This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Rtyk0crhA_3R9VdRaO6DprgUqVg.roa File: Rtyk0crhA_3R9VdRaO6DprgUqVg.roa (raw, json) Hash identifier: 2n0LEE2VBOFwfMoamQvQRHMBsNSBDuB6IVMfwdTMjsw= Subject key identifier: 46:DC:A4:D1:CA:E1:03:FD:D1:F5:57:51:68:EE:83:A6:B8:14:A9:58 Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019ACE0BC1CF6C6BAE89F177FD6E77CB4046 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Rtyk0crhA_3R9VdRaO6DprgUqVg.roa Signing time: Sat 29 Nov 2025 05:17:48 +0000 ROA not before: Sat 29 Nov 2025 05:17:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198154 IP address blocks: 87.236.38.0/24 maxlen: 24 2a05:9080::/48 maxlen: 48 2a05:9080:3::/48 maxlen: 48 2a05:9080:4::/48 maxlen: 48 2a05:9080:7::/48 maxlen: 48 2a05:9080:10::/48 maxlen: 48 2a05:9080:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 01 Dec 2025 02:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ce:0b:c1:cf:6c:6b:ae:89:f1:77:fd:6e:77:cb:40:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Nov 29 05:17:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=46dca4d1cae103fdd1f5575168ee83a6b814a958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ce:38:5d:86:9e:48:ad:10:05:15:58:5a:f5: 73:d6:1a:bb:c9:6f:68:95:05:aa:4e:88:d0:10:78: 39:27:59:d2:f7:9d:9f:c1:c3:42:ea:e6:db:ef:af: f0:e4:8d:5b:5b:c0:dd:b3:cb:6e:02:dd:ee:27:2c: 1c:dc:d8:e0:63:8a:8e:28:e7:ce:e8:a0:21:91:06: 28:25:0e:01:21:f2:b2:2c:81:1c:d5:e5:df:69:64: d3:68:a3:68:9f:0c:17:4e:7f:57:b3:fd:2c:ba:f4: de:75:fc:eb:30:57:70:e6:ec:30:84:67:2b:cc:7d: ed:cb:ef:53:2b:45:32:8b:fd:cc:03:74:20:ee:24: 49:83:23:da:60:ec:97:7e:77:11:55:e6:a8:45:d8: 08:0e:bf:fe:23:a3:62:74:88:7a:86:a8:7f:66:0a: 3d:c2:3a:80:57:68:95:10:96:98:0c:8c:28:67:a8: de:2f:59:9a:42:24:3d:b3:1c:16:7d:2e:85:7b:c2: 4c:66:89:dd:90:23:5d:6f:a3:c7:fe:0a:ed:4b:92: a9:74:fe:93:8d:0f:f9:06:85:73:d0:8f:2e:c4:d4: e8:c8:6c:58:fc:60:be:a5:05:fc:28:a0:0a:bf:5e: 9e:91:de:9b:a6:68:06:dc:9e:de:3f:92:3b:c4:ad: 37:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DC:A4:D1:CA:E1:03:FD:D1:F5:57:51:68:EE:83:A6:B8:14:A9:58 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Rtyk0crhA_3R9VdRaO6DprgUqVg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.38.0/24 IPv6: 2a05:9080::/48 2a05:9080:3::-2a05:9080:4:ffff:ffff:ffff:ffff:ffff 2a05:9080:7::/48 2a05:9080:10::/47 Signature Algorithm: sha256WithRSAEncryption 7a:4d:5d:d8:39:cd:26:35:16:01:70:5d:64:46:db:e8:9d:e4: 72:61:54:72:6e:05:af:8b:38:7f:4c:4b:04:fa:73:dd:04:f1: 10:bc:aa:ca:25:be:0d:ca:c0:ba:65:55:1a:bb:10:23:c6:65: 4e:e0:8f:50:b7:2b:53:d3:3e:49:ef:0e:41:43:de:0d:51:db: 2b:c0:47:f0:8b:24:60:81:bf:fd:3f:c8:eb:9f:16:06:1c:bc: 84:e0:58:4b:7f:d2:d2:09:35:70:a1:8a:d5:d1:ca:ec:3c:c6: 35:49:66:2e:2a:31:9f:0f:17:c7:97:03:0a:69:d0:84:d3:40: 18:ff:e6:b9:fb:09:6d:a5:eb:59:ad:7e:ce:0d:16:f4:68:27: c0:e8:00:2d:2f:39:74:39:a5:81:cb:fa:f0:52:09:03:96:7a: af:41:98:8c:36:9f:93:c1:a5:c7:60:bf:d5:89:46:67:1d:57: 57:11:07:f0:4e:14:81:6c:80:1d:3d:20:d8:f7:6e:aa:96:51: 9b:81:00:5f:b9:4c:f4:51:5d:41:37:29:10:63:ab:c2:e4:70: 17:f5:d8:8c:b4:aa:47:3a:84:61:8f:99:61:43:cc:f4:d9:dd: 70:92:e1:44:5a:b1:95:4d:05:92:e2:d0:4e:d7:7d:c1:3e:02: df:5a:82:25 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgISAZrOC8HPbGuuifF3/W53y0BGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjUxMTI5MDUxNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmRjYTRkMWNhZTEwM2ZkZDFmNTU3NTE2OGVlODNhNmI4MTRhOTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc44XYaeSK0QBRVYWvVz1hq7yW9o lQWqTojQEHg5J1nS952fwcNC6ubb76/w5I1bW8Dds8tuAt3uJywc3NjgY4qOKOfO 6KAhkQYoJQ4BIfKyLIEc1eXfaWTTaKNonwwXTn9Xs/0suvTedfzrMFdw5uwwhGcr zH3ty+9TK0Uyi/3MA3Qg7iRJgyPaYOyXfncRVeaoRdgIDr/+I6NidIh6hqh/Zgo9 wjqAV2iVEJaYDIwoZ6jeL1maQiQ9sxwWfS6Fe8JMZondkCNdb6PH/grtS5KpdP6T jQ/5BoVz0I8uxNToyGxY/GC+pQX8KKAKv16ekd6bpmgG3J7eP5I7xK03vQIDAQAB o4ICQDCCAjwwHQYDVR0OBBYEFEbcpNHK4QP90fVXUWjug6a4FKlYMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvUnR5azBjcmhBXzNSOVZkUmFPNkRwcmdVcVZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTAMBAIAATAGAwQAV+wmMDUE AgACMC8DBwAqBZCAAAAwEgMHACoFkIAAAwMHACoFkIAABAMHACoFkIAABwMHASoF kIAAEDANBgkqhkiG9w0BAQsFAAOCAQEAek1d2DnNJjUWAXBdZEbb6J3kcmFUcm4F r4s4f0xLBPpz3QTxELyqyiW+DcrAumVVGrsQI8ZlTuCPULcrU9M+Se8OQUPeDVHb K8BH8IskYIG//T/I658WBhy8hOBYS3/S0gk1cKGK1dHK7DzGNUlmLioxnw8Xx5cD CmnQhNNAGP/mufsJbaXrWa1+zg0W9GgnwOgALS85dDmlgcv68FIJA5Z6r0GYjDaf k8Glx2C/1YlGZx1XVxEH8E4UgWyAHT0g2PduqpZRm4EAX7lM9FFdQTcpEGOrwuRw F/XYjLSqRzqEYY+ZYUPM9NndcJLhRFqxlU0FkuLQTtd9wT4C31qCJQ== -----END CERTIFICATE-----Generated at Sun Nov 30 10:30:00 2025 by rpki-client