This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/GYr8yP9MN4MbpWp4jixKRApgKMs.roa File: GYr8yP9MN4MbpWp4jixKRApgKMs.roa (raw, json) Hash identifier: pl+4FEfHYxinnMm48C/F+Vfnw1jWSSXa0/xCmlg6X+Q= Subject key identifier: 19:8A:FC:C8:FF:4C:37:83:1B:A5:6A:78:8E:2C:4A:44:0A:60:28:CB Certificate issuer: /CN=05e9f9f78c2cbbc5fa08b9b89f0a11d2b0ba473c Certificate serial: 019AC022C7186368FA786001A55D58F55978 Authority key identifier: 05:E9:F9:F7:8C:2C:BB:C5:FA:08:B9:B8:9F:0A:11:D2:B0:BA:47:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben594wsu8X6CLm4nwoR0rC6Rzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/GYr8yP9MN4MbpWp4jixKRApgKMs.roa Signing time: Wed 26 Nov 2025 12:28:15 +0000 ROA not before: Wed 26 Nov 2025 12:28:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15461 IP address blocks: 91.219.220.0/22 maxlen: 24 193.93.12.0/22 maxlen: 22 2001:67c:f84::/48 maxlen: 48 2a0b:afc0::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben594wsu8X6CLm4nwoR0rC6Rzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c0:22:c7:18:63:68:fa:78:60:01:a5:5d:58:f5:59:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9f9f78c2cbbc5fa08b9b89f0a11d2b0ba473c Validity Not Before: Nov 26 12:28:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=198afcc8ff4c37831ba56a788e2c4a440a6028cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e6:21:ba:be:39:19:41:0e:e5:b1:1a:ae:a5: c7:15:09:c2:3b:d4:fa:4a:a2:6e:43:03:de:e7:f1: ee:b8:7f:05:15:1b:af:47:6a:82:9d:c8:94:75:0c: 50:e1:fd:1b:52:78:79:94:e4:66:86:89:8b:0a:77: da:88:85:8d:83:a0:36:17:9f:29:78:52:08:33:9b: d4:9d:b2:9b:31:75:13:8c:92:69:a4:c9:4e:9a:50: a5:9f:5c:ef:d3:69:b3:b7:e0:e9:8f:22:e8:8e:f0: 31:af:6c:fb:4c:e0:66:cd:75:72:97:68:55:6c:93: d1:4f:53:d4:94:64:0f:16:94:91:87:36:5b:48:91: 5b:85:34:96:75:29:89:5d:3a:a3:7e:61:b3:6a:d5: a1:af:90:ea:92:2b:51:fd:2d:bb:69:76:2a:f4:92: 1e:14:d3:f2:64:c4:3a:bf:ef:55:21:f2:43:15:71: 90:cb:a1:95:c1:f9:1a:49:cc:35:09:6b:38:b5:25: 8c:6e:55:ad:92:52:14:4f:7a:55:8b:23:61:74:f8: 3c:39:81:58:4b:d7:7c:29:77:7a:20:f7:4a:b2:c0: 53:86:bb:78:24:a8:fb:21:9e:73:39:60:79:f7:ec: 14:2f:36:5b:42:be:44:62:52:c6:48:71:77:7f:a6: 0a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8A:FC:C8:FF:4C:37:83:1B:A5:6A:78:8E:2C:4A:44:0A:60:28:CB X509v3 Authority Key Identifier: keyid:05:E9:F9:F7:8C:2C:BB:C5:FA:08:B9:B8:9F:0A:11:D2:B0:BA:47:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben594wsu8X6CLm4nwoR0rC6Rzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/GYr8yP9MN4MbpWp4jixKRApgKMs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.219.220.0/22 193.93.12.0/22 IPv6: 2001:67c:f84::/48 2a0b:afc0::/36 Signature Algorithm: sha256WithRSAEncryption 52:68:b9:5b:e2:a2:26:67:76:2c:25:a3:e3:fc:74:d4:86:c2: b9:49:79:39:9c:e0:fb:c0:70:0c:ab:2f:de:88:6f:f6:84:8a: 7d:06:00:17:58:9c:12:73:cf:cb:d1:18:8d:38:57:9a:e4:91: c8:7a:2c:b1:1f:b5:a3:9a:05:19:29:2f:50:59:cf:05:d3:bd: d6:89:c9:9a:be:b4:f3:6a:d3:41:27:dc:79:a5:b5:65:55:c2: 80:68:95:16:35:23:39:2d:d2:ed:3a:ec:6e:16:d9:2d:ad:69: 22:26:74:19:22:a1:20:0d:09:f5:2c:92:29:cd:19:99:6f:b5: 7f:87:96:7d:8b:18:7b:94:6d:89:d4:de:f7:32:9f:4d:f9:cd: 90:fd:fc:d5:03:fa:b5:70:8f:b0:03:a5:5f:98:46:dc:f9:c0: 62:64:1d:18:69:2e:ba:e2:4d:8d:dd:04:23:a1:ae:31:bf:37: 17:4f:36:c3:3d:1f:6c:f5:48:86:62:11:62:c5:36:53:92:19: 55:d2:32:e5:2d:4a:55:6a:03:ec:77:51:ac:4e:91:30:c4:bb: 2c:5a:1e:ab:81:fd:f3:76:40:9c:f3:8e:b1:9d:ca:8a:ec:05: 83:4c:0f:cd:64:4a:af:44:f2:64:b4:a2:50:ef:99:1b:05:d9: 8f:3b:f5:f7 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZrAIscYY2j6eGABpV1Y9Vl4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmOWY3OGMyY2JiYzVmYTA4YjliODlmMGExMWQyYjBi YTQ3M2MwHhcNMjUxMTI2MTIyODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOThhZmNjOGZmNGMzNzgzMWJhNTZhNzg4ZTJjNGE0NDBhNjAyOGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeYhur45GUEO5bEarqXHFQnCO9T6 SqJuQwPe5/HuuH8FFRuvR2qCnciUdQxQ4f0bUnh5lORmhomLCnfaiIWNg6A2F58p eFIIM5vUnbKbMXUTjJJppMlOmlCln1zv02mzt+DpjyLojvAxr2z7TOBmzXVyl2hV bJPRT1PUlGQPFpSRhzZbSJFbhTSWdSmJXTqjfmGzatWhr5DqkitR/S27aXYq9JIe FNPyZMQ6v+9VIfJDFXGQy6GVwfkaScw1CWs4tSWMblWtklIUT3pViyNhdPg8OYFY S9d8KXd6IPdKssBThrt4JKj7IZ5zOWB59+wULzZbQr5EYlLGSHF3f6YK3QIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFBmK/Mj/TDeDG6VqeI4sSkQKYCjLMB8GA1UdIwQY MBaAFAXp+feMLLvF+gi5uJ8KEdKwukc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuNTk0d3N1OFg2Q0xtNG53b1IwckM2Unp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83NjUzOGMtZGY1YS00YTZhLTliODYt YTZhYjk3YTBmNDQ1LzEvR1lyOHlQOU1ONE1icFdwNGppeEtSQXBnS01zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83NjUzOGMtZGY1YS00YTZhLTliODYtYTZhYjk3YTBmNDQ1 LzEvQmVuNTk0d3N1OFg2Q0xtNG53b1IwckM2Unp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTASBAIAATAMAwQCW9vcAwQC wV0MMBcEAgACMBEDBwAgAQZ8D4QDBgQqC6/AADANBgkqhkiG9w0BAQsFAAOCAQEA Umi5W+KiJmd2LCWj4/x01IbCuUl5OZzg+8BwDKsv3ohv9oSKfQYAF1icEnPPy9EY jThXmuSRyHossR+1o5oFGSkvUFnPBdO91onJmr6082rTQSfceaW1ZVXCgGiVFjUj OS3S7TrsbhbZLa1pIiZ0GSKhIA0J9SySKc0ZmW+1f4eWfYsYe5RtidTe9zKfTfnN kP381QP6tXCPsAOlX5hG3PnAYmQdGGkuuuJNjd0EI6GuMb83F082wz0fbPVIhmIR YsU2U5IZVdIy5S1KVWoD7HdRrE6RMMS7LFoeq4H983ZAnPOOsZ3KiuwFg0wPzWRK r0TyZLSiUO+ZGwXZjzv19w== -----END CERTIFICATE-----Generated at Sat Dec 6 20:31:13 2025 by rpki-client