This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/Y-71jH1TNM4y_wVXmihwEns13hA.roa File: Y-71jH1TNM4y_wVXmihwEns13hA.roa (raw, json) Hash identifier: DnSQFYI2TRLoxJNTaW96qWMd6x4VIBIKfyR5q+UkbwI= Subject key identifier: 63:EE:F5:8C:7D:53:34:CE:32:FF:05:57:9A:28:70:12:7B:35:DE:10 Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 019B2287B061143CCB93F57C5041204F41B4 Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/Y-71jH1TNM4y_wVXmihwEns13hA.roa Signing time: Mon 15 Dec 2025 15:01:16 +0000 ROA not before: Mon 15 Dec 2025 15:01:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 396190 IP address blocks: 152.163.4.0/22 maxlen: 22 152.163.64.0/22 maxlen: 22 152.163.88.0/22 maxlen: 22 152.163.104.0/22 maxlen: 22 152.163.140.0/22 maxlen: 22 152.163.164.0/22 maxlen: 22 152.163.192.0/22 maxlen: 22 152.163.216.0/22 maxlen: 22 152.163.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 03:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:b0:61:14:3c:cb:93:f5:7c:50:41:20:4f:41:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Dec 15 15:01:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=63eef58c7d5334ce32ff05579a2870127b35de10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:34:9e:ce:b9:d5:ed:49:6b:29:30:43:95:ae: d7:6a:c3:30:74:31:f1:67:45:f7:56:80:fa:07:73: 44:8a:59:4f:db:4b:de:b0:39:d8:b7:4d:0b:41:46: 58:d4:59:0b:e9:df:89:92:e7:fb:c4:dd:9c:cf:b6: 22:2c:46:e3:c9:d5:40:96:17:e2:9c:c3:dd:97:ac: 4d:3f:6e:45:47:af:f6:0b:0b:fb:d5:7a:c7:92:be: ad:d0:02:df:6d:91:f7:6f:ed:ce:6e:0d:17:0e:58: 03:f3:ec:4e:ac:8b:5a:81:c5:94:c8:e1:a9:2e:69: f9:b4:ea:09:65:9a:02:6a:a9:60:3c:d6:de:9a:6f: 20:5e:ee:d3:fb:f8:9a:61:31:39:86:75:84:3c:d9: e7:bf:20:8d:5e:5e:b6:d5:73:bd:4d:35:22:13:32: 75:05:d3:6a:c0:3e:b1:ac:b8:a4:e3:03:5f:21:61: fe:9e:3d:42:03:40:5f:6f:04:c4:23:11:f8:b6:8e: 19:04:5e:df:c5:fb:fa:e3:9e:16:f0:37:6d:67:d8: 9d:e5:14:e0:82:78:e1:f9:48:7f:a2:8c:8b:98:5e: bd:90:3e:ec:7b:ae:54:f0:60:bc:87:5b:2a:2b:d5: 0f:34:c8:b5:23:33:6b:01:6a:d8:de:1b:62:5c:1e: 73:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:EE:F5:8C:7D:53:34:CE:32:FF:05:57:9A:28:70:12:7B:35:DE:10 X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/Y-71jH1TNM4y_wVXmihwEns13hA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.163.4.0/22 152.163.64.0/22 152.163.88.0/22 152.163.104.0/22 152.163.140.0/22 152.163.164.0/22 152.163.192.0/22 152.163.216.0/22 152.163.240.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:d5:06:a7:a3:09:53:0f:20:34:8c:f5:db:17:cc:d5:eb:52: 6e:8d:92:cf:c1:85:8c:6c:f2:9f:32:07:9c:a3:e8:20:a8:3a: 5d:36:9c:97:c8:76:92:c7:73:a3:80:fa:6c:8b:c6:2a:ea:8a: 7a:42:bb:13:c1:31:8d:87:fc:ea:74:e9:eb:4d:f0:b9:f2:7e: 2b:4f:d3:45:5d:e4:b8:65:61:6c:30:2a:25:12:c5:53:c3:9f: 29:25:e1:b0:b2:ac:21:b3:db:89:03:d8:96:20:54:45:f1:39: f2:52:4a:b3:0c:20:2b:fe:ad:30:5b:d1:ac:cb:d1:ba:ac:3f: 37:2d:fd:7f:d4:76:7d:fc:00:ad:d3:ba:1b:9b:ce:94:70:e5: a2:4a:44:0d:41:2f:a6:b7:ba:54:84:8f:8f:4d:05:f3:b0:6d: 43:7d:22:df:e5:59:05:27:98:db:09:eb:81:d7:37:ae:e4:1a: 48:64:48:62:4d:dc:bd:15:87:c9:77:6f:d2:ec:bf:5e:b4:23: 81:bc:55:c1:b8:b2:67:ba:24:97:4d:d3:0a:5f:7f:83:bc:29: 33:99:10:66:63:22:a9:c1:98:7a:ed:43:f6:5b:41:c7:9f:d7: 6c:e6:a8:95:7f:0a:b8:3a:f6:9b:13:b6:94:25:c0:ca:4e:7d: cb:6d:04:96 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZsih7BhFDzLk/V8UEEgT0G0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjUxMjE1MTUwMTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2VlZjU4YzdkNTMzNGNlMzJmZjA1NTc5YTI4NzAxMjdiMzVkZTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDSezrnV7UlrKTBDla7XasMwdDHx Z0X3VoD6B3NEillP20vesDnYt00LQUZY1FkL6d+Jkuf7xN2cz7YiLEbjydVAlhfi nMPdl6xNP25FR6/2Cwv71XrHkr6t0ALfbZH3b+3Obg0XDlgD8+xOrItagcWUyOGp Lmn5tOoJZZoCaqlgPNbemm8gXu7T+/iaYTE5hnWEPNnnvyCNXl621XO9TTUiEzJ1 BdNqwD6xrLik4wNfIWH+nj1CA0BfbwTEIxH4to4ZBF7fxfv6454W8DdtZ9id5RTg gnjh+Uh/ooyLmF69kD7se65U8GC8h1sqK9UPNMi1IzNrAWrY3htiXB5zrwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFGPu9Yx9UzTOMv8FV5oocBJ7Nd4QMB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvWS03MWpIMVROTTR5X3dWWG1paHdFbnMxM2hBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQCmKMEAwQC mKNAAwQCmKNYAwQCmKNoAwQCmKOMAwQCmKOkAwQCmKPAAwQCmKPYAwQCmKPwMA0G CSqGSIb3DQEBCwUAA4IBAQCP1QanowlTDyA0jPXbF8zV61JujZLPwYWMbPKfMgec o+ggqDpdNpyXyHaSx3OjgPpsi8Yq6op6QrsTwTGNh/zqdOnrTfC58n4rT9NFXeS4 ZWFsMColEsVTw58pJeGwsqwhs9uJA9iWIFRF8TnyUkqzDCAr/q0wW9Gsy9G6rD83 Lf1/1HZ9/ACt07obm86UcOWiSkQNQS+mt7pUhI+PTQXzsG1DfSLf5VkFJ5jbCeuB 1zeu5BpIZEhiTdy9FYfJd2/S7L9etCOBvFXBuLJnuiSXTdMKX3+DvCkzmRBmYyKp wZh67UP2W0HHn9ds5qiVfwq4OvabE7aUJcDKTn3LbQSW -----END CERTIFICATE-----Generated at Sat Dec 20 11:37:13 2025 by rpki-client