This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/yW7cdRDGRGnl2p9hOjN1yRdkgZU.roa File: yW7cdRDGRGnl2p9hOjN1yRdkgZU.roa (raw, json) Hash identifier: ZivRWx3B/fZFpGzZX+9m5QTKA6BgqDFkXZVcPhKEPac= Subject key identifier: C9:6E:DC:75:10:C6:44:69:E5:DA:9F:61:3A:33:75:C9:17:64:81:95 Certificate issuer: /CN=66306e3acf3eb903cc73973fb62860b663516c93 Certificate serial: 019A7D7604906456BF9B3AF9E6C529CF2670 Authority key identifier: 66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/yW7cdRDGRGnl2p9hOjN1yRdkgZU.roa Signing time: Thu 13 Nov 2025 13:44:37 +0000 ROA not before: Thu 13 Nov 2025 13:44:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48779 IP address blocks: 80.173.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7d:76:04:90:64:56:bf:9b:3a:f9:e6:c5:29:cf:26:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66306e3acf3eb903cc73973fb62860b663516c93 Validity Not Before: Nov 13 13:44:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c96edc7510c64469e5da9f613a3375c917648195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b4:16:3c:31:94:51:b3:ea:b7:59:33:5a:bb: b0:65:da:3e:d2:80:bb:df:35:80:d6:60:5f:d5:a8: c6:47:63:b9:94:82:58:47:49:64:85:8f:65:24:13: 0b:8b:d2:8e:1f:bd:bd:b5:3a:9d:ca:bc:9d:24:f1: 47:1f:95:f8:ed:6d:12:b8:6a:7b:f3:e9:5a:38:05: 0f:37:e7:d6:27:ac:a1:a4:b3:3d:51:6e:d0:6b:d1: 03:72:ba:06:70:58:d1:19:a8:d0:38:6b:52:13:7c: ad:b9:ac:fb:08:9c:fc:c7:7b:49:e2:c3:d7:68:b1: 49:5e:1d:a0:f5:4a:15:a0:c5:b8:63:15:87:78:e9: 6e:f3:c7:f9:59:cd:36:c8:35:9c:e3:ef:11:89:0d: 06:85:d6:4c:f8:c2:fa:6e:7d:63:6c:a7:a9:03:68: 43:57:f1:d7:67:1d:a5:10:25:44:8f:9a:0b:f9:6c: 33:bf:69:4a:c5:a0:7b:69:12:d4:9a:97:7e:43:8f: cb:17:71:05:00:35:58:33:d4:83:aa:17:e5:f9:47: de:44:2e:d3:db:5d:ed:ee:af:9d:0e:6e:98:e4:a5: 64:d7:03:7c:9f:cf:f7:71:16:d3:b6:6e:6d:53:b9: 8d:e3:07:77:01:fb:f7:29:a3:8b:a9:f3:e5:f8:e9: 9e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6E:DC:75:10:C6:44:69:E5:DA:9F:61:3A:33:75:C9:17:64:81:95 X509v3 Authority Key Identifier: keyid:66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/yW7cdRDGRGnl2p9hOjN1yRdkgZU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.173.205.0/24 Signature Algorithm: sha256WithRSAEncryption c9:1f:94:57:50:f5:d2:7a:25:11:a3:13:72:0c:13:7e:d6:65: 13:37:c9:54:8e:14:29:89:4e:fb:e2:e8:20:67:f4:79:ed:a3: 26:7a:e2:cc:0d:99:84:28:1e:31:d7:90:ff:c6:77:3f:5f:80: 06:4e:77:12:54:5f:1d:7d:03:62:1f:1a:36:08:ec:2c:8f:62: af:cd:ee:50:a4:86:7b:64:92:8a:f7:9b:a8:22:c9:d8:b0:b3: ae:e3:0d:fb:25:b4:77:c6:86:b8:44:8a:e4:0d:23:d0:70:ed: d0:f9:4a:44:44:f3:80:8e:1e:f5:6a:fc:ee:46:59:db:43:f5: 50:ac:79:dc:e5:8b:57:4b:47:9b:f9:c4:e0:8f:75:0a:5d:ef: 53:19:b7:35:b0:12:ce:b5:67:31:80:d0:7b:67:9e:23:01:70: 1d:98:d8:6e:a3:71:3a:76:5b:e8:38:bb:92:a7:79:4b:8f:e2: a7:ad:36:d6:27:60:59:48:45:40:b7:6e:e3:34:67:7b:09:9a: bd:ba:cd:58:79:33:6c:6a:6f:9b:8d:ad:d2:77:fe:8b:ef:50: 3c:e9:2f:cb:1e:8c:78:f3:27:39:1b:1c:76:bc:02:25:ee:8e: 3f:81:e7:63:26:ba:98:cb:14:78:5a:89:12:76:e9:47:08:8f: 3c:de:d7:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp9dgSQZFa/mzr55sUpzyZwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MzA2ZTNhY2YzZWI5MDNjYzczOTczZmI2Mjg2MGI2NjM1 MTZjOTMwHhcNMjUxMTEzMTM0NDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTZlZGM3NTEwYzY0NDY5ZTVkYTlmNjEzYTMzNzVjOTE3NjQ4MTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrQWPDGUUbPqt1kzWruwZdo+0oC7 3zWA1mBf1ajGR2O5lIJYR0lkhY9lJBMLi9KOH729tTqdyrydJPFHH5X47W0SuGp7 8+laOAUPN+fWJ6yhpLM9UW7Qa9EDcroGcFjRGajQOGtSE3ytuaz7CJz8x3tJ4sPX aLFJXh2g9UoVoMW4YxWHeOlu88f5Wc02yDWc4+8RiQ0GhdZM+ML6bn1jbKepA2hD V/HXZx2lECVEj5oL+Wwzv2lKxaB7aRLUmpd+Q4/LF3EFADVYM9SDqhfl+UfeRC7T 213t7q+dDm6Y5KVk1wN8n8/3cRbTtm5tU7mN4wd3Afv3KaOLqfPl+Ome/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMlu3HUQxkRp5dqfYTozdckXZIGVMB8GA1UdIwQY MBaAFGYwbjrPPrkDzHOXP7YoYLZjUWyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmpCdU9zOC11UVBNYzVjX3RpaGd0bU5SYkpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82NGRhYmItN2EwMS00MGQ1LWE1ODct ZWUyN2NiY2E3NDdlLzEveVc3Y2RSREdSR25sMnA5aE9qTjF5UmRrZ1pVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82NGRhYmItN2EwMS00MGQ1LWE1ODctZWUyN2NiY2E3NDdl LzEvWmpCdU9zOC11UVBNYzVjX3RpaGd0bU5SYkpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUK3NMA0G CSqGSIb3DQEBCwUAA4IBAQDJH5RXUPXSeiURoxNyDBN+1mUTN8lUjhQpiU774ugg Z/R57aMmeuLMDZmEKB4x15D/xnc/X4AGTncSVF8dfQNiHxo2COwsj2Kvze5QpIZ7 ZJKK95uoIsnYsLOu4w37JbR3xoa4RIrkDSPQcO3Q+UpERPOAjh71avzuRlnbQ/VQ rHnc5YtXS0eb+cTgj3UKXe9TGbc1sBLOtWcxgNB7Z54jAXAdmNhuo3E6dlvoOLuS p3lLj+KnrTbWJ2BZSEVAt27jNGd7CZq9us1YeTNsam+bja3Sd/6L71A86S/LHox4 8yc5Gxx2vAIl7o4/gedjJrqYyxR4WokSdulHCI883tdq -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:16 2025 by rpki-client