This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/GYn3-F2uO_h2EHGbW3621tL76oU.roa File: GYn3-F2uO_h2EHGbW3621tL76oU.roa (raw, json) Hash identifier: /RXXjZL0Nfv6I7oI+hupErcQ8bgbLDwmluOriUWccuY= Subject key identifier: 19:89:F7:F8:5D:AE:3B:F8:76:10:71:9B:5B:7E:B6:D6:D2:FB:EA:85 Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad Certificate serial: 019AB2D06E2DB4B2BC3F1E8278E54C16A11B Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/GYn3-F2uO_h2EHGbW3621tL76oU.roa Signing time: Sun 23 Nov 2025 22:23:15 +0000 ROA not before: Sun 23 Nov 2025 22:23:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 398547 IP address blocks: 45.143.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b2:d0:6e:2d:b4:b2:bc:3f:1e:82:78:e5:4c:16:a1:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad Validity Not Before: Nov 23 22:23:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1989f7f85dae3bf87610719b5b7eb6d6d2fbea85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bb:a5:0f:58:69:dd:dc:a7:41:89:db:e8:62: 14:86:f2:a1:8b:98:7e:fc:41:6b:d2:33:6b:87:60: b2:87:47:89:b2:4a:93:0d:31:f4:09:10:78:ba:26: 16:2c:7e:4e:3e:e7:5d:d6:6e:72:e1:99:7c:d7:1c: 13:7a:1c:1d:de:97:e6:95:40:39:c4:9a:9c:3d:ad: 42:24:e9:2b:57:e1:6c:a9:7c:ef:ae:f9:0b:b6:49: 71:2b:b5:8a:c7:8f:c1:c0:76:e6:a2:f6:ca:ab:b1: d9:94:23:a9:22:22:6b:03:3a:44:33:d6:50:c1:ad: f2:92:7e:16:35:2b:ff:96:5c:9e:74:11:57:39:b3: 2d:d6:3e:1f:f2:4d:7e:bf:0d:bc:b4:6f:b5:98:aa: a6:1a:64:f4:ee:d9:a4:dc:44:d2:d9:af:3c:48:67: 23:d2:80:62:2e:73:70:04:53:44:aa:79:68:79:37: b5:16:4e:a1:5b:7f:9b:74:a2:1d:d1:0b:bc:0e:18: 34:1a:b3:d5:f2:9e:de:56:34:e6:cc:94:69:a1:78: eb:5c:12:eb:f8:de:b8:b1:f7:d8:fd:1b:e8:a3:7d: 1e:c0:11:0d:a4:45:04:c0:f4:25:30:e6:2f:1e:22: 2d:19:3f:0c:c2:9c:c6:20:ba:78:5b:08:c3:bd:ff: 4e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:89:F7:F8:5D:AE:3B:F8:76:10:71:9B:5B:7E:B6:D6:D2:FB:EA:85 X509v3 Authority Key Identifier: keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/GYn3-F2uO_h2EHGbW3621tL76oU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.9.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:9b:51:79:5a:dd:59:b8:05:72:d0:4f:55:3b:4c:c1:4d:12: 59:84:a7:62:b0:b9:19:a4:af:cb:ed:1b:60:89:77:0e:23:23: 4c:93:1e:f5:d9:9a:1c:9c:9e:ef:b5:f3:0c:14:75:9a:99:91: 70:d5:34:84:35:f5:cd:cb:b4:a7:c9:15:a1:44:04:b0:c8:5d: 2a:cc:5f:d1:39:70:d8:0e:3f:f8:0b:72:a3:36:b4:75:d0:fb: fe:bf:a5:ac:1f:fa:0a:77:d7:5b:69:d4:cc:60:09:eb:9c:ca: 7d:a3:9d:13:c3:02:74:ee:9e:6d:0e:9c:35:6b:54:83:b6:71: 49:1d:19:d6:f9:3d:4c:8c:94:37:d1:ad:9c:23:8a:f2:bc:b8: b3:1c:66:bb:b4:ba:88:3d:e1:63:c9:ef:e3:90:02:5a:59:55: 8d:0e:02:b6:56:5e:f7:87:6b:48:28:ac:f1:68:7b:40:54:1b: 4b:08:e1:39:5b:0b:b6:6b:1a:78:e9:c8:24:30:0a:1f:b7:fc: 7f:1a:38:2e:ab:56:a5:5d:72:ba:92:86:ba:fb:24:90:c5:67: ae:b6:79:2e:84:88:2c:e3:92:82:46:ff:ab:7e:7b:09:75:01: a2:b5:71:2e:1c:46:b7:b7:6f:5f:3d:d4:c7:82:99:78:6d:b5: 16:1b:54:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqy0G4ttLK8Px6CeOVMFqEbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0 NjExYWQwHhcNMjUxMTIzMjIyMzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTg5ZjdmODVkYWUzYmY4NzYxMDcxOWI1YjdlYjZkNmQyZmJlYTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLulD1hp3dynQYnb6GIUhvKhi5h+ /EFr0jNrh2Cyh0eJskqTDTH0CRB4uiYWLH5OPudd1m5y4Zl81xwTehwd3pfmlUA5 xJqcPa1CJOkrV+FsqXzvrvkLtklxK7WKx4/BwHbmovbKq7HZlCOpIiJrAzpEM9ZQ wa3ykn4WNSv/llyedBFXObMt1j4f8k1+vw28tG+1mKqmGmT07tmk3ETS2a88SGcj 0oBiLnNwBFNEqnloeTe1Fk6hW3+bdKId0Qu8Dhg0GrPV8p7eVjTmzJRpoXjrXBLr +N64sffY/Rvoo30ewBENpEUEwPQlMOYvHiItGT8MwpzGILp4WwjDvf9OpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBmJ9/hdrjv4dhBxm1t+ttbS++qFMB8GA1UdIwQY MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct YzVkODk1MDgxOGVjLzEvR1luMy1GMnVPX2gyRUhHYlczNjIxdEw3Nm9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY8JMA0G CSqGSIb3DQEBCwUAA4IBAQBKm1F5Wt1ZuAVy0E9VO0zBTRJZhKdisLkZpK/L7Rtg iXcOIyNMkx712ZocnJ7vtfMMFHWamZFw1TSENfXNy7SnyRWhRASwyF0qzF/ROXDY Dj/4C3KjNrR10Pv+v6WsH/oKd9dbadTMYAnrnMp9o50TwwJ07p5tDpw1a1SDtnFJ HRnW+T1MjJQ30a2cI4ryvLizHGa7tLqIPeFjye/jkAJaWVWNDgK2Vl73h2tIKKzx aHtAVBtLCOE5Wwu2axp46cgkMAoft/x/Gjguq1alXXK6koa6+ySQxWeutnkuhIgs 45KCRv+rfnsJdQGitXEuHEa3t29fPdTHgpl4bbUWG1RO -----END CERTIFICATE-----Generated at Sat Dec 6 14:06:28 2025 by rpki-client