This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/TyU9koBZ-FfwUjRzFMgXymhIcdc.roa File: TyU9koBZ-FfwUjRzFMgXymhIcdc.roa (raw, json) Hash identifier: PuygGCOb3s6Y5+fEOZlXXly4EGutd8BVkQrZLC3GUys= Subject key identifier: 4F:25:3D:92:80:59:F8:57:F0:52:34:73:14:C8:17:CA:68:48:71:D7 Certificate issuer: /CN=3ad65216812ed24fd1c719871a59a971dec30a26 Certificate serial: 019AC07616DB29ED6AD6AC0F2A70410E30B0 Authority key identifier: 3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/TyU9koBZ-FfwUjRzFMgXymhIcdc.roa Signing time: Wed 26 Nov 2025 13:59:15 +0000 ROA not before: Wed 26 Nov 2025 13:59:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 35579 IP address blocks: 37.122.220.0/22 maxlen: 24 78.142.66.0/23 maxlen: 23 78.142.80.0/22 maxlen: 24 78.142.85.0/24 maxlen: 24 78.142.86.0/23 maxlen: 23 78.142.88.0/23 maxlen: 23 78.142.90.0/24 maxlen: 24 78.142.91.0/24 maxlen: 24 78.142.92.0/24 maxlen: 24 78.142.118.0/24 maxlen: 24 78.142.119.0/24 maxlen: 24 78.142.120.0/24 maxlen: 24 78.142.121.0/24 maxlen: 24 91.226.156.0/22 maxlen: 24 92.63.213.0/24 maxlen: 24 195.16.239.0/24 maxlen: 24 195.16.240.0/24 maxlen: 24 195.16.244.0/24 maxlen: 24 195.16.248.0/23 maxlen: 24 195.16.250.0/24 maxlen: 24 195.16.252.0/24 maxlen: 24 195.69.104.0/22 maxlen: 24 195.69.104.0/23 maxlen: 24 195.69.106.0/24 maxlen: 24 2a04:5080::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c0:76:16:db:29:ed:6a:d6:ac:0f:2a:70:41:0e:30:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad65216812ed24fd1c719871a59a971dec30a26 Validity Not Before: Nov 26 13:59:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4f253d928059f857f052347314c817ca684871d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:fe:b5:38:89:f6:63:65:e8:fa:bd:55:94:e4: 15:a2:b1:91:91:d2:a2:4f:b5:97:be:84:04:f0:c5: 42:4c:0d:45:3e:1b:fd:07:07:ad:6f:8c:ce:31:95: 23:f3:dd:07:78:54:a0:cb:21:d0:84:28:23:f3:c0: 82:18:4d:19:43:23:c5:08:ec:cf:20:97:06:e6:5b: f3:74:42:08:e4:af:e5:84:d4:eb:d4:d0:35:dd:9e: 4f:6a:3d:87:f7:94:56:c3:16:2d:c4:57:29:ab:e1: 62:62:36:ff:99:e4:76:f7:a1:aa:22:e5:59:79:89: 45:5f:00:b4:63:ef:2e:48:8d:84:18:44:87:38:d1: be:93:e4:95:6e:48:a8:db:47:0d:27:66:b8:b6:16: 6c:a6:a8:da:8d:37:4e:4a:80:fc:5e:eb:ee:5a:72: 63:21:56:31:d0:63:09:d9:6e:cf:5b:74:ee:ac:25: 95:fa:99:7d:d1:48:1d:95:c2:15:ab:9c:87:b4:67: d5:b7:0b:76:8f:29:e8:a6:34:cd:a1:60:f4:50:79: f8:a0:99:c5:80:ce:4a:d9:3a:6b:e7:86:aa:c1:d4: 64:17:e8:a6:79:1a:15:60:82:b3:31:cd:08:92:0d: 8c:ed:c9:48:1b:ee:ca:ed:b5:e5:18:51:86:fd:dc: 06:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:25:3D:92:80:59:F8:57:F0:52:34:73:14:C8:17:CA:68:48:71:D7 X509v3 Authority Key Identifier: keyid:3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/TyU9koBZ-FfwUjRzFMgXymhIcdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.122.220.0/22 78.142.66.0/23 78.142.80.0/22 78.142.85.0-78.142.92.255 78.142.118.0-78.142.121.255 91.226.156.0/22 92.63.213.0/24 195.16.239.0-195.16.240.255 195.16.244.0/24 195.16.248.0-195.16.250.255 195.16.252.0/24 195.69.104.0/22 IPv6: 2a04:5080::/29 Signature Algorithm: sha256WithRSAEncryption 9c:02:21:1e:aa:93:9e:00:4e:fc:16:88:89:e8:a1:03:98:9a: f1:35:bf:44:35:c3:04:03:fb:78:e8:97:aa:c5:86:a0:7d:5f: f2:70:ff:e3:04:43:72:70:bb:78:4f:07:67:5a:91:4d:b8:22: db:99:11:9a:34:88:4b:42:c4:27:e5:9c:7f:3c:13:d3:3f:a5: 20:d8:38:0e:c9:f8:a4:15:80:b7:54:19:12:b1:51:e3:26:45: 7b:0c:f3:8b:9a:67:b6:f5:dc:65:39:80:c7:de:d0:05:9b:6d: e3:38:d8:e7:45:cc:14:56:88:28:37:7d:97:34:06:32:24:9b: c3:22:ce:fc:cf:49:7f:89:ee:62:14:40:b9:51:e7:10:1a:17: 7d:ca:26:7b:f5:3d:60:f3:de:e5:6e:ab:9f:a3:88:9f:84:23: ac:a3:27:09:cf:75:03:41:b4:24:c2:62:ba:b9:13:7a:58:08: 3e:99:82:bb:47:20:c2:60:6a:fb:c9:a0:45:ac:f9:f5:d0:77: 1f:17:a9:9e:23:15:b5:cc:78:95:39:fe:c0:6a:55:2d:e0:1d: 21:71:c2:80:50:15:f2:45:c3:d7:5b:a9:b0:4f:00:9d:2f:cb: fd:e3:62:9e:8f:b8:80:ff:c6:5f:92:d0:ff:5d:31:d1:8c:90: 80:6f:07:e7 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgISAZrAdhbbKe1q1qwPKnBBDjCwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDY1MjE2ODEyZWQyNGZkMWM3MTk4NzFhNTlhOTcxZGVj MzBhMjYwHhcNMjUxMTI2MTM1OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjI1M2Q5MjgwNTlmODU3ZjA1MjM0NzMxNGM4MTdjYTY4NDg3MWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4f61OIn2Y2Xo+r1VlOQVorGRkdKi T7WXvoQE8MVCTA1FPhv9Bwetb4zOMZUj890HeFSgyyHQhCgj88CCGE0ZQyPFCOzP IJcG5lvzdEII5K/lhNTr1NA13Z5Paj2H95RWwxYtxFcpq+FiYjb/meR296GqIuVZ eYlFXwC0Y+8uSI2EGESHONG+k+SVbkio20cNJ2a4thZspqjajTdOSoD8XuvuWnJj IVYx0GMJ2W7PW3TurCWV+pl90UgdlcIVq5yHtGfVtwt2jynopjTNoWD0UHn4oJnF gM5K2Tpr54aqwdRkF+imeRoVYIKzMc0Ikg2M7clIG+7K7bXlGFGG/dwG+wIDAQAB o4ICfDCCAngwHQYDVR0OBBYEFE8lPZKAWfhX8FI0cxTIF8poSHHXMB8GA1UdIwQY MBaAFDrWUhaBLtJP0ccZhxpZqXHewwomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RaU0ZvRXUwa19SeHhtSEdsbXBjZDdEQ2lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9iOGNhZTQtYjVhZi00MzgwLTk4MTct NDY1MzhjYTUzODNjLzEvVHlVOWtvQlotRmZ3VWpSekZNZ1h5bWhJY2RjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9iOGNhZTQtYjVhZi00MzgwLTk4MTctNDY1MzhjYTUzODNj LzEvT3RaU0ZvRXUwa19SeHhtSEdsbXBjZDdEQ2lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGRBggrBgEFBQcBBwEB/wSBgTB/MG4EAgABMGgDBAIletwD BAFOjkIDBAJOjlAwDAMEAE6OVQMEAE6OXDAMAwQBTo52AwQBTo54AwQCW+KcAwQA XD/VMAwDBADDEO8DBADDEPADBADDEPQwDAMEA8MQ+AMEAMMQ+gMEAMMQ/AMEAsNF aDANBAIAAjAHAwUDKgRQgDANBgkqhkiG9w0BAQsFAAOCAQEAnAIhHqqTngBO/BaI ieihA5ia8TW/RDXDBAP7eOiXqsWGoH1f8nD/4wRDcnC7eE8HZ1qRTbgi25kRmjSI S0LEJ+WcfzwT0z+lINg4Dsn4pBWAt1QZErFR4yZFewzzi5pntvXcZTmAx97QBZtt 4zjY50XMFFaIKDd9lzQGMiSbwyLO/M9Jf4nuYhRAuVHnEBoXfcome/U9YPPe5W6r n6OIn4QjrKMnCc91A0G0JMJiurkTelgIPpmCu0cgwmBq+8mgRaz59dB3HxepniMV tcx4lTn+wGpVLeAdIXHCgFAV8kXD11upsE8AnS/L/eNino+4gP/GX5LQ/10x0YyQ gG8H5w== -----END CERTIFICATE-----Generated at Sat Dec 6 17:14:42 2025 by rpki-client