This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/yAfCjmZjOAB8dlMTE21kHjd1vL0.roa File: yAfCjmZjOAB8dlMTE21kHjd1vL0.roa (raw, json) Hash identifier: z0i92ZtXWqd/J3rMgm1gm2l9HMdnyUuG5Ta5tta+hmw= Subject key identifier: C8:07:C2:8E:66:63:38:00:7C:76:53:13:13:6D:64:1E:37:75:BC:BD Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f Certificate serial: 019B2292E165CBD8AAE2919475055D8D9DCA Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/yAfCjmZjOAB8dlMTE21kHjd1vL0.roa Signing time: Mon 15 Dec 2025 15:13:29 +0000 ROA not before: Mon 15 Dec 2025 15:13:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211279 IP address blocks: 178.175.162.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:92:e1:65:cb:d8:aa:e2:91:94:75:05:5d:8d:9d:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f Validity Not Before: Dec 15 15:13:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c807c28e666338007c765313136d641e3775bcbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:24:28:e1:33:f6:e3:52:0b:30:4f:9b:a2:7f: 96:00:84:96:de:a9:7e:de:88:32:e6:75:86:ad:96: c1:53:c5:1b:9f:ba:b4:27:56:04:82:9a:36:88:37: 0b:de:bf:9c:13:26:3d:04:a5:cc:67:11:91:f2:82: 89:e3:ce:47:f0:7c:c7:7f:d2:6d:55:1c:9d:61:95: b2:bc:07:d9:c3:6a:10:96:c7:b4:a8:b5:fe:16:9f: b6:79:ef:d4:38:c4:c6:14:19:11:0b:2f:d6:ab:8f: d0:db:93:8b:57:aa:7f:07:a1:d7:20:6c:26:5f:91: f2:fe:20:97:88:e9:53:f0:20:1f:3e:70:60:b6:87: d1:52:62:e5:89:b5:b6:40:e1:97:89:fd:c4:a4:b0: c5:76:57:dc:03:1c:31:35:15:81:60:b2:c3:29:52: ef:98:43:0e:1c:00:46:28:3b:50:f2:5b:d7:e3:cc: 48:94:60:e9:e7:d4:8c:50:28:25:88:9d:76:98:df: c7:df:4a:0e:b1:05:4d:7f:36:0f:6c:53:30:de:6e: 9c:d9:2a:5e:84:79:40:6e:78:e5:5f:69:b5:ef:a2: 83:8c:22:16:18:33:69:00:a3:ad:64:1b:80:76:ee: 5a:5f:7d:c7:d3:86:ba:85:7b:1b:88:6b:7d:b4:12: 9a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:07:C2:8E:66:63:38:00:7C:76:53:13:13:6D:64:1E:37:75:BC:BD X509v3 Authority Key Identifier: keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/yAfCjmZjOAB8dlMTE21kHjd1vL0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.175.162.0/23 Signature Algorithm: sha256WithRSAEncryption ae:7d:1d:17:b2:83:45:be:fd:5b:af:80:52:01:b5:fb:58:66: 2a:e6:08:fa:3b:ac:82:44:5a:9d:22:8b:5f:cf:7a:11:2c:e3: d6:3c:13:0c:12:31:4a:ca:5e:5e:b7:49:7c:a3:6a:a8:6a:60: 70:5f:4f:94:d8:6b:f1:81:5c:47:c5:5f:c4:88:ca:04:ee:ef: d3:7a:13:68:70:72:f9:0a:40:e0:28:bf:fd:62:37:e5:4a:77: 5e:95:19:f4:24:05:ba:4f:9d:ea:2f:87:fc:b8:7a:5d:e6:60: f4:75:84:d0:58:69:24:c2:a4:19:16:5a:e6:94:a7:a3:37:c6: ba:5f:49:07:03:21:80:ed:90:3c:79:a5:35:2d:e9:d2:1c:b2: ea:ea:0b:58:bf:ee:5b:4a:f8:9a:f1:46:42:18:9e:a6:c6:48: 8d:3a:18:54:87:ed:fa:81:52:ce:ef:bb:ee:6f:53:68:5f:9b: b5:be:77:5a:a7:97:a5:b8:de:aa:27:ed:13:82:3f:a0:36:4b: 28:a9:24:13:30:58:14:b6:f7:ae:d3:0e:a7:62:53:43:a2:d7: 68:18:f1:be:4c:c2:4c:43:d5:39:37:89:48:49:06:c5:27:5c: e9:18:8b:88:2a:5f:10:d6:2d:d9:fa:4d:f0:88:e7:14:ef:ad: 8b:a7:14:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsikuFly9iq4pGUdQVdjZ3KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0 ZGFiN2YwHhcNMjUxMjE1MTUxMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODA3YzI4ZTY2NjMzODAwN2M3NjUzMTMxMzZkNjQxZTM3NzViY2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCQo4TP241ILME+bon+WAISW3ql+ 3ogy5nWGrZbBU8Ubn7q0J1YEgpo2iDcL3r+cEyY9BKXMZxGR8oKJ485H8HzHf9Jt VRydYZWyvAfZw2oQlse0qLX+Fp+2ee/UOMTGFBkRCy/Wq4/Q25OLV6p/B6HXIGwm X5Hy/iCXiOlT8CAfPnBgtofRUmLlibW2QOGXif3EpLDFdlfcAxwxNRWBYLLDKVLv mEMOHABGKDtQ8lvX48xIlGDp59SMUCgliJ12mN/H30oOsQVNfzYPbFMw3m6c2Spe hHlAbnjlX2m176KDjCIWGDNpAKOtZBuAdu5aX33H04a6hXsbiGt9tBKaPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMgHwo5mYzgAfHZTExNtZB43dby9MB8GA1UdIwQY MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct OWRkNmU4OGZjYzhkLzEveUFmQ2ptWmpPQUI4ZGxNVEUyMWtIamQxdkwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsq+iMA0G CSqGSIb3DQEBCwUAA4IBAQCufR0XsoNFvv1br4BSAbX7WGYq5gj6O6yCRFqdIotf z3oRLOPWPBMMEjFKyl5et0l8o2qoamBwX0+U2GvxgVxHxV/EiMoE7u/TehNocHL5 CkDgKL/9YjflSndelRn0JAW6T53qL4f8uHpd5mD0dYTQWGkkwqQZFlrmlKejN8a6 X0kHAyGA7ZA8eaU1LenSHLLq6gtYv+5bSvia8UZCGJ6mxkiNOhhUh+36gVLO77vu b1NoX5u1vndap5eluN6qJ+0Tgj+gNksoqSQTMFgUtveu0w6nYlNDotdoGPG+TMJM Q9U5N4lISQbFJ1zpGIuIKl8Q1i3Z+k3wiOcU762LpxQN -----END CERTIFICATE-----Generated at Wed Dec 17 18:19:40 2025 by rpki-client