This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/sY-7yZER4Bt-zKOw4anY52H7DJI.roa File: sY-7yZER4Bt-zKOw4anY52H7DJI.roa (raw, json) Hash identifier: mRTtfBt/OP+TGfezvrSnuuMq0M5oOWHaD86vSWq5SIw= Subject key identifier: B1:8F:BB:C9:91:11:E0:1B:7E:CC:A3:B0:E1:A9:D8:E7:61:FB:0C:92 Certificate issuer: /CN=788b7e4c045cdae78b5bf43f2c53f1a94d9e159e Certificate serial: 019B3529CA0992F4CEEAF83E68318CA38876 Authority key identifier: 78:8B:7E:4C:04:5C:DA:E7:8B:5B:F4:3F:2C:53:F1:A9:4D:9E:15:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/sY-7yZER4Bt-zKOw4anY52H7DJI.roa Signing time: Fri 19 Dec 2025 05:51:29 +0000 ROA not before: Fri 19 Dec 2025 05:51:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47193 IP address blocks: 91.203.208.0/22 maxlen: 22 91.203.211.0/24 maxlen: 24 2001:67c:22d8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:29:ca:09:92:f4:ce:ea:f8:3e:68:31:8c:a3:88:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788b7e4c045cdae78b5bf43f2c53f1a94d9e159e Validity Not Before: Dec 19 05:51:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b18fbbc99111e01b7ecca3b0e1a9d8e761fb0c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6e:cf:42:26:4f:0c:84:8c:0a:48:71:5c:89: 08:e1:35:d9:ce:46:46:42:da:59:ac:5d:c9:e2:e6: 33:4f:4d:93:44:f3:f9:80:47:82:bd:fd:c1:d5:13: ec:41:74:59:da:bf:63:b0:bf:70:f0:ba:c7:91:79: d4:e6:d7:dc:30:7d:ed:ed:10:dd:17:a4:df:e0:8c: e0:d4:70:ba:25:86:f7:1c:34:46:3a:19:7d:89:99: 19:1c:9e:0d:d5:7a:25:c7:ee:c2:8c:d3:e6:ab:0c: 98:62:0a:72:63:36:af:61:46:e5:7d:68:74:9d:43: d2:25:18:c7:bd:54:31:04:d8:52:6e:c5:97:17:ab: e4:e4:25:fe:e6:67:c0:4f:84:7b:33:a8:9c:c8:21: 9f:49:09:73:47:c1:89:50:2d:cd:b5:13:bb:a0:4a: 87:f5:f1:68:f2:4e:5b:18:c2:dc:c1:bb:c8:f3:11: 0a:fd:21:3d:8d:b8:0e:29:06:b7:95:a8:5c:cb:47: 2f:b7:b0:9d:b3:01:14:0b:01:b8:55:e3:6e:60:6c: 51:1f:cf:37:78:37:40:b1:8d:42:cf:6e:72:89:35: 01:2a:2b:d4:d2:ae:55:e2:9c:2c:ca:b0:f6:65:53: 2c:a2:f8:8c:66:f6:6d:71:f8:d4:1b:45:24:8e:28: fb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:8F:BB:C9:91:11:E0:1B:7E:CC:A3:B0:E1:A9:D8:E7:61:FB:0C:92 X509v3 Authority Key Identifier: keyid:78:8B:7E:4C:04:5C:DA:E7:8B:5B:F4:3F:2C:53:F1:A9:4D:9E:15:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/sY-7yZER4Bt-zKOw4anY52H7DJI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.203.208.0/22 IPv6: 2001:67c:22d8::/48 Signature Algorithm: sha256WithRSAEncryption 8a:47:63:8a:6f:50:45:05:12:9e:d9:5a:a0:d3:9f:4d:a1:0a: b1:ea:1b:99:26:66:48:59:bf:72:23:57:ed:5c:49:6c:0a:cd: 74:86:43:2b:cd:e3:5a:d2:c3:50:31:7c:9f:6e:1b:4d:d7:02: ae:1e:2d:34:11:34:cb:4d:84:f1:15:a4:9a:41:21:b1:a0:8e: c3:90:7f:a8:de:34:07:22:84:da:52:ff:ae:37:cf:09:5e:f7: 18:1f:48:a0:de:43:17:b4:d0:b2:41:6f:0f:26:08:a8:cd:6d: 95:9c:06:de:cf:d6:b3:b9:78:ff:18:4f:79:c2:15:3d:7b:b2: f8:67:9f:96:00:44:33:85:4d:7e:96:f8:1b:0b:96:47:9e:0b: 28:fc:f7:2b:fd:d4:ac:6c:46:62:10:af:07:8a:03:df:d2:e9: 4d:62:8a:6a:d2:da:cd:67:49:bc:c9:e1:d8:db:d2:f3:2e:a7: 00:a1:cb:59:ba:8d:d0:79:15:27:da:6a:e5:5a:d0:6c:95:2c: 4a:b7:5d:bf:60:9d:d0:c3:3e:3d:5b:0e:5c:9f:e0:db:9b:06: ce:d8:53:be:3c:95:ed:47:90:10:cd:21:b4:09:d6:d9:0f:91: 2b:27:29:9c:ca:68:9c:19:4e:7a:1b:3f:f9:2f:68:db:7e:45: f0:ac:60:c9 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZs1KcoJkvTO6vg+aDGMo4h2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4OGI3ZTRjMDQ1Y2RhZTc4YjViZjQzZjJjNTNmMWE5NGQ5 ZTE1OWUwHhcNMjUxMjE5MDU1MTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMThmYmJjOTkxMTFlMDFiN2VjY2EzYjBlMWE5ZDhlNzYxZmIwYzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG7PQiZPDISMCkhxXIkI4TXZzkZG QtpZrF3J4uYzT02TRPP5gEeCvf3B1RPsQXRZ2r9jsL9w8LrHkXnU5tfcMH3t7RDd F6Tf4Izg1HC6JYb3HDRGOhl9iZkZHJ4N1Xolx+7CjNPmqwyYYgpyYzavYUblfWh0 nUPSJRjHvVQxBNhSbsWXF6vk5CX+5mfAT4R7M6icyCGfSQlzR8GJUC3NtRO7oEqH 9fFo8k5bGMLcwbvI8xEK/SE9jbgOKQa3lahcy0cvt7CdswEUCwG4VeNuYGxRH883 eDdAsY1Cz25yiTUBKivU0q5V4pwsyrD2ZVMsoviMZvZtcfjUG0Ukjij7GwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLGPu8mREeAbfsyjsOGp2Odh+wySMB8GA1UdIwQY MBaAFHiLfkwEXNrni1v0PyxT8alNnhWeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUl0LVRBUmMydWVMV19RX0xGUHhxVTJlRlo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83NjEzYmQtMDM0OS00MjBkLTg4MDgt MGEyNmU2ZTU3ZjIwLzEvc1ktN3laRVI0QnQtektPdzRhblk1Mkg3REpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83NjEzYmQtMDM0OS00MjBkLTg4MDgtMGEyNmU2ZTU3ZjIw LzEvZUl0LVRBUmMydWVMV19RX0xGUHhxVTJlRlo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCW8vQMA8E AgACMAkDBwAgAQZ8ItgwDQYJKoZIhvcNAQELBQADggEBAIpHY4pvUEUFEp7ZWqDT n02hCrHqG5kmZkhZv3IjV+1cSWwKzXSGQyvN41rSw1AxfJ9uG03XAq4eLTQRNMtN hPEVpJpBIbGgjsOQf6jeNAcihNpS/643zwle9xgfSKDeQxe00LJBbw8mCKjNbZWc Bt7P1rO5eP8YT3nCFT17svhnn5YARDOFTX6W+BsLlkeeCyj89yv91KxsRmIQrweK A9/S6U1iimrS2s1nSbzJ4djb0vMupwChy1m6jdB5FSfaauVa0GyVLEq3Xb9gndDD Pj1bDlyf4NubBs7YU748le1HkBDNIbQJ1tkPkSsnKZzKaJwZTnobP/kvaNt+RfCs YMk= -----END CERTIFICATE-----Generated at Sat Dec 20 11:36:56 2025 by rpki-client