This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/ymIzzd49ZExaqccup-3dB_6It1g.roa File: ymIzzd49ZExaqccup-3dB_6It1g.roa (raw, json) Hash identifier: 9SCHb+6anIRD6Ye74U5s0aJYVWdKzUeaAYJH4ymnmS8= Subject key identifier: CA:62:33:CD:DE:3D:64:4C:5A:A9:C7:2E:A7:ED:DD:07:FE:88:B7:58 Certificate issuer: /CN=ed1cf1dc514e7f38a2387d82bdbbef2fb46c1305 Certificate serial: 019A6541B9FE53F8CFCE94609DF589DBAEF9 Authority key identifier: ED:1C:F1:DC:51:4E:7F:38:A2:38:7D:82:BD:BB:EF:2F:B4:6C:13:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/ymIzzd49ZExaqccup-3dB_6It1g.roa Signing time: Sat 08 Nov 2025 20:56:37 +0000 ROA not before: Sat 08 Nov 2025 20:56:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29686 IP address blocks: 46.243.73.0/24 maxlen: 24 195.43.141.0/24 maxlen: 24 2a09:e080::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:65:41:b9:fe:53:f8:cf:ce:94:60:9d:f5:89:db:ae:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed1cf1dc514e7f38a2387d82bdbbef2fb46c1305 Validity Not Before: Nov 8 20:56:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ca6233cdde3d644c5aa9c72ea7eddd07fe88b758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f2:2f:e8:82:4b:f3:98:9d:a1:26:5e:78:c4: 80:d6:54:50:5e:1d:9b:34:d3:7c:69:cb:10:57:cf: 37:71:54:4c:47:d6:1d:c0:22:4d:dc:fe:e8:39:0a: 12:2f:7c:1b:a3:00:49:f4:f1:1e:5e:80:7d:a9:0b: a7:5e:e9:97:01:83:e1:54:a5:2c:86:e8:ff:e3:85: f3:5e:e2:d7:02:6a:3b:7f:61:29:d1:b6:b8:ad:c1: 5b:4b:cd:5e:90:bc:db:94:8c:56:64:ba:2e:88:7d: 6e:1c:6f:bf:41:5b:3c:a6:43:40:f8:34:5c:25:c4: e5:99:eb:87:43:79:8d:66:3d:15:04:f4:1a:55:be: 66:5d:12:b1:2d:df:eb:b7:fb:d3:7c:98:db:f0:72: 8c:52:21:67:bf:23:38:76:95:9c:e2:2c:11:69:05: 76:73:03:4d:ec:9b:38:0c:31:8d:56:51:dc:aa:59: 37:11:d7:7d:09:95:d4:f1:e4:b9:fc:dd:10:77:7f: 14:39:98:6d:cc:2d:b9:53:c6:c9:05:59:cd:a1:d0: 0b:09:80:e9:b4:da:dd:0d:dd:54:5f:ef:1e:9a:74: e5:10:f5:65:b1:71:b8:61:08:0f:cf:60:43:03:58: bd:99:5b:3e:3a:4e:8e:d9:ee:63:f4:d9:7f:5b:b9: 8e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:62:33:CD:DE:3D:64:4C:5A:A9:C7:2E:A7:ED:DD:07:FE:88:B7:58 X509v3 Authority Key Identifier: keyid:ED:1C:F1:DC:51:4E:7F:38:A2:38:7D:82:BD:BB:EF:2F:B4:6C:13:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/ymIzzd49ZExaqccup-3dB_6It1g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.73.0/24 195.43.141.0/24 IPv6: 2a09:e080::/29 Signature Algorithm: sha256WithRSAEncryption a3:de:a3:10:1d:44:34:38:7d:ad:d1:ac:21:d7:3d:00:ba:f6: df:72:6b:21:46:e0:4c:e4:bb:13:80:1b:e9:2a:27:19:52:1f: c2:ba:81:27:f9:15:34:af:54:5d:5d:5c:2d:d5:a3:64:b0:c5: 85:f0:14:bd:9e:d1:92:a4:d6:3c:91:29:e3:7a:1f:7c:27:f0: bc:9b:7d:a8:7f:a0:97:14:46:b0:de:fb:e0:76:dc:b5:f9:50: d8:88:50:26:22:69:34:3b:c6:9c:b2:81:c6:2c:e9:7c:56:04: d1:5c:46:74:fd:04:7c:9c:42:09:44:bf:49:52:ca:9f:f1:16: 4e:e3:56:36:08:c3:01:6a:a5:57:00:a7:ce:ab:ee:85:87:98: 0b:e2:51:75:ee:75:2a:16:dd:f3:3c:d8:ea:7e:be:78:a7:8b: a5:1a:56:3a:4c:7c:b6:91:a8:a2:2c:a0:6e:3d:7f:73:e4:bb: 24:3e:b1:21:9b:fa:c1:39:e6:c6:65:79:44:1c:5f:43:83:79: a8:ee:dc:b7:f4:32:24:ec:0a:b8:28:2f:78:1e:e2:91:59:87: b9:76:0d:15:19:d4:07:66:1e:78:0a:2b:4c:a2:6e:7c:18:fd: c5:c9:26:f8:6a:ad:ad:29:da:f5:c7:4c:3b:e2:09:8a:7d:78: 3b:83:fb:93 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZplQbn+U/jPzpRgnfWJ2675MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMWNmMWRjNTE0ZTdmMzhhMjM4N2Q4MmJkYmJlZjJmYjQ2 YzEzMDUwHhcNMjUxMTA4MjA1NjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTYyMzNjZGRlM2Q2NDRjNWFhOWM3MmVhN2VkZGQwN2ZlODhiNzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/Iv6IJL85idoSZeeMSA1lRQXh2b NNN8acsQV883cVRMR9YdwCJN3P7oOQoSL3wbowBJ9PEeXoB9qQunXumXAYPhVKUs huj/44XzXuLXAmo7f2Ep0ba4rcFbS81ekLzblIxWZLouiH1uHG+/QVs8pkNA+DRc JcTlmeuHQ3mNZj0VBPQaVb5mXRKxLd/rt/vTfJjb8HKMUiFnvyM4dpWc4iwRaQV2 cwNN7Js4DDGNVlHcqlk3Edd9CZXU8eS5/N0Qd38UOZhtzC25U8bJBVnNodALCYDp tNrdDd1UX+8emnTlEPVlsXG4YQgPz2BDA1i9mVs+Ok6O2e5j9Nl/W7mOEwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMpiM83ePWRMWqnHLqft3Qf+iLdYMB8GA1UdIwQY MBaAFO0c8dxRTn84ojh9gr277y+0bBMFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1J6eDNGRk9memlpT0gyQ3ZidnZMN1JzRXdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS85YjkyOGYtY2M1Mi00MTIxLWI0OTIt ZTZmOWU0MTY4YmQyLzEveW1JenpkNDlaRXhhcWNjdXAtM2RCXzZJdDFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS85YjkyOGYtY2M1Mi00MTIxLWI0OTItZTZmOWU0MTY4YmQy LzEvN1J6eDNGRk9memlpT0gyQ3ZidnZMN1JzRXdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALvNJAwQA wyuNMA0EAgACMAcDBQMqCeCAMA0GCSqGSIb3DQEBCwUAA4IBAQCj3qMQHUQ0OH2t 0awh1z0AuvbfcmshRuBM5LsTgBvpKicZUh/CuoEn+RU0r1RdXVwt1aNksMWF8BS9 ntGSpNY8kSnjeh98J/C8m32of6CXFEaw3vvgdty1+VDYiFAmImk0O8acsoHGLOl8 VgTRXEZ0/QR8nEIJRL9JUsqf8RZO41Y2CMMBaqVXAKfOq+6Fh5gL4lF17nUqFt3z PNjqfr54p4ulGlY6THy2kaiiLKBuPX9z5LskPrEhm/rBOebGZXlEHF9Dg3mo7ty3 9DIk7Aq4KC94HuKRWYe5dg0VGdQHZh54CitMom58GP3FySb4aq2tKdr1x0w74gmK fXg7g/uT -----END CERTIFICATE-----Generated at Sat Dec 6 13:42:39 2025 by rpki-client