This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Yya9BCiMiFzKZN_sDsecVVDi2Zk.roa File: Yya9BCiMiFzKZN_sDsecVVDi2Zk.roa (raw, json) Hash identifier: UhT9NHaGPP2E68wfERtie4Og2VNV+Hbwcvvn4QjWbxs= Subject key identifier: 63:26:BD:04:28:8C:88:5C:CA:64:DF:EC:0E:C7:9C:55:50:E2:D9:99 Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1 Certificate serial: 019B2D0D60330ACA525AC197110A84F4B27A Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Yya9BCiMiFzKZN_sDsecVVDi2Zk.roa Signing time: Wed 17 Dec 2025 16:03:29 +0000 ROA not before: Wed 17 Dec 2025 16:03:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 397477 IP address blocks: 193.33.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0d:60:33:0a:ca:52:5a:c1:97:11:0a:84:f4:b2:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1 Validity Not Before: Dec 17 16:03:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6326bd04288c885cca64dfec0ec79c5550e2d999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:dc:46:84:fb:1e:5f:1a:7a:8a:01:76:ba:c6: ef:5a:9d:95:ca:de:c9:68:5e:a4:1c:d6:4d:b0:44: d0:0a:ce:94:cf:ae:a5:eb:18:ff:46:3b:0a:bc:46: 59:bf:b5:06:08:85:1b:aa:6d:95:35:f0:f4:ae:19: 43:75:c1:15:a2:ad:6d:56:a2:9d:79:a6:67:e2:c8: 54:2b:47:5a:1a:b5:f3:59:5a:98:46:1f:63:fa:25: 5c:c5:d4:7b:f4:9c:98:5a:b7:7a:e1:03:55:e3:7a: 9a:70:c7:51:5f:76:27:c8:0c:4f:d2:c1:f1:b5:8f: e9:24:1d:c9:b1:1d:eb:d3:2b:34:a1:5a:b6:6b:9e: 79:5f:73:6c:3b:4c:d0:61:7d:43:4e:c7:c9:60:81: 30:7c:6e:1d:79:de:65:57:76:f2:17:31:42:0e:01: 5c:b5:c0:e3:c0:c2:f7:54:a3:5a:8f:2a:72:f8:ff: 5f:3e:48:cc:5a:b7:56:27:e3:35:a0:bf:42:97:4a: 64:f1:6a:f1:d6:1a:1e:c8:bb:c2:82:36:a2:04:53: 68:3c:b6:d9:50:9c:29:1b:32:33:61:5e:28:4a:eb: b4:ff:5f:6e:f0:c4:8b:19:d3:bc:bd:48:9e:2a:c5: f5:a4:65:39:f8:12:77:4c:aa:0a:6d:7e:23:45:77: 80:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:26:BD:04:28:8C:88:5C:CA:64:DF:EC:0E:C7:9C:55:50:E2:D9:99 X509v3 Authority Key Identifier: keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Yya9BCiMiFzKZN_sDsecVVDi2Zk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.33.236.0/23 Signature Algorithm: sha256WithRSAEncryption 63:3d:5a:56:6e:4f:bf:20:09:8e:17:e4:71:7b:b7:4c:dc:13: 05:68:d4:12:d6:3e:01:7a:e4:09:46:a1:07:99:14:ea:ee:25: f2:d4:04:65:f2:7f:72:b5:71:c0:5c:86:4f:7f:93:74:26:5b: 38:d4:3c:3e:60:99:a6:a5:9b:36:f8:0d:19:a2:4a:eb:f1:3c: 0d:4f:fa:7d:f4:2a:cc:f7:35:35:e0:09:be:1d:3c:02:5e:2d: a6:01:ab:20:f1:63:5a:13:11:a2:45:95:67:84:28:20:0f:74: 40:52:00:5d:8a:f2:72:1f:f4:79:00:7e:59:5b:06:45:33:78: 33:ce:67:44:4a:50:40:5d:5e:f2:96:2f:73:bb:91:4a:e9:31: f4:b9:cf:cb:78:b2:24:e1:d1:a3:8a:82:77:b6:54:60:97:56: 68:b9:e8:d3:f2:e7:bf:96:74:7b:b8:af:4d:5c:1a:23:05:37: 9b:52:58:70:30:ef:bb:ac:6b:4c:d0:cb:84:00:dc:b8:c8:fe: be:67:8d:eb:75:43:6b:25:59:79:fa:25:79:39:98:37:7e:25: cc:69:17:41:c7:48:fc:93:11:c9:b9:80:af:a1:6b:4d:59:62: 5c:22:36:1b:40:b9:6f:bd:01:63:c3:4e:14:b6:22:e0:cc:ad: e9:62:dd:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZstDWAzCspSWsGXEQqE9LJ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MWNiNTFjYmE2OGViN2VmOTg2N2E3NWQxN2FiMjgwMTgx OTZhYTEwHhcNMjUxMjE3MTYwMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzI2YmQwNDI4OGM4ODVjY2E2NGRmZWMwZWM3OWM1NTUwZTJkOTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitxGhPseXxp6igF2usbvWp2Vyt7J aF6kHNZNsETQCs6Uz66l6xj/RjsKvEZZv7UGCIUbqm2VNfD0rhlDdcEVoq1tVqKd eaZn4shUK0daGrXzWVqYRh9j+iVcxdR79JyYWrd64QNV43qacMdRX3YnyAxP0sHx tY/pJB3JsR3r0ys0oVq2a555X3NsO0zQYX1DTsfJYIEwfG4ded5lV3byFzFCDgFc tcDjwML3VKNajypy+P9fPkjMWrdWJ+M1oL9Cl0pk8Wrx1hoeyLvCgjaiBFNoPLbZ UJwpGzIzYV4oSuu0/19u8MSLGdO8vUieKsX1pGU5+BJ3TKoKbX4jRXeAzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGMmvQQojIhcymTf7A7HnFVQ4tmZMB8GA1UdIwQY MBaAFFcctRy6aOt++YZ6ddF6soAYGWqhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3Yzkt ZGQ4NjI3NzRhMDkyLzEvWXlhOUJDaU1pRnpLWk5fc0RzZWNWVkRpMlprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3YzktZGQ4NjI3NzRhMDky LzEvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwSHsMA0G CSqGSIb3DQEBCwUAA4IBAQBjPVpWbk+/IAmOF+Rxe7dM3BMFaNQS1j4BeuQJRqEH mRTq7iXy1ARl8n9ytXHAXIZPf5N0Jls41Dw+YJmmpZs2+A0Zokrr8TwNT/p99CrM 9zU14Am+HTwCXi2mAasg8WNaExGiRZVnhCggD3RAUgBdivJyH/R5AH5ZWwZFM3gz zmdESlBAXV7yli9zu5FK6TH0uc/LeLIk4dGjioJ3tlRgl1ZouejT8ue/lnR7uK9N XBojBTebUlhwMO+7rGtM0MuEANy4yP6+Z43rdUNrJVl5+iV5OZg3fiXMaRdBx0j8 kxHJuYCvoWtNWWJcIjYbQLlvvQFjw04UtiLgzK3pYt3w -----END CERTIFICATE-----Generated at Wed Dec 17 20:07:36 2025 by rpki-client