This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/yOhUJlLqQay1NYxJExh23JZ43rw.roa File: yOhUJlLqQay1NYxJExh23JZ43rw.roa (raw, json) Hash identifier: LQKM9d1MUji3vP5JAhwqhcvawdbo4J4dnX4KWJGz2F8= Subject key identifier: C8:E8:54:26:52:EA:41:AC:B5:35:8C:49:13:18:76:DC:96:78:DE:BC Certificate issuer: /CN=07bca0482d605587eb0e0c851c38e807755f9017 Certificate serial: 019B024E13200E1BF75F5B95E9928846C067 Authority key identifier: 07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/yOhUJlLqQay1NYxJExh23JZ43rw.roa Signing time: Tue 09 Dec 2025 08:50:29 +0000 ROA not before: Tue 09 Dec 2025 08:50:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55154 IP address blocks: 2a14:1740::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:4e:13:20:0e:1b:f7:5f:5b:95:e9:92:88:46:c0:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07bca0482d605587eb0e0c851c38e807755f9017 Validity Not Before: Dec 9 08:50:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c8e8542652ea41acb5358c49131876dc9678debc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:37:11:e4:c6:d8:0d:6b:ad:8f:51:bd:19:5b: c7:31:44:f6:34:04:2c:85:1c:55:db:ae:fb:92:b1: 45:e8:69:ae:2f:12:9e:a8:16:1a:92:c0:1e:df:37: 2f:66:e9:3b:b9:45:90:15:7e:ee:0a:43:11:21:07: 8e:fd:4f:5e:73:07:26:75:02:64:29:17:3b:e8:b4: 15:3b:61:70:cf:23:ad:d9:d0:3d:24:e4:a6:f0:b9: ae:73:39:47:8a:40:e7:11:85:36:23:5a:3a:90:ae: bd:3a:68:85:55:01:3c:02:b4:75:6e:3a:b5:75:90: 98:c4:86:cd:1a:c7:99:88:4e:07:02:fc:ff:29:4d: c5:d0:79:18:ba:33:d9:27:38:ac:9d:43:ee:3a:4c: 27:ac:1a:61:69:c6:8a:5d:11:14:50:63:15:e1:87: 55:d9:73:5f:89:90:67:56:25:6e:1a:40:11:b3:2b: 42:85:d3:b2:3d:c9:08:e1:0a:28:61:3d:f5:8b:1b: fb:80:df:cb:9c:e2:03:9b:4b:14:c7:60:c2:8c:e9: 03:1c:10:e0:d2:ca:88:41:8b:4c:9c:06:c1:85:51: e7:ac:48:c7:ce:26:f0:36:ac:ff:ba:fe:05:eb:0b: c5:fc:2c:36:1f:29:ea:f2:45:9c:92:99:0c:8b:ac: fa:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E8:54:26:52:EA:41:AC:B5:35:8C:49:13:18:76:DC:96:78:DE:BC X509v3 Authority Key Identifier: keyid:07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/yOhUJlLqQay1NYxJExh23JZ43rw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:1740::/29 Signature Algorithm: sha256WithRSAEncryption 18:fa:aa:7c:ec:bf:03:20:98:47:bf:2e:f8:b5:b9:36:eb:02: bf:cc:5f:53:a7:8e:52:3b:68:50:3d:6e:83:6d:3a:55:15:74: 12:69:9f:26:6a:a6:4b:86:4a:ae:3c:4b:61:6e:65:14:ed:3b: 6d:7d:0c:04:86:b4:70:f9:0d:57:24:46:a1:59:f5:31:5e:ab: c3:25:49:9a:f9:5a:d6:da:aa:4e:3a:86:e9:d8:27:00:38:6f: 6e:2e:8b:c2:f8:8d:ce:91:0f:3d:d5:38:03:cb:0c:c6:b4:aa: a5:cd:9a:7b:14:83:27:c3:0b:6d:fd:93:73:10:0b:3a:c5:6a: d4:25:8d:9d:ad:91:47:72:2e:c2:6e:fa:bd:de:80:ad:31:61: b1:af:13:46:34:8f:1f:81:9f:e9:c6:b5:56:2c:ba:f1:54:30: 4a:dc:2b:22:9f:6c:05:77:0c:66:a6:07:b9:76:83:7d:26:5f: 42:78:45:4c:0b:4a:a7:07:69:8a:da:1b:db:38:7f:0d:30:88: a9:cc:b6:cc:42:9e:6d:7e:29:dc:61:f5:72:1c:af:48:60:1a: 1f:4e:e9:20:fa:ff:df:a7:5a:f5:3f:85:bb:85:87:da:30:cd: 2c:fb:b0:99:88:99:03:de:66:f4:58:80:ec:7e:d8:9a:78:54: c3:31:6d:ad -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZsCThMgDhv3X1uV6ZKIRsBnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YmNhMDQ4MmQ2MDU1ODdlYjBlMGM4NTFjMzhlODA3NzU1 ZjkwMTcwHhcNMjUxMjA5MDg1MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGU4NTQyNjUyZWE0MWFjYjUzNThjNDkxMzE4NzZkYzk2NzhkZWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzcR5MbYDWutj1G9GVvHMUT2NAQs hRxV2677krFF6GmuLxKeqBYaksAe3zcvZuk7uUWQFX7uCkMRIQeO/U9ecwcmdQJk KRc76LQVO2FwzyOt2dA9JOSm8LmuczlHikDnEYU2I1o6kK69OmiFVQE8ArR1bjq1 dZCYxIbNGseZiE4HAvz/KU3F0HkYujPZJzisnUPuOkwnrBphacaKXREUUGMV4YdV 2XNfiZBnViVuGkARsytChdOyPckI4QooYT31ixv7gN/LnOIDm0sUx2DCjOkDHBDg 0sqIQYtMnAbBhVHnrEjHzibwNqz/uv4F6wvF/Cw2Hynq8kWckpkMi6z6QwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFMjoVCZS6kGstTWMSRMYdtyWeN68MB8GA1UdIwQY MBaAFAe8oEgtYFWH6w4MhRw46Ad1X5AXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjd5Z1NDMWdWWWZyRGd5RkhEam9CM1Zma0JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC83NjYzMTEtY2FhNC00Mzk5LThiMzUt ZmM3OWFmMWY2ZmIzLzEveU9oVUpsTHFRYXkxTll4SkV4aDIzSlo0M3J3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC83NjYzMTEtY2FhNC00Mzk5LThiMzUtZmM3OWFmMWY2ZmIz LzEvQjd5Z1NDMWdWWWZyRGd5RkhEam9CM1Zma0JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhQXQDAN BgkqhkiG9w0BAQsFAAOCAQEAGPqqfOy/AyCYR78u+LW5NusCv8xfU6eOUjtoUD1u g206VRV0EmmfJmqmS4ZKrjxLYW5lFO07bX0MBIa0cPkNVyRGoVn1MV6rwyVJmvla 1tqqTjqG6dgnADhvbi6LwviNzpEPPdU4A8sMxrSqpc2aexSDJ8MLbf2TcxALOsVq 1CWNna2RR3Iuwm76vd6ArTFhsa8TRjSPH4Gf6ca1Viy68VQwStwrIp9sBXcMZqYH uXaDfSZfQnhFTAtKpwdpitob2zh/DTCIqcy2zEKebX4p3GH1chyvSGAaH07pIPr/ 36da9T+Fu4WH2jDNLPuwmYiZA95m9FiA7H7YmnhUwzFtrQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:37:08 2025 by rpki-client