This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/sHtLzY6Mm5z8Ydn_aEPMIQpvPzQ.roa File: sHtLzY6Mm5z8Ydn_aEPMIQpvPzQ.roa (raw, json) Hash identifier: kjgPiO+UfRpQtHTMhcTcDm5t7YhA8va5h5HMjgtYZyA= Subject key identifier: B0:7B:4B:CD:8E:8C:9B:9C:FC:61:D9:FF:68:43:CC:21:0A:6F:3F:34 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019ADA6A91954AB2253BF5878F7EBCC48392 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/sHtLzY6Mm5z8Ydn_aEPMIQpvPzQ.roa Signing time: Mon 01 Dec 2025 14:56:48 +0000 ROA not before: Mon 01 Dec 2025 14:56:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202678 IP address blocks: 188.132.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:6a:91:95:4a:b2:25:3b:f5:87:8f:7e:bc:c4:83:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Dec 1 14:56:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b07b4bcd8e8c9b9cfc61d9ff6843cc210a6f3f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:73:b6:88:da:ec:0b:ca:f0:c4:d5:7c:0b:be: ce:68:1b:ff:f4:89:3e:50:19:ab:6b:c6:43:8e:0c: 85:c9:5f:20:3e:3b:4b:a1:16:ce:ac:95:84:4f:d2: 73:1a:ff:c3:ee:64:1f:ec:bb:70:87:36:28:51:f5: 4f:21:5c:a1:9e:42:d0:90:d0:d6:d4:0c:b0:3c:81: 8b:ea:e7:c0:6d:3a:8f:07:78:0a:44:91:c6:8c:e9: 39:85:b0:3a:97:9b:e2:d4:c1:d3:98:fb:e9:c8:5d: b2:af:cf:1a:df:bf:65:1c:b1:a0:75:7f:90:64:94: 80:3e:5d:21:42:29:95:fe:0a:51:b4:9e:f9:62:d5: 8c:fb:f0:c5:1d:48:24:d0:ab:6b:64:ff:fc:ce:2f: 5b:a4:db:e3:eb:c3:11:40:e9:5d:c1:35:9d:cf:9d: ea:f6:2e:18:0f:83:7f:07:ca:21:af:06:2c:e4:ae: 0f:ca:3c:00:d9:f6:06:75:59:11:c4:2a:85:89:53: a4:9c:ef:90:ec:a3:17:63:8f:22:df:7d:a2:67:56: 8b:33:85:0e:e6:66:cd:bf:1d:e0:b8:89:4b:51:92: ae:c5:b9:99:9b:45:d3:a3:e6:19:71:6c:57:a6:f9: 9b:04:b7:e9:03:7f:0e:8d:4a:dd:7c:7e:68:d0:fa: cb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7B:4B:CD:8E:8C:9B:9C:FC:61:D9:FF:68:43:CC:21:0A:6F:3F:34 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/sHtLzY6Mm5z8Ydn_aEPMIQpvPzQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.132.218.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:a2:4c:4e:1b:14:bb:6e:50:d3:ad:81:52:6c:10:01:28:43: 7c:3a:b3:b9:79:3b:8e:ed:20:9b:b9:ed:18:60:90:1c:32:9c: 5b:0e:9e:ed:f5:8f:a8:c2:c1:96:34:e3:24:e9:52:22:27:87: 4f:e5:13:51:35:be:ca:f8:c5:30:46:da:96:63:f9:e0:06:09: dd:f9:30:0d:08:31:f9:6f:35:45:76:f2:7f:89:45:9b:a1:ce: 40:7c:f1:5b:1f:46:95:a5:c3:78:47:19:14:ce:fb:60:81:e6: f6:24:6d:8f:9f:56:38:0f:fa:30:d8:78:4d:a4:05:c5:f6:b4: 59:48:68:6e:62:2e:e9:32:8e:83:53:ee:93:20:47:fb:9e:ff: 2e:5e:54:49:37:02:3b:53:61:7a:3f:6f:d9:21:99:03:ea:3e: 43:09:ac:8c:04:c4:80:1d:08:5a:e8:ec:07:41:43:bc:6b:38: 15:0b:56:7d:fa:39:9c:ab:86:95:1c:05:6e:e8:6c:c9:8a:5c: 7d:c0:5a:bd:8d:a3:0e:c1:bd:3d:f4:f9:72:1a:2b:b5:9e:57: 88:64:34:41:20:f5:21:88:60:78:14:ac:34:b3:82:25:27:d9: 8f:a2:eb:3e:1f:d2:39:ab:fa:d1:ab:28:9a:9a:c7:51:18:d9: f2:3c:8b:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZraapGVSrIlO/WHj368xIOSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjUxMjAxMTQ1NjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDdiNGJjZDhlOGM5YjljZmM2MWQ5ZmY2ODQzY2MyMTBhNmYzZjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HO2iNrsC8rwxNV8C77OaBv/9Ik+ UBmra8ZDjgyFyV8gPjtLoRbOrJWET9JzGv/D7mQf7LtwhzYoUfVPIVyhnkLQkNDW 1AywPIGL6ufAbTqPB3gKRJHGjOk5hbA6l5vi1MHTmPvpyF2yr88a379lHLGgdX+Q ZJSAPl0hQimV/gpRtJ75YtWM+/DFHUgk0KtrZP/8zi9bpNvj68MRQOldwTWdz53q 9i4YD4N/B8ohrwYs5K4PyjwA2fYGdVkRxCqFiVOknO+Q7KMXY48i332iZ1aLM4UO 5mbNvx3guIlLUZKuxbmZm0XTo+YZcWxXpvmbBLfpA38OjUrdfH5o0PrLbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLB7S82OjJuc/GHZ/2hDzCEKbz80MB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvc0h0THpZNk1tNXo4WWRuX2FFUE1JUXB2UHpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvITaMA0G CSqGSIb3DQEBCwUAA4IBAQCeokxOGxS7blDTrYFSbBABKEN8OrO5eTuO7SCbue0Y YJAcMpxbDp7t9Y+owsGWNOMk6VIiJ4dP5RNRNb7K+MUwRtqWY/ngBgnd+TANCDH5 bzVFdvJ/iUWboc5AfPFbH0aVpcN4RxkUzvtggeb2JG2Pn1Y4D/ow2HhNpAXF9rRZ SGhuYi7pMo6DU+6TIEf7nv8uXlRJNwI7U2F6P2/ZIZkD6j5DCayMBMSAHQha6OwH QUO8azgVC1Z9+jmcq4aVHAVu6GzJilx9wFq9jaMOwb099PlyGiu1nleIZDRBIPUh iGB4FKw0s4IlJ9mPous+H9I5q/rRqyiamsdRGNnyPIu0 -----END CERTIFICATE-----Generated at Sat Dec 6 12:44:16 2025 by rpki-client