This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/ysocyUsJGzG3HeN8wKsSINYCPaU.roa File: ysocyUsJGzG3HeN8wKsSINYCPaU.roa (raw, json) Hash identifier: 7ZVI0nCYPzUx4w7DpeqatwKvOCS147R7uHopbjAuxqM= Subject key identifier: CA:CA:1C:C9:4B:09:1B:31:B7:1D:E3:7C:C0:AB:12:20:D6:02:3D:A5 Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 019B2BAA268188F1FC6A852255F37E5FEA78 Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/ysocyUsJGzG3HeN8wKsSINYCPaU.roa Signing time: Wed 17 Dec 2025 09:35:29 +0000 ROA not before: Wed 17 Dec 2025 09:35:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 95.155.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:aa:26:81:88:f1:fc:6a:85:22:55:f3:7e:5f:ea:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Dec 17 09:35:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=caca1cc94b091b31b71de37cc0ab1220d6023da5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9f:a6:ec:0a:5d:1f:6a:63:16:e5:11:27:20: 95:c6:c4:f1:aa:5d:25:16:0e:1d:91:76:e5:9d:8b: 03:f1:21:4d:70:2d:30:d8:18:2b:80:1c:47:1f:f2: 76:15:e1:f4:0f:0c:ed:79:84:45:a3:63:5f:bc:a3: b6:30:d8:62:97:c7:8e:f1:93:d7:f9:e3:c2:c3:31: 77:8a:08:b3:5c:ba:1e:ed:eb:09:de:1a:34:40:53: 30:f9:3c:5d:8e:e4:d1:e7:9e:3d:5e:30:fd:24:5c: 9b:77:f0:f2:db:66:11:3a:3b:0b:10:30:82:80:2e: f8:00:5c:6f:7a:f4:e5:b1:60:07:c9:6e:78:ed:91: 5b:16:bd:32:cc:da:a9:19:d3:0a:e1:21:ea:76:fe: f6:ce:4f:3b:ea:61:50:60:5b:f9:59:9f:1d:9b:0d: 4b:7f:33:d5:2f:69:9d:03:a5:a3:cb:37:17:6d:de: 1f:96:1b:28:77:95:b2:27:cb:11:59:35:fe:30:06: 8d:dd:0d:47:41:b6:d6:6f:2a:a8:b5:d7:a8:30:08: df:a2:0e:44:8c:69:b2:f1:92:d0:e7:fe:0d:b5:e5: 3f:13:f3:18:7f:4c:ba:f2:af:de:a4:2e:6c:1a:7a: c0:5c:4e:3d:fb:32:3d:64:9d:81:c5:c2:9b:4f:d2: b8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CA:1C:C9:4B:09:1B:31:B7:1D:E3:7C:C0:AB:12:20:D6:02:3D:A5 X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/ysocyUsJGzG3HeN8wKsSINYCPaU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.155.146.0/23 Signature Algorithm: sha256WithRSAEncryption 54:06:ef:80:49:fe:aa:79:93:4e:2d:e0:83:b1:b7:15:36:56: 93:48:6d:9f:ec:ac:3c:ce:22:9c:39:32:f8:61:3a:ee:da:f1: d1:4d:d5:47:a5:99:1e:e7:c8:2d:7e:a0:9e:7b:a5:6b:24:81: ab:66:1f:08:be:52:63:a1:b7:5d:f3:ce:d3:ad:60:43:8e:95: 7c:81:50:8e:b6:94:b7:f1:8c:0b:92:9f:16:ab:be:93:0f:74: 7f:f6:20:86:9b:93:5c:94:96:d0:54:4a:0b:01:e7:14:f5:5f: 85:d1:d5:b1:b5:0a:aa:fd:50:a7:6d:b6:67:b7:b2:0e:69:a4: 69:57:c0:d3:f9:d5:1d:3b:28:39:63:f5:f8:33:bc:4b:ff:ea: 69:51:01:40:45:7b:24:5a:04:93:78:83:50:0c:99:6a:8b:58: 8e:96:05:2d:36:04:fd:c8:93:72:9c:f5:d2:09:a4:3a:ba:68: 72:ea:6e:3a:8a:83:be:47:95:16:ba:38:de:2b:fa:fd:d4:2e: b1:8c:e4:83:d6:fb:bf:72:78:b6:f4:f0:37:4f:05:90:74:49: 5e:28:a8:ab:07:a2:ba:72:b9:26:57:17:73:8b:02:1a:35:82: 79:8d:61:31:99:f2:65:38:f7:dc:ba:2e:e4:1e:19:c5:60:37: b8:af:97:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsrqiaBiPH8aoUiVfN+X+p4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjUxMjE3MDkzNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWNhMWNjOTRiMDkxYjMxYjcxZGUzN2NjMGFiMTIyMGQ2MDIzZGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5+m7ApdH2pjFuURJyCVxsTxql0l Fg4dkXblnYsD8SFNcC0w2BgrgBxHH/J2FeH0DwzteYRFo2NfvKO2MNhil8eO8ZPX +ePCwzF3igizXLoe7esJ3ho0QFMw+TxdjuTR5549XjD9JFybd/Dy22YROjsLEDCC gC74AFxvevTlsWAHyW547ZFbFr0yzNqpGdMK4SHqdv72zk876mFQYFv5WZ8dmw1L fzPVL2mdA6WjyzcXbd4flhsod5WyJ8sRWTX+MAaN3Q1HQbbWbyqotdeoMAjfog5E jGmy8ZLQ5/4NteU/E/MYf0y68q/epC5sGnrAXE49+zI9ZJ2BxcKbT9K4SwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMrKHMlLCRsxtx3jfMCrEiDWAj2lMB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEveXNvY3lVc0pHekczSGVOOHdLc1NJTllDUGFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBX5uSMA0G CSqGSIb3DQEBCwUAA4IBAQBUBu+ASf6qeZNOLeCDsbcVNlaTSG2f7Kw8ziKcOTL4 YTru2vHRTdVHpZke58gtfqCee6VrJIGrZh8IvlJjobdd887TrWBDjpV8gVCOtpS3 8YwLkp8Wq76TD3R/9iCGm5NclJbQVEoLAecU9V+F0dWxtQqq/VCnbbZnt7IOaaRp V8DT+dUdOyg5Y/X4M7xL/+ppUQFARXskWgSTeINQDJlqi1iOlgUtNgT9yJNynPXS CaQ6umhy6m46ioO+R5UWujjeK/r91C6xjOSD1vu/cni29PA3TwWQdEleKKirB6K6 crkmVxdziwIaNYJ5jWExmfJlOPfcui7kHhnFYDe4r5eg -----END CERTIFICATE-----Generated at Fri Dec 19 18:28:56 2025 by rpki-client