This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/yGqpoxBOGwWWERasdXjLwnXTwu0.roa File: yGqpoxBOGwWWERasdXjLwnXTwu0.roa (raw, json) Hash identifier: uw+7fBYytltK3lC5PIgrZJa/BQsnlQE3+RirX4EJGUA= Subject key identifier: C8:6A:A9:A3:10:4E:1B:05:96:11:16:AC:75:78:CB:C2:75:D3:C2:ED Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019B07A2368A12529D281A7CA20CC3255D39 Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/yGqpoxBOGwWWERasdXjLwnXTwu0.roa Signing time: Wed 10 Dec 2025 09:40:29 +0000 ROA not before: Wed 10 Dec 2025 09:40:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200740 IP address blocks: 89.44.84.0/23 maxlen: 23 91.200.14.0/24 maxlen: 24 91.200.15.0/24 maxlen: 24 95.81.77.0/24 maxlen: 24 95.81.93.0/24 maxlen: 24 95.81.94.0/23 maxlen: 23 95.81.112.0/24 maxlen: 24 95.81.113.0/24 maxlen: 24 95.81.119.0/24 maxlen: 24 95.81.120.0/24 maxlen: 24 103.85.112.0/24 maxlen: 24 103.85.113.0/24 maxlen: 24 103.249.132.0/23 maxlen: 23 103.249.134.0/23 maxlen: 23 104.128.142.0/23 maxlen: 23 104.128.142.0/24 maxlen: 24 104.128.143.0/24 maxlen: 24 109.69.56.0/23 maxlen: 23 109.69.58.0/23 maxlen: 23 185.103.252.0/23 maxlen: 23 185.103.254.0/23 maxlen: 23 2a0c:5d00:3002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 05:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:a2:36:8a:12:52:9d:28:1a:7c:a2:0c:c3:25:5d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Dec 10 09:40:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c86aa9a3104e1b05961116ac7578cbc275d3c2ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:db:71:76:46:3d:38:00:c0:53:a3:ce:ba:52: f4:ca:c5:0e:12:13:3f:8e:4c:6c:85:04:8b:d8:5e: 49:6e:ab:92:64:6c:3a:b6:74:84:02:8f:bd:9f:fc: aa:43:ae:ba:03:e6:6b:6e:bc:65:ad:8a:27:5d:e5: a4:05:e8:f8:da:60:20:6d:ac:9a:03:fc:ed:43:1c: 49:33:37:e1:ea:d9:f4:48:db:0d:34:58:a0:51:f4: 8a:54:f3:e4:cf:f7:44:5e:4e:2f:41:c7:d7:05:fb: e3:22:ea:a5:75:ed:f4:38:da:22:2e:72:26:03:a5: 52:c7:38:c7:83:4c:ba:f4:ac:1f:e1:d0:1b:cb:09: 4e:c8:a6:6d:c5:0b:75:37:5e:da:c1:a7:c3:b5:f6: 15:6a:e9:2f:cb:2f:06:80:74:dd:9a:c3:24:c8:f7: 05:e3:d7:75:4e:3b:d7:cb:28:7b:db:6a:1f:ad:03: e4:e0:6e:bd:6f:3a:37:da:34:5d:64:6f:71:9f:9b: 74:91:a3:7f:9c:9a:ed:23:92:82:ab:99:ab:4e:1f: 78:7d:f9:33:23:a3:21:8d:c0:ea:20:ab:d6:82:06: df:14:41:cb:71:58:39:7a:ee:65:01:77:ba:89:ea: 4d:8f:e8:d5:05:a1:d3:e5:32:08:ad:7a:d9:2f:f9: d5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:6A:A9:A3:10:4E:1B:05:96:11:16:AC:75:78:CB:C2:75:D3:C2:ED X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/yGqpoxBOGwWWERasdXjLwnXTwu0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.44.84.0/23 91.200.14.0/23 95.81.77.0/24 95.81.93.0-95.81.95.255 95.81.112.0/23 95.81.119.0-95.81.120.255 103.85.112.0/23 103.249.132.0/22 104.128.142.0/23 109.69.56.0/22 185.103.252.0/22 IPv6: 2a0c:5d00:3002::/48 Signature Algorithm: sha256WithRSAEncryption 52:16:91:58:95:bc:52:84:16:43:c8:9a:80:70:b7:26:c3:21: f4:79:8b:01:37:ca:c1:1d:48:53:08:d8:92:6b:76:2e:95:0a: cc:23:a7:aa:c8:ad:c0:e1:d9:4a:c7:29:ee:32:de:3f:18:7e: 53:32:9e:99:dc:af:e1:98:6e:51:cd:17:d0:af:86:92:08:9a: 0a:32:b7:4c:a2:35:05:31:6d:e9:cc:f1:bc:2b:82:7b:42:30: 0c:be:7b:5a:ff:b9:56:85:f8:77:31:cb:50:30:2f:3d:99:a8: 86:f9:1a:53:bd:74:cb:d4:11:ed:91:78:1a:72:45:57:47:b5: 99:0e:7a:ba:36:75:d2:f6:2b:28:47:01:66:8c:79:e2:59:ec: b1:8b:cc:21:69:4a:0d:d2:70:40:c7:3c:59:71:2b:a2:76:fc: 3f:43:db:e8:ef:86:ee:32:54:96:2f:b7:d5:da:1f:06:a4:1c: 89:b8:af:20:33:63:bf:36:3b:e0:e0:86:66:b6:2b:73:de:c8: 7c:f8:76:1b:e9:36:08:3c:40:61:80:6c:e8:b0:44:df:07:1e: c9:9c:ba:ac:69:b5:fd:61:db:ed:08:6c:15:83:a1:33:65:68: f7:d9:ed:f7:ba:ed:c8:13:b1:12:70:df:e9:ac:62:e2:4e:dd: d5:de:45:d5 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgISAZsHojaKElKdKBp8ogzDJV05MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjUxMjEwMDk0MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODZhYTlhMzEwNGUxYjA1OTYxMTE2YWM3NTc4Y2JjMjc1ZDNjMmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49txdkY9OADAU6POulL0ysUOEhM/ jkxshQSL2F5JbquSZGw6tnSEAo+9n/yqQ666A+ZrbrxlrYonXeWkBej42mAgbaya A/ztQxxJMzfh6tn0SNsNNFigUfSKVPPkz/dEXk4vQcfXBfvjIuqlde30ONoiLnIm A6VSxzjHg0y69Kwf4dAbywlOyKZtxQt1N17awafDtfYVaukvyy8GgHTdmsMkyPcF 49d1TjvXyyh722ofrQPk4G69bzo32jRdZG9xn5t0kaN/nJrtI5KCq5mrTh94ffkz I6MhjcDqIKvWggbfFEHLcVg5eu5lAXe6iepNj+jVBaHT5TIIrXrZL/nVGwIDAQAB o4ICZjCCAmIwHQYDVR0OBBYEFMhqqaMQThsFlhEWrHV4y8J108LtMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEveUdxcG94Qk9Hd1dXRVJhc2RYakx3blhUd3UwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEHAQH/BG0wazBYBAIAATBSAwQBWSxUAwQB W8gOAwQAX1FNMAwDBABfUV0DBAVfUUADBAFfUXAwDAMEAF9RdwMEAF9ReAMEAWdV cAMEAmf5hAMEAWiAjgMEAm1FOAMEArln/DAPBAIAAjAJAwcAKgxdADACMA0GCSqG SIb3DQEBCwUAA4IBAQBSFpFYlbxShBZDyJqAcLcmwyH0eYsBN8rBHUhTCNiSa3Yu lQrMI6eqyK3A4dlKxynuMt4/GH5TMp6Z3K/hmG5RzRfQr4aSCJoKMrdMojUFMW3p zPG8K4J7QjAMvnta/7lWhfh3MctQMC89maiG+RpTvXTL1BHtkXgackVXR7WZDnq6 NnXS9isoRwFmjHniWeyxi8whaUoN0nBAxzxZcSuidvw/Q9vo74buMlSWL7fV2h8G pByJuK8gM2O/Njvg4IZmtitz3sh8+HYb6TYIPEBhgGzosETfBx7JnLqsabX9Ydvt CGwVg6EzZWj32e33uu3IE7EScN/prGLiTt3V3kXV -----END CERTIFICATE-----Generated at Wed Dec 17 14:32:20 2025 by rpki-client