This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/YRPi61LgLNBvz6xuq9cs3hk8_DI.roa File: YRPi61LgLNBvz6xuq9cs3hk8_DI.roa (raw, json) Hash identifier: vTEVE1e+jCj87VJXkKTgM7ONzG0LyVdym9kfLpCBink= Subject key identifier: 61:13:E2:EB:52:E0:2C:D0:6F:CF:AC:6E:AB:D7:2C:DE:19:3C:FC:32 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B35BB87E0112A8622D7B1AE15F9A011C8 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/YRPi61LgLNBvz6xuq9cs3hk8_DI.roa Signing time: Fri 19 Dec 2025 08:30:41 +0000 ROA not before: Fri 19 Dec 2025 08:30:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20473 IP address blocks: 2a0c:b641:20::/44 maxlen: 48 2a0c:b641:130::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:bb:87:e0:11:2a:86:22:d7:b1:ae:15:f9:a0:11:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Dec 19 08:30:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6113e2eb52e02cd06fcfac6eabd72cde193cfc32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b3:a9:04:37:88:46:a8:71:75:b3:1f:52:fe: 48:97:e0:01:29:db:68:30:6b:80:f6:c7:88:26:6d: 80:48:f5:7d:49:5e:3f:96:8f:28:6e:86:fd:82:79: 0a:3f:45:fd:46:93:8b:b1:10:09:73:0b:20:9b:4c: c6:0d:7e:36:91:00:6d:9b:5e:b8:c2:25:db:08:f5: b0:34:92:bd:2e:1f:c9:80:11:a0:cd:fa:fa:96:da: 54:71:d5:a6:b5:af:8c:57:3c:34:3a:a8:c6:20:5e: ff:fe:bc:ac:3d:73:30:6a:7f:d5:6f:4f:d3:26:49: 8d:3e:52:b3:74:bf:1e:cf:72:54:cc:7d:7d:77:2c: 8f:e8:dc:99:dc:b7:f3:7b:3d:1f:15:6f:f1:f1:eb: 92:39:a5:0f:60:49:86:ac:e1:8f:5c:54:01:66:05: 59:1c:8f:0b:7a:11:f9:63:dd:d8:d5:24:9e:7d:35: 24:6c:56:82:33:92:a1:b3:34:9f:85:00:dc:bf:cd: 0a:b2:b7:26:ea:44:81:17:70:7d:71:97:7b:e7:00: 29:0f:cd:e6:a8:d1:64:04:79:2f:2c:ad:dd:6a:45: f3:53:1b:8a:8a:d9:03:0f:ed:3b:b0:64:43:c5:89: a6:36:12:64:f0:b6:11:8d:8b:13:62:30:64:cf:57: 61:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:13:E2:EB:52:E0:2C:D0:6F:CF:AC:6E:AB:D7:2C:DE:19:3C:FC:32 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/YRPi61LgLNBvz6xuq9cs3hk8_DI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:20::/44 2a0c:b641:130::/44 Signature Algorithm: sha256WithRSAEncryption 79:ec:5e:87:c0:76:39:dc:b5:28:e5:1d:eb:49:3b:63:4d:1f: e3:d6:8b:d5:4f:01:43:62:9d:f0:00:42:de:ba:5b:d4:f2:fb: 23:51:18:53:32:c6:a9:f0:eb:aa:30:84:d9:6b:c9:e9:6d:e0: d9:85:f0:0b:2d:06:4c:f6:f0:0b:51:43:9a:b0:cf:2a:6a:52: 70:05:cc:07:bf:a2:25:77:a1:6c:bc:ec:2a:31:83:34:b3:93: df:b0:ec:e5:13:fb:80:b0:cf:ba:ee:4e:46:60:63:c5:5f:93: 04:94:46:3d:42:c5:d1:32:b8:56:e9:4c:9b:32:ae:18:0d:2f: 31:38:32:65:e4:d4:c0:d8:b7:93:a8:87:4f:a8:aa:3d:24:fc: 1e:32:3a:68:c2:af:7b:5c:96:d1:65:80:68:0e:bd:8c:8a:eb: 2f:3e:92:96:53:41:27:fa:29:d4:a6:91:db:44:f2:b2:68:30: 9d:17:2e:c4:54:3d:be:0f:51:ec:bd:87:3d:01:1e:16:ad:42: 37:46:c4:59:fc:a3:ad:3f:90:74:fc:90:6f:67:9f:b9:49:92: ee:54:1f:ee:11:0d:29:ea:a5:32:39:84:5f:e9:b1:b0:21:13: e1:fe:d1:b4:0f:8d:5c:dc:1f:7f:6d:47:ea:a9:dd:0d:67:49: f7:e7:58:0a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZs1u4fgESqGItexrhX5oBHIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjUxMjE5MDgzMDQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTEzZTJlYjUyZTAyY2QwNmZjZmFjNmVhYmQ3MmNkZTE5M2NmYzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubOpBDeIRqhxdbMfUv5Il+ABKdto MGuA9seIJm2ASPV9SV4/lo8obob9gnkKP0X9RpOLsRAJcwsgm0zGDX42kQBtm164 wiXbCPWwNJK9Lh/JgBGgzfr6ltpUcdWmta+MVzw0OqjGIF7//rysPXMwan/Vb0/T JkmNPlKzdL8ez3JUzH19dyyP6NyZ3Lfzez0fFW/x8euSOaUPYEmGrOGPXFQBZgVZ HI8LehH5Y93Y1SSefTUkbFaCM5KhszSfhQDcv80Ksrcm6kSBF3B9cZd75wApD83m qNFkBHkvLK3dakXzUxuKitkDD+07sGRDxYmmNhJk8LYRjYsTYjBkz1dh1wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGET4utS4CzQb8+sbqvXLN4ZPPwyMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvWVJQaTYxTGdMTkJ2ejZ4dXE5Y3MzaGs4X0RJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgy2QQAg AwcEKgy2QQEwMA0GCSqGSIb3DQEBCwUAA4IBAQB57F6HwHY53LUo5R3rSTtjTR/j 1ovVTwFDYp3wAELeulvU8vsjURhTMsap8OuqMITZa8npbeDZhfALLQZM9vALUUOa sM8qalJwBcwHv6Ild6FsvOwqMYM0s5PfsOzlE/uAsM+67k5GYGPFX5MElEY9QsXR MrhW6UybMq4YDS8xODJl5NTA2LeTqIdPqKo9JPweMjpowq97XJbRZYBoDr2Miusv PpKWU0En+inUppHbRPKyaDCdFy7EVD2+D1HsvYc9AR4WrUI3RsRZ/KOtP5B0/JBv Z5+5SZLuVB/uEQ0p6qUyOYRf6bGwIRPh/tG0D41c3B9/bUfqqd0NZ0n351gK -----END CERTIFICATE-----Generated at Sat Dec 20 02:37:43 2025 by rpki-client