This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/Zy6Mn7YK1WfqH_7jhbTrGEFIJlc.roa File: Zy6Mn7YK1WfqH_7jhbTrGEFIJlc.roa (raw, json) Hash identifier: MCR5uR19iNBi1hjIv4S5IsAnt3QNxZlCjl9ClZPKKuo= Subject key identifier: 67:2E:8C:9F:B6:0A:D5:67:EA:1F:FE:E3:85:B4:EB:18:41:48:26:57 Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f Certificate serial: 019AE40F777895340C172DBA4A8618B809AD Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/Zy6Mn7YK1WfqH_7jhbTrGEFIJlc.roa Signing time: Wed 03 Dec 2025 11:53:30 +0000 ROA not before: Wed 03 Dec 2025 11:53:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211279 IP address blocks: 178.175.162.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:0f:77:78:95:34:0c:17:2d:ba:4a:86:18:b8:09:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f Validity Not Before: Dec 3 11:53:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=672e8c9fb60ad567ea1ffee385b4eb1841482657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4a:df:f9:0d:ac:0f:1f:10:2f:a6:1e:fb:df: ba:50:f3:e4:c1:7c:2a:b0:02:0b:3d:5e:b9:5f:0e: dc:e5:34:59:b5:be:8a:80:56:a8:a4:4b:45:0a:dc: dc:97:94:29:0f:7f:b0:b1:2e:b6:8f:d0:89:73:78: c4:6b:4d:a3:1c:ec:ef:7d:5a:ee:03:8a:fc:8f:1d: 01:55:41:0d:e3:84:05:27:c7:89:54:01:f3:40:90: 08:55:a3:35:a4:a3:39:9c:1e:0a:db:82:0f:5d:52: 57:59:21:08:7e:eb:a1:84:d1:28:78:75:06:9e:12: 26:a7:32:c9:29:8d:11:9c:f0:d7:b9:df:69:df:7d: 0a:43:3f:89:bd:b2:54:19:0b:ee:73:c6:60:84:f7: 6c:aa:c8:e1:88:01:94:7d:2a:95:bb:5d:dd:e7:48: 64:d8:5d:8b:4b:25:ad:39:94:2e:30:04:6e:93:0d: ae:f0:df:01:df:2b:7e:8f:fe:80:aa:81:c8:cc:d8: 64:02:0a:33:1d:e8:c0:ac:d0:ee:78:f6:8c:48:4e: f7:10:52:3a:c9:12:34:84:ad:1a:a0:b4:8d:dd:99: be:6d:97:d4:11:59:d8:14:42:35:62:62:a7:9d:c9: e4:1d:4e:dc:73:d5:7c:73:10:99:f1:56:99:18:f4: a1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2E:8C:9F:B6:0A:D5:67:EA:1F:FE:E3:85:B4:EB:18:41:48:26:57 X509v3 Authority Key Identifier: keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/Zy6Mn7YK1WfqH_7jhbTrGEFIJlc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.175.162.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:dd:7a:dc:8d:f9:74:78:95:56:7a:6f:86:19:82:c8:a7:1e: d1:6a:09:79:2c:9d:e1:6b:a9:04:79:fa:fb:3d:16:ca:93:c9: 7b:da:68:08:9c:5f:eb:5f:8d:53:60:fd:4c:57:2b:6a:77:8b: 4d:f9:a1:65:bc:15:72:ff:2a:88:5d:fe:25:9c:19:43:1b:75: b4:da:2f:57:ba:c5:ae:da:65:c4:dc:f7:15:f8:fa:05:2d:a4: 6b:c4:75:be:05:43:5f:ef:a6:83:86:1c:cf:54:23:9f:bd:f6: e6:d3:6c:f8:6a:3f:4f:d4:2e:16:eb:08:74:f6:f4:9d:b7:7d: 37:c0:d5:fd:e1:19:b5:bf:4d:64:b4:5d:a0:a4:f6:14:29:2d: 62:d2:0a:37:1e:55:d8:76:ed:5b:c3:03:10:68:d7:ba:7c:96: 69:e2:fe:07:b4:21:40:c3:a4:c9:4a:ce:5d:78:b6:9a:75:21: db:7d:31:66:fe:a2:5a:7c:31:2e:e2:99:dc:61:f5:db:a1:70: 0e:db:78:85:3e:2a:d0:43:69:1b:f2:a5:b5:5d:b5:95:5e:01: c9:1c:b2:7c:93:36:56:23:fe:c8:0e:33:23:95:75:20:ab:db: 80:16:94:1e:6f:a4:6c:44:6d:c7:b1:c4:fb:ae:77:44:49:c1: 9a:29:4f:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrkD3d4lTQMFy26SoYYuAmtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0 ZGFiN2YwHhcNMjUxMjAzMTE1MzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzJlOGM5ZmI2MGFkNTY3ZWExZmZlZTM4NWI0ZWIxODQxNDgyNjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0rf+Q2sDx8QL6Ye+9+6UPPkwXwq sAILPV65Xw7c5TRZtb6KgFaopEtFCtzcl5QpD3+wsS62j9CJc3jEa02jHOzvfVru A4r8jx0BVUEN44QFJ8eJVAHzQJAIVaM1pKM5nB4K24IPXVJXWSEIfuuhhNEoeHUG nhImpzLJKY0RnPDXud9p330KQz+JvbJUGQvuc8ZghPdsqsjhiAGUfSqVu13d50hk 2F2LSyWtOZQuMARukw2u8N8B3yt+j/6AqoHIzNhkAgozHejArNDuePaMSE73EFI6 yRI0hK0aoLSN3Zm+bZfUEVnYFEI1YmKnncnkHU7cc9V8cxCZ8VaZGPShgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGcujJ+2CtVn6h/+44W06xhBSCZXMB8GA1UdIwQY MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct OWRkNmU4OGZjYzhkLzEvWnk2TW43WUsxV2ZxSF83amhiVHJHRUZJSmxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsq+iMA0G CSqGSIb3DQEBCwUAA4IBAQAc3Xrcjfl0eJVWem+GGYLIpx7Ragl5LJ3ha6kEefr7 PRbKk8l72mgInF/rX41TYP1MVytqd4tN+aFlvBVy/yqIXf4lnBlDG3W02i9XusWu 2mXE3PcV+PoFLaRrxHW+BUNf76aDhhzPVCOfvfbm02z4aj9P1C4W6wh09vSdt303 wNX94Rm1v01ktF2gpPYUKS1i0go3HlXYdu1bwwMQaNe6fJZp4v4HtCFAw6TJSs5d eLaadSHbfTFm/qJafDEu4pncYfXboXAO23iFPirQQ2kb8qW1XbWVXgHJHLJ8kzZW I/7IDjMjlXUgq9uAFpQeb6RsRG3HscT7rndEScGaKU8R -----END CERTIFICATE-----Generated at Sat Dec 6 23:30:17 2025 by rpki-client