This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/yfw3m2Ijcs8ilng5Ei6kal1sVgg.roa File: yfw3m2Ijcs8ilng5Ei6kal1sVgg.roa (raw, json) Hash identifier: bhU5jEJ486mPZq7xJvEW4FqJLqBkO1Tqfe8yLuJHcNE= Subject key identifier: C9:FC:37:9B:62:23:72:CF:22:96:78:39:12:2E:A4:6A:5D:6C:56:08 Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B331409743D1FC44F7C6CCF4576B7CB90 Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/yfw3m2Ijcs8ilng5Ei6kal1sVgg.roa Signing time: Thu 18 Dec 2025 20:08:29 +0000 ROA not before: Thu 18 Dec 2025 20:08:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2a05:9a40::/29 maxlen: 29 2a06:5fc0::/29 maxlen: 29 2a0b:ac00::/29 maxlen: 29 2a0f:9b40::/29 maxlen: 29 2a10:3f80::/29 maxlen: 29 2a10:77c0::/29 maxlen: 29 2a13:b4c1::/32 maxlen: 32 2a13:b9c0::/29 maxlen: 29 2a13:bb40::/29 maxlen: 29 2a13:c240::/29 maxlen: 29 2a13:c340::/29 maxlen: 29 2a14:1100::/32 maxlen: 32 2a14:1101::/32 maxlen: 32 2a14:1102::/32 maxlen: 32 2a14:1103::/32 maxlen: 32 2a14:1104::/32 maxlen: 32 2a14:1105::/32 maxlen: 32 2a14:1106::/32 maxlen: 32 2a14:1107::/32 maxlen: 32 2a14:42c0::/29 maxlen: 29 2a14:62c0::/29 maxlen: 29 2a14:6a40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:14:09:74:3d:1f:c4:4f:7c:6c:cf:45:76:b7:cb:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Dec 18 20:08:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c9fc379b622372cf22967839122ea46a5d6c5608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0e:6d:11:7d:10:39:2c:b6:36:2d:d0:47:18: 18:d4:1f:a5:b1:e5:41:45:47:f8:e5:57:cd:9f:fd: ec:a1:d1:4e:ca:ce:59:1a:ca:b8:87:7c:cf:3c:56: a1:79:e1:42:f8:e3:a4:5a:4a:7b:cb:de:2e:df:76: aa:bc:9b:ec:c6:3c:37:83:f2:7a:c6:2f:c0:3a:fb: 2f:8d:e4:98:fd:da:31:50:89:f9:e9:0d:f2:d7:22: 3a:13:c5:9a:d2:ad:84:e2:c9:35:7f:4e:f0:9f:3d: 95:d1:3c:94:3b:4b:b9:ba:8b:2d:04:61:91:c0:4c: 2d:b1:e9:3e:13:02:30:d7:14:97:a7:5d:b2:50:7f: 46:bf:eb:4f:44:a3:f4:54:21:26:42:3c:28:8c:ea: 0d:b8:78:df:92:f9:c0:7b:d9:37:29:01:09:01:6d: 5f:50:e9:0c:b8:97:39:0b:f5:85:35:b5:3b:8a:60: 34:5a:7d:2d:6c:6c:88:6d:f7:34:38:30:9a:fe:35: ad:1e:3b:cc:74:0d:c6:51:e1:ac:ce:c7:6b:47:45: 8e:bf:86:3d:49:d0:b2:40:9c:fa:30:22:6a:15:e4: bf:0f:81:e5:bf:e9:f7:f9:2e:05:85:3f:a2:5c:23: 14:5c:3a:c4:20:58:d0:82:63:a2:67:9a:30:a3:87: 68:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:FC:37:9B:62:23:72:CF:22:96:78:39:12:2E:A4:6A:5D:6C:56:08 X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/yfw3m2Ijcs8ilng5Ei6kal1sVgg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:9a40::/29 2a06:5fc0::/29 2a0b:ac00::/29 2a0f:9b40::/29 2a10:3f80::/29 2a10:77c0::/29 2a13:b4c1::/32 2a13:b9c0::/29 2a13:bb40::/29 2a13:c240::/29 2a13:c340::/29 2a14:1100::/29 2a14:42c0::/29 2a14:62c0::/29 2a14:6a40::/32 Signature Algorithm: sha256WithRSAEncryption 2b:65:2d:ea:2e:3e:ce:9f:9d:c9:73:bc:30:27:8f:92:ee:33: 81:12:2f:d2:cd:91:a1:18:f2:e2:46:57:59:fc:ab:7f:ea:48: cd:75:ad:d4:1c:07:71:a5:93:1f:8d:32:4d:05:c7:b6:98:2e: 5f:c9:02:c9:d2:a8:4d:3c:ce:1c:00:4a:3d:eb:15:82:85:86: bb:d9:f2:eb:b7:78:52:38:93:90:62:eb:73:b9:c6:17:52:37: fe:76:62:da:bd:cb:19:74:06:63:9f:22:de:6e:06:8a:44:0b: d5:fd:c3:4e:ee:04:25:ae:58:43:82:b7:4a:3f:82:f9:38:cf: 5c:5e:dd:5c:3a:4b:b9:47:1d:e5:d3:e2:b6:be:df:b9:11:89: d5:18:0c:2e:5f:1f:65:9d:a8:74:3a:47:4c:3b:3d:79:6b:d2: 2c:d3:82:3f:4d:37:32:e8:80:76:27:75:15:fe:c4:7c:99:3b: 1e:9d:42:0f:c9:05:19:ab:b9:f5:a0:3b:dd:10:1c:f4:8f:01: d3:bf:0b:1e:d7:e6:b9:c5:65:de:dd:b4:41:51:57:75:2f:de: e9:7a:46:de:f4:a9:91:d8:94:c0:5b:66:43:65:9d:7c:4b:14: b0:be:6d:7f:fb:f7:8e:f9:e8:82:24:f1:de:48:8b:b4:5b:0a: 83:38:0a:b8 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgISAZszFAl0PR/ET3xsz0V2t8uQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjUxMjE4MjAwODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWZjMzc5YjYyMjM3MmNmMjI5Njc4MzkxMjJlYTQ2YTVkNmM1NjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ5tEX0QOSy2Ni3QRxgY1B+lseVB RUf45VfNn/3sodFOys5ZGsq4h3zPPFaheeFC+OOkWkp7y94u33aqvJvsxjw3g/J6 xi/AOvsvjeSY/doxUIn56Q3y1yI6E8Wa0q2E4sk1f07wnz2V0TyUO0u5uostBGGR wEwtsek+EwIw1xSXp12yUH9Gv+tPRKP0VCEmQjwojOoNuHjfkvnAe9k3KQEJAW1f UOkMuJc5C/WFNbU7imA0Wn0tbGyIbfc0ODCa/jWtHjvMdA3GUeGszsdrR0WOv4Y9 SdCyQJz6MCJqFeS/D4Hlv+n3+S4FhT+iXCMUXDrEIFjQgmOiZ5owo4doXQIDAQAB o4ICbTCCAmkwHQYDVR0OBBYEFMn8N5tiI3LPIpZ4ORIupGpdbFYIMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEveWZ3M20ySWpjczhpbG5nNUVpNmthbDFzVmdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGCBggrBgEFBQcBBwEB/wRzMHEwbwQCAAIwaQMFAyoFmkAD BQMqBl/AAwUDKgusAAMFAyoPm0ADBQMqED+AAwUDKhB3wAMFACoTtMEDBQMqE7nA AwUDKhO7QAMFAyoTwkADBQMqE8NAAwUDKhQRAAMFAyoUQsADBQMqFGLAAwUAKhRq QDANBgkqhkiG9w0BAQsFAAOCAQEAK2Ut6i4+zp+dyXO8MCePku4zgRIv0s2RoRjy 4kZXWfyrf+pIzXWt1BwHcaWTH40yTQXHtpguX8kCydKoTTzOHABKPesVgoWGu9ny 67d4UjiTkGLrc7nGF1I3/nZi2r3LGXQGY58i3m4GikQL1f3DTu4EJa5YQ4K3Sj+C +TjPXF7dXDpLuUcd5dPitr7fuRGJ1RgMLl8fZZ2odDpHTDs9eWvSLNOCP003MuiA did1Ff7EfJk7Hp1CD8kFGau59aA73RAc9I8B078LHtfmucVl3t20QVFXdS/e6XpG 3vSpkdiUwFtmQ2WdfEsUsL5tf/v3jvnogiTx3kiLtFsKgzgKuA== -----END CERTIFICATE-----Generated at Sat Dec 20 01:10:09 2025 by rpki-client