This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/YdKHEhpz4MdxMxVnjzRoVJIJdQY.roa File: YdKHEhpz4MdxMxVnjzRoVJIJdQY.roa (raw, json) Hash identifier: Ca8HLpfspDDWzoXMmKdFz/BGCgInYXtquCygNOGTIpQ= Subject key identifier: 61:D2:87:12:1A:73:E0:C7:71:33:15:67:8F:34:68:54:92:09:75:06 Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Certificate serial: 019B3592AACA27A6A261867521CB91E55CC7 Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/YdKHEhpz4MdxMxVnjzRoVJIJdQY.roa Signing time: Fri 19 Dec 2025 07:46:02 +0000 ROA not before: Fri 19 Dec 2025 07:46:02 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215789 IP address blocks: 213.189.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:92:aa:ca:27:a6:a2:61:86:75:21:cb:91:e5:5c:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Validity Not Before: Dec 19 07:46:02 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=61d287121a73e0c7713315678f34685492097506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3a:e6:ca:66:f3:21:2d:92:86:90:55:c4:d6: c8:1d:02:9e:3a:48:08:fc:43:a1:3d:d1:6e:76:64: d9:dc:ab:3e:f4:f5:fb:8c:bd:b8:13:55:0e:1a:9e: 69:e0:9d:c9:5a:59:3b:28:4a:cd:8c:a6:04:ee:cd: 17:36:a0:df:5d:02:cf:c2:cd:64:aa:74:01:8c:58: 03:a3:e2:bb:bb:4a:58:9c:4b:7d:39:b8:09:52:7d: 5f:20:96:6e:9b:f8:fe:85:c3:00:6e:d2:4d:47:ed: 60:02:56:c4:3a:98:85:dd:d1:7d:eb:27:f1:13:de: 37:fc:15:db:71:4f:7f:60:24:12:3c:08:91:4a:a1: fd:dc:98:0e:0c:e6:2c:6d:04:b9:fe:18:40:c1:e4: aa:c6:62:f6:bc:1e:cf:7b:50:84:f8:d4:34:ee:68: b4:39:57:60:12:b8:1e:9c:bc:46:05:59:99:e8:6e: ba:59:73:ad:fb:cc:58:b2:88:53:14:62:36:22:5b: c1:38:ae:b7:d7:ea:b3:30:c4:87:74:a2:10:96:29: c6:9e:ea:5a:20:6c:cc:52:32:d4:d8:17:b3:5f:63: d9:a1:79:99:f5:ae:c9:92:41:9b:36:15:fd:8e:d6: 9a:17:b3:4d:18:a0:e0:ce:1f:bd:11:fc:69:33:1c: 71:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D2:87:12:1A:73:E0:C7:71:33:15:67:8F:34:68:54:92:09:75:06 X509v3 Authority Key Identifier: keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/YdKHEhpz4MdxMxVnjzRoVJIJdQY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.189.60.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:df:c6:eb:ac:2e:a0:51:19:20:1b:2a:ee:c1:7b:96:92:03: b1:d4:13:86:40:c5:86:b6:5a:d6:46:d0:59:d8:ac:6f:94:99: 67:41:29:cb:4b:f0:7f:22:27:71:ad:8d:3b:b6:8d:81:4f:1a: 4b:d6:d2:63:c0:86:74:05:3b:16:c3:29:b1:94:5b:45:e0:c1: ff:51:53:0b:e4:ab:28:c0:ec:97:89:7e:d3:af:87:99:0c:b9: cc:dc:ff:f5:3c:96:72:1c:6e:16:04:85:89:59:cf:e9:47:7e: fe:05:48:d6:5e:28:b9:b2:58:27:9d:db:9b:f9:37:5d:e2:c9: 55:d1:22:19:ad:cf:fa:30:d2:79:cf:bd:e4:be:3c:65:bd:b4: 3c:36:4b:7f:4d:9c:0b:8a:d3:3d:41:ab:ac:ea:0b:5d:83:6b: 19:74:b5:60:40:0a:94:17:e4:9f:8d:ba:c2:fd:1a:4e:2c:96: 9f:54:c1:fa:8c:a0:fd:7e:82:26:ab:76:b9:7f:c1:f5:36:26: 91:00:3e:08:76:ae:23:e8:5f:c5:56:9c:47:75:7f:c3:ee:d1: 1e:c3:77:b2:6c:52:43:df:73:a2:6f:77:bd:ea:69:ec:13:43: 12:c8:d9:8d:ec:61:f6:71:ca:de:1c:0f:ec:90:ce:9b:73:82: 7f:d5:23:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZs1kqrKJ6aiYYZ1IcuR5VzHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz MzBjNWIwHhcNMjUxMjE5MDc0NjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWQyODcxMjFhNzNlMGM3NzEzMzE1Njc4ZjM0Njg1NDkyMDk3NTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozrmymbzIS2ShpBVxNbIHQKeOkgI /EOhPdFudmTZ3Ks+9PX7jL24E1UOGp5p4J3JWlk7KErNjKYE7s0XNqDfXQLPws1k qnQBjFgDo+K7u0pYnEt9ObgJUn1fIJZum/j+hcMAbtJNR+1gAlbEOpiF3dF96yfx E943/BXbcU9/YCQSPAiRSqH93JgODOYsbQS5/hhAweSqxmL2vB7Pe1CE+NQ07mi0 OVdgErgenLxGBVmZ6G66WXOt+8xYsohTFGI2IlvBOK631+qzMMSHdKIQlinGnupa IGzMUjLU2BezX2PZoXmZ9a7JkkGbNhX9jtaaF7NNGKDgzh+9EfxpMxxxIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGHShxIac+DHcTMVZ480aFSSCXUGMB8GA1UdIwQY MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt NWQ2NjVlOTk4ZjZhLzEvWWRLSEVocHo0TWR4TXhWbmp6Um9WSklKZFFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1b08MA0G CSqGSIb3DQEBCwUAA4IBAQAb38brrC6gURkgGyruwXuWkgOx1BOGQMWGtlrWRtBZ 2KxvlJlnQSnLS/B/IidxrY07to2BTxpL1tJjwIZ0BTsWwymxlFtF4MH/UVML5Kso wOyXiX7Tr4eZDLnM3P/1PJZyHG4WBIWJWc/pR37+BUjWXii5slgnndub+Tdd4slV 0SIZrc/6MNJ5z73kvjxlvbQ8Nkt/TZwLitM9Qaus6gtdg2sZdLVgQAqUF+SfjbrC /RpOLJafVMH6jKD9foImq3a5f8H1NiaRAD4Idq4j6F/FVpxHdX/D7tEew3eybFJD 33Oib3e96mnsE0MSyNmN7GH2ccreHA/skM6bc4J/1SPG -----END CERTIFICATE-----Generated at Sat Dec 20 19:07:43 2025 by rpki-client