This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/YVLqD0iBVt8EO6pmC3qrcjs59Cs.roa File: YVLqD0iBVt8EO6pmC3qrcjs59Cs.roa (raw, json) Hash identifier: Sh1h+WZjNVNy8jIlW7fb0mMty6X76/KD3BoO1ToICbg= Subject key identifier: 61:52:EA:0F:48:81:56:DF:04:3B:AA:66:0B:7A:AB:72:3B:39:F4:2B Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019AED1E7E30AA618A22194D62FB52AFBE83 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/YVLqD0iBVt8EO6pmC3qrcjs59Cs.roa Signing time: Fri 05 Dec 2025 06:06:29 +0000 ROA not before: Fri 05 Dec 2025 06:06:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55410 IP address blocks: 45.156.159.0/24 maxlen: 24 185.112.64.0/22 maxlen: 24 185.255.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 06:06:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:1e:7e:30:aa:61:8a:22:19:4d:62:fb:52:af:be:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Dec 5 06:06:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6152ea0f488156df043baa660b7aab723b39f42b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f6:b5:da:56:2a:d8:cb:b9:da:f2:ff:fb:b6: 0b:61:55:ab:7e:65:3b:43:a3:2f:2d:7c:0e:7a:f8: 31:b2:2b:55:fe:b8:05:d3:ed:0e:95:8b:ce:87:63: 6b:f1:50:57:98:d1:18:22:f2:f5:08:87:f6:a3:3b: 96:74:a0:b5:b2:6e:8c:d2:62:a6:51:ff:4e:bc:80: 34:43:29:d7:6c:4d:af:79:e0:24:b4:3e:5d:fe:3c: 77:ac:67:68:8e:2e:15:6b:a8:21:6e:80:4c:f6:3c: da:fa:86:60:64:9c:2a:b3:6c:c1:06:c1:82:32:cb: 22:77:3c:71:bd:e6:9c:87:09:6d:cb:b7:55:c7:c6: 2a:2c:fc:7b:04:04:d5:d2:a5:5d:66:ab:48:1e:17: 82:fc:43:53:c4:2d:3a:57:59:c4:8f:6d:33:f4:92: 39:d4:11:b7:ff:23:c7:c4:8a:60:2c:0f:78:1c:cc: 6b:aa:37:6f:7e:7a:34:24:e7:22:6d:09:1c:ed:e2: 9c:d7:e1:f8:8b:e6:7d:7e:21:29:5a:db:b9:e1:00: c1:33:a8:5f:7e:13:77:3a:10:9f:a2:ec:51:83:80: bb:84:63:d2:c7:2f:a5:87:64:7b:cc:18:fc:3e:cf: 74:b8:0c:e9:d8:16:2b:06:c3:a7:87:0f:71:90:b1: d1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:52:EA:0F:48:81:56:DF:04:3B:AA:66:0B:7A:AB:72:3B:39:F4:2B X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/YVLqD0iBVt8EO6pmC3qrcjs59Cs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.159.0/24 185.112.64.0/22 185.255.168.0/22 Signature Algorithm: sha256WithRSAEncryption 88:ee:7e:c5:8a:eb:68:ad:67:1a:98:2a:2c:30:59:33:b8:f2: 1c:b4:72:be:2a:61:82:bf:8e:2a:6b:bf:ad:91:a6:16:d4:0c: e4:48:ec:81:14:ba:63:7b:05:ea:63:f5:40:ae:68:8c:2b:95: 92:f8:77:28:c1:13:44:d1:cc:9e:1d:14:3b:61:8b:5b:f1:28: 37:cc:12:1d:e5:98:17:41:94:4f:9e:d3:30:e5:af:32:13:d6: d1:a2:25:b2:71:1a:ac:5f:74:75:ba:d5:4d:1c:e3:0d:43:ba: 25:9b:9d:d9:d2:e4:1d:87:0d:8d:08:9b:e7:87:6c:1f:b1:cf: 99:f7:c1:22:4f:20:22:ee:92:4e:1d:56:ed:1d:e0:c0:02:14: 23:78:42:c4:b8:9f:f6:6a:8a:c6:85:ee:15:59:18:77:94:c5: 92:5c:e0:be:07:3d:5b:5c:9d:f2:fc:3c:55:b1:5b:58:de:9c: b7:28:00:5e:0a:3c:53:76:86:55:9c:0f:e2:6f:7b:bb:53:32: 7f:9e:89:19:d5:0b:1e:ab:76:e9:77:1c:9a:95:92:82:a9:70: fb:bf:b7:b6:c9:fa:38:92:e8:42:85:d7:df:1c:df:68:da:a0: 79:25:91:a8:e8:25:c3:e5:cc:a6:e1:e1:ec:c6:a4:7a:fe:38: 17:0f:7c:e0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrtHn4wqmGKIhlNYvtSr76DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjUxMjA1MDYwNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTUyZWEwZjQ4ODE1NmRmMDQzYmFhNjYwYjdhYWI3MjNiMzlmNDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3va12lYq2Mu52vL/+7YLYVWrfmU7 Q6MvLXwOevgxsitV/rgF0+0OlYvOh2Nr8VBXmNEYIvL1CIf2ozuWdKC1sm6M0mKm Uf9OvIA0QynXbE2veeAktD5d/jx3rGdoji4Va6ghboBM9jza+oZgZJwqs2zBBsGC Mssidzxxveachwlty7dVx8YqLPx7BATV0qVdZqtIHheC/ENTxC06V1nEj20z9JI5 1BG3/yPHxIpgLA94HMxrqjdvfno0JOcibQkc7eKc1+H4i+Z9fiEpWtu54QDBM6hf fhN3OhCfouxRg4C7hGPSxy+lh2R7zBj8Ps90uAzp2BYrBsOnhw9xkLHRMQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGFS6g9IgVbfBDuqZgt6q3I7OfQrMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvWVZMcUQwaUJWdDhFTzZwbUMzcXJjanM1OUNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZyfAwQC uXBAAwQCuf+oMA0GCSqGSIb3DQEBCwUAA4IBAQCI7n7FiutorWcamCosMFkzuPIc tHK+KmGCv44qa7+tkaYW1AzkSOyBFLpjewXqY/VArmiMK5WS+HcowRNE0cyeHRQ7 YYtb8Sg3zBId5ZgXQZRPntMw5a8yE9bRoiWycRqsX3R1utVNHOMNQ7olm53Z0uQd hw2NCJvnh2wfsc+Z98EiTyAi7pJOHVbtHeDAAhQjeELEuJ/2aorGhe4VWRh3lMWS XOC+Bz1bXJ3y/DxVsVtY3py3KABeCjxTdoZVnA/ib3u7UzJ/nokZ1Qseq3bpdxya lZKCqXD7v7e2yfo4kuhChdffHN9o2qB5JZGo6CXD5cym4eHsxqR6/jgXD3zg -----END CERTIFICATE-----Generated at Fri Dec 5 13:45:28 2025 by rpki-client