This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/y3M_S9Lkx0bRvURYEJ1jFXn0IDE.roa File: y3M_S9Lkx0bRvURYEJ1jFXn0IDE.roa (raw, json) Hash identifier: J+owsHeEjZMxVahX59fSdFJZuQMT7sogFPyy4332cl8= Subject key identifier: CB:73:3F:4B:D2:E4:C7:46:D1:BD:44:58:10:9D:63:15:79:F4:20:31 Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2 Certificate serial: 019AEEC407680BF86E958CEAFBCB5D13CCC4 Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/y3M_S9Lkx0bRvURYEJ1jFXn0IDE.roa Signing time: Fri 05 Dec 2025 13:46:55 +0000 ROA not before: Fri 05 Dec 2025 13:46:55 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 64457 IP address blocks: 188.137.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:c4:07:68:0b:f8:6e:95:8c:ea:fb:cb:5d:13:cc:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2 Validity Not Before: Dec 5 13:46:55 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cb733f4bd2e4c746d1bd4458109d631579f42031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:35:c3:8d:f2:df:b3:49:33:4c:a1:f4:db:5f: 53:4d:72:75:fa:2c:f8:1d:1b:e5:06:3f:1e:60:f7: da:13:d8:46:e7:4f:f4:77:33:4d:84:74:07:9c:ba: 5d:a8:df:2e:9d:24:fe:a6:37:06:e8:8c:4f:ae:bb: 4f:1f:a4:eb:c1:39:e5:42:e0:24:f3:be:18:63:1d: 1b:d6:67:89:38:f0:e8:f9:95:a0:58:dd:1a:d9:fc: c7:c5:ae:6f:e8:c1:fb:ec:54:1f:cf:c8:f0:c5:51: fe:b4:6b:a9:c8:b5:12:57:9f:a3:a6:4b:3f:5f:02: ab:94:97:f1:11:f4:ba:75:2f:f1:0b:85:c4:6f:94: ca:4b:6d:91:3c:24:5e:f1:39:4d:e0:c7:a5:2b:b8: f8:fb:39:d5:a9:cc:89:f6:e7:e3:21:26:4b:6d:34: d2:9e:47:aa:e2:da:e6:a8:ac:3b:4c:7c:70:04:d9: 16:95:88:f6:4d:6e:fc:36:8e:a8:bc:8e:fd:27:10: f7:86:4f:d3:4f:a6:23:38:1d:ec:39:b4:da:c8:b6: 65:c0:b1:0f:f7:c5:e6:b5:7a:50:31:fe:40:78:89: 57:de:2f:ea:15:66:fb:17:9a:c0:37:c4:0c:9f:c0: 5e:8c:87:96:1a:a4:90:b1:7c:a9:a9:94:e5:c5:61: db:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:73:3F:4B:D2:E4:C7:46:D1:BD:44:58:10:9D:63:15:79:F4:20:31 X509v3 Authority Key Identifier: keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/y3M_S9Lkx0bRvURYEJ1jFXn0IDE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.137.159.0/24 Signature Algorithm: sha256WithRSAEncryption 50:8e:88:f6:d7:99:73:e2:dd:fc:4c:a5:71:53:68:07:bd:db: 46:03:0a:45:9b:12:38:25:39:a4:1d:04:a2:3d:f6:e9:97:ce: 66:00:91:a9:e2:2f:c0:41:72:2f:26:bc:48:ce:87:85:84:55: 7c:54:2e:20:a8:14:62:aa:d1:e4:ff:ac:18:b2:41:25:b8:4d: 47:04:d8:be:cf:26:c6:a7:32:1a:20:75:55:8c:b2:e1:a0:55: ba:2b:47:65:6e:cc:9b:9c:26:ea:14:96:c3:34:84:ce:eb:ba: ef:83:b6:ae:a3:d8:9a:09:c6:5b:17:c4:af:e2:f5:20:a0:4e: 61:6a:b8:e0:db:c5:4b:f3:5d:ff:78:4d:b9:d5:eb:bc:bf:6e: f4:5d:6d:84:3a:42:48:b4:a3:78:76:d8:d2:d2:f4:e0:31:11: 75:2f:dc:69:07:01:42:c4:1b:e0:4d:1f:2b:33:85:eb:35:bc: db:3d:92:e1:54:c2:f1:83:b0:22:e5:f3:ee:2b:85:fb:cc:0f: 5f:a4:ba:58:d3:da:4c:14:05:5b:62:5f:67:57:d0:2b:c6:99: 5d:56:d5:55:08:65:3d:bc:a5:e1:dc:e6:09:90:bd:ee:33:77: 21:ef:4e:57:9c:70:b5:4c:b8:69:a7:6e:10:fa:c2:33:85:24: dc:aa:e0:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZruxAdoC/hulYzq+8tdE8zEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYTViNjIzNDdhMWI2NGNlYTQ5YTJhYjNhYjQ5ODNjMzQ4 NjFmYjIwHhcNMjUxMjA1MTM0NjU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjczM2Y0YmQyZTRjNzQ2ZDFiZDQ0NTgxMDlkNjMxNTc5ZjQyMDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDXDjfLfs0kzTKH0219TTXJ1+iz4 HRvlBj8eYPfaE9hG50/0dzNNhHQHnLpdqN8unST+pjcG6IxPrrtPH6TrwTnlQuAk 874YYx0b1meJOPDo+ZWgWN0a2fzHxa5v6MH77FQfz8jwxVH+tGupyLUSV5+jpks/ XwKrlJfxEfS6dS/xC4XEb5TKS22RPCRe8TlN4MelK7j4+znVqcyJ9ufjISZLbTTS nkeq4trmqKw7THxwBNkWlYj2TW78No6ovI79JxD3hk/TT6YjOB3sObTayLZlwLEP 98XmtXpQMf5AeIlX3i/qFWb7F5rAN8QMn8BejIeWGqSQsXypqZTlxWHbjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMtzP0vS5MdG0b1EWBCdYxV59CAxMB8GA1UdIwQY MBaAFO+ltiNHobZM6kmiqzq0mDw0hh+yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQt MDEzZDJhMTFjMGE1LzEveTNNX1M5TGt4MGJSdlVSWUVKMWpGWG4wSURFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQtMDEzZDJhMTFjMGE1 LzEvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvImfMA0G CSqGSIb3DQEBCwUAA4IBAQBQjoj215lz4t38TKVxU2gHvdtGAwpFmxI4JTmkHQSi Pfbpl85mAJGp4i/AQXIvJrxIzoeFhFV8VC4gqBRiqtHk/6wYskEluE1HBNi+zybG pzIaIHVVjLLhoFW6K0dlbsybnCbqFJbDNITO67rvg7auo9iaCcZbF8Sv4vUgoE5h arjg28VL813/eE251eu8v270XW2EOkJItKN4dtjS0vTgMRF1L9xpBwFCxBvgTR8r M4XrNbzbPZLhVMLxg7Ai5fPuK4X7zA9fpLpY09pMFAVbYl9nV9ArxpldVtVVCGU9 vKXh3OYJkL3uM3ch705XnHC1TLhpp24Q+sIzhSTcquAv -----END CERTIFICATE-----Generated at Sat Dec 6 18:23:54 2025 by rpki-client