This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/TY1tMo6tOg_O_qX52JL8Xemg9g8.roa File: TY1tMo6tOg_O_qX52JL8Xemg9g8.roa (raw, json) Hash identifier: Bz2CovzXfyyPj3QPdMAOpdOAtHKJmJn5Jkl4FY1jBW0= Subject key identifier: 4D:8D:6D:32:8E:AD:3A:0F:CE:FE:A5:F9:D8:92:FC:5D:E9:A0:F6:0F Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Certificate serial: 019AB9BC78F20F9E78F242496E4700668AAC Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/TY1tMo6tOg_O_qX52JL8Xemg9g8.roa Signing time: Tue 25 Nov 2025 06:38:48 +0000 ROA not before: Tue 25 Nov 2025 06:38:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207019 IP address blocks: 5.56.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b9:bc:78:f2:0f:9e:78:f2:42:49:6e:47:00:66:8a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Validity Not Before: Nov 25 06:38:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4d8d6d328ead3a0fcefea5f9d892fc5de9a0f60f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bb:85:2f:d2:9a:65:45:ff:b7:df:16:d6:e5: 00:58:61:c2:8d:3b:11:e2:1e:5e:95:f5:b3:2c:b1: 3f:f7:0d:54:82:ed:4a:fe:3e:a2:17:55:2f:91:23: 30:15:9f:dd:2a:a9:cd:92:ab:e7:81:45:de:6c:4d: 65:f3:26:41:ee:34:c4:0e:a9:0a:cf:8d:9c:ec:f9: cb:97:45:bc:bb:87:dd:f4:b8:5c:dd:cf:2f:a2:04: 11:a0:1d:33:4c:9b:d5:89:9d:0b:67:89:66:bb:a6: 5f:55:a7:ee:4d:cc:d5:63:f9:10:82:ae:18:88:5d: 52:84:b9:5d:42:ea:ca:09:1a:37:55:73:d5:7a:72: 12:03:70:0a:36:94:e8:c5:f5:b6:1b:d2:22:37:92: 72:ce:77:f7:9e:b2:7f:7b:85:29:23:38:e2:5b:c8: 20:b8:8c:c1:31:24:41:d1:03:06:25:65:63:2a:de: d3:b0:c9:98:1a:68:19:7b:b4:0c:8d:91:d3:cb:df: c4:b8:1c:4b:9f:43:1b:33:ef:bb:36:1f:f1:1e:53: 6d:90:65:29:bb:7d:2d:15:37:59:39:cc:4b:dc:9d: 32:c5:53:eb:86:c5:c5:f4:3a:aa:59:40:de:b1:e8: 08:79:74:72:31:40:f7:ef:5f:49:12:45:b6:76:8a: 3f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8D:6D:32:8E:AD:3A:0F:CE:FE:A5:F9:D8:92:FC:5D:E9:A0:F6:0F X509v3 Authority Key Identifier: keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/TY1tMo6tOg_O_qX52JL8Xemg9g8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.56.25.0/24 Signature Algorithm: sha256WithRSAEncryption b0:0e:e4:6c:5b:3e:a9:48:94:04:35:90:e8:d5:bb:7a:48:b7: 31:11:b0:90:8c:ab:28:6a:18:15:64:44:2f:6e:db:f7:eb:f5: 7b:cd:50:b6:c3:6a:04:07:d5:b8:58:19:ef:b3:72:d7:a1:c6: 76:a4:d5:a4:8c:1c:67:67:fd:cb:e1:0c:5c:c0:e2:44:df:7f: c7:12:5e:08:a7:15:cb:75:ee:f5:ba:2d:32:f0:58:ac:d3:16: 83:6a:b7:7c:35:e8:02:55:5d:4b:3b:03:82:3f:e5:c1:68:88: 6a:52:ee:7d:65:f3:b3:e2:d6:74:58:f4:1b:95:68:49:5a:e0: c6:b0:55:c9:2f:cb:6a:a4:e1:f0:0f:84:02:46:ff:98:d0:58: 9c:6f:60:19:99:e4:f5:c8:c9:67:34:cb:e4:c5:53:4d:a9:33: a2:9f:f2:d3:aa:65:3c:01:52:8e:22:51:44:dc:12:19:c2:17: e4:45:4f:45:61:98:6d:c1:1c:d7:2d:51:c9:b6:dd:cb:54:69: 84:7a:06:c1:ff:90:3c:a6:4b:a6:84:4b:bb:4b:67:33:57:ac: 1b:f1:36:ba:1b:00:07:fc:7c:9e:f7:68:5f:0d:38:b7:ff:42: 71:0b:2c:1f:e4:59:2c:c4:b3:6e:ef:a9:c6:fe:6b:72:c4:9f: f1:72:79:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq5vHjyD5548kJJbkcAZoqsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1 ZTNmOTgwHhcNMjUxMTI1MDYzODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDhkNmQzMjhlYWQzYTBmY2VmZWE1ZjlkODkyZmM1ZGU5YTBmNjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7uFL9KaZUX/t98W1uUAWGHCjTsR 4h5elfWzLLE/9w1Ugu1K/j6iF1UvkSMwFZ/dKqnNkqvngUXebE1l8yZB7jTEDqkK z42c7PnLl0W8u4fd9Lhc3c8vogQRoB0zTJvViZ0LZ4lmu6ZfVafuTczVY/kQgq4Y iF1ShLldQurKCRo3VXPVenISA3AKNpToxfW2G9IiN5Jyznf3nrJ/e4UpIzjiW8gg uIzBMSRB0QMGJWVjKt7TsMmYGmgZe7QMjZHTy9/EuBxLn0MbM++7Nh/xHlNtkGUp u30tFTdZOcxL3J0yxVPrhsXF9DqqWUDesegIeXRyMUD3719JEkW2doo/HQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE2NbTKOrToPzv6l+diS/F3poPYPMB8GA1UdIwQY MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt OWNkNjYyYmM4MzIwLzEvVFkxdE1vNnRPZ19PX3FYNTJKTDhYZW1nOWc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABTgZMA0G CSqGSIb3DQEBCwUAA4IBAQCwDuRsWz6pSJQENZDo1bt6SLcxEbCQjKsoahgVZEQv btv36/V7zVC2w2oEB9W4WBnvs3LXocZ2pNWkjBxnZ/3L4QxcwOJE33/HEl4IpxXL de71ui0y8Fis0xaDard8NegCVV1LOwOCP+XBaIhqUu59ZfOz4tZ0WPQblWhJWuDG sFXJL8tqpOHwD4QCRv+Y0Ficb2AZmeT1yMlnNMvkxVNNqTOin/LTqmU8AVKOIlFE 3BIZwhfkRU9FYZhtwRzXLVHJtt3LVGmEegbB/5A8pkumhEu7S2czV6wb8Ta6GwAH /Hye92hfDTi3/0JxCywf5FksxLNu76nG/mtyxJ/xcnmX -----END CERTIFICATE-----Generated at Sat Dec 6 14:55:05 2025 by rpki-client