This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/cAYzosYSQelGBc-rxLZK9fyqjYw.roa File: cAYzosYSQelGBc-rxLZK9fyqjYw.roa (raw, json) Hash identifier: +XXb3WDjGIVH3OQ2R39KaMbWTURlNOoi0Q2pU6ImRxA= Subject key identifier: 70:06:33:A2:C6:12:41:E9:46:05:CF:AB:C4:B6:4A:F5:FC:AA:8D:8C Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B4593273C9D1A37CFAF6AD87E13257D62 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/cAYzosYSQelGBc-rxLZK9fyqjYw.roa Signing time: Mon 22 Dec 2025 10:20:30 +0000 ROA not before: Mon 22 Dec 2025 10:20:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212862 IP address blocks: 185.196.40.0/24 maxlen: 24 185.220.240.0/22 maxlen: 24 194.38.56.0/22 maxlen: 24 212.115.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:93:27:3c:9d:1a:37:cf:af:6a:d8:7e:13:25:7d:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Dec 22 10:20:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=700633a2c61241e94605cfabc4b64af5fcaa8d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b5:eb:c3:d2:f2:9c:7b:fd:bd:be:26:66:01: ab:f6:6f:5d:ed:46:f3:4a:42:a1:3d:ad:76:0b:d0: 53:77:3e:56:06:99:58:5a:95:42:88:fd:9c:f0:96: 2f:2a:d3:a6:f7:e4:4a:1c:7b:e4:db:f5:11:50:31: 14:23:52:7f:05:7e:2c:4a:d9:20:a8:2b:2f:22:cf: 52:54:9f:f8:87:e8:06:45:98:e8:bb:46:ba:0f:4d: a2:8c:c9:ac:12:8c:9f:e3:f9:ec:8c:2d:da:fd:44: e0:0b:10:e3:30:35:d7:df:92:3a:88:fe:43:d9:8b: 7f:07:b9:6a:3a:00:fc:0b:32:89:dc:7a:61:f5:6b: 26:ca:bd:23:06:34:77:26:da:c1:26:ba:c8:ba:93: 53:6a:fe:fc:f9:2c:ff:c7:40:5e:16:22:66:c5:08: 3f:44:f4:e0:76:7d:28:2d:be:f4:c1:4c:c1:53:4a: 52:d5:d4:fd:6f:f4:43:15:cb:3c:c3:21:bc:a5:49: 5a:44:54:ea:55:93:f1:36:a1:9c:9b:e0:79:07:db: 9e:4e:f6:84:31:c8:0b:45:87:3b:a8:58:42:85:98: e5:d9:7d:de:3b:3e:c4:3d:13:cb:97:ed:64:12:3e: de:cf:e3:d1:b1:7e:3d:4e:42:0c:bb:7f:93:f7:03: 43:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:06:33:A2:C6:12:41:E9:46:05:CF:AB:C4:B6:4A:F5:FC:AA:8D:8C X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/cAYzosYSQelGBc-rxLZK9fyqjYw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.40.0/24 185.220.240.0/22 194.38.56.0/22 212.115.44.0/22 Signature Algorithm: sha256WithRSAEncryption 64:a0:3a:cf:1a:cf:e6:05:c6:82:df:5f:90:ef:3d:0c:e0:8a: 54:79:5e:05:83:31:51:c9:50:a5:0e:a9:ba:d8:9d:71:d4:92: 8c:78:fb:13:2e:eb:d6:fc:c9:de:41:8f:cd:8c:22:80:b7:89: d7:fe:46:68:e6:89:40:dc:aa:ec:dc:1d:64:be:a4:a0:b3:de: a5:37:71:47:b8:29:1d:84:1c:cb:f4:69:23:dd:f2:98:8f:70: b1:a9:1c:71:6b:76:ec:f9:a3:79:8d:4d:91:f4:ce:40:79:bf: fc:aa:5b:9c:06:22:a4:ef:7c:7c:38:ac:70:d7:18:d7:18:a5: 8a:c8:de:8e:66:51:97:95:ae:b4:8c:1a:c1:81:d6:6d:bc:61: e5:e9:50:28:60:c1:87:0e:53:77:b6:58:17:19:99:9f:fb:d2: 07:7d:aa:c2:c3:69:62:76:5e:1e:a4:d3:8a:d8:cb:d9:d1:1e: aa:a5:73:8b:f7:f3:c4:cd:77:95:91:9c:98:af:6d:b8:f2:fd: 60:75:c7:e6:af:d3:73:80:6c:c7:25:59:41:57:aa:08:4f:94: 89:98:90:98:45:ce:41:4c:d2:2c:a3:ac:26:98:06:20:da:8e: 9c:42:f1:7c:c6:ab:f5:28:ca:bf:d8:92:4c:b0:74:57:87:94: 25:0a:af:55 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZtFkyc8nRo3z69q2H4TJX1iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjUxMjIyMTAyMDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDA2MzNhMmM2MTI0MWU5NDYwNWNmYWJjNGI2NGFmNWZjYWE4ZDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLXrw9LynHv9vb4mZgGr9m9d7Ubz SkKhPa12C9BTdz5WBplYWpVCiP2c8JYvKtOm9+RKHHvk2/URUDEUI1J/BX4sStkg qCsvIs9SVJ/4h+gGRZjou0a6D02ijMmsEoyf4/nsjC3a/UTgCxDjMDXX35I6iP5D 2Yt/B7lqOgD8CzKJ3Hph9Wsmyr0jBjR3JtrBJrrIupNTav78+Sz/x0BeFiJmxQg/ RPTgdn0oLb70wUzBU0pS1dT9b/RDFcs8wyG8pUlaRFTqVZPxNqGcm+B5B9ueTvaE McgLRYc7qFhChZjl2X3eOz7EPRPLl+1kEj7ez+PRsX49TkIMu3+T9wNDzwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHAGM6LGEkHpRgXPq8S2SvX8qo2MMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvY0FZem9zWVNRZWxHQmMtcnhMWks5Znlxall3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAucQoAwQC udzwAwQCwiY4AwQC1HMsMA0GCSqGSIb3DQEBCwUAA4IBAQBkoDrPGs/mBcaC31+Q 7z0M4IpUeV4FgzFRyVClDqm62J1x1JKMePsTLuvW/MneQY/NjCKAt4nX/kZo5olA 3Krs3B1kvqSgs96lN3FHuCkdhBzL9Gkj3fKYj3CxqRxxa3bs+aN5jU2R9M5Aeb/8 qlucBiKk73x8OKxw1xjXGKWKyN6OZlGXla60jBrBgdZtvGHl6VAoYMGHDlN3tlgX GZmf+9IHfarCw2lidl4epNOK2MvZ0R6qpXOL9/PEzXeVkZyYr2248v1gdcfmr9Nz gGzHJVlBV6oIT5SJmJCYRc5BTNIso6wmmAYg2o6cQvF8xqv1KMq/2JJMsHRXh5Ql Cq9V -----END CERTIFICATE-----Generated at Tue Dec 23 00:41:25 2025 by rpki-client