This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/2Y0fe5cLscbhaPE-Pg8hTGXdau0.roa File: 2Y0fe5cLscbhaPE-Pg8hTGXdau0.roa (raw, json) Hash identifier: 3yUHCU4aXv7E9tDqIK2zNp9EHkspgMN6t6urNetfh4c= Subject key identifier: D9:8D:1F:7B:97:0B:B1:C6:E1:68:F1:3E:3E:0F:21:4C:65:DD:6A:ED Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 019AB11ACFABB68EC4E6D287394CEF26E97F Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/2Y0fe5cLscbhaPE-Pg8hTGXdau0.roa Signing time: Sun 23 Nov 2025 14:25:15 +0000 ROA not before: Sun 23 Nov 2025 14:25:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214721 IP address blocks: 81.163.128.0/20 maxlen: 24 81.163.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b1:1a:cf:ab:b6:8e:c4:e6:d2:87:39:4c:ef:26:e9:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Nov 23 14:25:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d98d1f7b970bb1c6e168f13e3e0f214c65dd6aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:52:bb:d5:ef:1c:de:d4:8f:3b:fc:0a:3b:c8: 81:ef:28:2a:4d:dc:f6:46:3f:13:60:55:8d:25:6c: 01:ac:71:cb:eb:e0:83:93:3d:30:d4:d3:42:af:e0: 2c:f0:e3:02:63:e0:51:45:a2:3f:86:14:e2:2d:16: 0f:6d:25:1b:e7:4f:0d:8b:59:e1:54:95:b0:ae:59: 56:04:22:5d:a7:d1:b7:ad:e1:e9:3e:a5:16:f5:71: f5:56:20:f7:dd:b6:a6:54:94:37:c3:e3:80:c8:69: 0a:04:58:82:9f:f4:d7:63:e3:05:37:b5:88:19:20: f4:59:df:f3:59:27:af:18:76:ea:02:cb:28:39:4c: 12:d4:a8:ff:1b:f0:79:76:1f:ba:60:c0:59:33:1a: dc:4d:b9:26:22:69:9b:3e:f5:6d:b1:e4:74:14:14: 07:ee:f2:8d:a3:83:58:b7:e8:c7:41:cc:a9:72:1b: 2e:b3:e0:2b:94:97:52:5e:94:86:43:12:48:c4:b8: d8:f9:c5:71:43:60:73:5e:14:0f:b3:0b:3e:1f:1a: ef:02:9d:49:f8:29:8a:1b:90:07:b6:c0:e6:cd:3a: 2f:97:2c:77:0b:41:05:df:45:65:4b:5b:f2:98:89: c2:ae:88:7d:b3:fc:c7:f0:54:65:d7:29:9a:02:ad: 28:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:8D:1F:7B:97:0B:B1:C6:E1:68:F1:3E:3E:0F:21:4C:65:DD:6A:ED X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/2Y0fe5cLscbhaPE-Pg8hTGXdau0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.163.128.0/19 Signature Algorithm: sha256WithRSAEncryption 91:71:11:25:88:94:25:1d:8e:93:1f:3b:4d:7c:05:1c:62:f5: 59:0b:89:4b:94:3e:b9:d3:db:60:e7:b7:3a:39:e2:55:f5:aa: c3:bf:0a:2e:3e:19:24:67:0f:60:86:ed:6b:fa:24:dc:1c:2a: 92:74:47:8f:4a:ca:30:f4:6e:b2:7b:5a:fe:ff:c5:89:f3:b7: dd:f7:db:72:28:b0:f7:a4:0a:93:e2:67:93:45:cc:7c:e0:94: 6c:11:eb:42:51:00:1a:ec:f2:5a:69:71:35:c1:d1:ed:3b:08: e8:30:eb:23:6e:80:62:ac:0e:2f:c6:de:1e:ba:6b:f0:11:25: 50:7a:a2:31:3f:18:86:d7:78:d2:43:98:b9:4e:31:d6:21:a8: 14:c2:08:ea:71:a5:a3:9c:ec:52:e6:80:19:8c:70:aa:4a:f6: 58:e4:2c:5a:24:e2:13:51:1e:48:80:f2:83:34:ac:f4:4f:d3: c6:50:51:e7:07:c6:98:1e:d6:d1:47:82:56:93:1f:bf:eb:90: 10:29:e0:38:85:c9:7c:f1:2f:c4:76:19:54:60:a1:bc:bf:37: 2a:a0:e3:fc:5b:93:90:23:7b:2a:8b:a4:c2:16:f0:e7:f9:7f: 3e:54:be:d5:f8:e5:59:f8:34:64:4d:bb:79:29:80:f6:b0:27: 75:ae:1e:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqxGs+rto7E5tKHOUzvJul/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjUxMTIzMTQyNTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOThkMWY3Yjk3MGJiMWM2ZTE2OGYxM2UzZTBmMjE0YzY1ZGQ2YWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVK71e8c3tSPO/wKO8iB7ygqTdz2 Rj8TYFWNJWwBrHHL6+CDkz0w1NNCr+As8OMCY+BRRaI/hhTiLRYPbSUb508Ni1nh VJWwrllWBCJdp9G3reHpPqUW9XH1ViD33bamVJQ3w+OAyGkKBFiCn/TXY+MFN7WI GSD0Wd/zWSevGHbqAssoOUwS1Kj/G/B5dh+6YMBZMxrcTbkmImmbPvVtseR0FBQH 7vKNo4NYt+jHQcypchsus+ArlJdSXpSGQxJIxLjY+cVxQ2BzXhQPsws+HxrvAp1J +CmKG5AHtsDmzTovlyx3C0EF30VlS1vymInCroh9s/zH8FRl1ymaAq0oQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNmNH3uXC7HG4WjxPj4PIUxl3WrtMB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvMlkwZmU1Y0xzY2JoYVBFLVBnOGhUR1hkYXUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFUaOAMA0G CSqGSIb3DQEBCwUAA4IBAQCRcREliJQlHY6THztNfAUcYvVZC4lLlD6509tg57c6 OeJV9arDvwouPhkkZw9ghu1r+iTcHCqSdEePSsow9G6ye1r+/8WJ87fd99tyKLD3 pAqT4meTRcx84JRsEetCUQAa7PJaaXE1wdHtOwjoMOsjboBirA4vxt4eumvwESVQ eqIxPxiG13jSQ5i5TjHWIagUwgjqcaWjnOxS5oAZjHCqSvZY5CxaJOITUR5IgPKD NKz0T9PGUFHnB8aYHtbRR4JWkx+/65AQKeA4hcl88S/EdhlUYKG8vzcqoOP8W5OQ I3sqi6TCFvDn+X8+VL7V+OVZ+DRkTbt5KYD2sCd1rh4H -----END CERTIFICATE-----Generated at Sat Dec 6 08:17:45 2025 by rpki-client