This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/yi_6B4ydj2ICMyP0ueP0gs6TbjQ.roa File: yi_6B4ydj2ICMyP0ueP0gs6TbjQ.roa (raw, json) Hash identifier: Csta8spDPrBw54q6+8pAd02IrH9s0bIC9UW+/028ucs= Subject key identifier: CA:2F:FA:07:8C:9D:8F:62:02:33:23:F4:B9:E3:F4:82:CE:93:6E:34 Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e Certificate serial: 019B134E7D6ACF84C9A787D7C7726173DE50 Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/yi_6B4ydj2ICMyP0ueP0gs6TbjQ.roa Signing time: Fri 12 Dec 2025 16:04:29 +0000 ROA not before: Fri 12 Dec 2025 16:04:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15626 IP address blocks: 5.34.182.0/23 maxlen: 23 5.34.182.0/24 maxlen: 24 5.34.183.0/24 maxlen: 24 82.118.17.0/24 maxlen: 24 82.118.18.0/24 maxlen: 24 193.238.152.0/23 maxlen: 23 217.12.192.0/21 maxlen: 21 217.12.192.0/23 maxlen: 23 217.12.195.0/24 maxlen: 24 217.12.196.0/23 maxlen: 23 217.12.198.0/24 maxlen: 24 217.12.199.0/24 maxlen: 24 217.12.205.0/24 maxlen: 24 217.12.210.0/23 maxlen: 23 217.12.210.0/24 maxlen: 24 217.12.211.0/24 maxlen: 24 217.12.212.0/22 maxlen: 22 217.12.212.0/23 maxlen: 23 217.12.214.0/24 maxlen: 24 217.12.215.0/24 maxlen: 24 217.12.216.0/23 maxlen: 23 217.12.220.0/22 maxlen: 22 217.12.221.0/24 maxlen: 24 217.12.222.0/24 maxlen: 24 217.12.223.0/24 maxlen: 24 2a02:27a8::/32 maxlen: 32 2a02:27a8:feed::/48 maxlen: 48 2a02:27ad::/32 maxlen: 32 2a05:9407::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:4e:7d:6a:cf:84:c9:a7:87:d7:c7:72:61:73:de:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e Validity Not Before: Dec 12 16:04:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ca2ffa078c9d8f62023323f4b9e3f482ce936e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d3:8e:74:51:0a:06:1f:67:a6:55:b1:ca:cd: 04:38:51:11:28:e5:c5:c4:33:c5:b3:10:6d:7b:89: 91:77:bd:01:5a:ea:00:c1:e3:c5:80:e6:09:4a:9c: 8a:06:51:fb:70:76:8f:ed:e4:b3:3c:e0:4a:b3:b7: 51:b1:7e:bb:89:a4:63:06:76:3b:87:31:c9:9a:25: 99:66:71:2d:04:94:5b:23:20:36:db:ac:e5:24:8f: 60:48:d1:0c:94:6b:9c:23:7d:6a:20:3b:8b:ba:b5: 6e:dd:e1:a5:8b:5e:cd:1f:85:94:c7:d2:89:b5:93: 8c:4d:59:58:9a:e5:76:5a:eb:d7:18:6e:a8:f2:88: fc:5c:3c:74:b5:b6:df:8a:91:d8:3e:e6:1d:ac:90: ee:dd:07:3f:15:35:7c:36:13:c6:4c:f1:fb:33:26: d0:d3:e6:8f:fc:fe:ca:91:4f:a2:ce:ac:25:bd:f0: 72:cd:c1:3a:46:93:7a:d5:87:2d:33:9a:03:ab:9d: 2d:e5:0e:ff:83:19:ff:e7:5d:46:1c:a1:4e:50:a7: a7:fc:a1:77:79:54:92:aa:23:cd:b9:85:28:92:fa: ca:12:e0:fa:22:09:30:2c:f5:82:7f:05:7a:6b:f4: 84:e4:ec:a1:d9:58:ee:cd:2c:6f:11:51:2b:a3:89: 4e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:2F:FA:07:8C:9D:8F:62:02:33:23:F4:B9:E3:F4:82:CE:93:6E:34 X509v3 Authority Key Identifier: keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/yi_6B4ydj2ICMyP0ueP0gs6TbjQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.34.182.0/23 82.118.17.0-82.118.18.255 193.238.152.0/23 217.12.192.0/21 217.12.205.0/24 217.12.210.0-217.12.217.255 217.12.220.0/22 IPv6: 2a02:27a8::/32 2a02:27ad::/32 2a05:9407::/32 Signature Algorithm: sha256WithRSAEncryption 3c:69:2e:57:71:2e:29:3b:ae:84:1c:a6:6c:37:56:fb:02:8a: a1:fa:07:b3:5a:ae:a1:06:f1:0d:c0:5e:8c:5f:4f:df:99:4e: 45:85:80:14:47:6e:4e:10:c9:e7:b1:89:13:f7:ba:00:78:ac: a2:b9:3b:99:c7:79:49:9a:0d:11:e1:6d:6c:d9:dc:21:06:fc: c3:f1:4c:ae:37:0a:1a:c4:eb:ad:59:6b:46:70:c2:c8:ed:e4: 50:d6:1d:57:22:b6:dd:87:9f:f9:fa:8c:16:d5:f6:0e:c5:64: e2:2c:cb:59:57:e1:6f:18:52:d4:ca:2f:75:6e:e0:0c:0f:6c: 0a:e1:55:56:7d:44:e8:22:4f:b6:e5:53:b7:82:0c:fb:bc:88: 6d:42:a9:0a:0e:a8:bf:f9:f1:1d:ed:fb:da:c0:6f:3d:d3:d1: 2f:33:69:2c:cb:db:de:f5:e0:b5:0e:8b:b4:2b:b2:e6:6f:9c: e9:ea:d6:2c:8c:11:ae:1f:37:9d:26:43:65:72:66:41:5d:80: db:fc:a1:0d:05:51:90:fd:b0:e9:c0:4a:14:f0:d8:a7:9a:21: fc:eb:b7:1c:a4:7b:d5:0c:92:ba:10:f9:22:62:c6:48:c1:7e: 38:9c:63:c4:ae:8b:6a:97:a8:6e:ef:e9:87:0d:ea:ad:33:6b: cb:24:ee:ae -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgISAZsTTn1qz4TJp4fXx3Jhc95QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZDk4ZThmZWM2ODA3NzVhMTU3MjY2ZTBjNmI3OGIxNDFh MzRmNWUwHhcNMjUxMjEyMTYwNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTJmZmEwNzhjOWQ4ZjYyMDIzMzIzZjRiOWUzZjQ4MmNlOTM2ZTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitOOdFEKBh9nplWxys0EOFERKOXF xDPFsxBte4mRd70BWuoAwePFgOYJSpyKBlH7cHaP7eSzPOBKs7dRsX67iaRjBnY7 hzHJmiWZZnEtBJRbIyA226zlJI9gSNEMlGucI31qIDuLurVu3eGli17NH4WUx9KJ tZOMTVlYmuV2WuvXGG6o8oj8XDx0tbbfipHYPuYdrJDu3Qc/FTV8NhPGTPH7MybQ 0+aP/P7KkU+izqwlvfByzcE6RpN61YctM5oDq50t5Q7/gxn/511GHKFOUKen/KF3 eVSSqiPNuYUokvrKEuD6IgkwLPWCfwV6a/SE5Oyh2VjuzSxvEVEro4lOswIDAQAB o4ICWjCCAlYwHQYDVR0OBBYEFMov+geMnY9iAjMj9Lnj9ILOk240MB8GA1UdIwQY MBaAFJTZjo/saAd1oVcmbgxreLFBo09eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbE5tT2oteG9CM1doVnladURHdDRzVUdqVDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83YWUzYzctNjdlNC00NGRlLWIxMzkt ODdkMTdkZjc0YzdlLzEveWlfNkI0eWRqMklDTXlQMHVlUDBnczZUYmpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83YWUzYzctNjdlNC00NGRlLWIxMzktODdkMTdkZjc0Yzdl LzEvbE5tT2oteG9CM1doVnladURHdDRzVUdqVDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBABAIAATA6AwQBBSK2MAwD BABSdhEDBABSdhIDBAHB7pgDBAPZDMADBADZDM0wDAMEAdkM0gMEAdkM2AMEAtkM 3DAbBAIAAjAVAwUAKgInqAMFACoCJ60DBQAqBZQHMA0GCSqGSIb3DQEBCwUAA4IB AQA8aS5XcS4pO66EHKZsN1b7Aoqh+gezWq6hBvENwF6MX0/fmU5FhYAUR25OEMnn sYkT97oAeKyiuTuZx3lJmg0R4W1s2dwhBvzD8UyuNwoaxOutWWtGcMLI7eRQ1h1X Irbdh5/5+owW1fYOxWTiLMtZV+FvGFLUyi91buAMD2wK4VVWfUToIk+25VO3ggz7 vIhtQqkKDqi/+fEd7fvawG8909EvM2ksy9ve9eC1Dou0K7Lmb5zp6tYsjBGuHzed JkNlcmZBXYDb/KENBVGQ/bDpwEoU8NinmiH867ccpHvVDJK6EPkiYsZIwX44nGPE rotql6hu7+mHDeqtM2vLJO6u -----END CERTIFICATE-----Generated at Sat Dec 20 22:32:54 2025 by rpki-client