:85:e0:f8: c6:c4:1c:32:9c:a2:d8:04:e4:b1:71:35:1f:c3:8a:e1:49:42: b7:8a:9c:b1:6d:dc:af:b4:bb:6f:66:c5:d7:9c:a6:f7:0e:01: 53:a4:54:b6:00:56:36:a7:f4:14:71:8e:dd:15:35:1a:ad:ca: e1:fa:0c:64:1a:c6:f3:57:aa:a6:18:c4:56:01:1d:88:6d:39: be:77:13:c0:a1:2c:5e:c6:1d:fe:7b:a3:40:73:61:7d:6a:4d: 9b:e6:c6:b7:c0:71:5e:e3:f5:72:25:b8:43:b5:85:89:01:c6: 97:ea:a6:bd:f7:9c:c6:1e:f4:57:8d:6b:c9:35:61:2f:af:78: b5:94:22:f5:6b:bd:3a:10:1b:97:e7:a4:e8:94:08:83:41:99: 35:16:bf:a8:99:a7:a4:0b:70:2d:ad:de:73:25:1c:1c:ca:c0: ef:51:20:d6:37:5f:8f:f8:2f:fe:67:f4:bc:3e:9c:23:54:42: d4:b4:78:e1:3a:d8:aa:4b:df:67:98:36:72:6b:0b:e5:e7:4f: 7b:c3:45:59:14:0d:41:c9:34:d9:8d:a3:0a:69:ba:94:4b:5a: c6:a5:59:d7:fb:cc:32:b3:83:8a:97:52:29:c9:1d:9f:a1:c1: 47:e0:6c:89 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZq1aRttIZrN9ajJCbIK/zJEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjUxMTI0MTAyOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTFjYTRhMGZmZjFiZDJkMmQwNzg5YzRlMTdmOGZhMWI1MGEyYWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6ogzuQv5UJhOYj1TkaPitzCQnsU RbY1ABl2fYofkRLlCPo6zD6iKeYQiSLLkXS5gCYV3rur0Zjgmt70ct25Sc0TQPbW APLyI3WpFNFb4XqvCgYYQtrB2cKZuTUMBwcotXyNlHfS52YBcCdkJyNTOpPFiesW J7BNWcN0rKR/zdvF6awUAmZzY7ai0acomLICNw+oRci5SupDPpRFaO3QxOA0R89D hRJUX/VWAAtxLeBrh2Zu7P4lWakIM3+XUkKHAQ23MMTbZydyBKXxp22ACMv2P5Bv g5wEO0UGe1mHqBRL0hOjSbUI+YxVvAQbuN3dI9Y4ipA3ofUztof/R3kSPwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFI4cpKD/8b0tLQeJxOF/j6G1CirPMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvamh5a29QX3h2UzB0QjRuRTRYLVBvYlVLS3M4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABf0mAwQA LQ+PAwQALVzDMA0GCSqGSIb3DQEBCwUAA4IBAQAk5l4cTLTGG0ySM51DlsOF4PjG xBwynKLYBOSxcTUfw4rhSUK3ipyxbdyvtLtvZsXXnKb3DgFTpFS2AFY2p/QUcY7d FTUarcrh+gxkGsbzV6qmGMRWAR2IbTm+dxPAoSxexh3+e6NAc2F9ak2b5sa3wHFe 4/VyJbhDtYWJAcaX6qa995zGHvRXjWvJNWEvr3i1lCL1a706EBuX56TolAiDQZk1 Fr+omaekC3Atrd5zJRwcysDvUSDWN1+P+C/+Z/S8PpwjVELUtHjhOtiqS99nmDZy awvl5097w0VZFA1ByTTZjaMKabqUS1rGpVnX+8wys4OKl1IpyR2focFH4GyJ -----END CERTIFICATE-----Generated at Fri Dec 5 16:41:11 2025 by rpki-client