This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/_bY7rYNZRg-QNDBCAnYTCw6GXYo.roa File: _bY7rYNZRg-QNDBCAnYTCw6GXYo.roa (raw, json) Hash identifier: 0NwXyZNn6uDgNg9vQ76uqxzPkJoLbzwrWdJoP5HynXs= Subject key identifier: FD:B6:3B:AD:83:59:46:0F:90:34:30:42:02:76:13:0B:0E:86:5D:8A Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7 Certificate serial: 019AE3E623C7C2CB17E134574927BE69C0AC Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/_bY7rYNZRg-QNDBCAnYTCw6GXYo.roa Signing time: Wed 03 Dec 2025 11:08:21 +0000 ROA not before: Wed 03 Dec 2025 11:08:21 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198371 IP address blocks: 185.47.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:e6:23:c7:c2:cb:17:e1:34:57:49:27:be:69:c0:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7 Validity Not Before: Dec 3 11:08:21 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fdb63bad8359460f903430420276130b0e865d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7f:e5:15:33:16:cf:7d:d0:3e:8a:c1:d8:c5: f4:9e:ba:c8:a6:ca:ac:ba:e8:10:22:d8:05:83:08: e8:9b:4a:b7:4d:c6:94:b2:c4:44:be:16:58:62:ed: 91:9c:69:0c:d1:66:33:96:c1:66:1e:cc:1f:9f:9a: 99:35:9c:87:e4:c3:56:17:c3:d6:ec:6b:4e:f2:17: ee:b8:b0:e6:2b:38:8d:2a:11:2a:4d:ea:a9:3f:f5: 60:db:7f:52:02:93:2a:f7:bd:7d:d8:e2:6b:b5:75: 0e:e2:10:53:8a:bb:81:7e:f5:7e:e2:05:66:78:07: 69:06:66:16:8c:7f:08:d6:a3:ae:23:c7:d5:e2:29: 52:71:cb:5c:a0:86:21:75:5c:b0:f6:9a:c6:92:53: af:23:05:30:d5:94:8c:88:f3:ae:5a:17:f6:98:d3: a0:0f:04:4a:5f:a4:88:72:29:1b:b0:5b:43:d3:fa: 5a:9f:11:e5:7c:16:9b:e7:79:3d:e3:cb:bf:c2:5f: 66:c7:4e:b1:11:da:90:85:d2:ca:58:ac:af:8d:d5: 8f:8b:e4:ef:82:a7:e4:2e:23:c0:14:ca:ce:63:c9: 4b:ff:3d:d9:94:83:be:4b:8e:7d:25:60:4a:f5:e6: 08:c9:87:ac:1f:92:7f:55:2b:8c:05:2a:da:17:d4: f6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B6:3B:AD:83:59:46:0F:90:34:30:42:02:76:13:0B:0E:86:5D:8A X509v3 Authority Key Identifier: keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/_bY7rYNZRg-QNDBCAnYTCw6GXYo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.47.211.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:ce:9c:6f:66:51:ed:ec:6f:36:11:93:41:76:00:ff:2d:8e: f0:07:50:8d:cb:3d:a6:6a:a5:7b:75:77:b5:b5:5e:66:44:a6: 57:0e:11:03:21:59:4f:4b:fd:87:61:06:71:94:cd:84:85:3f: 1f:f1:fe:76:7d:01:96:7b:72:88:02:f9:05:ef:b3:8e:71:55: f9:ba:a9:04:3e:04:e8:76:d4:72:7d:7b:3c:f1:2a:ec:14:a8: c5:91:c7:d7:07:a2:0e:0f:b1:72:67:8b:31:79:12:8b:13:ff: f0:16:7d:ac:3a:65:27:97:fe:91:ee:fb:4b:47:32:01:0e:f2: 49:c5:00:09:7a:c4:fb:e6:1e:ef:62:c1:4f:a6:7b:60:56:d0: 6b:eb:73:b4:e5:3c:42:50:51:7c:14:04:77:9d:92:f3:b3:5b: e1:b8:f4:7f:18:b4:89:7d:78:61:49:42:2e:cd:24:d1:10:a8: ec:a9:b0:40:e1:02:c1:72:f3:e6:0d:39:2d:b9:2a:ab:6b:cf: c8:c3:1e:0b:f2:06:94:97:a4:5c:8e:18:a2:2a:02:e1:1f:dd: 89:74:3e:4b:19:32:5c:b0:8f:53:d4:2c:aa:42:61:db:88:99: ee:9f:46:f3:1a:77:2d:c8:8d:d4:1a:dd:91:3b:66:dd:09:3b: 1f:01:fa:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrj5iPHwssX4TRXSSe+acCsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5YjEzMjBmYmMyNGQ2ZjQzNjZjYjY0ZmNmNWVkMmQ3YjFi NmJkZjcwHhcNMjUxMjAzMTEwODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGI2M2JhZDgzNTk0NjBmOTAzNDMwNDIwMjc2MTMwYjBlODY1ZDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23/lFTMWz33QPorB2MX0nrrIpsqs uugQItgFgwjom0q3TcaUssREvhZYYu2RnGkM0WYzlsFmHswfn5qZNZyH5MNWF8PW 7GtO8hfuuLDmKziNKhEqTeqpP/Vg239SApMq97192OJrtXUO4hBTiruBfvV+4gVm eAdpBmYWjH8I1qOuI8fV4ilScctcoIYhdVyw9prGklOvIwUw1ZSMiPOuWhf2mNOg DwRKX6SIcikbsFtD0/panxHlfBab53k948u/wl9mx06xEdqQhdLKWKyvjdWPi+Tv gqfkLiPAFMrOY8lL/z3ZlIO+S459JWBK9eYIyYesH5J/VSuMBSraF9T2pQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP22O62DWUYPkDQwQgJ2EwsOhl2KMB8GA1UdIwQY MBaAFOmxMg+8JNb0Nmy2T89e0textr33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUt ZDNlMjgwMGJkNjQwLzEvX2JZN3JZTlpSZy1RTkRCQ0FuWVRDdzZHWFlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUtZDNlMjgwMGJkNjQw LzEvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuS/TMA0G CSqGSIb3DQEBCwUAA4IBAQAPzpxvZlHt7G82EZNBdgD/LY7wB1CNyz2maqV7dXe1 tV5mRKZXDhEDIVlPS/2HYQZxlM2EhT8f8f52fQGWe3KIAvkF77OOcVX5uqkEPgTo dtRyfXs88SrsFKjFkcfXB6IOD7FyZ4sxeRKLE//wFn2sOmUnl/6R7vtLRzIBDvJJ xQAJesT75h7vYsFPpntgVtBr63O05TxCUFF8FAR3nZLzs1vhuPR/GLSJfXhhSUIu zSTREKjsqbBA4QLBcvPmDTktuSqra8/Iwx4L8gaUl6RcjhiiKgLhH92JdD5LGTJc sI9T1CyqQmHbiJnun0bzGnctyI3UGt2RO2bdCTsfAfos -----END CERTIFICATE-----Generated at Sat Dec 6 16:17:59 2025 by rpki-client