This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/YdgVMz6jYpmJhpP_Hrx6VwI4wE8.roa File: YdgVMz6jYpmJhpP_Hrx6VwI4wE8.roa (raw, json) Hash identifier: aUi0vRBboS+1lQ1o2tfoELC59p1OC+oVGENkCcKTb94= Subject key identifier: 61:D8:15:33:3E:A3:62:99:89:86:93:FF:1E:BC:7A:57:02:38:C0:4F Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019B42569785D530CEF723A68D83E26BA608 Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/YdgVMz6jYpmJhpP_Hrx6VwI4wE8.roa Signing time: Sun 21 Dec 2025 19:15:29 +0000 ROA not before: Sun 21 Dec 2025 19:15:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215402 IP address blocks: 2a0e:4005:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:56:97:85:d5:30:ce:f7:23:a6:8d:83:e2:6b:a6:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Dec 21 19:15:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=61d815333ea36299898693ff1ebc7a570238c04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a3:2a:ea:23:fd:fb:ed:89:b4:26:30:2f:f6: 44:e8:9d:8e:8f:bc:19:bf:30:bc:73:82:25:86:aa: bf:3c:17:4d:78:05:07:8f:c5:80:8b:ba:8a:c5:4e: 94:ed:c6:16:47:84:e5:f2:d8:17:10:8c:3a:8d:70: 05:7f:d2:09:4a:9e:4d:4f:85:96:b6:57:49:04:18: a9:6a:c9:53:d8:00:2e:53:dc:76:45:01:c0:3c:a1: f3:d8:d5:0d:6f:f7:da:a0:2f:e5:14:f9:d3:02:28: 64:b4:1a:75:c1:2e:32:4d:18:02:e0:77:91:3c:02: 16:ed:8e:8c:ba:08:6c:f3:ef:30:50:9e:63:ed:61: 01:b5:df:05:1e:e8:08:23:85:4f:3c:e3:32:ca:87: e7:8b:27:81:25:98:fe:c1:3e:f6:de:da:99:14:86: c4:f8:80:eb:1b:a0:ad:99:17:51:50:61:b7:b9:4e: 5b:9d:3e:e3:5c:2e:e8:bc:a0:eb:c8:fb:64:de:2a: 49:a1:df:7c:66:ca:35:49:77:e6:27:95:bc:26:90: 03:06:c5:77:0e:25:95:77:83:61:c2:a9:9f:16:08: 9c:84:c1:a3:ac:9d:a6:6a:61:1a:d6:ff:6d:7b:83: c5:3b:b4:db:0f:2b:0a:b6:6e:73:7b:54:45:19:1a: 3e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D8:15:33:3E:A3:62:99:89:86:93:FF:1E:BC:7A:57:02:38:C0:4F X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/YdgVMz6jYpmJhpP_Hrx6VwI4wE8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:4005:1000::/48 Signature Algorithm: sha256WithRSAEncryption 61:82:89:9f:f1:5f:56:50:4b:99:13:5f:15:01:a1:f4:43:99: b9:75:f8:d7:57:ad:f6:4c:d5:eb:c2:e1:1d:c3:15:0d:2f:41: fd:19:66:8f:06:35:c3:f3:c3:9a:85:fc:37:b5:93:a9:9b:1a: 0e:7c:4b:d7:4d:94:d1:f8:26:e9:42:41:c9:64:6e:b6:dd:e8: 8f:92:2e:30:b8:dd:15:3e:51:c0:6d:29:b6:fe:19:f9:32:54: 10:dc:43:b9:c7:bc:a2:66:ec:d5:a3:5c:c0:67:33:c0:f8:f7: 9b:18:f3:bb:b7:96:17:ab:96:ca:e0:20:0d:92:54:77:6a:a4: 3e:86:24:c7:b7:aa:51:eb:f9:30:ce:85:fa:df:90:f0:03:b0: 4e:65:b7:62:16:33:49:01:a1:64:79:de:3b:9f:3c:80:2c:0b: f8:ee:d2:72:51:c5:0a:24:02:9b:6a:4f:10:47:5f:ef:fb:ed: a1:e5:bb:00:71:0d:03:68:bf:35:37:5d:ef:9e:ae:d8:f3:39: da:8a:69:82:3c:09:1b:fa:4a:13:98:80:f2:41:70:06:c7:49: 11:aa:61:55:57:41:18:79:a2:00:b7:5b:35:05:9d:1d:a0:a9: bf:82:d0:89:aa:fe:c3:8b:56:9b:67:11:e1:65:76:60:26:3b: 7d:5f:73:14 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZtCVpeF1TDO9yOmjYPia6YIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjUxMjIxMTkxNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWQ4MTUzMzNlYTM2Mjk5ODk4NjkzZmYxZWJjN2E1NzAyMzhjMDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKMq6iP9++2JtCYwL/ZE6J2Oj7wZ vzC8c4Ilhqq/PBdNeAUHj8WAi7qKxU6U7cYWR4Tl8tgXEIw6jXAFf9IJSp5NT4WW tldJBBipaslT2AAuU9x2RQHAPKHz2NUNb/faoC/lFPnTAihktBp1wS4yTRgC4HeR PAIW7Y6Mughs8+8wUJ5j7WEBtd8FHugII4VPPOMyyofniyeBJZj+wT723tqZFIbE +IDrG6CtmRdRUGG3uU5bnT7jXC7ovKDryPtk3ipJod98Zso1SXfmJ5W8JpADBsV3 DiWVd4NhwqmfFgichMGjrJ2mamEa1v9te4PFO7TbDysKtm5ze1RFGRo+VwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGHYFTM+o2KZiYaT/x68elcCOMBPMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvWWRnVk16NmpZcG1KaHBQX0hyeDZWd0k0d0U4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg5ABRAA MA0GCSqGSIb3DQEBCwUAA4IBAQBhgomf8V9WUEuZE18VAaH0Q5m5dfjXV632TNXr wuEdwxUNL0H9GWaPBjXD88Oahfw3tZOpmxoOfEvXTZTR+CbpQkHJZG623eiPki4w uN0VPlHAbSm2/hn5MlQQ3EO5x7yiZuzVo1zAZzPA+PebGPO7t5YXq5bK4CANklR3 aqQ+hiTHt6pR6/kwzoX635DwA7BOZbdiFjNJAaFked47nzyALAv47tJyUcUKJAKb ak8QR1/v++2h5bsAcQ0DaL81N13vnq7Y8znaimmCPAkb+koTmIDyQXAGx0kRqmFV V0EYeaIAt1s1BZ0doKm/gtCJqv7Di1abZxHhZXZgJjt9X3MU -----END CERTIFICATE-----Generated at Thu Dec 25 02:58:40 2025 by rpki-client