This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/yP2PwxyE3TQPg2qxWYhpMqN9JU0.roa File: yP2PwxyE3TQPg2qxWYhpMqN9JU0.roa (raw, json) Hash identifier: YcmMq4Dbq1MbTv0BNqcdqm0wVRn+J3BQcq+ugockK/8= Subject key identifier: C8:FD:8F:C3:1C:84:DD:34:0F:83:6A:B1:59:88:69:32:A3:7D:25:4D Certificate issuer: /CN=706745ad92353da8a80cb2e0d229d68c2ef53db2 Certificate serial: 019B2C05E4660E1FC126B4F3C10A64D5B2E2 Authority key identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/yP2PwxyE3TQPg2qxWYhpMqN9JU0.roa Signing time: Wed 17 Dec 2025 11:15:42 +0000 ROA not before: Wed 17 Dec 2025 11:15:42 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57043 IP address blocks: 185.133.173.0/24 maxlen: 24 185.133.174.0/24 maxlen: 24 185.133.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:05:e4:66:0e:1f:c1:26:b4:f3:c1:0a:64:d5:b2:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706745ad92353da8a80cb2e0d229d68c2ef53db2 Validity Not Before: Dec 17 11:15:42 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c8fd8fc31c84dd340f836ab159886932a37d254d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c8:a4:6f:85:8a:a7:25:9f:d7:4c:06:eb:c5: 72:72:06:8e:63:9d:b2:48:d5:bd:52:3d:73:48:4c: 52:f8:c9:d3:13:d2:32:14:54:c8:36:26:b1:69:f4: 12:39:d3:da:a5:19:20:a6:d6:f0:e0:cb:a8:92:53: 97:ca:20:94:bf:95:63:45:97:f4:c1:47:42:13:02: 8a:81:5c:2f:08:2c:04:5c:46:1b:d2:3e:21:33:6a: 5d:69:67:b4:0f:e1:0a:d9:67:51:d8:6c:82:71:8f: 16:f0:b2:d6:00:7a:92:f1:6e:85:9f:e3:78:30:56: 86:17:8b:da:8d:c3:55:af:ca:a2:37:18:47:fb:5f: 2e:31:92:86:2f:bc:43:06:16:f5:96:0f:24:b6:96: ed:81:69:d0:a1:e3:13:fc:13:3d:ca:c5:88:ff:cb: 10:3d:22:26:91:1d:1d:e5:cb:dd:7d:35:c5:58:3b: d0:18:62:d4:4e:0f:69:d7:bd:0c:2f:1f:19:ad:42: 9d:8e:97:53:87:da:43:bc:3d:21:1a:78:b7:61:10: df:d0:39:c6:3d:59:7d:59:58:50:50:1b:16:93:f6: aa:05:b5:64:db:50:7f:dd:00:96:c5:49:07:c5:c9: e6:ac:69:f9:5a:03:ff:62:db:4c:76:63:7c:10:16: 19:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FD:8F:C3:1C:84:DD:34:0F:83:6A:B1:59:88:69:32:A3:7D:25:4D X509v3 Authority Key Identifier: keyid:70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/yP2PwxyE3TQPg2qxWYhpMqN9JU0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.173.0-185.133.175.255 Signature Algorithm: sha256WithRSAEncryption 88:d1:74:4f:89:c7:ec:9f:32:59:67:b4:91:73:42:9d:47:ca: 13:07:ce:6a:47:81:66:a9:9f:ff:56:68:dc:1e:f2:ef:29:d8: bc:f6:fb:78:4a:07:d6:57:f1:5e:0b:67:c3:9c:cf:50:fb:06: 3c:a9:3e:0b:dd:bd:f3:7e:d5:8e:cb:1e:1e:39:cd:ad:b2:cb: 35:47:47:bf:13:ec:f5:e3:b3:9d:c4:97:f0:9d:39:35:43:e9: 76:23:0e:a8:b1:4d:54:cf:ab:cc:32:74:c5:d9:69:f2:d2:c7: 3c:68:bc:2b:e2:b9:a8:3c:27:45:46:53:67:fc:6e:b0:ad:cd: a4:6f:b4:6a:d8:89:e9:0a:a9:92:ae:cc:9d:ec:a9:70:e1:12: 19:0d:f8:82:8e:05:c8:50:c8:79:36:d5:76:99:78:3d:d6:ab: ab:d9:b3:f0:f0:73:89:4e:3d:7b:4d:49:05:c1:ed:82:3e:2e: 4e:02:74:61:57:83:2c:24:66:3d:bf:c5:17:4a:25:b0:f0:58: d6:ca:31:31:70:33:1d:2b:21:86:72:e0:c4:b2:ae:f3:7f:56: a6:53:7c:18:6c:c2:84:5f:d7:71:8e:48:c5:91:4d:20:a8:82: 96:9e:0f:e4:a5:db:20:28:f3:ed:d8:b4:d0:e2:04:4e:83:1c: a8:3d:16:64 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZssBeRmDh/BJrTzwQpk1bLiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNjc0NWFkOTIzNTNkYThhODBjYjJlMGQyMjlkNjhjMmVm NTNkYjIwHhcNMjUxMjE3MTExNTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGZkOGZjMzFjODRkZDM0MGY4MzZhYjE1OTg4NjkzMmEzN2QyNTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksikb4WKpyWf10wG68VycgaOY52y SNW9Uj1zSExS+MnTE9IyFFTINiaxafQSOdPapRkgptbw4MuoklOXyiCUv5VjRZf0 wUdCEwKKgVwvCCwEXEYb0j4hM2pdaWe0D+EK2WdR2GyCcY8W8LLWAHqS8W6Fn+N4 MFaGF4vajcNVr8qiNxhH+18uMZKGL7xDBhb1lg8ktpbtgWnQoeMT/BM9ysWI/8sQ PSImkR0d5cvdfTXFWDvQGGLUTg9p170MLx8ZrUKdjpdTh9pDvD0hGni3YRDf0DnG PVl9WVhQUBsWk/aqBbVk21B/3QCWxUkHxcnmrGn5WgP/YttMdmN8EBYZJwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFMj9j8MchN00D4NqsVmIaTKjfSVNMB8GA1UdIwQY MBaAFHBnRa2SNT2oqAyy4NIp1owu9T2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTkt ZTIxNzYzYzY3MmZhLzEveVAyUHd4eUUzVFFQZzJxeFdZaHBNcU45SlUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTktZTIxNzYzYzY3MmZh LzEvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5ha0D BAS5haAwDQYJKoZIhvcNAQELBQADggEBAIjRdE+Jx+yfMllntJFzQp1HyhMHzmpH gWapn/9WaNwe8u8p2Lz2+3hKB9ZX8V4LZ8Ocz1D7BjypPgvdvfN+1Y7LHh45za2y yzVHR78T7PXjs53El/CdOTVD6XYjDqixTVTPq8wydMXZafLSxzxovCviuag8J0VG U2f8brCtzaRvtGrYiekKqZKuzJ3sqXDhEhkN+IKOBchQyHk21XaZeD3Wq6vZs/Dw c4lOPXtNSQXB7YI+Lk4CdGFXgywkZj2/xRdKJbDwWNbKMTFwMx0rIYZy4MSyrvN/ VqZTfBhswoRf13GOSMWRTSCogpaeD+Sl2yAo8+3YtNDiBE6DHKg9FmQ= -----END CERTIFICATE-----Generated at Fri Dec 19 22:50:04 2025 by rpki-client