This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/yYXgfxt8HTsdD3YIDsNR5rGZFng.roa File: yYXgfxt8HTsdD3YIDsNR5rGZFng.roa (raw, json) Hash identifier: hznzSNguKbgcPbcq/VbNPpTcerKPJa34QXTAsmwowYg= Subject key identifier: C9:85:E0:7F:1B:7C:1D:3B:1D:0F:76:08:0E:C3:51:E6:B1:99:16:78 Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Certificate serial: 019ADF815C8F1CF6391F0F941584E3A9BADF Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/yYXgfxt8HTsdD3YIDsNR5rGZFng.roa Signing time: Tue 02 Dec 2025 14:39:48 +0000 ROA not before: Tue 02 Dec 2025 14:39:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44477 IP address blocks: 46.151.176.0/24 maxlen: 24 46.151.178.0/24 maxlen: 24 46.151.179.0/24 maxlen: 24 46.151.180.0/24 maxlen: 24 83.142.208.0/24 maxlen: 24 83.142.210.0/24 maxlen: 24 83.142.211.0/24 maxlen: 24 83.142.212.0/24 maxlen: 24 83.142.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:81:5c:8f:1c:f6:39:1f:0f:94:15:84:e3:a9:ba:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Validity Not Before: Dec 2 14:39:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c985e07f1b7c1d3b1d0f76080ec351e6b1991678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:30:dc:d2:80:1c:65:10:f6:61:ef:93:30:bf: 84:2b:df:ec:1f:6d:63:4a:84:34:0c:27:41:58:91: 06:7c:43:43:cb:55:98:39:0f:f8:62:89:ab:d4:d1: 46:f0:b7:79:69:a6:10:b7:ee:ff:50:e9:8d:49:9e: 9c:61:b2:ab:df:e6:4e:54:0c:c7:79:0e:58:bf:a0: 9b:8e:54:0a:ab:d6:3d:06:1b:66:14:9a:10:1a:58: 10:67:3f:3e:f9:c6:69:53:88:4f:77:85:6a:4a:6d: 0b:8c:f2:7a:cb:7c:14:fd:7d:9e:b0:e2:8e:c4:07: f0:c2:36:37:73:72:41:32:89:7d:71:a7:7e:d4:77: 0c:9f:7a:d6:9b:74:a1:4b:80:a1:a7:a2:fd:2b:2f: 6d:9e:8d:5b:aa:0b:92:26:4d:08:05:f2:ea:56:13: 6c:ff:9b:2c:f8:e6:44:c1:2c:73:a5:e0:63:c4:12: ef:57:87:46:c9:12:d7:5e:1e:21:19:74:ce:a3:b9: 81:91:24:a5:19:ea:98:70:c0:be:30:58:7f:97:6b: 4f:8e:53:72:1f:26:8a:c4:17:3e:08:a7:fd:b8:bb: c7:f2:5a:ab:f4:f8:d1:a3:0f:57:5b:47:1e:38:87: f5:37:c5:9c:1d:f7:2d:85:7b:52:d0:1a:54:5d:33: 40:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:85:E0:7F:1B:7C:1D:3B:1D:0F:76:08:0E:C3:51:E6:B1:99:16:78 X509v3 Authority Key Identifier: keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/yYXgfxt8HTsdD3YIDsNR5rGZFng.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.151.176.0/24 46.151.178.0-46.151.180.255 83.142.208.0/24 83.142.210.0-83.142.212.255 83.142.215.0/24 Signature Algorithm: sha256WithRSAEncryption 72:17:c8:35:2e:3d:a4:c8:08:9d:cc:1e:db:d2:ac:a2:7a:03: 14:6c:36:91:4e:5d:58:f9:14:b2:53:d0:97:9f:ef:b5:2c:24: 57:0b:28:48:d2:7e:32:50:ed:c5:cf:a8:ff:d1:8a:36:b7:d0: 87:dd:6b:71:f7:58:db:d8:2b:cc:d6:ca:18:be:b1:2e:5b:1d: 85:0e:08:51:8e:3b:a0:2e:92:19:03:db:5c:c1:ed:a5:29:4b: 30:82:6e:e1:96:20:a9:c7:67:46:30:6e:34:40:86:5d:38:b5: f4:59:32:7c:2e:ff:1d:ea:1d:15:6e:df:67:f3:f5:67:a9:6e: 73:89:97:bf:66:df:fe:c7:39:cb:66:30:ea:db:78:82:3d:8c: b6:2b:a0:e0:97:1b:34:69:77:75:54:f1:c5:1b:b6:f1:84:7a: 0d:78:0f:5e:fd:6c:d4:95:88:60:45:59:9f:63:81:01:3c:2c: 89:1e:4a:00:31:64:e9:4b:2a:98:7b:e2:1d:df:1b:9e:47:ce: bd:10:27:e1:63:a3:99:2b:12:aa:ae:70:fa:5e:99:83:9b:90: c2:e9:7f:96:ae:81:23:f2:38:03:38:a7:55:e6:d7:95:7f:e7: 2d:74:74:2c:c3:68:dd:d8:f3:d5:0c:43:c6:af:d0:ef:0a:29: 36:97:cb:14 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZrfgVyPHPY5Hw+UFYTjqbrfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4 ODE3ZmMwHhcNMjUxMjAyMTQzOTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTg1ZTA3ZjFiN2MxZDNiMWQwZjc2MDgwZWMzNTFlNmIxOTkxNjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTDc0oAcZRD2Ye+TML+EK9/sH21j SoQ0DCdBWJEGfENDy1WYOQ/4Yomr1NFG8Ld5aaYQt+7/UOmNSZ6cYbKr3+ZOVAzH eQ5Yv6CbjlQKq9Y9BhtmFJoQGlgQZz8++cZpU4hPd4VqSm0LjPJ6y3wU/X2esOKO xAfwwjY3c3JBMol9cad+1HcMn3rWm3ShS4Chp6L9Ky9tno1bqguSJk0IBfLqVhNs /5ss+OZEwSxzpeBjxBLvV4dGyRLXXh4hGXTOo7mBkSSlGeqYcMC+MFh/l2tPjlNy HyaKxBc+CKf9uLvH8lqr9PjRow9XW0ceOIf1N8WcHfcthXtS0BpUXTNAowIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFMmF4H8bfB07HQ92CA7DUeaxmRZ4MB8GA1UdIwQY MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt NDZiOTQ5MDkyY2JlLzEveVlYZ2Z4dDhIVHNkRDNZSURzTlI1ckdaRm5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQALpewMAwD BAEul7IDBAAul7QDBABTjtAwDAMEAVOO0gMEAFOO1AMEAFOO1zANBgkqhkiG9w0B AQsFAAOCAQEAchfINS49pMgIncwe29KsonoDFGw2kU5dWPkUslPQl5/vtSwkVwso SNJ+MlDtxc+o/9GKNrfQh91rcfdY29grzNbKGL6xLlsdhQ4IUY47oC6SGQPbXMHt pSlLMIJu4ZYgqcdnRjBuNECGXTi19FkyfC7/HeodFW7fZ/P1Z6luc4mXv2bf/sc5 y2Yw6tt4gj2Mtiug4JcbNGl3dVTxxRu28YR6DXgPXv1s1JWIYEVZn2OBATwsiR5K ADFk6UsqmHviHd8bnkfOvRAn4WOjmSsSqq5w+l6Zg5uQwul/lq6BI/I4AzinVebX lX/nLXR0LMNo3djz1QxDxq/Q7wopNpfLFA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:06:49 2025 by rpki-client