This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/yZ4vXeGMHqg4vPhD6IlGofsTRkk.roa File: yZ4vXeGMHqg4vPhD6IlGofsTRkk.roa (raw, json) Hash identifier: /n0fq68ZpVZSGKSRZshtwzMTWF+j9IcQHcWLF+UFRKY= Subject key identifier: C9:9E:2F:5D:E1:8C:1E:A8:38:BC:F8:43:E8:89:46:A1:FB:13:46:49 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019ADE751D756A68BA4BE50A87AAA04EE05A Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/yZ4vXeGMHqg4vPhD6IlGofsTRkk.roa Signing time: Tue 02 Dec 2025 09:46:48 +0000 ROA not before: Tue 02 Dec 2025 09:46:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199524 IP address blocks: 188.255.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:75:1d:75:6a:68:ba:4b:e5:0a:87:aa:a0:4e:e0:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Dec 2 09:46:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c99e2f5de18c1ea838bcf843e88946a1fb134649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b6:54:16:92:34:b0:5a:01:2d:61:47:1e:9f: c9:10:68:e4:b5:95:a4:bf:f6:50:6b:d4:ca:fd:1c: 80:c0:f4:a2:36:77:64:bb:19:ab:4a:48:f8:33:c7: 75:b6:17:f2:94:f8:a0:a2:9d:ea:6b:a4:f3:8f:dc: 52:79:d2:3a:90:b3:54:55:21:de:9d:61:c9:04:7e: e9:5d:08:9a:4b:e0:9f:6e:5d:a7:55:39:3a:f8:2e: c2:15:f0:2f:5c:ce:b6:59:d9:da:a4:f2:1d:5d:83: fc:14:53:fe:3c:8c:02:d1:84:fa:4e:09:fe:e2:fe: 47:27:41:a8:d4:a2:da:a6:c9:54:19:98:fa:7d:25: ed:b6:ac:77:95:bb:a7:45:40:4b:27:0f:8a:2b:fa: 21:14:7b:0c:7a:95:70:e3:e5:6c:73:bd:42:4b:40: e3:fe:ad:ec:0a:3e:46:1f:ae:19:2c:7d:60:ca:7f: 46:cc:28:df:f4:a0:ae:68:2f:73:50:2e:e8:7f:55: 00:89:7e:cb:bc:fb:61:e9:86:37:ee:13:18:bc:01: f0:ea:1d:dc:22:2c:d8:67:94:9f:89:97:23:8d:a7: 61:ac:82:0d:8e:81:4d:d1:65:03:47:a9:68:a7:ab: 91:39:fc:3d:a4:64:3d:46:0e:af:41:57:ca:79:ed: c8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:9E:2F:5D:E1:8C:1E:A8:38:BC:F8:43:E8:89:46:A1:FB:13:46:49 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/yZ4vXeGMHqg4vPhD6IlGofsTRkk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.255.247.0/24 Signature Algorithm: sha256WithRSAEncryption 30:4f:18:13:27:75:ea:18:61:36:c0:53:d8:7a:52:9f:19:38: a4:2c:e9:ad:7e:a9:d5:87:e8:62:cc:5b:13:89:0b:b6:79:38: 5c:06:06:21:08:2d:f6:b9:ce:98:5c:8f:60:9f:63:96:d6:42: 86:34:e9:7c:76:d3:0d:e6:c0:21:87:90:8d:27:b2:1b:d3:3e: c7:80:c5:23:9e:0d:b3:78:48:2c:8f:57:40:15:00:aa:48:28: 8c:2a:57:6a:8f:6e:19:5a:61:26:c9:7c:bf:a3:95:6a:9f:25: 86:88:47:ce:ac:2d:2a:81:2f:6c:c1:c1:c9:c1:15:03:04:d0: 35:44:32:29:63:d0:f4:81:e6:23:71:cc:8f:9c:3e:a8:37:2f: 2f:7b:ab:c6:b1:02:b9:33:45:fd:9e:aa:60:d1:18:99:e5:7a: 70:df:2d:c7:3a:16:34:0b:a1:07:e9:60:4c:7b:5f:fd:dc:23: 27:6a:68:4a:33:fd:f2:ee:15:42:c3:6c:5f:51:d0:5c:16:ff: 4e:14:6f:be:be:20:29:ad:e0:2c:7c:3c:41:68:8d:7b:15:72: be:46:cf:9b:f7:9d:b1:87:2c:c2:ff:13:f5:cc:9e:02:f7:b4: 5a:68:66:c7:e1:d9:a7:ba:84:8c:89:79:79:f6:fc:5c:c0:cc: 42:42:7e:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZredR11ami6S+UKh6qgTuBaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUxMjAyMDk0NjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTllMmY1ZGUxOGMxZWE4MzhiY2Y4NDNlODg5NDZhMWZiMTM0NjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbZUFpI0sFoBLWFHHp/JEGjktZWk v/ZQa9TK/RyAwPSiNndkuxmrSkj4M8d1thfylPigop3qa6Tzj9xSedI6kLNUVSHe nWHJBH7pXQiaS+Cfbl2nVTk6+C7CFfAvXM62WdnapPIdXYP8FFP+PIwC0YT6Tgn+ 4v5HJ0Go1KLapslUGZj6fSXttqx3lbunRUBLJw+KK/ohFHsMepVw4+Vsc71CS0Dj /q3sCj5GH64ZLH1gyn9GzCjf9KCuaC9zUC7of1UAiX7LvPth6YY37hMYvAHw6h3c IizYZ5SfiZcjjadhrIINjoFN0WUDR6lop6uROfw9pGQ9Rg6vQVfKee3I2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMmeL13hjB6oOLz4Q+iJRqH7E0ZJMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEveVo0dlhlR01IcWc0dlBoRDZJbEdvZnNUUmtrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvP/3MA0G CSqGSIb3DQEBCwUAA4IBAQAwTxgTJ3XqGGE2wFPYelKfGTikLOmtfqnVh+hizFsT iQu2eThcBgYhCC32uc6YXI9gn2OW1kKGNOl8dtMN5sAhh5CNJ7Ib0z7HgMUjng2z eEgsj1dAFQCqSCiMKldqj24ZWmEmyXy/o5VqnyWGiEfOrC0qgS9swcHJwRUDBNA1 RDIpY9D0geYjccyPnD6oNy8ve6vGsQK5M0X9nqpg0RiZ5Xpw3y3HOhY0C6EH6WBM e1/93CMnamhKM/3y7hVCw2xfUdBcFv9OFG++viApreAsfDxBaI17FXK+Rs+b952x hyzC/xP1zJ4C97RaaGbH4dmnuoSMiXl59vxcwMxCQn5A -----END CERTIFICATE-----Generated at Sat Dec 6 15:41:28 2025 by rpki-client