This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/y-31Qg8vN66n2f6X7cBZ6q-z1HE.roa File: y-31Qg8vN66n2f6X7cBZ6q-z1HE.roa (raw, json) Hash identifier: AlYM9CLcvWsuEg6knMfGAoMvFzW08av73u5AUGfuSb8= Subject key identifier: CB:ED:F5:42:0F:2F:37:AE:A7:D9:FE:97:ED:C0:59:EA:AF:B3:D4:71 Certificate issuer: /CN=d39123880f427446d5ff07cef9633e86dc49198d Certificate serial: 019A814164A4F6EE58DEEA7F7B4772F5A2D7 Authority key identifier: D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/y-31Qg8vN66n2f6X7cBZ6q-z1HE.roa Signing time: Fri 14 Nov 2025 07:25:37 +0000 ROA not before: Fri 14 Nov 2025 07:25:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 396982 IP address blocks: 45.153.78.0/24 maxlen: 24 45.153.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:41:64:a4:f6:ee:58:de:ea:7f:7b:47:72:f5:a2:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d39123880f427446d5ff07cef9633e86dc49198d Validity Not Before: Nov 14 07:25:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cbedf5420f2f37aea7d9fe97edc059eaafb3d471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:36:95:33:24:33:ee:5b:fc:09:64:2a:15:74: 52:eb:8b:a2:f5:b5:ce:c1:f7:74:e4:e1:82:56:f3: b2:ca:ff:f3:7b:f7:72:57:17:3e:f5:e7:17:76:25: b3:44:4a:4b:d8:85:c6:83:17:28:10:76:2c:4f:a0: d8:b9:0f:95:63:39:05:b2:cf:b1:66:5b:b7:29:8c: c6:62:ab:07:83:a2:49:fb:a2:b5:06:1d:ac:40:30: 3e:d4:0c:a9:6a:d2:19:b6:7a:80:d1:f2:96:de:15: 24:97:1b:b6:9f:60:7c:8e:1a:d4:d2:37:1a:ab:fe: b7:f9:4a:dd:c8:a8:d4:87:80:68:49:a5:ec:88:8b: b3:bc:13:98:66:7f:79:0d:6c:4e:46:cc:f5:be:ea: f0:a9:ea:3f:25:19:54:19:8c:e4:ca:fd:9c:64:ae: 6d:76:2e:1f:08:8f:ea:4f:4d:9b:32:93:3a:f7:a8: 08:d5:0a:ff:20:4d:d9:b5:73:96:ba:cd:80:d6:d1: 32:04:8b:b5:a0:ee:6b:4d:b6:f2:50:c1:c0:4e:1a: ef:9e:79:c7:f4:4e:30:00:89:2a:5c:63:61:e4:35: 04:99:3d:90:62:76:93:ad:d8:1b:e5:cd:16:8b:7b: 76:ca:51:c2:93:f0:dc:e4:f7:0d:d5:38:1b:84:63: 13:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:ED:F5:42:0F:2F:37:AE:A7:D9:FE:97:ED:C0:59:EA:AF:B3:D4:71 X509v3 Authority Key Identifier: keyid:D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/y-31Qg8vN66n2f6X7cBZ6q-z1HE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.78.0/23 Signature Algorithm: sha256WithRSAEncryption ad:cb:5e:73:8d:67:17:89:3b:c5:54:8d:27:05:5a:93:eb:3e: 94:37:c5:c8:ae:19:c2:69:20:5f:bb:d6:b7:20:32:1e:c6:d5: 05:16:18:8f:8b:3b:d8:e5:9f:1b:0d:c5:87:3a:27:db:fe:bf: 87:44:32:80:d7:e3:53:44:4b:69:cf:1d:f6:c1:5e:07:e5:0f: 69:1c:22:db:3b:e7:c6:67:dc:b9:91:dd:b2:6a:df:de:8c:53: 32:b9:e7:2f:c5:ae:dc:b5:c4:12:5b:b3:eb:f3:cc:e7:78:61: 20:65:55:e6:37:c0:6b:dd:0a:46:fe:e6:1d:ec:9e:91:68:a4: 7f:6a:96:2e:ae:b5:47:76:4b:60:fa:24:fa:3a:17:0a:52:a4: a3:38:80:8b:f1:c2:b9:ba:2d:6a:07:64:04:1b:9a:dd:95:a3: ba:fb:f4:92:05:67:13:da:63:81:67:31:f1:19:63:c1:ed:58: 1d:e8:6f:9c:3e:d1:37:12:84:86:86:55:07:40:8a:8c:a5:9e: 20:a3:56:47:44:ea:78:25:12:4f:74:83:e0:b2:bb:58:1d:b7: bc:c9:c0:a0:26:0d:1a:3b:b5:d9:5e:c7:b7:c3:94:57:8b:21: fc:9a:11:60:80:39:e8:9c:7e:1b:05:44:97:e1:27:d0:98:ee: 61:2e:28:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqBQWSk9u5Y3up/e0dy9aLXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzOTEyMzg4MGY0Mjc0NDZkNWZmMDdjZWY5NjMzZTg2ZGM0 OTE5OGQwHhcNMjUxMTE0MDcyNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmVkZjU0MjBmMmYzN2FlYTdkOWZlOTdlZGMwNTllYWFmYjNkNDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TaVMyQz7lv8CWQqFXRS64ui9bXO wfd05OGCVvOyyv/ze/dyVxc+9ecXdiWzREpL2IXGgxcoEHYsT6DYuQ+VYzkFss+x Zlu3KYzGYqsHg6JJ+6K1Bh2sQDA+1AypatIZtnqA0fKW3hUklxu2n2B8jhrU0jca q/63+UrdyKjUh4BoSaXsiIuzvBOYZn95DWxORsz1vurwqeo/JRlUGYzkyv2cZK5t di4fCI/qT02bMpM696gI1Qr/IE3ZtXOWus2A1tEyBIu1oO5rTbbyUMHAThrvnnnH 9E4wAIkqXGNh5DUEmT2QYnaTrdgb5c0Wi3t2ylHCk/Dc5PcN1TgbhGMTBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMvt9UIPLzeup9n+l+3AWeqvs9RxMB8GA1UdIwQY MBaAFNORI4gPQnRG1f8HzvljPobcSRmNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDVFamlBOUNkRWJWX3dmTy1XTS1odHhKR1kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82NjFiODQtMTE0ZC00OTI5LWI2ODQt Y2NhMGFkMjY4NWNhLzEveS0zMVFnOHZONjZuMmY2WDdjQlo2cS16MUhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS82NjFiODQtMTE0ZC00OTI5LWI2ODQtY2NhMGFkMjY4NWNh LzEvMDVFamlBOUNkRWJWX3dmTy1XTS1odHhKR1kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZlOMA0G CSqGSIb3DQEBCwUAA4IBAQCty15zjWcXiTvFVI0nBVqT6z6UN8XIrhnCaSBfu9a3 IDIextUFFhiPizvY5Z8bDcWHOifb/r+HRDKA1+NTREtpzx32wV4H5Q9pHCLbO+fG Z9y5kd2yat/ejFMyuecvxa7ctcQSW7Pr88zneGEgZVXmN8Br3QpG/uYd7J6RaKR/ apYurrVHdktg+iT6OhcKUqSjOICL8cK5ui1qB2QEG5rdlaO6+/SSBWcT2mOBZzHx GWPB7Vgd6G+cPtE3EoSGhlUHQIqMpZ4go1ZHROp4JRJPdIPgsrtYHbe8ycCgJg0a O7XZXse3w5RXiyH8mhFggDnonH4bBUSX4SfQmO5hLigx -----END CERTIFICATE-----Generated at Sat Dec 6 13:31:59 2025 by rpki-client