This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/yjS8W9q67f67-uZJSGqCLJtk9CY.roa File: yjS8W9q67f67-uZJSGqCLJtk9CY.roa (raw, json) Hash identifier: M5J4UIW6ljIVCBEds8d+YToalBiEOBtwIgj/E8wpY8k= Subject key identifier: CA:34:BC:5B:DA:BA:ED:FE:BB:FA:E6:49:48:6A:82:2C:9B:64:F4:26 Certificate issuer: /CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec Certificate serial: 019ABA9B8ACA5DC1145E3E53A2152AF3E713 Authority key identifier: DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/yjS8W9q67f67-uZJSGqCLJtk9CY.roa Signing time: Tue 25 Nov 2025 10:42:26 +0000 ROA not before: Tue 25 Nov 2025 10:42:26 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60458 IP address blocks: 46.175.128.0/24 maxlen: 24 193.84.177.0/24 maxlen: 24 195.60.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:9b:8a:ca:5d:c1:14:5e:3e:53:a2:15:2a:f3:e7:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec Validity Not Before: Nov 25 10:42:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ca34bc5bdabaedfebbfae649486a822c9b64f426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:12:cb:f6:44:b5:a2:1a:6e:36:e7:c2:89:0d: 97:d2:e8:2b:f9:1f:5a:fb:49:de:f9:0d:aa:af:8b: 59:60:7a:6d:8e:86:6c:22:14:d2:67:51:c1:8c:a3: 46:ee:f0:f8:cc:ed:21:e2:5f:83:eb:83:da:8c:ba: 10:f7:dd:fc:c3:6f:59:36:9e:76:7d:a2:4f:0f:91: 62:91:fa:53:74:7b:af:23:a1:c8:f3:28:f7:51:48: 96:c5:1b:8a:a5:48:6b:84:37:f6:4b:fe:e6:48:d3: 93:bb:1a:9d:15:f6:c5:ba:47:2b:ce:08:dd:8d:42: 16:15:8a:0d:24:36:07:40:71:86:89:02:e7:6f:58: d6:82:db:8a:bf:3b:ea:0b:fb:34:c2:08:d3:eb:c2: ed:e1:57:c0:a0:fe:af:d8:4d:8e:f9:e4:be:6d:a4: 2c:b5:0c:e7:6b:34:24:ad:e5:e0:a0:81:b8:27:f0: 13:00:5f:a8:b5:b2:8c:89:d4:3b:ed:da:a6:71:aa: 18:1f:6f:70:ed:04:87:6f:4a:18:8d:22:cd:46:50: 24:02:7a:d4:98:b9:e4:f9:04:fb:27:24:de:e0:16: 54:98:fd:b2:0c:60:6f:c7:0b:da:44:7e:07:f1:43: df:59:bb:35:37:3b:82:cf:98:b1:c6:ec:9e:c4:65: 5d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:34:BC:5B:DA:BA:ED:FE:BB:FA:E6:49:48:6A:82:2C:9B:64:F4:26 X509v3 Authority Key Identifier: keyid:DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/yjS8W9q67f67-uZJSGqCLJtk9CY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.175.128.0/24 193.84.177.0/24 195.60.239.0/24 Signature Algorithm: sha256WithRSAEncryption 80:0c:68:7e:48:57:c4:c5:80:2c:47:da:08:56:5a:97:76:e1: 46:00:a6:9c:8a:2c:2e:12:f3:14:ee:21:46:11:2f:35:26:bd: ea:79:ea:89:b9:7f:ad:a7:a5:ec:fc:c8:8c:7a:84:63:57:12: 53:04:78:c8:c7:d8:2b:e4:1f:a3:ca:ba:9d:1f:bd:0b:0f:56: d7:8e:70:5c:1c:0f:f1:f2:2d:b2:64:15:83:86:6b:52:44:25: 75:11:b3:a5:1f:14:fd:5e:c0:bc:ac:be:0b:29:24:87:d3:12: 1f:8e:61:46:8e:b0:eb:2c:a9:64:52:ef:d7:35:fd:9e:9c:4e: 37:e3:6b:77:e0:7a:a4:d9:72:9d:2c:97:2f:d9:2f:7e:0f:3a: eb:d9:75:ae:43:64:0b:c4:6a:b5:e4:51:0b:ac:5b:48:5c:d8: 47:d3:a9:ce:b1:12:83:c3:d5:b5:44:cf:10:1b:a3:3b:4f:7e: 5b:0a:57:0a:f7:55:f3:41:95:59:c6:79:c4:31:29:d3:e8:1d: d5:9c:3c:2b:cc:22:65:b6:5c:bf:30:60:91:b3:37:e2:ce:fc: fb:c9:8d:b4:fc:a3:d4:e6:eb:22:f2:b6:fe:8a:7a:f1:56:81: fc:b3:12:cf:2b:d5:35:e6:f0:51:fe:c6:e7:93:17:27:f3:04: 68:b9:ed:90 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZq6m4rKXcEUXj5TohUq8+cTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjM2NiMjBjNWNhN2M0ZWQ4ZTQyMDc4YjFhNjcyODdhMGQ5 OTFjZWMwHhcNMjUxMTI1MTA0MjI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTM0YmM1YmRhYmFlZGZlYmJmYWU2NDk0ODZhODIyYzliNjRmNDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xLL9kS1ohpuNufCiQ2X0ugr+R9a +0ne+Q2qr4tZYHptjoZsIhTSZ1HBjKNG7vD4zO0h4l+D64PajLoQ9938w29ZNp52 faJPD5FikfpTdHuvI6HI8yj3UUiWxRuKpUhrhDf2S/7mSNOTuxqdFfbFukcrzgjd jUIWFYoNJDYHQHGGiQLnb1jWgtuKvzvqC/s0wgjT68Lt4VfAoP6v2E2O+eS+baQs tQznazQkreXgoIG4J/ATAF+otbKMidQ77dqmcaoYH29w7QSHb0oYjSLNRlAkAnrU mLnk+QT7JyTe4BZUmP2yDGBvxwvaRH4H8UPfWbs1NzuCz5ixxuyexGVdmQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMo0vFvauu3+u/rmSUhqgiybZPQmMB8GA1UdIwQY MBaAFNw8sgxcp8TtjkIHixpnKHoNmRzsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0R5eURGeW54TzJPUWdlTEdtY29lZzJaSE93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hODVmM2QtNjVhMi00ZjZjLTljYjkt ODI2NjBlZTRlYWM0LzEveWpTOFc5cTY3ZjY3LXVaSlNHcUNMSnRrOUNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9hODVmM2QtNjVhMi00ZjZjLTljYjktODI2NjBlZTRlYWM0 LzEvM0R5eURGeW54TzJPUWdlTEdtY29lZzJaSE93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALq+AAwQA wVSxAwQAwzzvMA0GCSqGSIb3DQEBCwUAA4IBAQCADGh+SFfExYAsR9oIVlqXduFG AKaciiwuEvMU7iFGES81Jr3qeeqJuX+tp6Xs/MiMeoRjVxJTBHjIx9gr5B+jyrqd H70LD1bXjnBcHA/x8i2yZBWDhmtSRCV1EbOlHxT9XsC8rL4LKSSH0xIfjmFGjrDr LKlkUu/XNf2enE4342t34Hqk2XKdLJcv2S9+Dzrr2XWuQ2QLxGq15FELrFtIXNhH 06nOsRKDw9W1RM8QG6M7T35bClcK91XzQZVZxnnEMSnT6B3VnDwrzCJltly/MGCR szfizvz7yY20/KPU5usi8rb+inrxVoH8sxLPK9U15vBR/sbnkxcn8wRoue2Q -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:48 2025 by rpki-client