This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/yQn963nVT8Q46OjL-NBrtLKj9U0.roa File: yQn963nVT8Q46OjL-NBrtLKj9U0.roa (raw, json) Hash identifier: Yrpxnoj2AJuQ5ltP+BbrITwr9kXSklKCn9ufmS1jJkQ= Subject key identifier: C9:09:FD:EB:79:D5:4F:C4:38:E8:E8:CB:F8:D0:6B:B4:B2:A3:F5:4D Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 019B2D23582ADECF36A4BF3FE4DB2BD2D12A Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/yQn963nVT8Q46OjL-NBrtLKj9U0.roa Signing time: Wed 17 Dec 2025 16:27:29 +0000 ROA not before: Wed 17 Dec 2025 16:27:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212335 IP address blocks: 2.56.184.0/24 maxlen: 24 2.56.185.0/24 maxlen: 24 2.56.186.0/24 maxlen: 24 2.56.187.0/24 maxlen: 24 45.11.154.0/24 maxlen: 24 85.8.168.0/24 maxlen: 24 85.8.169.0/24 maxlen: 24 85.8.171.0/24 maxlen: 24 185.124.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:23:58:2a:de:cf:36:a4:bf:3f:e4:db:2b:d2:d1:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: Dec 17 16:27:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c909fdeb79d54fc438e8e8cbf8d06bb4b2a3f54d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6e:bb:18:15:68:12:cc:cb:cc:55:15:e4:a2: 12:0e:a7:97:ec:bc:a1:00:ea:0e:48:c9:75:47:11: 85:ad:55:46:11:69:31:63:05:f7:73:a4:39:f9:d4: fb:e4:4f:42:2f:e5:eb:82:79:63:e2:53:78:16:72: c2:6b:fa:21:94:5d:bd:a7:37:02:db:6e:87:5c:d8: b5:a8:06:54:7b:4b:73:da:c6:be:21:d6:d3:df:93: c1:8e:fe:31:6e:e6:c3:16:de:96:8d:e5:2e:51:1b: 2f:af:37:d0:af:b7:62:69:47:35:d2:0b:77:05:1a: 2c:fb:0f:f3:f7:4b:7d:d5:43:e4:5b:91:14:e3:96: 2f:96:a5:ea:3a:b3:a6:85:55:b0:09:1d:7f:ab:0c: 76:f9:2c:f7:e5:5b:97:b3:e8:a7:14:22:68:43:70: 86:f2:f1:dc:31:64:8e:f0:d0:fd:ff:83:ac:9d:15: eb:aa:3c:57:c1:4f:84:7b:16:d3:cf:be:a2:0e:08: ec:37:41:b4:bf:0e:62:8d:fb:8c:b6:9c:9c:30:1c: 5e:37:b4:e8:6c:07:c3:57:02:dd:8e:71:ce:77:59: 62:c3:27:06:df:1a:c2:ad:52:3a:b4:63:59:31:cb: 3a:87:ab:cb:7d:11:af:54:20:85:df:8e:ea:20:61: 67:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:09:FD:EB:79:D5:4F:C4:38:E8:E8:CB:F8:D0:6B:B4:B2:A3:F5:4D X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/yQn963nVT8Q46OjL-NBrtLKj9U0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.184.0/22 45.11.154.0/24 85.8.168.0/23 85.8.171.0/24 185.124.241.0/24 Signature Algorithm: sha256WithRSAEncryption 43:32:39:63:39:92:15:42:ba:58:f8:e0:93:05:f2:22:89:e7: 36:df:06:66:2a:e9:64:e4:12:f0:dd:53:4a:26:98:b9:62:e6: ef:10:62:0f:fb:51:74:39:9b:31:41:fb:bf:16:2f:0e:cf:39: 44:37:eb:58:79:2e:73:af:c5:7f:e9:ce:03:aa:06:15:b3:83: f2:f0:ea:71:52:43:0a:6e:18:ef:13:b3:a9:a9:cd:52:06:09: ba:45:db:b3:d4:34:61:fb:d3:dc:e3:c4:61:3e:87:01:78:5a: 7e:59:85:fd:48:ec:ae:fe:cb:f4:84:39:90:8b:c8:4c:a6:aa: 40:cc:fe:8f:f9:7f:7d:03:42:9c:48:93:65:31:c9:e0:b4:f3: 61:a9:4d:14:c1:51:ef:95:b3:7a:40:29:fc:29:8e:be:37:d3: 0c:e1:78:f6:2f:1b:99:f9:79:a6:40:03:de:b8:53:b4:cd:41: 2f:15:b9:25:76:c4:f1:f4:62:99:dc:50:ef:c8:ec:9d:cc:cd: dc:90:ec:6a:38:5c:7d:c3:d3:75:2d:50:76:5b:3d:b1:aa:e1: 18:db:0e:de:3e:87:f6:61:dc:14:92:52:1a:00:75:6b:cf:db: 45:66:fa:1c:cf:f1:2c:7f:d6:60:6a:9d:66:63:aa:3b:ef:b0: 4b:ba:41:2e -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZstI1gq3s82pL8/5Nsr0tEqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjUxMjE3MTYyNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTA5ZmRlYjc5ZDU0ZmM0MzhlOGU4Y2JmOGQwNmJiNGIyYTNmNTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1G67GBVoEszLzFUV5KISDqeX7Lyh AOoOSMl1RxGFrVVGEWkxYwX3c6Q5+dT75E9CL+Xrgnlj4lN4FnLCa/ohlF29pzcC 226HXNi1qAZUe0tz2sa+IdbT35PBjv4xbubDFt6WjeUuURsvrzfQr7diaUc10gt3 BRos+w/z90t91UPkW5EU45YvlqXqOrOmhVWwCR1/qwx2+Sz35VuXs+inFCJoQ3CG 8vHcMWSO8ND9/4OsnRXrqjxXwU+EexbTz76iDgjsN0G0vw5ijfuMtpycMBxeN7To bAfDVwLdjnHOd1liwycG3xrCrVI6tGNZMcs6h6vLfRGvVCCF347qIGFnEwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFMkJ/et51U/EOOjoy/jQa7Syo/VNMB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEveVFuOTYzblZUOFE0Nk9qTC1OQnJ0TEtqOVUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCAji4AwQA LQuaAwQBVQioAwQAVQirAwQAuXzxMA0GCSqGSIb3DQEBCwUAA4IBAQBDMjljOZIV QrpY+OCTBfIiiec23wZmKulk5BLw3VNKJpi5YubvEGIP+1F0OZsxQfu/Fi8OzzlE N+tYeS5zr8V/6c4DqgYVs4Py8OpxUkMKbhjvE7Opqc1SBgm6Rduz1DRh+9Pc48Rh PocBeFp+WYX9SOyu/sv0hDmQi8hMpqpAzP6P+X99A0KcSJNlMcngtPNhqU0UwVHv lbN6QCn8KY6+N9MM4Xj2LxuZ+XmmQAPeuFO0zUEvFbkldsTx9GKZ3FDvyOydzM3c kOxqOFx9w9N1LVB2Wz2xquEY2w7ePof2YdwUklIaAHVrz9tFZvocz/Esf9Zgap1m Y6o777BLukEu -----END CERTIFICATE-----Generated at Fri Dec 19 08:34:26 2025 by rpki-client