This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/RjYX-V2efI1Zqu_dPnOuCSQqr1I.roa File: RjYX-V2efI1Zqu_dPnOuCSQqr1I.roa (raw, json) Hash identifier: +pG1/ZRTZezQr6XfSyRunIJDq4WCFmSkYW6ipsa40Rw= Subject key identifier: 46:36:17:F9:5D:9E:7C:8D:59:AA:EF:DD:3E:73:AE:09:24:2A:AF:52 Certificate issuer: /CN=d7401e0249418b357547268824f6244925d8db39 Certificate serial: 019B175ADD6BCD4866ABF3C9B5CC9CCEC14C Authority key identifier: D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/RjYX-V2efI1Zqu_dPnOuCSQqr1I.roa Signing time: Sat 13 Dec 2025 10:56:29 +0000 ROA not before: Sat 13 Dec 2025 10:56:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 24904 IP address blocks: 45.87.180.0/22 maxlen: 24 45.128.40.0/22 maxlen: 24 94.103.120.0/22 maxlen: 24 185.97.100.0/22 maxlen: 24 185.210.108.0/22 maxlen: 24 185.212.212.0/22 maxlen: 24 194.110.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:5a:dd:6b:cd:48:66:ab:f3:c9:b5:cc:9c:ce:c1:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7401e0249418b357547268824f6244925d8db39 Validity Not Before: Dec 13 10:56:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=463617f95d9e7c8d59aaefdd3e73ae09242aaf52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:26:aa:bd:d4:f3:a9:d2:c5:ff:0d:2c:f9:89: 41:51:ec:88:2f:95:69:78:15:27:41:78:e2:33:c3: a1:fc:51:e7:4d:af:eb:cc:93:38:09:aa:b3:7f:4f: 84:ae:18:a2:8d:37:ba:2f:1b:a4:ae:fd:3b:de:b6: 3f:d9:b9:00:69:af:49:12:af:17:88:a5:c9:c0:73: 8c:fb:8b:89:6f:26:b2:63:58:f9:c3:52:76:f0:b5: 46:9b:a1:61:02:fd:61:ab:4f:11:ba:54:fa:dd:f0: 85:49:fb:71:1d:de:9e:b6:6a:cc:cd:fb:2c:da:60: 3b:33:88:cf:8e:33:e3:3d:ce:67:11:d9:02:78:3a: db:9f:f7:93:2e:f2:ba:da:98:49:c3:bd:cc:ed:8a: 29:ac:a3:1c:0b:4e:60:5a:c4:b8:c2:9a:fe:4b:38: 76:64:79:d5:90:d9:b8:f9:4c:8b:d9:3e:24:24:60: 68:87:4a:ef:15:89:3b:85:d1:c4:2b:25:c1:5a:6f: 12:00:71:1a:91:e6:db:84:81:a7:fa:19:34:2e:e0: 79:8e:93:ff:21:5b:8c:ba:30:19:16:72:6f:b2:51: 8c:3c:94:c6:e3:0f:8c:47:96:59:3b:ec:75:0a:97: 6e:9e:72:38:15:82:07:63:1f:91:9f:c0:ff:da:8e: af:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:36:17:F9:5D:9E:7C:8D:59:AA:EF:DD:3E:73:AE:09:24:2A:AF:52 X509v3 Authority Key Identifier: keyid:D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/RjYX-V2efI1Zqu_dPnOuCSQqr1I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.180.0/22 45.128.40.0/22 94.103.120.0/22 185.97.100.0/22 185.210.108.0/22 185.212.212.0/22 194.110.120.0/22 Signature Algorithm: sha256WithRSAEncryption e3:6a:d1:51:79:28:d0:54:38:4f:30:53:71:d1:11:33:38:30: b1:b0:03:c6:c4:57:e7:bc:1a:52:81:e4:fb:d5:b5:db:9d:21: ae:58:cf:21:c7:8a:47:a5:be:4d:95:2b:2c:17:fe:16:30:d0: 6e:dc:77:41:e7:d3:42:96:12:38:9e:db:5f:59:3b:2d:2a:1c: 2c:b4:fe:df:02:c6:19:16:a9:af:c7:71:9a:d0:3a:a9:5b:e7: 0b:b5:34:c2:9b:b2:7b:a8:39:cc:49:17:4a:5c:2a:43:05:bd: 26:19:24:a3:48:86:e6:b4:e5:9c:d0:34:44:3c:b1:5f:0f:84: 39:99:ae:03:d4:25:bd:8d:3a:aa:6b:6a:06:60:ab:c5:97:c2: 4c:6a:a0:df:76:1c:e7:d2:91:8f:5f:e6:f4:e4:8c:eb:95:5d: fb:21:60:71:51:81:c5:38:31:b1:c2:b5:b8:b2:48:57:b2:26: 49:da:6a:80:e7:a4:b7:0d:98:4f:f1:0d:de:fd:6f:b2:d8:b9: 0b:b8:36:18:0f:02:11:ac:e1:cf:c2:13:53:4a:41:04:24:cb: 1b:6a:84:fa:86:82:80:90:ca:e7:03:16:80:d1:44:aa:3c:a5: 3b:78:36:c7:49:cc:b0:d0:f3:b1:e3:c3:b7:94:5b:8a:22:20: df:97:4b:a0 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZsXWt1rzUhmq/PJtcyczsFMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDAxZTAyNDk0MThiMzU3NTQ3MjY4ODI0ZjYyNDQ5MjVk OGRiMzkwHhcNMjUxMjEzMTA1NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjM2MTdmOTVkOWU3YzhkNTlhYWVmZGQzZTczYWUwOTI0MmFhZjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiaqvdTzqdLF/w0s+YlBUeyIL5Vp eBUnQXjiM8Oh/FHnTa/rzJM4Caqzf0+ErhiijTe6Lxukrv073rY/2bkAaa9JEq8X iKXJwHOM+4uJbyayY1j5w1J28LVGm6FhAv1hq08RulT63fCFSftxHd6etmrMzfss 2mA7M4jPjjPjPc5nEdkCeDrbn/eTLvK62phJw73M7YoprKMcC05gWsS4wpr+Szh2 ZHnVkNm4+UyL2T4kJGBoh0rvFYk7hdHEKyXBWm8SAHEakebbhIGn+hk0LuB5jpP/ IVuMujAZFnJvslGMPJTG4w+MR5ZZO+x1CpdunnI4FYIHYx+Rn8D/2o6vjQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFEY2F/ldnnyNWarv3T5zrgkkKq9SMB8GA1UdIwQY MBaAFNdAHgJJQYs1dUcmiCT2JEkl2Ns5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBBZUFrbEJpelYxUnlhSUpQWWtTU1hZMnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9kNzMxMzctYjA4OS00ZGI0LWI2YjIt NTA3ODkxMzk1NDE3LzEvUmpZWC1WMmVmSTFacXVfZFBuT3VDU1FxcjFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9kNzMxMzctYjA4OS00ZGI0LWI2YjItNTA3ODkxMzk1NDE3 LzEvMTBBZUFrbEJpelYxUnlhSUpQWWtTU1hZMnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCLVe0AwQC LYAoAwQCXmd4AwQCuWFkAwQCudJsAwQCudTUAwQCwm54MA0GCSqGSIb3DQEBCwUA A4IBAQDjatFReSjQVDhPMFNx0REzODCxsAPGxFfnvBpSgeT71bXbnSGuWM8hx4pH pb5NlSssF/4WMNBu3HdB59NClhI4nttfWTstKhwstP7fAsYZFqmvx3Ga0DqpW+cL tTTCm7J7qDnMSRdKXCpDBb0mGSSjSIbmtOWc0DREPLFfD4Q5ma4D1CW9jTqqa2oG YKvFl8JMaqDfdhzn0pGPX+b05IzrlV37IWBxUYHFODGxwrW4skhXsiZJ2mqA56S3 DZhP8Q3e/W+y2LkLuDYYDwIRrOHPwhNTSkEEJMsbaoT6hoKAkMrnAxaA0USqPKU7 eDbHScyw0POx48O3lFuKIiDfl0ug -----END CERTIFICATE-----Generated at Mon Dec 15 17:21:44 2025 by rpki-client