This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/yBP-X9VBCoT8QaoKoJ9tXO6ztaY.roa File: yBP-X9VBCoT8QaoKoJ9tXO6ztaY.roa (raw, json) Hash identifier: v6T2Fc02UNZgqbLWqXW8MlnKX2I8dYI0nyLeHRJs3ng= Subject key identifier: C8:13:FE:5F:D5:41:0A:84:FC:41:AA:0A:A0:9F:6D:5C:EE:B3:B5:A6 Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f Certificate serial: 019B0C91A32B17F52230E00D20BEE30CC314 Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/yBP-X9VBCoT8QaoKoJ9tXO6ztaY.roa Signing time: Thu 11 Dec 2025 08:40:29 +0000 ROA not before: Thu 11 Dec 2025 08:40:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199614 IP address blocks: 185.138.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:91:a3:2b:17:f5:22:30:e0:0d:20:be:e3:0c:c3:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f Validity Not Before: Dec 11 08:40:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c813fe5fd5410a84fc41aa0aa09f6d5ceeb3b5a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c6:ad:ad:10:59:88:28:b8:a5:b0:e4:93:2a: 3f:1d:bf:c5:ed:7f:e3:ac:75:6d:2b:ce:9d:e0:48: 0d:05:2a:67:6e:a3:3c:2f:86:ba:d2:74:9e:e9:e9: fe:23:91:27:57:63:ad:c0:42:24:b0:04:bb:c2:0e: 7c:14:1a:05:f5:6d:5d:dd:8e:28:3b:73:6b:24:df: 2c:6d:9a:08:36:b0:88:e5:25:5d:1d:04:be:64:f0: e4:e7:f8:75:b5:cf:1e:80:da:82:9f:90:42:cd:0b: 01:ef:e2:6f:71:3c:18:91:63:9f:c9:23:79:ef:db: 8c:84:59:8b:07:5f:cf:55:00:9f:ce:13:6d:c2:f7: 33:8e:e5:9c:9c:2c:b0:1f:6e:0e:b2:b4:45:ed:41: 3e:a0:fc:bb:df:9c:e4:d1:62:c5:3e:50:38:3f:3c: 62:10:04:e5:48:d6:aa:9d:bc:bf:b6:bc:c2:bc:b7: 3b:94:4d:84:f4:06:19:b5:e5:71:91:59:9a:2f:75: cb:5a:db:bc:de:93:b4:a3:41:a0:57:60:d3:6e:2b: bb:30:92:d4:84:5f:14:78:11:66:e5:64:be:69:e9: cc:c6:15:8c:72:98:b0:da:96:2b:96:61:1a:4e:b6: af:0a:06:c6:bf:17:a7:5f:a6:8e:00:e3:bb:38:c9: 40:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:13:FE:5F:D5:41:0A:84:FC:41:AA:0A:A0:9F:6D:5C:EE:B3:B5:A6 X509v3 Authority Key Identifier: keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/yBP-X9VBCoT8QaoKoJ9tXO6ztaY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.138.235.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:0c:6c:79:f4:af:2f:14:83:f5:ba:aa:a2:bc:56:cf:a4:65: 95:e4:7b:5a:a6:0f:55:a7:40:a9:51:e9:95:54:1b:ec:8c:06: 58:77:57:7b:9c:5f:38:af:12:e4:0a:8e:dc:e7:7d:bf:ad:3b: 28:0c:35:a5:07:3d:40:5c:c3:8f:87:84:92:0c:f7:50:66:a8: 8d:d4:e1:b2:41:c3:04:41:f2:b1:e1:b3:fc:99:72:33:05:05: 19:7f:4c:4d:42:ee:cb:e4:33:fc:4a:6d:0f:e2:93:7d:60:51: ca:9c:5a:c8:72:b1:8d:cc:60:db:78:6e:dc:d1:f2:7d:24:db: bb:c0:4d:27:93:ad:e8:8c:8f:bc:14:8a:8e:4e:e8:60:6c:62: 15:5d:5f:4e:13:ce:a0:a7:1f:5b:a6:ef:a3:61:ba:5a:a9:13: 7e:4d:e9:c9:cc:eb:97:5a:65:06:e6:6e:56:d1:2b:62:58:c0: 29:2e:f3:94:ea:93:0d:8a:0e:c3:45:1b:e3:86:d2:57:ed:43: 13:a5:54:fe:69:53:f4:58:81:5f:92:2f:ba:a4:f4:a0:a5:65: 4e:2c:a0:75:b7:86:0d:86:9b:ec:6e:27:be:d6:6b:56:9f:f8: 0d:32:fa:4d:58:8b:bd:a2:dc:21:30:5d:da:44:21:fd:90:91: 6c:ad:c7:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsMkaMrF/UiMOANIL7jDMMUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMDZhODJiYjExNWQ3MzkzZTM5ZmQ1OGI3M2JiZjIwZjZj ZDBiMWYwHhcNMjUxMjExMDg0MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODEzZmU1ZmQ1NDEwYTg0ZmM0MWFhMGFhMDlmNmQ1Y2VlYjNiNWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsatrRBZiCi4pbDkkyo/Hb/F7X/j rHVtK86d4EgNBSpnbqM8L4a60nSe6en+I5EnV2OtwEIksAS7wg58FBoF9W1d3Y4o O3NrJN8sbZoINrCI5SVdHQS+ZPDk5/h1tc8egNqCn5BCzQsB7+JvcTwYkWOfySN5 79uMhFmLB1/PVQCfzhNtwvczjuWcnCywH24OsrRF7UE+oPy735zk0WLFPlA4Pzxi EATlSNaqnby/trzCvLc7lE2E9AYZteVxkVmaL3XLWtu83pO0o0GgV2DTbiu7MJLU hF8UeBFm5WS+aenMxhWMcpiw2pYrlmEaTravCgbGvxenX6aOAOO7OMlAswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMgT/l/VQQqE/EGqCqCfbVzus7WmMB8GA1UdIwQY MBaAFBwGqCuxFdc5Pjn9WLc7vyD2zQsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUt NzI2MDU3YTFmMmE0LzEveUJQLVg5VkJDb1Q4UWFvS29KOXRYTzZ6dGFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUtNzI2MDU3YTFmMmE0 LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYrrMA0G CSqGSIb3DQEBCwUAA4IBAQCNDGx59K8vFIP1uqqivFbPpGWV5Htapg9Vp0CpUemV VBvsjAZYd1d7nF84rxLkCo7c532/rTsoDDWlBz1AXMOPh4SSDPdQZqiN1OGyQcME QfKx4bP8mXIzBQUZf0xNQu7L5DP8Sm0P4pN9YFHKnFrIcrGNzGDbeG7c0fJ9JNu7 wE0nk63ojI+8FIqOTuhgbGIVXV9OE86gpx9bpu+jYbpaqRN+TenJzOuXWmUG5m5W 0StiWMApLvOU6pMNig7DRRvjhtJX7UMTpVT+aVP0WIFfki+6pPSgpWVOLKB1t4YN hpvsbie+1mtWn/gNMvpNWIu9otwhMF3aRCH9kJFsrccP -----END CERTIFICATE-----Generated at Fri Dec 19 11:46:51 2025 by rpki-client