This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/YJ0iR_b-Nen1aOiqKaw4vZmo_5c.roa File: YJ0iR_b-Nen1aOiqKaw4vZmo_5c.roa (raw, json) Hash identifier: KZCgbqiRi9f7dw5nk4nyuo7z+mZsmVTjQi5EVZjEuks= Subject key identifier: 60:9D:22:47:F6:FE:35:E9:F5:68:E8:AA:29:AC:38:BD:99:A8:FF:97 Certificate issuer: /CN=b541558181f7863119bf4a1554c75dab1f6c5292 Certificate serial: 019AB1AF1FB5DEB199AD79DBD3693B32AD90 Authority key identifier: B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/YJ0iR_b-Nen1aOiqKaw4vZmo_5c.roa Signing time: Sun 23 Nov 2025 17:07:15 +0000 ROA not before: Sun 23 Nov 2025 17:07:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215826 IP address blocks: 83.217.208.0/24 maxlen: 24 83.217.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b1:af:1f:b5:de:b1:99:ad:79:db:d3:69:3b:32:ad:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b541558181f7863119bf4a1554c75dab1f6c5292 Validity Not Before: Nov 23 17:07:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=609d2247f6fe35e9f568e8aa29ac38bd99a8ff97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:06:32:df:3d:62:72:08:a5:eb:d4:e1:d4:89: c6:21:71:c7:c8:7d:a0:89:48:7a:41:95:77:0d:47: 2b:a2:56:c7:03:b2:1d:03:ac:ad:05:ed:a3:e8:b4: 05:e1:ef:24:4c:87:60:b4:91:ab:06:f4:83:c3:5b: 2f:52:2a:4d:fd:e7:b2:02:bc:44:5b:1c:ce:99:cb: eb:29:6d:1d:c0:15:32:c8:14:fd:84:04:4e:60:bd: 7f:4a:ef:6d:27:92:9a:18:ec:48:86:3c:0c:9a:cc: 7b:fa:d2:99:6b:24:53:ce:03:cd:34:5f:ac:66:e9: 1f:b4:6f:5e:ef:71:7a:e5:21:85:c9:ae:10:2c:a5: 80:00:9a:04:e4:e8:66:b2:20:cb:fe:47:c9:ba:57: 1c:d8:27:72:ee:65:ae:09:96:dc:f1:93:9f:04:71: b0:3b:16:a2:c8:9e:9b:05:fd:94:0f:5e:f7:ed:79: 1c:29:cd:e5:bc:48:10:b6:e2:dc:65:2e:ef:2a:be: c6:ab:af:5e:9f:34:ee:37:55:45:b1:5a:15:fb:c9: 86:8d:0d:3f:12:83:74:22:39:60:eb:af:e9:ef:3e: a2:bb:cb:3d:10:79:ba:e1:48:4d:d3:9e:e1:a8:53: 72:29:1e:15:f6:e9:e6:45:7d:7e:fc:eb:42:8f:f2: cb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:9D:22:47:F6:FE:35:E9:F5:68:E8:AA:29:AC:38:BD:99:A8:FF:97 X509v3 Authority Key Identifier: keyid:B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/YJ0iR_b-Nen1aOiqKaw4vZmo_5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.217.208.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:49:29:3b:bc:e6:f3:7c:5f:31:10:3e:f3:e3:50:16:55:aa: c2:ac:06:92:ef:ad:55:e0:2e:11:ef:d2:85:16:bc:4f:51:f0: a5:fb:e7:36:72:da:76:4b:30:9e:bc:11:fd:e1:79:26:f9:2e: c0:95:0e:e9:55:1e:9e:c8:b1:44:d5:57:67:e4:03:b9:a1:ed: 8a:45:6a:28:24:a0:9f:6c:58:88:5a:18:54:75:80:be:89:ff: 8b:28:8c:64:09:fc:8d:8c:6c:8f:13:e9:63:49:d7:9d:88:fc: 1f:fe:92:0a:1b:2f:de:2d:6f:cd:4a:6d:bc:3e:75:e1:7e:03: 63:99:8f:73:7e:02:b6:16:2b:f9:21:32:71:0b:c9:85:53:fb: 56:e1:7b:2a:2f:5b:58:13:c7:c9:6d:53:5e:10:c3:18:62:9a: 13:d4:59:21:32:97:26:cd:df:9f:e6:f4:0a:18:ef:9c:4a:bc: eb:16:66:04:4d:b0:d6:28:78:24:0b:6d:ca:ba:00:2e:1c:cc: b0:6b:0b:c9:eb:28:33:6b:0d:aa:a6:bc:9c:28:47:6e:4d:f7: 08:d8:6a:e0:03:51:d3:c1:04:24:2d:ba:d1:34:07:51:2a:a5: 98:04:55:ad:e1:9f:9c:1c:32:d1:04:92:9a:61:63:cf:8c:f0: 52:1e:c4:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqxrx+13rGZrXnb02k7Mq2QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NDE1NTgxODFmNzg2MzExOWJmNGExNTU0Yzc1ZGFiMWY2 YzUyOTIwHhcNMjUxMTIzMTcwNzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDlkMjI0N2Y2ZmUzNWU5ZjU2OGU4YWEyOWFjMzhiZDk5YThmZjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygYy3z1icgil69Th1InGIXHHyH2g iUh6QZV3DUcrolbHA7IdA6ytBe2j6LQF4e8kTIdgtJGrBvSDw1svUipN/eeyArxE WxzOmcvrKW0dwBUyyBT9hAROYL1/Su9tJ5KaGOxIhjwMmsx7+tKZayRTzgPNNF+s ZukftG9e73F65SGFya4QLKWAAJoE5OhmsiDL/kfJulcc2Cdy7mWuCZbc8ZOfBHGw OxaiyJ6bBf2UD1737XkcKc3lvEgQtuLcZS7vKr7Gq69enzTuN1VFsVoV+8mGjQ0/ EoN0Ijlg66/p7z6iu8s9EHm64UhN057hqFNyKR4V9unmRX1+/OtCj/LLfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGCdIkf2/jXp9WjoqimsOL2ZqP+XMB8GA1UdIwQY MBaAFLVBVYGB94YxGb9KFVTHXasfbFKSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFVGVmdZSDNoakVadjBvVlZNZGRxeDlzVXBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi80ZGQxNjktOGRjYi00NjUzLThhMDMt NTcxYjZjNjEyYmVjLzEvWUowaVJfYi1OZW4xYU9pcUthdzR2Wm1vXzVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi80ZGQxNjktOGRjYi00NjUzLThhMDMtNTcxYjZjNjEyYmVj LzEvdFVGVmdZSDNoakVadjBvVlZNZGRxeDlzVXBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBU9nQMA0G CSqGSIb3DQEBCwUAA4IBAQBKSSk7vObzfF8xED7z41AWVarCrAaS761V4C4R79KF FrxPUfCl++c2ctp2SzCevBH94Xkm+S7AlQ7pVR6eyLFE1Vdn5AO5oe2KRWooJKCf bFiIWhhUdYC+if+LKIxkCfyNjGyPE+ljSdediPwf/pIKGy/eLW/NSm28PnXhfgNj mY9zfgK2Fiv5ITJxC8mFU/tW4XsqL1tYE8fJbVNeEMMYYpoT1FkhMpcmzd+f5vQK GO+cSrzrFmYETbDWKHgkC23KugAuHMywawvJ6ygzaw2qprycKEduTfcI2GrgA1HT wQQkLbrRNAdRKqWYBFWt4Z+cHDLRBJKaYWPPjPBSHsTx -----END CERTIFICATE-----Generated at Sat Dec 6 19:45:08 2025 by rpki-client