This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cyPHBHGFR6oGoYvwY71N3OWdJqw.roa File: cyPHBHGFR6oGoYvwY71N3OWdJqw.roa (raw, json) Hash identifier: ZcjSgfaLdqONv6j+UZ/jucxVll1JJvBCEIpD3nbEE34= Subject key identifier: 73:23:C7:04:71:85:47:AA:06:A1:8B:F0:63:BD:4D:DC:E5:9D:26:AC Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019AB5447F66DA9954B2B603210FE14FBCD1 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cyPHBHGFR6oGoYvwY71N3OWdJqw.roa Signing time: Mon 24 Nov 2025 09:49:16 +0000 ROA not before: Mon 24 Nov 2025 09:49:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203758 IP address blocks: 82.153.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:44:7f:66:da:99:54:b2:b6:03:21:0f:e1:4f:bc:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 24 09:49:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7323c704718547aa06a18bf063bd4ddce59d26ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6a:bc:8d:02:8e:6a:5d:96:04:f2:42:e9:9c: b6:67:bc:53:20:9a:44:98:9d:de:c9:5c:9b:58:46: af:02:81:8a:7e:b1:cb:05:21:79:bb:22:09:38:42: 76:9d:3e:ef:ec:a4:38:68:8a:c7:92:cb:20:9a:f0: 45:3f:c3:d3:48:a0:3f:8f:3d:58:af:14:76:a3:9d: f6:81:e6:30:3e:c3:5e:61:bb:5a:8d:29:e9:48:e5: c9:b4:7e:3e:2f:d7:87:ce:c3:18:07:50:16:d2:0b: 4b:1d:f5:c1:5f:3b:b7:c4:22:20:1e:c3:06:b4:82: 6d:98:da:46:da:35:42:74:cf:83:5e:d2:80:56:1b: f5:9e:27:c5:4b:49:28:19:4d:dd:62:cd:6b:98:84: 26:97:c2:6d:14:56:dc:59:af:25:34:07:1a:fc:f4: 7d:ba:e9:a8:98:2f:0a:db:0c:1a:b0:f5:50:15:83: 1b:2d:c8:8b:27:b7:1d:0f:61:ef:9e:ea:b3:6f:79: 01:fb:13:4d:02:4c:43:23:bb:59:a2:e2:3d:eb:03: 0a:cc:7d:e2:7b:41:37:1a:42:96:60:38:58:c6:48: 42:44:b6:f1:e2:71:eb:43:e9:0d:47:b0:17:63:28: 03:52:2a:45:3a:ab:39:a0:d4:02:5f:3e:42:f2:9d: c9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:23:C7:04:71:85:47:AA:06:A1:8B:F0:63:BD:4D:DC:E5:9D:26:AC X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cyPHBHGFR6oGoYvwY71N3OWdJqw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.70.0/24 Signature Algorithm: sha256WithRSAEncryption 01:37:e1:77:3c:c7:6a:0e:44:a5:39:e7:db:97:1b:05:47:94: 11:2f:97:e2:5f:20:9c:99:27:dc:e7:d1:a3:0f:95:60:f0:47: de:b8:4b:3c:c7:c8:a6:d5:e7:a6:90:ba:79:af:b3:1b:16:0d: 08:3f:44:ac:b3:26:79:db:ce:c6:3a:f3:ea:e8:6c:99:e8:fd: 3f:56:06:3f:dc:8e:3a:91:a0:48:e7:10:20:bc:38:2c:f0:4e: fd:ec:dd:15:fd:49:0e:07:29:46:64:6c:22:7a:6a:c9:e9:73: ac:bd:71:55:6a:b7:17:56:98:37:2d:8c:da:b1:7d:1d:f4:a7: 49:77:4a:07:27:42:aa:f4:eb:d2:3e:8f:c7:bd:ad:45:12:c9: 4d:3c:9a:2a:a0:6c:bd:6c:6c:93:65:43:74:b0:ba:d7:78:08: f9:4d:c0:b9:d0:39:a3:7d:1e:c8:02:d8:07:52:a6:47:3f:1e: b4:59:a7:a4:c2:08:30:7e:49:22:17:99:e0:c5:70:50:9d:56: cc:b4:a6:ba:8e:ba:70:9b:c7:65:55:4d:6b:95:64:35:db:1d: 56:30:16:b2:35:65:7d:28:ce:62:46:00:ed:01:ee:33:fb:38: 54:17:a5:e5:f8:2c:80:8c:42:06:33:ce:d2:70:80:1d:e0:43: 2b:38:4d:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq1RH9m2plUsrYDIQ/hT7zRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTI0MDk0OTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzIzYzcwNDcxODU0N2FhMDZhMThiZjA2M2JkNGRkY2U1OWQyNmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWq8jQKOal2WBPJC6Zy2Z7xTIJpE mJ3eyVybWEavAoGKfrHLBSF5uyIJOEJ2nT7v7KQ4aIrHkssgmvBFP8PTSKA/jz1Y rxR2o532geYwPsNeYbtajSnpSOXJtH4+L9eHzsMYB1AW0gtLHfXBXzu3xCIgHsMG tIJtmNpG2jVCdM+DXtKAVhv1nifFS0koGU3dYs1rmIQml8JtFFbcWa8lNAca/PR9 uumomC8K2wwasPVQFYMbLciLJ7cdD2Hvnuqzb3kB+xNNAkxDI7tZouI96wMKzH3i e0E3GkKWYDhYxkhCRLbx4nHrQ+kNR7AXYygDUipFOqs5oNQCXz5C8p3JzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHMjxwRxhUeqBqGL8GO9TdzlnSasMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvY3lQSEJIR0ZSNm9Hb1l2d1k3MU4zT1dkSnF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUplGMA0G CSqGSIb3DQEBCwUAA4IBAQABN+F3PMdqDkSlOefblxsFR5QRL5fiXyCcmSfc59Gj D5Vg8EfeuEs8x8im1eemkLp5r7MbFg0IP0SssyZ5287GOvPq6GyZ6P0/VgY/3I46 kaBI5xAgvDgs8E797N0V/UkOBylGZGwiemrJ6XOsvXFVarcXVpg3LYzasX0d9KdJ d0oHJ0Kq9OvSPo/Hva1FEslNPJoqoGy9bGyTZUN0sLrXeAj5TcC50DmjfR7IAtgH UqZHPx60WaekwggwfkkiF5ngxXBQnVbMtKa6jrpwm8dlVU1rlWQ12x1WMBayNWV9 KM5iRgDtAe4z+zhUF6Xl+CyAjEIGM87ScIAd4EMrOE2u -----END CERTIFICATE-----Generated at Sat Dec 6 09:54:17 2025 by rpki-client