This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/AY7ZkwmZufNsulB1AidoB2x7HeY.roa File: AY7ZkwmZufNsulB1AidoB2x7HeY.roa (raw, json) Hash identifier: zDOYA7mdRmHNT2C/ZFYm7ZkETVe0J1epCWE/KmrZalQ= Subject key identifier: 01:8E:D9:93:09:99:B9:F3:6C:BA:50:75:02:27:68:07:6C:7B:1D:E6 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B4A9A0871D7965907CAEBDA3EBA12174E Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/AY7ZkwmZufNsulB1AidoB2x7HeY.roa Signing time: Tue 23 Dec 2025 09:46:07 +0000 ROA not before: Tue 23 Dec 2025 09:46:07 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212017 IP address blocks: 45.90.236.0/24 maxlen: 24 45.90.237.0/24 maxlen: 24 185.106.124.0/22 maxlen: 24 185.128.52.0/22 maxlen: 22 185.129.104.0/22 maxlen: 24 185.227.172.0/22 maxlen: 22 185.232.8.0/22 maxlen: 24 185.232.10.0/24 maxlen: 24 193.17.180.0/24 maxlen: 24 193.17.182.0/24 maxlen: 24 194.48.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:55:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:9a:08:71:d7:96:59:07:ca:eb:da:3e:ba:12:17:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Dec 23 09:46:07 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=018ed9930999b9f36cba5075022768076c7b1de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:af:88:62:86:72:f3:04:2e:e5:7d:93:47:5c: 99:5c:45:9f:eb:b5:ff:fd:cc:42:fd:e7:ae:4c:a4: 3c:bb:94:b4:ff:88:31:df:ad:1b:41:16:12:78:10: 7f:fe:06:bc:fa:8b:dd:70:3d:8d:5a:a5:a8:8e:d3: 03:b4:74:f9:e4:10:fa:fe:0c:e1:c1:9a:c4:bc:95: 50:b1:c1:4a:60:19:49:c5:53:35:10:97:99:47:d5: e3:52:72:79:78:6a:3c:d7:49:5e:be:c5:71:15:82: 8c:b5:c9:f9:ac:b4:0f:33:0f:e9:8a:c7:02:49:76: 19:05:68:27:0c:2b:b1:95:b8:46:b9:db:a6:5a:cc: 25:81:2f:66:5c:70:71:26:25:04:43:64:25:78:48: 12:09:6b:b4:9d:be:b8:40:cc:ba:31:9d:a0:45:b1: 28:1e:cb:1e:da:ed:16:53:5a:87:0e:6d:55:af:bd: 52:c7:e9:ea:bb:9b:87:91:5a:80:49:8d:cc:77:f1: 22:44:84:22:79:b7:5b:a0:af:3b:df:20:d1:49:bc: 22:15:56:16:99:75:2e:69:60:9f:81:f9:2e:41:0d: e5:78:3c:b7:01:fd:90:b1:a3:5d:81:df:0c:5a:cd: bf:13:7f:ae:47:65:1f:20:b7:a2:18:8f:86:a6:77: c6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8E:D9:93:09:99:B9:F3:6C:BA:50:75:02:27:68:07:6C:7B:1D:E6 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/AY7ZkwmZufNsulB1AidoB2x7HeY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.236.0/23 185.106.124.0/22 185.128.52.0/22 185.129.104.0/22 185.227.172.0/22 185.232.8.0/22 193.17.180.0/24 193.17.182.0/24 194.48.140.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:df:b2:12:cc:b8:0e:7a:6d:19:96:5e:0e:ed:4f:4f:c4:66: 51:b5:a6:0b:d8:d1:85:b9:2b:d2:11:6a:26:4a:37:db:dc:28: 49:0e:97:fa:6d:86:54:67:63:24:ea:fb:5c:88:bc:cd:b5:95: 48:31:33:d4:f4:66:d8:fe:a8:a7:5b:5f:4a:b7:08:49:08:cb: 45:70:d5:23:6d:f5:dd:ce:64:95:e4:90:db:78:84:fd:fc:b7: 02:6f:97:a7:fb:38:42:79:b9:ab:19:7b:4b:5c:7d:ea:e5:84: 4e:b0:fd:e7:79:47:9f:07:f3:f0:4d:cb:8f:cb:bb:d8:a0:a5: ed:15:ee:9f:3d:d2:f6:b2:06:e5:27:e8:74:a5:6b:0e:ea:bb: d5:7a:8b:9e:9e:14:8d:33:83:32:be:08:0e:b3:28:e1:47:cc: 43:28:da:e0:9a:62:df:9e:9c:b4:5d:41:60:c7:48:03:ff:78: 56:6f:5d:a4:ef:95:60:52:56:6a:9d:57:ea:e1:2e:cb:f2:f8: e4:20:89:36:5e:69:05:dd:a1:11:af:3c:58:0e:11:61:c4:c6: 3e:bf:94:7f:e1:4b:e2:ed:1e:77:b2:7b:ea:13:ff:4d:5a:44: 51:c5:82:a8:c4:00:ec:b6:9e:48:0f:e0:3f:6b:41:d2:65:42: 6e:18:f3:a5 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZtKmghx15ZZB8rr2j66EhdOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjUxMjIzMDk0NjA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMThlZDk5MzA5OTliOWYzNmNiYTUwNzUwMjI3NjgwNzZjN2IxZGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAla+IYoZy8wQu5X2TR1yZXEWf67X/ /cxC/eeuTKQ8u5S0/4gx360bQRYSeBB//ga8+ovdcD2NWqWojtMDtHT55BD6/gzh wZrEvJVQscFKYBlJxVM1EJeZR9XjUnJ5eGo810levsVxFYKMtcn5rLQPMw/piscC SXYZBWgnDCuxlbhGudumWswlgS9mXHBxJiUEQ2QleEgSCWu0nb64QMy6MZ2gRbEo Hsse2u0WU1qHDm1Vr71Sx+nqu5uHkVqASY3Md/EiRIQiebdboK873yDRSbwiFVYW mXUuaWCfgfkuQQ3leDy3Af2QsaNdgd8MWs2/E3+uR2UfILeiGI+GpnfGIQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFAGO2ZMJmbnzbLpQdQInaAdsex3mMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvQVk3Wmt3bVp1Zk5zdWxCMUFpZG9CMng3SGVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQBLVrsAwQC uWp8AwQCuYA0AwQCuYFoAwQCueOsAwQCuegIAwQAwRG0AwQAwRG2AwQCwjCMMA0G CSqGSIb3DQEBCwUAA4IBAQAv37ISzLgOem0Zll4O7U9PxGZRtaYL2NGFuSvSEWom Sjfb3ChJDpf6bYZUZ2Mk6vtciLzNtZVIMTPU9GbY/qinW19KtwhJCMtFcNUjbfXd zmSV5JDbeIT9/LcCb5en+zhCebmrGXtLXH3q5YROsP3neUefB/PwTcuPy7vYoKXt Fe6fPdL2sgblJ+h0pWsO6rvVeouenhSNM4MyvggOsyjhR8xDKNrgmmLfnpy0XUFg x0gD/3hWb12k75VgUlZqnVfq4S7L8vjkIIk2XmkF3aERrzxYDhFhxMY+v5R/4Uvi 7R53snvqE/9NWkRRxYKoxADstp5ID+A/a0HSZUJuGPOl -----END CERTIFICATE-----Generated at Wed Dec 24 10:44:52 2025 by rpki-client