This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/YnXiOZFn5_Ti8j5SWgP0_2hT1vY.roa File: YnXiOZFn5_Ti8j5SWgP0_2hT1vY.roa (raw, json) Hash identifier: lRZQ9KsaLdanEcykQNh0FaeICI/LtcJmN2j17gaMSis= Subject key identifier: 62:75:E2:39:91:67:E7:F4:E2:F2:3E:52:5A:03:F4:FF:68:53:D6:F6 Certificate issuer: /CN=574537d54f36f142231bc817038872cb607b21e7 Certificate serial: 019B2D07E05E60B4D4D14548629163F2D3C2 Authority key identifier: 57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/YnXiOZFn5_Ti8j5SWgP0_2hT1vY.roa Signing time: Wed 17 Dec 2025 15:57:29 +0000 ROA not before: Wed 17 Dec 2025 15:57:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15600 IP address blocks: 5.44.112.0/20 maxlen: 20 31.193.208.0/21 maxlen: 24 37.35.120.0/21 maxlen: 21 62.204.96.0/19 maxlen: 19 65.18.128.0/18 maxlen: 18 77.111.228.0/22 maxlen: 22 80.208.128.0/18 maxlen: 24 89.236.128.0/18 maxlen: 24 95.174.224.0/19 maxlen: 19 109.106.44.0/22 maxlen: 22 109.106.48.0/20 maxlen: 20 138.248.48.0/20 maxlen: 20 139.178.0.0/18 maxlen: 24 145.40.224.0/19 maxlen: 19 185.74.108.0/22 maxlen: 22 212.60.32.0/19 maxlen: 24 213.221.192.0/18 maxlen: 24 2001:1a88::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:07:e0:5e:60:b4:d4:d1:45:48:62:91:63:f2:d3:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=574537d54f36f142231bc817038872cb607b21e7 Validity Not Before: Dec 17 15:57:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6275e2399167e7f4e2f23e525a03f4ff6853d6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:13:d1:3c:22:70:30:5c:2b:4a:10:cc:74:44: d1:80:12:34:66:5e:ec:7c:87:2b:2a:86:ff:b7:f9: 0d:5b:21:59:6e:f5:3f:44:f6:78:49:2b:2c:ce:c6: f5:9a:4a:11:27:95:d6:b2:7f:ee:b4:c6:ea:53:6a: 53:4d:39:01:49:3b:a6:25:e9:16:ed:81:73:84:f1: 1f:a6:f5:fc:0d:c9:ca:31:c1:62:3d:be:2d:8a:90: 79:22:54:a4:9b:8e:2c:c0:f0:60:74:50:7d:be:f2: a2:fe:f7:f8:d2:60:67:bd:7a:48:74:fe:26:6d:68: 9d:8f:c2:5a:b5:8e:20:35:ad:2c:02:13:b4:89:ae: 73:c1:83:db:d6:18:a3:46:cb:78:95:06:52:09:f8: ee:28:21:48:ff:f6:6d:39:4a:75:65:93:62:87:27: 00:84:a8:8c:bd:9c:60:d5:1a:82:1f:f6:df:8b:25: d5:73:20:09:80:7b:b0:0e:3a:4c:99:98:9d:2d:1e: 62:1f:88:08:ca:74:7d:cc:92:3b:17:6c:19:c9:d9: a1:c3:15:23:cf:f0:01:75:42:a9:87:dc:60:71:c4: 80:55:46:e6:4a:30:ec:3c:7d:ce:cd:05:62:ef:ae: 4c:84:57:9c:49:20:ae:a1:3a:16:d3:1a:b3:83:66: 59:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:75:E2:39:91:67:E7:F4:E2:F2:3E:52:5A:03:F4:FF:68:53:D6:F6 X509v3 Authority Key Identifier: keyid:57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/YnXiOZFn5_Ti8j5SWgP0_2hT1vY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.44.112.0/20 31.193.208.0/21 37.35.120.0/21 62.204.96.0/19 65.18.128.0/18 77.111.228.0/22 80.208.128.0/18 89.236.128.0/18 95.174.224.0/19 109.106.44.0-109.106.63.255 138.248.48.0/20 139.178.0.0/18 145.40.224.0/19 185.74.108.0/22 212.60.32.0/19 213.221.192.0/18 IPv6: 2001:1a88::/29 Signature Algorithm: sha256WithRSAEncryption a0:39:1c:3a:0f:ea:c7:6b:be:11:92:27:c5:0b:56:59:0b:fe: b0:22:51:bc:76:9e:19:8f:c2:c4:ca:02:10:f2:76:40:77:57: ed:f5:9f:a1:c6:b3:c1:11:49:4b:58:59:53:c8:d9:12:b0:de: 27:b7:e7:46:6c:e3:b2:a9:77:ff:56:a9:47:8b:f1:57:bc:db: 24:60:6f:d7:47:c9:6f:ae:ff:9a:c7:c6:e4:fb:ac:ae:90:e1: 02:c5:76:c6:09:9e:b9:83:76:21:de:0c:7e:40:2b:7e:98:22: b3:d1:95:34:69:bf:42:d4:10:92:66:f4:4d:d4:42:ac:f9:62: c5:89:6c:2b:cb:78:8b:d6:85:4e:ed:6f:10:81:06:8d:5b:23: 65:f8:41:31:49:63:fd:c1:b9:f0:8e:29:89:91:1c:50:5d:57: d3:0c:c1:9a:13:13:32:f3:53:72:3f:2d:bd:75:c3:00:73:2e: 47:07:7c:6f:64:b4:e4:9c:af:d1:40:d0:a7:77:0b:eb:99:ec: 97:a4:62:c3:be:e9:24:70:45:94:ef:cc:ac:6a:27:90:df:44: c5:2c:9f:a1:50:6d:10:a3:38:a0:46:f2:a7:61:8e:78:77:97: b9:ba:47:5b:bb:92:16:6a:17:92:80:32:76:c5:d9:c7:4a:86: 17:1b:70:91 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgISAZstB+BeYLTU0UVIYpFj8tPCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NDUzN2Q1NGYzNmYxNDIyMzFiYzgxNzAzODg3MmNiNjA3 YjIxZTcwHhcNMjUxMjE3MTU1NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Mjc1ZTIzOTkxNjdlN2Y0ZTJmMjNlNTI1YTAzZjRmZjY4NTNkNmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBPRPCJwMFwrShDMdETRgBI0Zl7s fIcrKob/t/kNWyFZbvU/RPZ4SSsszsb1mkoRJ5XWsn/utMbqU2pTTTkBSTumJekW 7YFzhPEfpvX8DcnKMcFiPb4tipB5IlSkm44swPBgdFB9vvKi/vf40mBnvXpIdP4m bWidj8JatY4gNa0sAhO0ia5zwYPb1hijRst4lQZSCfjuKCFI//ZtOUp1ZZNihycA hKiMvZxg1RqCH/bfiyXVcyAJgHuwDjpMmZidLR5iH4gIynR9zJI7F2wZydmhwxUj z/ABdUKph9xgccSAVUbmSjDsPH3OzQVi765MhFecSSCuoToW0xqzg2ZZbQIDAQAB o4ICfDCCAngwHQYDVR0OBBYEFGJ14jmRZ+f04vI+UloD9P9oU9b2MB8GA1UdIwQY MBaAFFdFN9VPNvFCIxvIFwOIcstgeyHnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mZGQyNWQtYzAzNC00OWYzLTg5MGQt NGI4OWQzNzc4MDhlLzEvWW5YaU9aRm41X1RpOGo1U1dnUDBfMmhUMXZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9mZGQyNWQtYzAzNC00OWYzLTg5MGQtNGI4OWQzNzc4MDhl LzEvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGRBggrBgEFBQcBBwEB/wSBgTB/MG4EAgABMGgDBAQFLHAD BAMfwdADBAMlI3gDBAU+zGADBAZBEoADBAJNb+QDBAZQ0IADBAZZ7IADBAVfruAw DAMEAm1qLAMEBm1qAAMEBIr4MAMEBouyAAMEBZEo4AMEArlKbAMEBdQ8IAMEBtXd wDANBAIAAjAHAwUDIAEaiDANBgkqhkiG9w0BAQsFAAOCAQEAoDkcOg/qx2u+EZIn xQtWWQv+sCJRvHaeGY/CxMoCEPJ2QHdX7fWfocazwRFJS1hZU8jZErDeJ7fnRmzj sql3/1apR4vxV7zbJGBv10fJb67/msfG5PusrpDhAsV2xgmeuYN2Id4MfkArfpgi s9GVNGm/QtQQkmb0TdRCrPlixYlsK8t4i9aFTu1vEIEGjVsjZfhBMUlj/cG58I4p iZEcUF1X0wzBmhMTMvNTcj8tvXXDAHMuRwd8b2S05Jyv0UDQp3cL65nsl6Riw77p JHBFlO/MrGonkN9ExSyfoVBtEKM4oEbyp2GOeHeXubpHW7uSFmoXkoAydsXZx0qG FxtwkQ== -----END CERTIFICATE-----Generated at Thu Dec 18 21:25:29 2025 by rpki-client