This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/YEabeKOKfuDoseD09i_AzpuQwDI.roa File: YEabeKOKfuDoseD09i_AzpuQwDI.roa (raw, json) Hash identifier: cPvPvvgVr6xheeyEqYOGlwuPA4n504eYtVm93wavUOs= Subject key identifier: 60:46:9B:78:A3:8A:7E:E0:E8:B1:E0:F4:F6:2F:C0:CE:9B:90:C0:32 Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Certificate serial: 019A786A34ED57E581C502002878FD425894 Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/YEabeKOKfuDoseD09i_AzpuQwDI.roa Signing time: Wed 12 Nov 2025 14:13:37 +0000 ROA not before: Wed 12 Nov 2025 14:13:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197033 IP address blocks: 46.18.224.0/21 maxlen: 21 91.216.43.0/24 maxlen: 24 93.177.81.0/24 maxlen: 24 185.24.152.0/22 maxlen: 22 185.33.88.0/22 maxlen: 22 185.147.65.0/24 maxlen: 24 185.147.67.0/24 maxlen: 24 185.155.173.0/24 maxlen: 24 185.195.248.0/24 maxlen: 24 185.195.249.0/24 maxlen: 24 185.195.250.0/24 maxlen: 24 185.195.251.0/24 maxlen: 24 194.147.172.0/24 maxlen: 24 194.147.227.0/24 maxlen: 24 194.147.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:6a:34:ed:57:e5:81:c5:02:00:28:78:fd:42:58:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Validity Not Before: Nov 12 14:13:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=60469b78a38a7ee0e8b1e0f4f62fc0ce9b90c032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0c:dc:53:ac:82:52:8a:b1:65:6c:9b:e6:a1: 29:fe:9e:01:3b:23:ab:fb:4d:38:55:75:0a:2b:5b: ec:2d:f0:6d:0a:cb:bc:49:0f:31:a8:a5:c1:ab:11: 70:1a:1d:55:89:87:aa:c9:41:06:a3:04:c9:cc:47: 97:19:92:a3:dd:39:65:c6:2a:14:83:bf:a2:b1:e7: 6e:2b:aa:98:67:4a:03:c4:18:ec:00:c9:4e:34:49: 1b:bf:e6:a6:7c:08:39:37:04:48:4c:70:e4:a3:4c: f5:4c:87:13:1f:76:aa:6d:4d:18:45:81:dc:e4:f2: ae:29:0d:2c:56:09:0f:b9:01:7e:92:e6:80:92:68: 0d:41:2b:d3:5a:62:f4:c5:5d:23:0e:38:3e:86:99: e9:67:23:17:6d:bf:53:63:d0:ee:3f:88:c4:cb:99: c1:4b:01:7a:44:01:c7:7d:d7:7c:ed:98:45:d1:51: 5d:98:f3:95:86:31:e3:4b:1d:6a:d1:f4:36:f2:73: cb:e2:62:ff:42:06:6a:52:b2:0d:f1:bb:89:3d:50: 0f:83:53:1e:7b:d2:e2:74:6d:e8:a4:6e:4b:65:c4: 69:6a:81:50:25:02:4f:cf:63:fa:5c:dd:4e:42:ed: 46:47:b3:38:10:82:3a:ee:7c:9c:d9:ce:58:92:60: 5b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:46:9B:78:A3:8A:7E:E0:E8:B1:E0:F4:F6:2F:C0:CE:9B:90:C0:32 X509v3 Authority Key Identifier: keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/YEabeKOKfuDoseD09i_AzpuQwDI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.18.224.0/21 91.216.43.0/24 93.177.81.0/24 185.24.152.0/22 185.33.88.0/22 185.147.65.0/24 185.147.67.0/24 185.155.173.0/24 185.195.248.0/22 194.147.172.0/24 194.147.227.0-194.147.228.255 Signature Algorithm: sha256WithRSAEncryption 5d:b8:95:a3:07:1c:75:d3:06:40:1f:f6:b1:72:9c:e1:00:20: da:56:37:47:6c:17:72:6c:a5:86:c8:c3:0d:c5:ef:1f:3d:72: ed:c9:10:8d:ec:c0:5f:69:e1:69:b2:91:bf:4a:77:1a:8e:cb: 22:d5:13:ad:50:a9:1b:91:38:96:ef:83:a6:0b:90:54:2a:d9: d0:cc:4a:a2:ef:6c:ef:9b:1f:26:c9:03:92:a7:58:57:50:58: 89:bb:0a:d5:a6:32:56:ca:54:86:eb:77:ee:01:39:51:14:fd: 80:e9:47:66:68:b2:83:a8:c5:06:4d:c0:1f:0f:30:b5:d1:b8: 2d:0f:70:70:70:c1:4b:cb:09:9b:7c:a3:e9:a6:16:d8:70:1a: 75:6c:8c:43:84:95:69:e3:78:19:c7:75:7d:f3:19:8e:2a:6c: bf:ba:b2:4f:40:69:0a:4d:ad:b1:24:4b:53:85:3e:8d:a1:94: bc:66:66:53:ad:e2:f1:17:85:c6:7c:5b:db:3f:ac:a9:83:a6: af:a7:78:8d:c5:59:8f:44:c3:07:c0:eb:5b:06:aa:34:38:02: 10:8c:96:2d:c2:70:c1:b9:95:f4:64:9f:e8:ad:78:dd:10:97: 43:be:54:78:d0:2d:00:7f:9c:49:a7:c0:7a:98:f8:76:0c:5b: 8b:4c:45:e6 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgISAZp4ajTtV+WBxQIAKHj9QliUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2 ZjcxNWEwHhcNMjUxMTEyMTQxMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDQ2OWI3OGEzOGE3ZWUwZThiMWUwZjRmNjJmYzBjZTliOTBjMDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQzcU6yCUoqxZWyb5qEp/p4BOyOr +004VXUKK1vsLfBtCsu8SQ8xqKXBqxFwGh1ViYeqyUEGowTJzEeXGZKj3TllxioU g7+iseduK6qYZ0oDxBjsAMlONEkbv+amfAg5NwRITHDko0z1TIcTH3aqbU0YRYHc 5PKuKQ0sVgkPuQF+kuaAkmgNQSvTWmL0xV0jDjg+hpnpZyMXbb9TY9DuP4jEy5nB SwF6RAHHfdd87ZhF0VFdmPOVhjHjSx1q0fQ28nPL4mL/QgZqUrIN8buJPVAPg1Me e9LidG3opG5LZcRpaoFQJQJPz2P6XN1OQu1GR7M4EII67nyc2c5YkmBbUQIDAQAB o4ICTTCCAkkwHQYDVR0OBBYEFGBGm3ijin7g6LHg9PYvwM6bkMAyMB8GA1UdIwQY MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt NmMzMDVhNmRiYWI5LzEvWUVhYmVLT0tmdURvc2VEMDlpX0F6cHVRd0RJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5 LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQDLhLgAwQA W9grAwQAXbFRAwQCuRiYAwQCuSFYAwQAuZNBAwQAuZNDAwQAuZutAwQCucP4AwQA wpOsMAwDBADCk+MDBADCk+QwDQYJKoZIhvcNAQELBQADggEBAF24laMHHHXTBkAf 9rFynOEAINpWN0dsF3JspYbIww3F7x89cu3JEI3swF9p4Wmykb9KdxqOyyLVE61Q qRuROJbvg6YLkFQq2dDMSqLvbO+bHybJA5KnWFdQWIm7CtWmMlbKVIbrd+4BOVEU /YDpR2ZosoOoxQZNwB8PMLXRuC0PcHBwwUvLCZt8o+mmFthwGnVsjEOElWnjeBnH dX3zGY4qbL+6sk9AaQpNrbEkS1OFPo2hlLxmZlOt4vEXhcZ8W9s/rKmDpq+neI3F WY9EwwfA61sGqjQ4AhCMli3CcMG5lfRkn+iteN0Ql0O+VHjQLQB/nEmnwHqY+HYM W4tMReY= -----END CERTIFICATE-----Generated at Sat Dec 6 23:18:25 2025 by rpki-client