This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/y_L2KY0YMCG1-r_MH3UQ-w2AaWU.roa File: y_L2KY0YMCG1-r_MH3UQ-w2AaWU.roa (raw, json) Hash identifier: lYapeVk68a8E5/mSvSWVv9SpoiliM2jz4U96TGrpByw= Subject key identifier: CB:F2:F6:29:8D:18:30:21:B5:FA:BF:CC:1F:75:10:FB:0D:80:69:65 Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 019B0770C6AE77C234540D630BDEB526F261 Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/y_L2KY0YMCG1-r_MH3UQ-w2AaWU.roa Signing time: Wed 10 Dec 2025 08:46:29 +0000 ROA not before: Wed 10 Dec 2025 08:46:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197537 IP address blocks: 45.140.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:70:c6:ae:77:c2:34:54:0d:63:0b:de:b5:26:f2:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Dec 10 08:46:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cbf2f6298d183021b5fabfcc1f7510fb0d806965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:00:b9:b2:3e:8a:c8:b0:01:cf:f3:94:c1:7a: 1e:e4:38:87:51:ea:18:65:72:bc:76:76:71:04:66: f7:80:55:5b:e7:be:b0:0c:8b:bb:e7:f4:ee:c4:b7: 6b:ca:5c:91:86:38:82:6a:63:be:76:7c:d7:77:a5: f8:c1:39:e1:95:18:47:73:a0:5e:4e:75:0d:d4:7f: e2:09:60:1d:be:d4:8d:54:49:3e:c9:97:e3:6a:21: ce:43:7d:c3:16:57:d3:2c:db:28:57:81:1d:fe:4e: 6c:ee:ea:7e:3c:e7:e8:fa:03:5e:6b:b1:5c:2a:45: c5:e8:f1:41:79:b5:f3:8c:4e:7f:47:d3:85:a4:cf: f3:42:16:3d:af:a4:4a:e3:ee:c7:3f:d0:7c:cb:c8: ce:71:83:c3:e8:15:9a:c4:35:11:08:9a:b3:9d:21: e0:46:87:6e:a6:6a:99:7c:00:ca:72:81:7b:5f:53: 74:91:e8:cc:93:96:e1:99:4c:2b:63:b1:86:69:72: a1:6f:e9:51:81:4a:15:ba:12:5d:8f:c7:7f:92:ac: f3:aa:62:7f:82:e0:31:72:9d:d4:5b:1a:b9:80:77: 01:74:ef:74:20:ec:54:42:11:cb:cb:eb:d3:45:8e: 3e:3c:e3:dd:12:18:45:05:97:b6:72:39:bc:30:0d: f3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F2:F6:29:8D:18:30:21:B5:FA:BF:CC:1F:75:10:FB:0D:80:69:65 X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/y_L2KY0YMCG1-r_MH3UQ-w2AaWU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.210.0/24 Signature Algorithm: sha256WithRSAEncryption c1:74:d3:d8:8d:c2:a4:fd:38:fe:98:c9:83:7f:55:86:62:e6: 0d:b1:22:45:ae:25:68:7e:58:f9:c9:0b:c8:b1:b1:83:9c:be: 1b:c3:cc:08:4c:e6:56:dd:32:5d:5f:2d:f4:61:40:e6:bc:b3: 53:b8:42:69:57:72:3b:ea:df:22:fa:aa:2f:68:cf:1c:26:e9: 4c:32:54:f4:f6:d1:9a:a0:bb:3b:9b:88:5d:08:6f:98:18:30: 14:d8:1e:fb:cc:6b:fc:1b:cf:a3:b5:65:56:07:71:bf:32:e6: 65:a5:a5:7f:76:c8:6b:b8:3e:d8:4b:18:56:e7:82:07:b9:b9: f1:3c:8d:89:4f:08:3e:71:5f:9c:eb:3c:23:5c:b0:cc:b2:fb: 36:9f:55:79:12:5f:76:bd:64:cd:64:be:e1:74:d4:ab:68:eb: e8:ee:6a:90:81:25:4e:20:02:78:a6:80:c0:0b:44:c1:5d:80: c0:47:21:2d:6d:45:d8:00:bc:5a:94:50:c6:b3:5a:11:8c:60: f5:46:64:9c:fa:04:51:c9:05:7c:d6:5c:0a:7c:b7:c8:37:d6: e8:3c:75:d4:69:32:a4:24:5b:ac:07:0c:68:79:5c:b5:a3:c0: c8:70:fe:7d:57:13:cb:20:2a:3e:a1:21:64:a3:e7:ed:20:34: c5:d4:e7:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsHcMaud8I0VA1jC961JvJhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjUxMjEwMDg0NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmYyZjYyOThkMTgzMDIxYjVmYWJmY2MxZjc1MTBmYjBkODA2OTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AC5sj6KyLABz/OUwXoe5DiHUeoY ZXK8dnZxBGb3gFVb576wDIu75/TuxLdrylyRhjiCamO+dnzXd6X4wTnhlRhHc6Be TnUN1H/iCWAdvtSNVEk+yZfjaiHOQ33DFlfTLNsoV4Ed/k5s7up+POfo+gNea7Fc KkXF6PFBebXzjE5/R9OFpM/zQhY9r6RK4+7HP9B8y8jOcYPD6BWaxDURCJqznSHg RodupmqZfADKcoF7X1N0kejMk5bhmUwrY7GGaXKhb+lRgUoVuhJdj8d/kqzzqmJ/ guAxcp3UWxq5gHcBdO90IOxUQhHLy+vTRY4+POPdEhhFBZe2cjm8MA3zNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMvy9imNGDAhtfq/zB91EPsNgGllMB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEveV9MMktZMFlNQ0cxLXJfTUgzVVEtdzJBYVdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYzSMA0G CSqGSIb3DQEBCwUAA4IBAQDBdNPYjcKk/Tj+mMmDf1WGYuYNsSJFriVoflj5yQvI sbGDnL4bw8wITOZW3TJdXy30YUDmvLNTuEJpV3I76t8i+qovaM8cJulMMlT09tGa oLs7m4hdCG+YGDAU2B77zGv8G8+jtWVWB3G/MuZlpaV/dshruD7YSxhW54IHubnx PI2JTwg+cV+c6zwjXLDMsvs2n1V5El92vWTNZL7hdNSraOvo7mqQgSVOIAJ4poDA C0TBXYDARyEtbUXYALxalFDGs1oRjGD1RmSc+gRRyQV81lwKfLfIN9boPHXUaTKk JFusBwxoeVy1o8DIcP59VxPLICo+oSFko+ftIDTF1OfB -----END CERTIFICATE-----Generated at Wed Dec 17 20:07:26 2025 by rpki-client