This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/By5GHZL7xTf-YCGEhzi_2kBjYcE.roa File: By5GHZL7xTf-YCGEhzi_2kBjYcE.roa (raw, json) Hash identifier: anUXvOCNIz6ZWvtrE+JSRNQ5x/RJpA1WLXGaNpT4CDM= Subject key identifier: 07:2E:46:1D:92:FB:C5:37:FE:60:21:84:87:38:BF:DA:40:63:61:C1 Certificate issuer: /CN=fe6d4a36340c3dad87a03921d0f88ff65162897a Certificate serial: 019B11F900874E7A44C1D8437D6CAEB22F40 Authority key identifier: FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/By5GHZL7xTf-YCGEhzi_2kBjYcE.roa Signing time: Fri 12 Dec 2025 09:51:29 +0000 ROA not before: Fri 12 Dec 2025 09:51:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209288 IP address blocks: 91.202.210.0/24 maxlen: 24 151.248.16.0/22 maxlen: 24 185.112.73.0/24 maxlen: 24 212.18.105.0/24 maxlen: 24 2a05:ccc0::/29 maxlen: 48 2a10:c080::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:f9:00:87:4e:7a:44:c1:d8:43:7d:6c:ae:b2:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe6d4a36340c3dad87a03921d0f88ff65162897a Validity Not Before: Dec 12 09:51:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=072e461d92fbc537fe6021848738bfda406361c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4c:d2:66:63:97:e5:28:3f:04:cd:c4:0f:c8: a5:a4:21:29:49:c4:16:83:58:13:18:94:54:63:d5: 83:78:10:4e:2b:01:6a:ab:ae:d3:fb:12:15:e6:38: 68:ad:6a:13:13:c4:c9:2f:fe:45:d3:dd:e2:71:59: ed:bc:c3:da:eb:e8:a0:f2:43:5a:37:29:8e:cf:41: 42:04:8b:52:9e:b1:bc:2f:fe:c5:3a:ee:45:87:68: 79:a0:2d:57:14:db:85:a5:90:de:5e:5a:65:c1:64: 19:e9:47:62:da:b3:e3:c4:6d:0f:0d:ce:45:54:2e: 24:f0:21:f1:4f:94:a2:44:16:9d:79:6f:31:6d:94: 22:3e:10:6c:c5:03:92:fe:71:de:5b:0b:d2:d6:7a: bf:a4:8d:1b:10:82:f2:d3:3d:aa:ee:c8:40:9b:41: 60:42:e2:32:51:ea:f0:82:17:80:6c:10:71:05:c4: ba:c3:64:b5:e2:34:7c:d5:f8:f8:b4:a5:8c:30:70: f9:bc:bc:30:f8:21:a3:75:cd:37:89:cd:28:4c:66: b4:52:47:20:7c:69:00:f3:fe:a8:00:47:18:ea:5d: 5a:66:22:f8:3f:da:be:69:95:6e:d5:b6:1a:ca:46: cc:58:84:ab:e3:91:9d:0e:82:65:92:07:76:02:09: 4f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:2E:46:1D:92:FB:C5:37:FE:60:21:84:87:38:BF:DA:40:63:61:C1 X509v3 Authority Key Identifier: keyid:FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/By5GHZL7xTf-YCGEhzi_2kBjYcE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.202.210.0/24 151.248.16.0/22 185.112.73.0/24 212.18.105.0/24 IPv6: 2a05:ccc0::/29 2a10:c080::/29 Signature Algorithm: sha256WithRSAEncryption 84:28:d1:02:88:31:66:ae:f6:4a:ce:ff:ab:61:1e:41:b7:9c: 8a:68:78:da:ea:8f:ca:af:0b:a4:8e:b8:39:a8:9c:f3:ee:e4: 6e:a5:ce:c2:2e:bf:6f:52:2f:55:7d:94:95:56:d3:e6:63:aa: 78:26:61:fd:a9:0e:a5:21:5d:ce:02:dc:f2:bd:75:9a:ad:f5: e6:e4:82:aa:d0:cc:e8:6a:01:b3:19:89:0f:5e:e1:73:53:11: 45:8b:93:5f:a3:aa:d3:99:e1:f4:98:8b:c7:a8:b3:67:47:a3: 28:1b:1d:b7:30:89:e0:d2:18:5e:2c:4e:21:e3:b1:fc:6d:5a: a6:4f:bb:d7:4c:aa:ac:39:96:5f:3d:f7:08:a4:7d:45:df:8e: 5e:3d:a3:bd:da:7f:52:37:ad:a7:2a:f3:26:26:c3:e6:f5:b6: 37:9c:63:78:6d:f6:92:10:31:82:2d:bf:1f:a2:fc:ff:9c:27: fc:63:6b:bc:3e:40:6b:4f:27:0a:da:b8:87:fe:2a:b7:21:39: 84:56:74:62:f0:b3:c8:90:d2:88:e3:01:62:c8:b2:8d:d9:ce: 5d:1d:5f:56:64:ed:e0:bc:1d:8a:81:27:b4:49:8e:18:9f:fb: 43:cc:4f:05:95:d0:ba:ba:2a:d3:3c:3d:9c:63:ad:78:03:63: 03:c2:02:b1 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZsR+QCHTnpEwdhDfWyusi9AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNmQ0YTM2MzQwYzNkYWQ4N2EwMzkyMWQwZjg4ZmY2NTE2 Mjg5N2EwHhcNMjUxMjEyMDk1MTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzJlNDYxZDkyZmJjNTM3ZmU2MDIxODQ4NzM4YmZkYTQwNjM2MWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUzSZmOX5Sg/BM3ED8ilpCEpScQW g1gTGJRUY9WDeBBOKwFqq67T+xIV5jhorWoTE8TJL/5F093icVntvMPa6+ig8kNa NymOz0FCBItSnrG8L/7FOu5Fh2h5oC1XFNuFpZDeXlplwWQZ6Udi2rPjxG0PDc5F VC4k8CHxT5SiRBadeW8xbZQiPhBsxQOS/nHeWwvS1nq/pI0bEILy0z2q7shAm0Fg QuIyUerwgheAbBBxBcS6w2S14jR81fj4tKWMMHD5vLww+CGjdc03ic0oTGa0Ukcg fGkA8/6oAEcY6l1aZiL4P9q+aZVu1bYaykbMWISr45GdDoJlkgd2AglP+QIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFAcuRh2S+8U3/mAhhIc4v9pAY2HBMB8GA1UdIwQY MBaAFP5tSjY0DD2th6A5IdD4j/ZRYol6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX20xS05qUU1QYTJIb0RraDBQaVA5bEZpaVhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzA0OTAtZmNhZS00OGVjLTkyNDkt YmViYTc1NGFkZDU3LzEvQnk1R0haTDd4VGYtWUNHRWh6aV8ya0JqWWNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzA0OTAtZmNhZS00OGVjLTkyNDktYmViYTc1NGFkZDU3 LzEvX20xS05qUU1QYTJIb0RraDBQaVA5bEZpaVhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQAW8rSAwQC l/gQAwQAuXBJAwQA1BJpMBQEAgACMA4DBQMqBczAAwUDKhDAgDANBgkqhkiG9w0B AQsFAAOCAQEAhCjRAogxZq72Ss7/q2EeQbecimh42uqPyq8LpI64Oaic8+7kbqXO wi6/b1IvVX2UlVbT5mOqeCZh/akOpSFdzgLc8r11mq315uSCqtDM6GoBsxmJD17h c1MRRYuTX6Oq05nh9JiLx6izZ0ejKBsdtzCJ4NIYXixOIeOx/G1apk+710yqrDmW Xz33CKR9Rd+OXj2jvdp/UjetpyrzJibD5vW2N5xjeG32khAxgi2/H6L8/5wn/GNr vD5Aa08nCtq4h/4qtyE5hFZ0YvCzyJDSiOMBYsiyjdnOXR1fVmTt4LwdioEntEmO GJ/7Q8xPBZXQuroq0zw9nGOteANjA8ICsQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:32:56 2025 by rpki-client