This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/yRnjFZ9pY-cK75gshNkzPMrfPKs.roa File: yRnjFZ9pY-cK75gshNkzPMrfPKs.roa (raw, json) Hash identifier: DarseZiXl9apkGB7jFvTVSq/CG7db35lTEo6YHf7oPo= Subject key identifier: C9:19:E3:15:9F:69:63:E7:0A:EF:98:2C:84:D9:33:3C:CA:DF:3C:AB Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019A9CF1674A4DFFABE2718234D7A6E4FD83 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/yRnjFZ9pY-cK75gshNkzPMrfPKs.roa Signing time: Wed 19 Nov 2025 16:27:37 +0000 ROA not before: Wed 19 Nov 2025 16:27:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205899 IP address blocks: 91.217.166.0/24 maxlen: 24 185.113.10.0/24 maxlen: 24 195.254.165.0/24 maxlen: 24 2a05:9080:5::/48 maxlen: 48 2a05:9080:14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 21 Nov 2025 01:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9c:f1:67:4a:4d:ff:ab:e2:71:82:34:d7:a6:e4:fd:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Nov 19 16:27:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c919e3159f6963e70aef982c84d9333ccadf3cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4b:f7:72:8f:55:38:2f:ab:45:bc:69:cd:0d: d8:28:2b:74:ff:cb:f3:4a:ad:27:7f:ca:d9:4d:e0: f2:bd:ac:13:00:00:d7:71:59:95:41:38:8c:90:bb: 2e:cc:61:09:bf:ec:98:6d:19:c4:d9:7e:18:cc:04: 52:cb:e7:d6:78:c1:cc:a4:fd:24:1d:62:9e:58:26: 03:f9:bb:80:d6:8b:7b:b1:8d:14:60:38:a8:24:c6: 7a:ac:7c:d0:74:75:87:56:08:12:03:55:87:04:30: 00:8a:1d:1a:ca:3c:e9:f5:2a:d1:96:4d:32:31:d0: c7:74:06:dc:a3:37:c2:95:f3:9b:c2:98:ad:4b:35: 69:fd:11:4b:08:1a:d6:79:52:5f:f6:57:34:08:a9: fd:99:f9:f8:f6:83:40:89:4e:dc:aa:fc:2f:88:e8: e6:4d:8c:ed:0e:d4:26:7d:06:85:7a:21:fe:8c:cc: 9c:a5:73:12:b1:97:ed:3a:f4:21:74:c5:49:bf:29: 78:bf:85:86:70:55:c9:68:00:49:75:d0:67:aa:5a: ce:30:4e:f2:46:3b:a7:70:c4:5d:13:00:38:d7:52: de:78:81:77:b8:d1:e8:59:f0:17:df:b4:5d:58:c8: 7e:88:3c:bc:55:e6:ad:27:ea:25:39:1a:75:17:7d: c9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:19:E3:15:9F:69:63:E7:0A:EF:98:2C:84:D9:33:3C:CA:DF:3C:AB X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/yRnjFZ9pY-cK75gshNkzPMrfPKs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.166.0/24 185.113.10.0/24 195.254.165.0/24 IPv6: 2a05:9080:5::/48 2a05:9080:14::/48 Signature Algorithm: sha256WithRSAEncryption a8:8f:aa:75:d1:70:68:b7:f6:60:21:82:53:49:91:49:f2:4f: 83:ab:84:fb:1c:50:fd:e9:b9:e2:60:3b:77:71:69:35:60:f9: dd:75:16:6d:6d:08:50:6e:a0:70:6c:92:ce:73:8f:2c:c3:c0: fb:93:83:e3:e9:1e:6a:7a:55:90:16:57:6a:13:c0:80:ac:81: fb:01:51:b1:1d:92:0f:10:30:fd:6b:2e:19:68:65:17:20:06: 1b:7b:bb:5e:44:91:aa:bd:79:8d:cd:2a:e1:e4:56:6c:5d:2b: 0c:c3:fb:f8:86:01:3f:e0:44:cf:a1:ea:2c:a4:6c:f9:dc:c4: d7:7a:2c:d4:dc:14:94:bb:32:fa:f2:9c:3c:21:68:4e:e0:9b: 00:c6:7d:a7:ac:5c:e4:55:5d:f4:2c:ec:58:ba:50:a7:9b:1d: 85:20:70:c6:d6:76:f1:e8:ba:74:fa:af:23:f6:31:c0:0e:a9: 63:99:bf:76:bf:f4:05:fc:48:d7:99:49:cb:9c:d5:a6:53:2b: 04:8f:c3:b0:2a:0b:ae:4c:9f:ba:b8:05:a1:98:e7:80:fb:85: 24:9c:3c:05:59:9f:82:5a:7f:c2:a6:df:08:5f:d6:dd:5e:52: a2:14:ac:a8:6e:11:a9:ef:df:2a:f3:ae:db:82:87:58:93:f8: e6:fb:92:8a -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZqc8WdKTf+r4nGCNNem5P2DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjUxMTE5MTYyNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTE5ZTMxNTlmNjk2M2U3MGFlZjk4MmM4NGQ5MzMzY2NhZGYzY2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEv3co9VOC+rRbxpzQ3YKCt0/8vz Sq0nf8rZTeDyvawTAADXcVmVQTiMkLsuzGEJv+yYbRnE2X4YzARSy+fWeMHMpP0k HWKeWCYD+buA1ot7sY0UYDioJMZ6rHzQdHWHVggSA1WHBDAAih0ayjzp9SrRlk0y MdDHdAbcozfClfObwpitSzVp/RFLCBrWeVJf9lc0CKn9mfn49oNAiU7cqvwviOjm TYztDtQmfQaFeiH+jMycpXMSsZftOvQhdMVJvyl4v4WGcFXJaABJddBnqlrOME7y RjuncMRdEwA411LeeIF3uNHoWfAX37RdWMh+iDy8VeatJ+olORp1F33JVQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFMkZ4xWfaWPnCu+YLITZMzzK3zyrMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEveVJuakZaOXBZLWNLNzVnc2hOa3pQTXJmUEtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAYBAIAATASAwQAW9mmAwQA uXEKAwQAw/6lMBgEAgACMBIDBwAqBZCAAAUDBwAqBZCAABQwDQYJKoZIhvcNAQEL BQADggEBAKiPqnXRcGi39mAhglNJkUnyT4OrhPscUP3pueJgO3dxaTVg+d11Fm1t CFBuoHBsks5zjyzDwPuTg+PpHmp6VZAWV2oTwICsgfsBUbEdkg8QMP1rLhloZRcg Bht7u15Ekaq9eY3NKuHkVmxdKwzD+/iGAT/gRM+h6iykbPncxNd6LNTcFJS7Mvry nDwhaE7gmwDGfaesXORVXfQs7Fi6UKebHYUgcMbWdvHounT6ryP2McAOqWOZv3a/ 9AX8SNeZScuc1aZTKwSPw7AqC65Mn7q4BaGY54D7hSScPAVZn4Jaf8Km3whf1t1e UqIUrKhuEanv3yrzrtuCh1iT+Ob7koo= -----END CERTIFICATE-----Generated at Thu Nov 20 10:19:37 2025 by rpki-client