This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/SY_Mj3QezoTg-TkBLcDu9cT8Mjw.roa File: SY_Mj3QezoTg-TkBLcDu9cT8Mjw.roa (raw, json) Hash identifier: 8h7W8StiHKdAD4jHoFH7sY/g8thMvmtM5RYsW8JVd54= Subject key identifier: 49:8F:CC:8F:74:1E:CE:84:E0:F9:39:01:2D:C0:EE:F5:C4:FC:32:3C Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B0CCFE5716B70B8F86988FC0A43F08D29 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/SY_Mj3QezoTg-TkBLcDu9cT8Mjw.roa Signing time: Thu 11 Dec 2025 09:48:29 +0000 ROA not before: Thu 11 Dec 2025 09:48:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202736 IP address blocks: 178.253.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:cf:e5:71:6b:70:b8:f8:69:88:fc:0a:43:f0:8d:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Dec 11 09:48:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=498fcc8f741ece84e0f939012dc0eef5c4fc323c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b0:49:47:e3:e3:a6:b7:41:9d:ec:b1:10:f3: fc:de:8c:6e:d7:a5:4a:a2:38:81:37:31:b8:f3:a1: 7b:bb:f0:94:e4:5d:50:de:58:86:ec:f1:8c:86:0f: 7c:c5:9d:b9:f9:9e:d0:ac:ed:bc:79:e4:69:64:b8: d2:76:db:28:2e:d3:ff:c3:d2:a5:55:dd:ed:9d:e7: 9c:fe:7b:12:a3:0b:41:68:6e:be:15:da:73:68:5b: b2:97:cc:7b:b9:21:a8:97:f9:42:42:74:16:68:b6: f2:db:b8:42:86:d2:c3:c3:b6:f4:4d:b7:47:38:23: 19:c8:a7:5f:6a:70:3b:46:c7:ca:f9:be:db:71:89: c4:c0:bc:39:be:5e:95:2c:d3:3d:ed:05:74:07:67: 12:2b:fd:25:74:27:ef:f5:a2:9b:83:eb:23:17:b5: b1:d9:a3:77:fd:b5:75:82:e7:31:3e:7a:41:36:10: 5e:0a:99:e6:70:4d:60:2b:78:83:42:ce:3f:eb:8f: d9:73:33:9f:cf:9d:c0:c7:04:91:53:be:7f:c0:db: 2b:40:92:d1:dd:ad:bc:8c:c0:98:b3:64:ed:5d:29: 8b:f6:09:71:5f:a8:42:0b:1d:20:13:d3:85:aa:5b: 6e:82:f6:32:3e:e1:ec:a6:bf:f8:fa:e3:78:6d:7d: d8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:8F:CC:8F:74:1E:CE:84:E0:F9:39:01:2D:C0:EE:F5:C4:FC:32:3C X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/SY_Mj3QezoTg-TkBLcDu9cT8Mjw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.253.205.0/24 Signature Algorithm: sha256WithRSAEncryption 43:34:49:94:49:38:18:0a:e8:02:fc:f2:c5:17:4f:5c:31:86: f2:74:5c:d4:be:cd:a4:cc:4e:2c:cb:17:7c:db:35:ec:9e:10: d8:5b:7b:c9:7d:7e:4e:74:3c:08:e6:1a:22:0c:e3:24:86:51: 9d:11:9a:58:35:85:cb:45:a3:ec:aa:49:04:a2:ba:28:7c:29: d6:36:50:a8:3a:69:de:e2:34:06:b3:03:19:ec:f8:84:1d:18: 98:d4:7f:3a:17:d7:57:2b:87:1e:47:0e:2d:24:b3:77:61:18: a3:52:d4:4b:9e:78:b1:94:66:2c:a3:0a:eb:ba:08:52:4a:b7: 07:08:1a:a7:33:21:01:79:e0:c3:da:ef:8d:43:c7:bf:1e:6b: d6:5a:fb:d7:3b:21:a5:98:24:7b:f3:93:f6:0e:3f:67:21:0a: c8:58:5f:7e:03:c8:a3:4e:f7:91:81:ea:8b:c7:3d:7c:3d:33: fe:5d:60:66:c2:b9:3b:96:87:d3:ee:d2:bc:bd:e7:af:65:08: cb:18:41:a1:21:66:c8:cc:98:02:f3:22:f5:72:f9:f6:64:d7: b1:f1:cc:ee:e0:cd:a3:18:93:ce:d5:e1:40:a8:13:7d:11:77: 79:34:47:ff:a1:d8:e1:13:06:67:1b:56:e4:8a:d8:af:4b:aa: c4:33:c5:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsMz+Vxa3C4+GmI/ApD8I0pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUxMjExMDk0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OThmY2M4Zjc0MWVjZTg0ZTBmOTM5MDEyZGMwZWVmNWM0ZmMzMjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbBJR+PjprdBneyxEPP83oxu16VK ojiBNzG486F7u/CU5F1Q3liG7PGMhg98xZ25+Z7QrO28eeRpZLjSdtsoLtP/w9Kl Vd3tneec/nsSowtBaG6+FdpzaFuyl8x7uSGol/lCQnQWaLby27hChtLDw7b0TbdH OCMZyKdfanA7RsfK+b7bcYnEwLw5vl6VLNM97QV0B2cSK/0ldCfv9aKbg+sjF7Wx 2aN3/bV1gucxPnpBNhBeCpnmcE1gK3iDQs4/64/ZczOfz53AxwSRU75/wNsrQJLR 3a28jMCYs2TtXSmL9glxX6hCCx0gE9OFqltugvYyPuHspr/4+uN4bX3YiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEmPzI90Hs6E4Pk5AS3A7vXE/DI8MB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvU1lfTWozUWV6b1RnLVRrQkxjRHU5Y1Q4TWp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv3NMA0G CSqGSIb3DQEBCwUAA4IBAQBDNEmUSTgYCugC/PLFF09cMYbydFzUvs2kzE4syxd8 2zXsnhDYW3vJfX5OdDwI5hoiDOMkhlGdEZpYNYXLRaPsqkkEoroofCnWNlCoOmne 4jQGswMZ7PiEHRiY1H86F9dXK4ceRw4tJLN3YRijUtRLnnixlGYsowrrughSSrcH CBqnMyEBeeDD2u+NQ8e/HmvWWvvXOyGlmCR785P2Dj9nIQrIWF9+A8ijTveRgeqL xz18PTP+XWBmwrk7lofT7tK8veevZQjLGEGhIWbIzJgC8yL1cvn2ZNex8czu4M2j GJPO1eFAqBN9EXd5NEf/odjhEwZnG1bkitivS6rEM8XV -----END CERTIFICATE-----Generated at Fri Dec 19 16:49:00 2025 by rpki-client