This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/cyBrpEHhqKNbSMHCKzs3cSq3M_g.roa File: cyBrpEHhqKNbSMHCKzs3cSq3M_g.roa (raw, json) Hash identifier: RzBDnjaJmm2030+8C/HDxAp6HA2Wxhb+u2VbToBRA9U= Subject key identifier: 73:20:6B:A4:41:E1:A8:A3:5B:48:C1:C2:2B:3B:37:71:2A:B7:33:F8 Certificate issuer: /CN=b5431bd73e0a7f037deb97d82d1a95fcd671051c Certificate serial: 019A91831029E4B5D3C293266D93EBAAAD08 Authority key identifier: B5:43:1B:D7:3E:0A:7F:03:7D:EB:97:D8:2D:1A:95:FC:D6:71:05:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/cyBrpEHhqKNbSMHCKzs3cSq3M_g.roa Signing time: Mon 17 Nov 2025 11:11:17 +0000 ROA not before: Mon 17 Nov 2025 11:11:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208464 IP address blocks: 212.46.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:91:83:10:29:e4:b5:d3:c2:93:26:6d:93:eb:aa:ad:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5431bd73e0a7f037deb97d82d1a95fcd671051c Validity Not Before: Nov 17 11:11:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=73206ba441e1a8a35b48c1c22b3b37712ab733f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6f:aa:fe:72:b4:3f:3f:af:7b:9a:ce:90:b0: b2:aa:55:70:f7:c2:a6:60:e7:47:d4:9f:a9:92:09: 03:cd:04:19:cf:5a:c8:49:29:e5:85:df:69:13:18: ab:5f:2b:d7:9e:be:d8:22:a9:0b:5c:8f:d7:15:4c: 1d:da:25:91:44:57:6e:65:31:58:15:74:30:51:0b: c8:b2:47:29:52:63:7b:7d:ed:a5:92:e4:4e:e6:77: f5:c6:17:57:98:ec:10:fc:ee:f3:e6:a1:9c:92:6f: 7b:5f:2c:f5:92:ed:8e:4f:30:16:4e:62:a4:db:0f: 79:f8:1e:eb:30:66:24:16:d0:b9:7b:43:be:3f:db: 43:aa:f8:38:15:c0:71:65:b5:74:da:e7:6a:cd:a0: 67:5b:57:d4:db:c8:96:ed:ff:21:a5:30:be:6d:fa: e4:8b:d4:0e:92:81:ee:ae:ed:26:f7:9f:b9:68:62: 30:cd:df:a4:f2:b8:15:37:55:e8:c1:9b:ac:06:4b: f2:57:d8:1b:df:d8:eb:4c:27:6f:53:22:ff:44:37: 23:55:b0:d1:3c:3c:07:34:67:e6:4b:dc:c4:ab:3b: 97:1f:94:bd:c5:54:67:5c:64:12:d7:7e:bb:b3:86: 87:e6:bf:b4:b4:e2:0c:ea:a4:36:e3:44:31:d6:0a: 49:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:20:6B:A4:41:E1:A8:A3:5B:48:C1:C2:2B:3B:37:71:2A:B7:33:F8 X509v3 Authority Key Identifier: keyid:B5:43:1B:D7:3E:0A:7F:03:7D:EB:97:D8:2D:1A:95:FC:D6:71:05:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/cyBrpEHhqKNbSMHCKzs3cSq3M_g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.46.52.0/24 Signature Algorithm: sha256WithRSAEncryption 88:db:9f:c0:b7:5c:38:3d:25:b7:5d:5b:24:df:3e:57:a2:8a: 41:fd:0d:a9:2a:b2:e4:fc:d7:1e:f3:d9:b5:33:aa:31:9f:80: d5:9e:23:b3:56:d2:51:85:85:c8:81:8f:5a:2d:74:42:d7:d0: ec:81:99:97:62:9a:cd:3e:8e:70:e2:08:96:28:de:64:01:39: c5:e2:e1:10:28:9a:51:00:9f:ab:0d:3b:9c:da:83:d6:bf:80: a1:be:11:7a:44:f3:43:99:18:98:12:73:57:55:7e:c3:fe:51: 49:a8:6e:28:70:cc:52:ad:34:b7:b6:3c:89:70:41:13:8b:fa: 39:63:0f:a7:57:f0:1f:2d:2c:81:bb:d5:22:c2:81:57:9f:7b: 5c:40:97:83:8e:e5:c5:d3:bc:e7:b9:95:41:63:1d:21:bd:62: 4f:e6:4e:46:90:08:44:f0:92:74:d4:a3:53:64:41:76:ce:32: 83:be:fa:7c:c3:93:40:a4:59:a1:d5:d4:78:2e:0f:2f:f8:6b: d8:80:f6:86:52:bf:a6:54:1c:4d:e1:ca:3a:15:81:72:9b:c1: dd:b9:d3:8e:5f:ed:4a:d8:04:df:1e:99:74:dc:02:59:73:7a: 25:32:85:5f:a4:b6:28:d6:38:21:80:cf:89:bc:b8:32:fc:5e: 92:e6:19:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqRgxAp5LXTwpMmbZPrqq0IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NDMxYmQ3M2UwYTdmMDM3ZGViOTdkODJkMWE5NWZjZDY3 MTA1MWMwHhcNMjUxMTE3MTExMTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzIwNmJhNDQxZTFhOGEzNWI0OGMxYzIyYjNiMzc3MTJhYjczM2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxG+q/nK0Pz+ve5rOkLCyqlVw98Km YOdH1J+pkgkDzQQZz1rISSnlhd9pExirXyvXnr7YIqkLXI/XFUwd2iWRRFduZTFY FXQwUQvIskcpUmN7fe2lkuRO5nf1xhdXmOwQ/O7z5qGckm97Xyz1ku2OTzAWTmKk 2w95+B7rMGYkFtC5e0O+P9tDqvg4FcBxZbV02udqzaBnW1fU28iW7f8hpTC+bfrk i9QOkoHuru0m95+5aGIwzd+k8rgVN1XowZusBkvyV9gb39jrTCdvUyL/RDcjVbDR PDwHNGfmS9zEqzuXH5S9xVRnXGQS1367s4aH5r+0tOIM6qQ240Qx1gpJDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHMga6RB4aijW0jBwis7N3EqtzP4MB8GA1UdIwQY MBaAFLVDG9c+Cn8DfeuX2C0alfzWcQUcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFVNYjF6NEtmd045NjVmWUxScVZfTlp4QlJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9hMTI2MjktOGJkZi00Y2RkLTg2NzIt MWZkOWYyYzk4OTU2LzEvY3lCcnBFSGhxS05iU01IQ0t6czNjU3EzTV9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9hMTI2MjktOGJkZi00Y2RkLTg2NzItMWZkOWYyYzk4OTU2 LzEvdFVNYjF6NEtmd045NjVmWUxScVZfTlp4QlJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1C40MA0G CSqGSIb3DQEBCwUAA4IBAQCI25/At1w4PSW3XVsk3z5XoopB/Q2pKrLk/Nce89m1 M6oxn4DVniOzVtJRhYXIgY9aLXRC19DsgZmXYprNPo5w4giWKN5kATnF4uEQKJpR AJ+rDTuc2oPWv4ChvhF6RPNDmRiYEnNXVX7D/lFJqG4ocMxSrTS3tjyJcEETi/o5 Yw+nV/AfLSyBu9UiwoFXn3tcQJeDjuXF07znuZVBYx0hvWJP5k5GkAhE8JJ01KNT ZEF2zjKDvvp8w5NApFmh1dR4Lg8v+GvYgPaGUr+mVBxN4co6FYFym8HdudOOX+1K 2ATfHpl03AJZc3olMoVfpLYo1jghgM+JvLgy/F6S5hnd -----END CERTIFICATE-----Generated at Sat Dec 6 13:12:29 2025 by rpki-client