This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/5y2kmNeJMXCKaK5RQEOuPAHxync.roa File: 5y2kmNeJMXCKaK5RQEOuPAHxync.roa (raw, json) Hash identifier: +iOlHGykmwVB2psLQ2/CvkEGl5oc0dj/MknlrPXW7x4= Subject key identifier: E7:2D:A4:98:D7:89:31:70:8A:68:AE:51:40:43:AE:3C:01:F1:CA:77 Certificate issuer: /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8 Certificate serial: 019B1730C155DD5272A3FF0813400FE35025 Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/5y2kmNeJMXCKaK5RQEOuPAHxync.roa Signing time: Sat 13 Dec 2025 10:10:29 +0000 ROA not before: Sat 13 Dec 2025 10:10:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214025 IP address blocks: 185.205.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:30:c1:55:dd:52:72:a3:ff:08:13:40:0f:e3:50:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8 Validity Not Before: Dec 13 10:10:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e72da498d78931708a68ae514043ae3c01f1ca77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a3:ed:7f:c4:d6:f4:4c:01:71:e1:65:4f:35: ca:3b:c9:a7:0d:d4:e3:cb:6d:dd:3b:cb:e3:b6:12: 34:26:29:75:4c:ee:a9:4c:fb:2b:7b:67:ba:99:0e: 54:4c:88:7f:40:55:82:d3:5f:08:1c:bf:1c:be:58: f1:5f:0c:28:8e:58:04:6b:8d:eb:96:6d:74:6d:15: 0c:23:42:96:4a:54:61:35:50:ec:c3:dc:81:13:4f: 49:5a:b5:bc:6f:ab:90:8c:ee:89:b4:c1:74:93:be: 91:c1:ee:f1:4f:15:30:41:81:6d:7f:9c:ed:bf:6c: 93:e5:34:c6:9b:cc:a8:99:52:8b:d5:4e:51:17:dd: ca:5e:44:4d:5d:41:05:9b:e2:f3:c4:2a:46:44:d3: ac:a6:ef:bd:7d:68:74:a5:de:88:ba:0f:2c:c4:8a: 64:ea:9e:d8:4f:77:b0:41:7c:6a:8f:5a:2b:f7:31: ae:2f:1e:c6:dc:16:12:13:e3:e3:ec:2c:2b:ba:cb: 37:9c:ac:5e:54:e7:bd:db:a1:e4:d3:5e:6a:45:c1: f2:59:35:1b:f7:87:97:a8:f2:b9:d9:f5:51:af:4c: 42:64:36:c5:fb:80:db:bb:b6:ce:ae:70:48:01:d7: 9a:12:91:59:3a:7d:e2:c9:ec:19:3b:80:e4:fd:38: db:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:2D:A4:98:D7:89:31:70:8A:68:AE:51:40:43:AE:3C:01:F1:CA:77 X509v3 Authority Key Identifier: keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/5y2kmNeJMXCKaK5RQEOuPAHxync.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.205.35.0/24 Signature Algorithm: sha256WithRSAEncryption c2:98:9d:c4:6a:a9:e6:16:26:c4:80:a2:f0:4b:96:d7:f7:92: 1e:e7:8a:dd:18:e9:e8:45:47:f5:f1:42:fb:3e:92:4f:31:a0: 61:63:f0:ac:b5:39:23:00:d9:3a:8b:33:3a:c3:85:2d:33:14: 78:97:81:4b:87:1d:70:81:3f:54:26:92:3d:d3:a9:1a:0e:4c: 29:3a:19:79:88:3a:62:13:54:4a:fe:03:35:eb:0c:5a:bb:8b: 04:f7:f9:6c:de:30:0c:5c:bc:ff:b6:ac:b5:5a:36:aa:15:70: 74:64:a1:d1:61:51:d5:ad:a2:c8:e2:cd:79:ea:e6:ba:22:5f: f7:8c:1d:97:fb:31:94:46:32:49:0f:94:38:29:35:ff:f7:8b: 01:e3:41:d6:09:45:57:18:db:a9:ee:8b:08:8e:5d:04:5b:3b: 10:be:a2:a9:2a:22:48:01:70:ca:3d:50:3f:ca:9b:be:ac:a1: 35:e8:0b:21:0f:e0:2b:79:c0:c1:9f:c5:dc:25:89:5b:65:d5: aa:fc:71:d8:40:ad:52:4e:62:4f:42:61:45:a8:00:6a:7d:5e: b3:c5:4e:92:ed:f9:3e:25:ed:79:2a:1d:0c:2d:90:0e:4a:1e: 35:9c:3b:8c:d4:ca:b3:46:50:f0:06:f3:ac:23:2c:c3:af:0c: 06:df:6b:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsXMMFV3VJyo/8IE0AP41AlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZDk0NDc3YzhiNTRkMTJlYzhiM2Y3YjZkOWFlNzhlNTEw YjIzZDgwHhcNMjUxMjEzMTAxMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzJkYTQ5OGQ3ODkzMTcwOGE2OGFlNTE0MDQzYWUzYzAxZjFjYTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KPtf8TW9EwBceFlTzXKO8mnDdTj y23dO8vjthI0Jil1TO6pTPsre2e6mQ5UTIh/QFWC018IHL8cvljxXwwojlgEa43r lm10bRUMI0KWSlRhNVDsw9yBE09JWrW8b6uQjO6JtMF0k76Rwe7xTxUwQYFtf5zt v2yT5TTGm8yomVKL1U5RF93KXkRNXUEFm+LzxCpGRNOspu+9fWh0pd6Iug8sxIpk 6p7YT3ewQXxqj1or9zGuLx7G3BYSE+Pj7Cwruss3nKxeVOe926Hk015qRcHyWTUb 94eXqPK52fVRr0xCZDbF+4Dbu7bOrnBIAdeaEpFZOn3iyewZO4Dk/TjbPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOctpJjXiTFwimiuUUBDrjwB8cp3MB8GA1UdIwQY MBaAFEbZRHfItU0S7Is/e22a545RCyPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81NGE0NTctM2M0OC00ZTAxLTkwYjAt NWViNzVjMjMxOGFhLzEvNXkya21OZUpNWENLYUs1UlFFT3VQQUh4eW5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81NGE0NTctM2M0OC00ZTAxLTkwYjAtNWViNzVjMjMxOGFh LzEvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc0jMA0G CSqGSIb3DQEBCwUAA4IBAQDCmJ3EaqnmFibEgKLwS5bX95Ie54rdGOnoRUf18UL7 PpJPMaBhY/CstTkjANk6izM6w4UtMxR4l4FLhx1wgT9UJpI906kaDkwpOhl5iDpi E1RK/gM16wxau4sE9/ls3jAMXLz/tqy1WjaqFXB0ZKHRYVHVraLI4s156ua6Il/3 jB2X+zGURjJJD5Q4KTX/94sB40HWCUVXGNup7osIjl0EWzsQvqKpKiJIAXDKPVA/ ypu+rKE16AshD+ArecDBn8XcJYlbZdWq/HHYQK1STmJPQmFFqABqfV6zxU6S7fk+ Je15Kh0MLZAOSh41nDuM1MqzRlDwBvOsIyzDrwwG32t4 -----END CERTIFICATE-----Generated at Wed Dec 17 15:24:15 2025 by rpki-client