This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/ny9txiVmQCoFhi410-1gKXnflUg.roa File: ny9txiVmQCoFhi410-1gKXnflUg.roa (raw, json) Hash identifier: yIycSieFB9uuOH8Bli2Ll16YsK0vsKCVxPaK5dJ0zg0= Subject key identifier: 9F:2F:6D:C6:25:66:40:2A:05:86:2E:35:D3:ED:60:29:79:DF:95:48 Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e Certificate serial: 019AFD5BE6BBDEE4CD38931423B409C726A6 Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/ny9txiVmQCoFhi410-1gKXnflUg.roa Signing time: Mon 08 Dec 2025 09:47:29 +0000 ROA not before: Mon 08 Dec 2025 09:47:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48040 IP address blocks: 31.172.65.0/24 maxlen: 24 81.85.79.0/24 maxlen: 24 199.68.198.0/24 maxlen: 24 199.68.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 18:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:5b:e6:bb:de:e4:cd:38:93:14:23:b4:09:c7:26:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e Validity Not Before: Dec 8 09:47:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9f2f6dc62566402a05862e35d3ed602979df9548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ee:9e:bd:46:6f:6c:65:31:3e:af:57:3d:0d: 6d:e9:27:24:02:78:ff:7c:5b:06:b7:28:36:08:e0: 7f:5f:ff:61:94:95:9e:22:44:e6:2a:6d:40:09:61: 8e:39:db:a0:d3:7b:84:f4:c2:80:87:39:07:80:e5: ff:ff:6c:aa:2b:7f:46:37:da:dc:d6:c8:ce:7d:b0: 83:f5:4d:bf:fd:84:00:cd:73:db:68:c6:7e:4e:44: 4c:f2:db:be:4e:f9:0b:f9:60:cb:c8:fa:4c:f4:47: 2e:18:24:6b:cb:56:6a:9b:79:9f:19:2e:5b:8d:12: ed:e4:ff:01:8d:d8:a4:25:f4:cf:92:b0:b8:75:8d: b1:3c:4d:a2:aa:82:5e:b0:46:b8:95:f7:7a:ec:8c: a4:69:9a:22:82:88:c5:25:30:be:95:47:fd:ea:a3: bc:48:2d:d9:7e:dd:6d:44:7f:1f:5c:ad:c6:91:1a: 81:02:00:30:bc:09:64:b3:b1:ae:64:d6:ce:0d:56: 73:a8:a5:1d:66:e1:47:98:be:18:f1:e6:35:a5:e8: e6:f2:44:cc:81:f5:3b:b3:e0:02:67:3c:33:6e:b7: 73:d6:4e:be:d5:04:82:76:38:08:3a:86:4f:97:c0: e2:f5:90:45:f1:b1:a1:35:d7:11:c6:e2:c6:3a:f5: 61:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2F:6D:C6:25:66:40:2A:05:86:2E:35:D3:ED:60:29:79:DF:95:48 X509v3 Authority Key Identifier: keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/ny9txiVmQCoFhi410-1gKXnflUg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.172.65.0/24 81.85.79.0/24 199.68.198.0/23 Signature Algorithm: sha256WithRSAEncryption 18:50:d3:7b:58:c2:d8:a2:0e:51:82:2d:34:38:85:82:53:04: d1:62:28:bd:d0:42:c4:0c:ca:f5:4b:dd:c2:40:1b:a6:58:83: af:12:38:cd:3b:5f:68:9b:d8:37:2c:ed:1a:07:0d:b2:a3:7d: c8:bf:8f:ec:84:7a:9e:e5:e5:9b:14:a8:6f:58:27:c0:af:e9: 9a:ef:98:96:2e:e4:db:5c:49:4a:f4:cb:6a:ef:d2:47:55:22: e3:e1:31:19:29:c5:3e:0d:26:a1:dd:0a:d0:2a:b0:fd:b3:1b: ab:6c:1a:a2:35:1d:77:36:1c:dc:bb:2d:3f:29:97:d3:c7:c1: 81:c1:cc:af:ce:4d:83:50:bd:ad:a9:92:cc:76:03:06:00:c1: 95:89:6c:e7:8b:aa:d7:54:3e:39:69:0d:30:3b:4e:19:b0:37: bf:3a:34:f4:3b:12:33:89:3a:1b:66:4b:8c:a9:d6:b0:fd:da: 66:f8:eb:4b:57:44:a8:7c:41:ae:d2:b3:39:75:a6:c6:ec:44: 5d:1d:a7:ae:13:c9:8a:22:c3:d4:90:92:b8:c3:31:a1:3b:5a: ed:cc:64:85:f8:e6:fd:b3:6e:d7:f2:90:92:51:5b:88:fd:cc: 08:b6:ef:8c:4c:9c:9d:b7:71:f0:ad:48:3f:33:3d:ec:cd:f0: 5e:2b:fb:a0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZr9W+a73uTNOJMUI7QJxyamMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZTViMzAyNzJlNDMwNTMyMDg5NzhkYmU0NGJmZWUxMGE1 ZDAwN2UwHhcNMjUxMjA4MDk0NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjJmNmRjNjI1NjY0MDJhMDU4NjJlMzVkM2VkNjAyOTc5ZGY5NTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu6evUZvbGUxPq9XPQ1t6SckAnj/ fFsGtyg2COB/X/9hlJWeIkTmKm1ACWGOOdug03uE9MKAhzkHgOX//2yqK39GN9rc 1sjOfbCD9U2//YQAzXPbaMZ+TkRM8tu+TvkL+WDLyPpM9EcuGCRry1Zqm3mfGS5b jRLt5P8BjdikJfTPkrC4dY2xPE2iqoJesEa4lfd67IykaZoigojFJTC+lUf96qO8 SC3Zft1tRH8fXK3GkRqBAgAwvAlks7GuZNbODVZzqKUdZuFHmL4Y8eY1pejm8kTM gfU7s+ACZzwzbrdz1k6+1QSCdjgIOoZPl8Di9ZBF8bGhNdcRxuLGOvVhmwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJ8vbcYlZkAqBYYuNdPtYCl535VIMB8GA1UdIwQY MBaAFHDlswJy5DBTIIl42+RL/uEKXQB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEt MWZiYzY0MWI1MGIxLzEvbnk5dHhpVm1RQ29GaGk0MTAtMWdLWG5mbFVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEtMWZiYzY0MWI1MGIx LzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAH6xBAwQA UVVPAwQBx0TGMA0GCSqGSIb3DQEBCwUAA4IBAQAYUNN7WMLYog5Rgi00OIWCUwTR Yii90ELEDMr1S93CQBumWIOvEjjNO19om9g3LO0aBw2yo33Iv4/shHqe5eWbFKhv WCfAr+ma75iWLuTbXElK9Mtq79JHVSLj4TEZKcU+DSah3QrQKrD9sxurbBqiNR13 Nhzcuy0/KZfTx8GBwcyvzk2DUL2tqZLMdgMGAMGViWzni6rXVD45aQ0wO04ZsDe/ OjT0OxIziTobZkuMqdaw/dpm+OtLV0SofEGu0rM5dabG7ERdHaeuE8mKIsPUkJK4 wzGhO1rtzGSF+Ob9s27X8pCSUVuI/cwItu+MTJydt3HwrUg/Mz3szfBeK/ug -----END CERTIFICATE-----Generated at Wed Dec 17 23:04:21 2025 by rpki-client