This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/Yx4RTRwcv-iZJFBfOuNpOOiq488.roa File: Yx4RTRwcv-iZJFBfOuNpOOiq488.roa (raw, json) Hash identifier: XrtGjg6+9eicnDNwMrLxBtahJXbLSKOrC3yknbdUTt4= Subject key identifier: 63:1E:11:4D:1C:1C:BF:E8:99:24:50:5F:3A:E3:69:38:E8:AA:E3:CF Certificate issuer: /CN=ce1228a3a3d00654d4b111733874e31d80c0a20c Certificate serial: 019A79ED79D1E9E137C31A2FC7A7B81DA69F Authority key identifier: CE:12:28:A3:A3:D0:06:54:D4:B1:11:73:38:74:E3:1D:80:C0:A2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/Yx4RTRwcv-iZJFBfOuNpOOiq488.roa Signing time: Wed 12 Nov 2025 21:16:37 +0000 ROA not before: Wed 12 Nov 2025 21:16:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212639 IP address blocks: 86.54.201.0/24 maxlen: 24 195.206.120.0/24 maxlen: 24 2a14:9380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:79:ed:79:d1:e9:e1:37:c3:1a:2f:c7:a7:b8:1d:a6:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1228a3a3d00654d4b111733874e31d80c0a20c Validity Not Before: Nov 12 21:16:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=631e114d1c1cbfe89924505f3ae36938e8aae3cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a8:92:f2:f7:ea:b1:9a:65:fe:1a:75:ff:8f: 93:f1:97:5c:3f:e6:bc:8d:44:96:5c:8a:6d:49:98: d8:87:3f:2e:13:7e:90:88:d1:b7:2f:99:06:34:1c: af:25:e5:28:d2:aa:54:f6:4d:e6:45:ac:80:19:6b: d4:f7:18:14:80:f4:ef:ca:b5:27:eb:45:aa:e9:83: 0a:24:5d:e8:d5:9f:32:65:25:d7:ab:d3:b2:ee:a3: e8:16:26:71:b1:ab:2d:8c:e8:2d:90:b5:42:a7:7f: 80:61:cd:ed:2a:a0:1d:78:d6:60:1c:62:d3:31:a6: c1:09:b0:77:19:42:57:c2:6d:ad:f4:82:33:e9:68: 36:dc:2d:f2:20:6e:9f:64:f0:0c:55:ad:ff:8d:e5: 3d:0c:40:e1:a0:3d:0e:bb:d1:3b:d9:b0:41:14:16: 47:ec:ca:fd:2b:7b:d4:67:be:d1:3b:f9:13:78:15: 22:cc:1d:cd:d1:4a:45:43:8c:d5:28:c5:ee:57:b1: 5e:70:5a:a2:4c:06:0c:7f:0e:3d:fd:9c:d4:25:5d: 75:fb:70:05:61:96:22:de:77:a8:d1:bd:66:cc:b9: 88:49:c2:e3:86:b9:ab:2a:df:4d:69:6a:13:95:09: 8a:d9:d1:ce:37:60:2b:81:85:d7:8e:b8:64:81:b0: 72:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:1E:11:4D:1C:1C:BF:E8:99:24:50:5F:3A:E3:69:38:E8:AA:E3:CF X509v3 Authority Key Identifier: keyid:CE:12:28:A3:A3:D0:06:54:D4:B1:11:73:38:74:E3:1D:80:C0:A2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/Yx4RTRwcv-iZJFBfOuNpOOiq488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.54.201.0/24 195.206.120.0/24 IPv6: 2a14:9380::/32 Signature Algorithm: sha256WithRSAEncryption 36:2f:1d:ff:5c:b7:23:ac:1c:32:40:41:f7:72:b2:22:50:5a: a5:d6:f2:b0:29:f5:35:f5:f3:79:2f:a3:13:52:68:15:15:0d: 0e:07:d0:77:14:92:49:fe:99:5d:1e:c3:93:fa:dc:c9:4a:19: 73:f0:3f:41:81:3a:76:c7:05:93:40:d2:41:c3:6c:67:45:a4: b7:55:6b:af:13:5c:c9:9a:63:dd:3d:8d:41:48:3a:02:e4:6d: 79:a6:4e:9e:79:17:83:98:80:bb:6e:a0:a9:4e:a9:54:7c:d3: 0f:d8:b2:3a:2f:fb:c3:69:d9:e1:25:f3:d6:f6:ce:97:6a:7c: 2a:80:17:72:58:9f:0e:41:4a:50:f8:51:ba:87:26:e1:99:de: 98:51:ea:ef:72:48:4b:31:a9:d1:bb:17:54:c0:33:40:6e:e3: 77:4a:9f:24:7a:af:99:be:50:27:af:02:ce:74:75:95:88:0e: 66:3d:03:6c:90:0d:d3:29:4c:31:c2:69:a2:1f:da:db:ad:97: 8a:d4:c8:ce:a6:3f:48:9c:2c:8b:9b:41:88:b1:73:35:95:0a: 7a:ea:09:17:64:a2:d8:df:79:8b:a8:c8:ff:4d:32:c8:6b:7c: 77:e6:a6:10:84:48:9a:56:c0:b0:f1:e1:f6:1b:c3:a4:cb:47: aa:38:c7:fe -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZp57XnR6eE3wxovx6e4HaafMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMTIyOGEzYTNkMDA2NTRkNGIxMTE3MzM4NzRlMzFkODBj MGEyMGMwHhcNMjUxMTEyMjExNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzFlMTE0ZDFjMWNiZmU4OTkyNDUwNWYzYWUzNjkzOGU4YWFlM2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqiS8vfqsZpl/hp1/4+T8ZdcP+a8 jUSWXIptSZjYhz8uE36QiNG3L5kGNByvJeUo0qpU9k3mRayAGWvU9xgUgPTvyrUn 60Wq6YMKJF3o1Z8yZSXXq9Oy7qPoFiZxsastjOgtkLVCp3+AYc3tKqAdeNZgHGLT MabBCbB3GUJXwm2t9IIz6Wg23C3yIG6fZPAMVa3/jeU9DEDhoD0Ou9E72bBBFBZH 7Mr9K3vUZ77RO/kTeBUizB3N0UpFQ4zVKMXuV7FecFqiTAYMfw49/ZzUJV11+3AF YZYi3neo0b1mzLmIScLjhrmrKt9NaWoTlQmK2dHON2ArgYXXjrhkgbByMwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGMeEU0cHL/omSRQXzrjaTjoquPPMB8GA1UdIwQY MBaAFM4SKKOj0AZU1LERczh04x2AwKIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemhJb282UFFCbFRVc1JGek9IVGpIWURBb2d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mOWQ3YmEtYTQ0Yi00NjJkLWIzMzMt ZmQ3ZGJkZjhlMzAwLzEvWXg0UlRSd2N2LWlaSkZCZk91TnBPT2lxNDg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9mOWQ3YmEtYTQ0Yi00NjJkLWIzMzMtZmQ3ZGJkZjhlMzAw LzEvemhJb282UFFCbFRVc1JGek9IVGpIWURBb2d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAVjbJAwQA w854MA0EAgACMAcDBQAqFJOAMA0GCSqGSIb3DQEBCwUAA4IBAQA2Lx3/XLcjrBwy QEH3crIiUFql1vKwKfU19fN5L6MTUmgVFQ0OB9B3FJJJ/pldHsOT+tzJShlz8D9B gTp2xwWTQNJBw2xnRaS3VWuvE1zJmmPdPY1BSDoC5G15pk6eeReDmIC7bqCpTqlU fNMP2LI6L/vDadnhJfPW9s6XanwqgBdyWJ8OQUpQ+FG6hybhmd6YUervckhLManR uxdUwDNAbuN3Sp8keq+ZvlAnrwLOdHWViA5mPQNskA3TKUwxwmmiH9rbrZeK1MjO pj9InCyLm0GIsXM1lQp66gkXZKLY33mLqMj/TTLIa3x35qYQhEiaVsCw8eH2G8Ok y0eqOMf+ -----END CERTIFICATE-----Generated at Sun Dec 7 00:35:40 2025 by rpki-client