This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/ydJ8-HccROHTkUHZ94Nh2xqwGKs.roa File: ydJ8-HccROHTkUHZ94Nh2xqwGKs.roa (raw, json) Hash identifier: 5jg17zFL+w2Qub3GdrheBJMuQFL1rKAkrWJtLe0JMeU= Subject key identifier: C9:D2:7C:F8:77:1C:44:E1:D3:91:41:D9:F7:83:61:DB:1A:B0:18:AB Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019A784DD38FCA6F39BA80F8F668EB34397F Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/ydJ8-HccROHTkUHZ94Nh2xqwGKs.roa Signing time: Wed 12 Nov 2025 13:42:37 +0000 ROA not before: Wed 12 Nov 2025 13:42:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13213 IP address blocks: 45.67.146.0/24 maxlen: 24 185.52.136.0/24 maxlen: 24 185.161.191.0/24 maxlen: 24 185.205.206.0/24 maxlen: 24 185.208.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:4d:d3:8f:ca:6f:39:ba:80:f8:f6:68:eb:34:39:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Nov 12 13:42:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c9d27cf8771c44e1d39141d9f78361db1ab018ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f0:61:94:a4:a6:2c:a6:4f:f6:e5:31:a8:cc: 41:15:a5:01:a6:ce:4c:78:f2:0c:fc:7b:37:80:69: ec:00:d9:ce:0c:cb:8c:bd:19:21:fa:1f:e9:a1:b7: dd:dc:f9:96:43:51:74:6d:9f:9b:2b:ba:ee:fa:5a: c1:e6:7a:24:d0:ae:4b:21:22:24:49:ec:c8:6b:62: 2c:f7:ec:2a:e8:ed:ec:37:d9:fe:af:12:07:1f:7a: 12:a5:e1:e1:27:1a:49:0c:42:42:4f:69:77:84:f9: 5b:47:ab:c9:9a:77:f3:6c:3d:54:3f:e8:64:17:81: fd:69:e2:b1:e7:04:79:e3:85:1c:ae:35:67:0f:f6: da:c1:14:99:e7:37:1c:75:7e:0a:0c:8e:d2:c7:9f: 62:d1:4f:a8:3e:c3:91:75:2f:04:eb:08:62:d1:22: d1:26:d0:3a:77:53:41:b0:5b:45:33:96:0c:eb:9f: 8b:cf:13:df:7a:7e:4c:92:30:75:09:16:c7:5c:76: 24:10:7c:6b:1f:1f:3b:90:9f:f8:36:c0:ae:38:6d: 48:e9:82:f0:de:b9:02:c6:1a:b1:d0:93:a3:b6:a1: 66:71:a8:f8:da:ce:df:9c:89:84:77:b6:eb:df:65: e1:44:7e:17:89:18:39:8f:a2:b3:4b:c6:4c:b9:88: f6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D2:7C:F8:77:1C:44:E1:D3:91:41:D9:F7:83:61:DB:1A:B0:18:AB X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/ydJ8-HccROHTkUHZ94Nh2xqwGKs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.146.0/24 185.52.136.0/24 185.161.191.0/24 185.205.206.0/24 185.208.152.0/24 Signature Algorithm: sha256WithRSAEncryption 32:e5:55:b6:38:46:f4:53:b9:14:f2:7a:8d:6b:a7:13:c3:c7: e7:9d:6d:98:aa:40:f7:1d:99:89:c2:f9:ba:1c:d9:85:d5:16: bd:0f:15:fa:6e:36:5d:d2:53:c7:b2:f6:d9:41:9c:f6:64:e2: ea:82:32:c2:8a:82:16:b3:8f:0e:a4:c5:e3:35:ac:97:b6:39: 4d:b8:e1:24:24:2b:9c:b9:46:65:a3:8d:cc:5b:37:1a:7c:28: a4:34:3f:31:f4:2d:fe:c9:f7:86:41:8f:46:30:b6:f9:50:c4: 1e:39:df:76:e2:06:55:b8:0b:8d:5d:97:2e:fd:c6:e4:49:e8: 95:25:f8:20:3d:20:e5:e8:f8:65:e6:f2:80:71:34:a2:69:81: 86:67:82:56:39:38:94:b1:91:d8:a8:43:a2:d5:65:98:0e:28: 25:84:b1:6c:b3:83:4e:0b:1e:e5:5a:1e:d3:f3:c2:05:9f:75: e5:c0:21:d8:4b:eb:8d:83:38:58:70:31:88:a7:10:f3:50:e9: 50:c1:f3:e3:e5:5c:ef:06:ad:50:13:86:8f:9c:63:cf:00:eb: 4f:71:93:18:55:04:1c:30:f9:cd:b0:2f:5e:93:91:84:c5:0b: af:15:58:28:45:cb:49:b2:cd:ca:8c:2a:05:73:4d:a5:b1:2d: 9e:65:42:c1 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZp4TdOPym85uoD49mjrNDl/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjUxMTEyMTM0MjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWQyN2NmODc3MWM0NGUxZDM5MTQxZDlmNzgzNjFkYjFhYjAxOGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifBhlKSmLKZP9uUxqMxBFaUBps5M ePIM/Hs3gGnsANnODMuMvRkh+h/pobfd3PmWQ1F0bZ+bK7ru+lrB5nok0K5LISIk SezIa2Is9+wq6O3sN9n+rxIHH3oSpeHhJxpJDEJCT2l3hPlbR6vJmnfzbD1UP+hk F4H9aeKx5wR544UcrjVnD/bawRSZ5zccdX4KDI7Sx59i0U+oPsORdS8E6whi0SLR JtA6d1NBsFtFM5YM65+LzxPfen5MkjB1CRbHXHYkEHxrHx87kJ/4NsCuOG1I6YLw 3rkCxhqx0JOjtqFmcaj42s7fnImEd7br32XhRH4XiRg5j6KzS8ZMuYj2/wIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFMnSfPh3HETh05FB2feDYdsasBirMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEveWRKOC1IY2NST0hUa1VIWjk0TmgyeHF3R0tzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALUOSAwQA uTSIAwQAuaG/AwQAuc3OAwQAudCYMA0GCSqGSIb3DQEBCwUAA4IBAQAy5VW2OEb0 U7kU8nqNa6cTw8fnnW2YqkD3HZmJwvm6HNmF1Ra9DxX6bjZd0lPHsvbZQZz2ZOLq gjLCioIWs48OpMXjNayXtjlNuOEkJCucuUZlo43MWzcafCikND8x9C3+yfeGQY9G MLb5UMQeOd924gZVuAuNXZcu/cbkSeiVJfggPSDl6Phl5vKAcTSiaYGGZ4JWOTiU sZHYqEOi1WWYDiglhLFss4NOCx7lWh7T88IFn3XlwCHYS+uNgzhYcDGIpxDzUOlQ wfPj5VzvBq1QE4aPnGPPAOtPcZMYVQQcMPnNsC9ek5GExQuvFVgoRctJss3KjCoF c02lsS2eZULB -----END CERTIFICATE-----Generated at Fri Dec 5 13:45:21 2025 by rpki-client