This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/cY9_Dlz5lxSZl56slvt7pRRUso4.roa File: cY9_Dlz5lxSZl56slvt7pRRUso4.roa (raw, json) Hash identifier: V26Gi5RGzqYA8g0Nj2o/GFMtFXqXNXHqb2lL9UWNWzo= Subject key identifier: 71:8F:7F:0E:5C:F9:97:14:99:97:9E:AC:96:FB:7B:A5:14:54:B2:8E Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714 Certificate serial: 019AFDB773A33D7B427505B4F2569A41E7EB Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/cY9_Dlz5lxSZl56slvt7pRRUso4.roa Signing time: Mon 08 Dec 2025 11:27:29 +0000 ROA not before: Mon 08 Dec 2025 11:27:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29535 IP address blocks: 79.191.255.0/24 maxlen: 24 80.51.76.0/24 maxlen: 24 80.51.253.0/24 maxlen: 24 80.54.110.0/23 maxlen: 24 83.2.0.0/20 maxlen: 20 83.2.8.0/22 maxlen: 22 83.2.56.0/22 maxlen: 22 178.42.9.0/24 maxlen: 24 178.42.22.0/24 maxlen: 24 193.110.120.0/22 maxlen: 22 195.149.235.0/24 maxlen: 24 195.149.236.0/22 maxlen: 22 212.160.212.0/24 maxlen: 24 212.244.33.0/24 maxlen: 24 213.25.41.0/24 maxlen: 24 213.25.164.0/24 maxlen: 24 2001:7f8:27::/48 maxlen: 48 2a01:1101:5::/48 maxlen: 48 2a01:11f0::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 23:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:b7:73:a3:3d:7b:42:75:05:b4:f2:56:9a:41:e7:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714 Validity Not Before: Dec 8 11:27:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=718f7f0e5cf9971499979eac96fb7ba51454b28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1f:33:1c:79:d0:14:d2:44:ff:14:95:2c:a5: 21:93:7c:97:69:8d:4e:a5:cf:03:c4:59:bd:f9:47: fe:4b:1c:43:cc:7c:02:92:5e:d8:43:cd:d7:77:bc: 60:1f:66:59:4d:de:4c:b3:54:68:65:33:ef:47:58: 9f:da:89:6d:9c:a1:5a:32:e4:b0:36:30:07:92:54: d0:11:ed:98:ef:37:f2:0e:8e:84:8b:25:6a:8c:44: 71:29:c4:a0:ca:d2:89:87:a8:40:fa:8a:f2:16:a8: d0:a0:70:7f:26:a8:69:ed:53:c9:46:15:a5:f5:f3: 71:17:7e:b0:3f:16:81:06:ad:c5:88:e9:67:f9:2f: 70:ac:fc:90:18:d3:19:4f:86:e0:cb:fc:3e:98:b3: c3:e0:81:c0:df:d4:4a:53:1f:28:2f:cd:af:e2:4d: 64:fb:57:bf:f8:14:dc:cf:0b:bb:1b:86:f7:59:5e: 6a:fc:13:5a:2d:40:27:2c:10:15:a3:9e:84:d4:ac: d1:af:d6:86:47:77:eb:e2:26:00:73:65:1d:ad:5d: 87:a6:fc:0d:ca:d9:e5:a1:a0:61:45:4c:98:37:bd: 0e:91:bc:73:50:60:b4:df:1b:b6:a4:7f:07:fe:95: 3c:89:43:3e:ca:21:4a:d7:31:fb:0f:41:ea:8e:d4: f5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:8F:7F:0E:5C:F9:97:14:99:97:9E:AC:96:FB:7B:A5:14:54:B2:8E X509v3 Authority Key Identifier: keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/cY9_Dlz5lxSZl56slvt7pRRUso4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.191.255.0/24 80.51.76.0/24 80.51.253.0/24 80.54.110.0/23 83.2.0.0/20 83.2.56.0/22 178.42.9.0/24 178.42.22.0/24 193.110.120.0/22 195.149.235.0-195.149.239.255 212.160.212.0/24 212.244.33.0/24 213.25.41.0/24 213.25.164.0/24 IPv6: 2001:7f8:27::/48 2a01:1101:5::/48 2a01:11f0::/28 Signature Algorithm: sha256WithRSAEncryption 90:e8:b2:50:55:d2:89:c5:78:99:c4:ba:85:d2:69:dd:40:5f: b8:3d:b0:f8:d6:df:46:69:59:ee:99:6a:64:54:e4:fe:95:ac: c2:07:5b:e8:2d:3d:31:ab:51:c6:be:2a:f4:60:b6:73:9a:3b: 64:46:a0:e6:e2:82:63:cd:8e:fe:c8:2d:99:f5:25:a7:62:2c: 93:84:f3:2f:16:b5:cb:c6:95:c1:1c:93:ba:34:9e:b2:5e:e7: ec:62:46:fa:15:48:e5:5d:5b:2d:93:1c:71:06:52:dc:a7:6e: e2:c6:05:d2:55:7f:6f:b2:df:e2:73:8e:57:1b:f7:1b:df:30: a5:04:e8:7d:95:cd:cc:81:44:e3:28:2d:9c:c0:34:3b:9f:90: 82:65:d0:c1:59:55:8f:da:e4:a3:11:cf:eb:73:54:e3:0b:e3: 85:8e:3a:c2:e3:7f:87:27:a1:a4:4b:21:22:9a:0b:e6:06:a9: d4:7c:f9:58:c6:30:ab:b2:51:86:33:f4:cf:05:98:ad:10:64: 1d:30:3b:0c:3c:5d:de:68:a0:89:04:b2:1b:c9:14:61:dc:31: db:c9:0a:15:96:86:47:d6:52:5a:f8:1e:60:12:59:ad:ca:a2: e9:ac:7d:9b:c0:c1:51:9d:50:c2:40:a0:60:0b:d4:76:7f:f1: 8c:e9:d3:19 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZr9t3OjPXtCdQW08laaQefrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlY2Y1MzAwN2M3OWNjNWUyZjJkNzM1NmJhOTEyMWE3OGMw Yzc3MTQwHhcNMjUxMjA4MTEyNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MThmN2YwZTVjZjk5NzE0OTk5NzllYWM5NmZiN2JhNTE0NTRiMjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR8zHHnQFNJE/xSVLKUhk3yXaY1O pc8DxFm9+Uf+SxxDzHwCkl7YQ83Xd7xgH2ZZTd5Ms1RoZTPvR1if2oltnKFaMuSw NjAHklTQEe2Y7zfyDo6EiyVqjERxKcSgytKJh6hA+oryFqjQoHB/Jqhp7VPJRhWl 9fNxF36wPxaBBq3FiOln+S9wrPyQGNMZT4bgy/w+mLPD4IHA39RKUx8oL82v4k1k +1e/+BTczwu7G4b3WV5q/BNaLUAnLBAVo56E1KzRr9aGR3fr4iYAc2UdrV2HpvwN ytnloaBhRUyYN70OkbxzUGC03xu2pH8H/pU8iUM+yiFK1zH7D0HqjtT1LQIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFHGPfw5c+ZcUmZeerJb7e6UUVLKOMB8GA1UdIwQY MBaAFE7PUwB8ecxeLy1zVrqRIaeMDHcUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82NDhjNzUtMmJlOC00YmZkLWExYjEt Y2I4YjNhMDk0MjA5LzEvY1k5X0RsejVseFNabDU2c2x2dDdwUlJVc280LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi82NDhjNzUtMmJlOC00YmZkLWExYjEtY2I4YjNhMDk0MjA5 LzEvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTBiBAIAATBcAwQAT7// AwQAUDNMAwQAUDP9AwQBUDZuAwQEUwIAAwQCUwI4AwQAsioJAwQAsioWAwQCwW54 MAwDBADDlesDBATDleADBADUoNQDBADU9CEDBADVGSkDBADVGaQwHwQCAAIwGQMH ACABB/gAJwMHACoBEQEABQMFBCoBEfAwDQYJKoZIhvcNAQELBQADggEBAJDoslBV 0onFeJnEuoXSad1AX7g9sPjW30ZpWe6ZamRU5P6VrMIHW+gtPTGrUca+KvRgtnOa O2RGoObigmPNjv7ILZn1JadiLJOE8y8WtcvGlcEck7o0nrJe5+xiRvoVSOVdWy2T HHEGUtynbuLGBdJVf2+y3+Jzjlcb9xvfMKUE6H2VzcyBROMoLZzANDufkIJl0MFZ VY/a5KMRz+tzVOML44WOOsLjf4cnoaRLISKaC+YGqdR8+VjGMKuyUYYz9M8FmK0Q ZB0wOww8Xd5ooIkEshvJFGHcMdvJChWWhkfWUlr4HmASWa3KoumsfZvAwVGdUMJA oGAL1HZ/8Yzp0xk= -----END CERTIFICATE-----Generated at Sat Dec 13 05:46:27 2025 by rpki-client