This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Y80uU89YrbsuRnQLDbu-NjJY_lM.roa File: Y80uU89YrbsuRnQLDbu-NjJY_lM.roa (raw, json) Hash identifier: HoKIkUXkxj/FHV4FD9GgqXgSMpn2DDHcOSAHP1jozsA= Subject key identifier: 63:CD:2E:53:CF:58:AD:BB:2E:46:74:0B:0D:BB:BE:36:32:58:FE:53 Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019B20D02A068C9DE871B4CB8FDCCD87B9CA Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Y80uU89YrbsuRnQLDbu-NjJY_lM.roa Signing time: Mon 15 Dec 2025 07:01:11 +0000 ROA not before: Mon 15 Dec 2025 07:01:11 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137517 IP address blocks: 178.239.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:d0:2a:06:8c:9d:e8:71:b4:cb:8f:dc:cd:87:b9:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Dec 15 07:01:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=63cd2e53cf58adbb2e46740b0dbbbe363258fe53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f9:68:f3:b4:5c:fe:94:43:18:cb:29:74:49: da:53:f4:61:e5:a2:46:12:26:e7:95:42:42:6e:15: 2f:eb:3a:8a:25:d5:1d:56:b9:13:d6:d2:0b:e2:97: 24:88:77:eb:e7:9a:e7:71:8c:ef:3f:1f:a5:7b:41: a8:92:5a:18:04:4b:5b:4b:24:06:31:f0:21:2e:5f: 0a:4b:8c:18:9e:47:31:65:23:9e:4a:a1:62:f8:10: b9:0a:67:bc:af:9c:e7:bb:99:38:7c:c2:d6:ef:90: aa:7d:79:a2:df:ee:72:bf:1f:74:80:f8:36:d2:0b: 8f:52:a4:b7:d5:4a:30:f6:b4:97:c2:0f:08:c3:48: 02:03:26:b0:3f:2f:15:70:78:ef:e5:37:14:71:0d: 9a:05:9c:d2:49:76:a5:23:64:a9:00:d1:1b:13:f0: fa:ea:bd:12:92:45:89:1b:ac:b0:7e:7a:c1:a1:cb: a3:67:fa:56:eb:3a:de:e2:3e:04:d4:cf:25:2f:ca: 60:fb:fa:5c:76:77:73:0d:34:5a:7a:f3:6c:c1:b7: 7c:5d:36:db:1a:4a:f4:54:08:92:7a:ea:0e:3e:05: 4d:4c:f6:af:c9:82:fd:35:3b:30:22:e2:5d:a9:ba: 1a:c4:2f:f3:c2:a6:02:cf:b9:13:cf:63:06:d2:74: 60:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CD:2E:53:CF:58:AD:BB:2E:46:74:0B:0D:BB:BE:36:32:58:FE:53 X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Y80uU89YrbsuRnQLDbu-NjJY_lM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.239.118.0/24 Signature Algorithm: sha256WithRSAEncryption c1:40:b3:3e:c5:b5:16:22:ad:b1:0a:68:44:55:2d:72:dd:1d: e1:31:97:e2:fe:b3:c8:b8:b9:01:40:84:d2:c7:64:d1:cd:a9: bd:d2:fd:f4:52:64:28:e4:ad:18:7f:21:7c:58:0e:da:53:66: b7:ef:02:2d:d0:3c:41:95:be:75:86:f0:44:fc:6c:2a:51:e7: 2e:e0:ff:87:3d:f3:23:51:17:82:12:b3:8f:86:a8:ba:2b:7f: 32:ae:29:6d:7d:dc:f2:bf:be:e8:9c:28:2e:06:60:0e:8c:38: 06:65:e6:1a:74:3c:3e:c2:c4:5c:aa:4c:5c:ef:50:22:48:a4: fb:dd:42:a4:96:d6:b4:88:4e:4c:91:43:55:bd:04:c7:31:34: 53:3d:d8:53:53:4b:73:e5:7d:c2:c5:63:77:87:1a:44:76:ca: f9:a8:1c:bc:f8:4e:1c:ff:f9:6b:de:7a:a9:70:4d:9e:12:9f: e6:28:e4:fd:1c:b0:7b:50:d5:fe:0e:01:48:7c:63:ef:5f:9c: 7d:82:cb:55:0a:53:da:ca:9d:ba:dc:d7:58:e8:2f:de:59:17: 97:29:cd:d0:e4:0e:a1:7f:bc:4b:18:d8:bc:65:25:70:17:48: 38:d4:88:63:f1:a5:67:63:83:e3:1d:ca:6b:7e:79:eb:35:ff: a8:ca:50:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsg0CoGjJ3ocbTLj9zNh7nKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjUxMjE1MDcwMTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2NkMmU1M2NmNThhZGJiMmU0Njc0MGIwZGJiYmUzNjMyNThmZTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwflo87Rc/pRDGMspdEnaU/Rh5aJG EibnlUJCbhUv6zqKJdUdVrkT1tIL4pckiHfr55rncYzvPx+le0GokloYBEtbSyQG MfAhLl8KS4wYnkcxZSOeSqFi+BC5Cme8r5znu5k4fMLW75CqfXmi3+5yvx90gPg2 0guPUqS31Uow9rSXwg8Iw0gCAyawPy8VcHjv5TcUcQ2aBZzSSXalI2SpANEbE/D6 6r0SkkWJG6ywfnrBocujZ/pW6zre4j4E1M8lL8pg+/pcdndzDTRaevNswbd8XTbb Gkr0VAiSeuoOPgVNTPavyYL9NTswIuJdqboaxC/zwqYCz7kTz2MG0nRg9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGPNLlPPWK27LkZ0Cw27vjYyWP5TMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvWTgwdVU4OVlyYnN1Um5RTERidS1OakpZX2xNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu92MA0G CSqGSIb3DQEBCwUAA4IBAQDBQLM+xbUWIq2xCmhEVS1y3R3hMZfi/rPIuLkBQITS x2TRzam90v30UmQo5K0YfyF8WA7aU2a37wIt0DxBlb51hvBE/GwqUecu4P+HPfMj UReCErOPhqi6K38yriltfdzyv77onCguBmAOjDgGZeYadDw+wsRcqkxc71AiSKT7 3UKklta0iE5MkUNVvQTHMTRTPdhTU0tz5X3CxWN3hxpEdsr5qBy8+E4c//lr3nqp cE2eEp/mKOT9HLB7UNX+DgFIfGPvX5x9gstVClPayp263NdY6C/eWReXKc3Q5A6h f7xLGNi8ZSVwF0g41Ihj8aVnY4PjHcprfnnrNf+oylCw -----END CERTIFICATE-----Generated at Thu Dec 18 00:31:49 2025 by rpki-client