This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/4yZTf3OsIRZIEjMrz8-5ILc2C74.roa File: 4yZTf3OsIRZIEjMrz8-5ILc2C74.roa (raw, json) Hash identifier: aiMSxdzv4PUdTe93bKxnLhd2giNSW/3kAmdI3yacpFc= Subject key identifier: E3:26:53:7F:73:AC:21:16:48:12:33:2B:CF:CF:B9:20:B7:36:0B:BE Certificate issuer: /CN=f5cf73b3e45f772fae1b915690b317344c3f442b Certificate serial: 019A7DF33D3EAC81787569C51943B821C00C Authority key identifier: F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/4yZTf3OsIRZIEjMrz8-5ILc2C74.roa Signing time: Thu 13 Nov 2025 16:01:24 +0000 ROA not before: Thu 13 Nov 2025 16:01:24 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213166 IP address blocks: 86.105.182.0/24 maxlen: 24 91.194.110.0/24 maxlen: 24 2a0f:ea81::/32 maxlen: 48 2a0f:ea83::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7d:f3:3d:3e:ac:81:78:75:69:c5:19:43:b8:21:c0:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5cf73b3e45f772fae1b915690b317344c3f442b Validity Not Before: Nov 13 16:01:24 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e326537f73ac21164812332bcfcfb920b7360bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:63:a2:da:54:ab:1c:0d:3a:99:71:a9:18:a8: 14:f2:c3:b6:d7:1c:86:05:3b:d1:4a:b4:f9:44:39: c5:f4:52:bd:e5:fa:cc:03:65:c8:be:41:ab:de:4c: f2:41:a2:40:59:38:85:c7:8a:30:fe:46:1d:82:fc: ca:a0:04:f4:d5:f6:a9:cc:2a:61:c3:f5:95:94:52: 88:fd:7b:b7:92:37:62:42:2c:41:4b:b0:7f:45:49: bc:2a:5a:96:54:f6:e4:3f:a6:7b:bd:fc:c7:46:b9: 96:a8:ee:de:08:22:a2:66:a3:2c:3d:ca:32:a8:14: ae:b5:12:4c:b9:c5:77:b3:ce:a4:e2:ad:6d:d5:00: 48:d7:6a:09:fa:95:68:9a:a4:3e:ae:b7:f5:ff:b5: 0e:75:ce:64:a0:3a:75:d5:2d:98:3c:f9:11:9a:8f: 14:0b:d2:01:5a:eb:6a:80:7c:df:e6:e2:59:01:d8: fd:f8:0c:0d:c4:69:09:8c:c4:bf:b3:da:c6:4e:b4: 5f:2e:04:76:fc:54:aa:bf:87:80:6c:03:e0:fa:2d: 29:32:90:5a:10:2c:5d:8b:40:bf:f1:af:35:73:a6: 6b:e8:11:09:06:e1:d7:7e:86:81:ad:c4:8a:c1:7c: 85:d3:8a:32:b2:42:c3:2e:dc:be:e3:ad:92:66:88: fe:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:26:53:7F:73:AC:21:16:48:12:33:2B:CF:CF:B9:20:B7:36:0B:BE X509v3 Authority Key Identifier: keyid:F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/4yZTf3OsIRZIEjMrz8-5ILc2C74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.105.182.0/24 91.194.110.0/24 IPv6: 2a0f:ea81::/32 2a0f:ea83::/32 Signature Algorithm: sha256WithRSAEncryption b5:8b:4e:98:20:d4:ac:9e:9e:a5:66:20:8a:4c:2c:3b:a0:d1: cb:6a:0f:4d:df:66:4a:47:4c:c7:0a:cb:92:6a:f1:2e:64:7e: 21:8d:50:66:d8:44:3a:f3:49:26:70:63:53:34:e8:58:0c:e1: f1:64:82:26:46:11:13:eb:d8:a0:07:02:ca:40:0c:b7:df:13: 6c:67:04:a4:bc:80:ad:79:cc:7e:9f:d9:05:2e:f0:9c:57:18: 56:2b:c2:c5:1b:cd:0a:ab:dc:32:c7:d3:bb:4a:80:15:4a:03: 44:41:86:db:05:8c:b2:f7:55:03:5d:eb:d6:dc:e2:c6:42:34: 9c:f3:02:99:22:31:95:49:98:b6:fa:f2:86:0b:d5:18:6d:33: 4a:33:f7:43:1f:d8:64:3a:19:84:f4:62:8e:f3:7d:ff:a2:ee: 1b:af:1c:e8:a4:40:1b:18:16:4c:05:ac:e8:d4:41:41:11:60: 24:bb:d3:7b:5a:80:85:96:71:56:e8:ef:c1:d8:93:73:be:5f: 85:b2:40:d5:47:1e:55:62:45:3f:95:df:ca:98:ff:9b:d3:8c: 6d:6e:ab:d6:07:44:3e:ee:1c:dd:ba:32:af:51:ed:48:0f:5e: 1a:95:c3:87:0a:34:e9:56:cb:59:4d:b9:3d:df:59:bc:3e:4a: a6:e8:7f:ac -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZp98z0+rIF4dWnFGUO4IcAMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1Y2Y3M2IzZTQ1Zjc3MmZhZTFiOTE1NjkwYjMxNzM0NGMz ZjQ0MmIwHhcNMjUxMTEzMTYwMTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzI2NTM3ZjczYWMyMTE2NDgxMjMzMmJjZmNmYjkyMGI3MzYwYmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmOi2lSrHA06mXGpGKgU8sO21xyG BTvRSrT5RDnF9FK95frMA2XIvkGr3kzyQaJAWTiFx4ow/kYdgvzKoAT01fapzCph w/WVlFKI/Xu3kjdiQixBS7B/RUm8KlqWVPbkP6Z7vfzHRrmWqO7eCCKiZqMsPcoy qBSutRJMucV3s86k4q1t1QBI12oJ+pVomqQ+rrf1/7UOdc5koDp11S2YPPkRmo8U C9IBWutqgHzf5uJZAdj9+AwNxGkJjMS/s9rGTrRfLgR2/FSqv4eAbAPg+i0pMpBa ECxdi0C/8a81c6Zr6BEJBuHXfoaBrcSKwXyF04oyskLDLty+462SZoj+2QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFOMmU39zrCEWSBIzK8/PuSC3Ngu+MB8GA1UdIwQY MBaAFPXPc7PkX3cvrhuRVpCzFzRMP0QrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWM5enMtUmZkeS11RzVGV2tMTVhORXdfUkNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zYmU4NjUtNWM3OS00N2MwLWFhNGQt MWM2NTRlMDJkNzVkLzEvNHlaVGYzT3NJUlpJRWpNcno4LTVJTGMyQzc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8zYmU4NjUtNWM3OS00N2MwLWFhNGQtMWM2NTRlMDJkNzVk LzEvOWM5enMtUmZkeS11RzVGV2tMTVhORXdfUkNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQAVmm2AwQA W8JuMBQEAgACMA4DBQAqD+qBAwUAKg/qgzANBgkqhkiG9w0BAQsFAAOCAQEAtYtO mCDUrJ6epWYgikwsO6DRy2oPTd9mSkdMxwrLkmrxLmR+IY1QZthEOvNJJnBjUzTo WAzh8WSCJkYRE+vYoAcCykAMt98TbGcEpLyArXnMfp/ZBS7wnFcYVivCxRvNCqvc MsfTu0qAFUoDREGG2wWMsvdVA13r1tzixkI0nPMCmSIxlUmYtvryhgvVGG0zSjP3 Qx/YZDoZhPRijvN9/6LuG68c6KRAGxgWTAWs6NRBQRFgJLvTe1qAhZZxVujvwdiT c75fhbJA1UceVWJFP5Xfypj/m9OMbW6r1gdEPu4c3boyr1HtSA9eGpXDhwo06VbL WU25Pd9ZvD5Kpuh/rA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:29:42 2025 by rpki-client