This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YeLKm_lT_dKMeIT-QGaICCviVJ8.roa File: YeLKm_lT_dKMeIT-QGaICCviVJ8.roa (raw, json) Hash identifier: ykyfeVKqoyach5xgLxjjYf4/Seril0o5aVK+R26aUgU= Subject key identifier: 61:E2:CA:9B:F9:53:FD:D2:8C:78:84:FE:40:66:88:08:2B:E2:54:9F Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B1210CEE90060DB2782FC50A47AEA4C0C Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YeLKm_lT_dKMeIT-QGaICCviVJ8.roa Signing time: Fri 12 Dec 2025 10:17:29 +0000 ROA not before: Fri 12 Dec 2025 10:17:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 62.76.227.0/24 maxlen: 24 185.72.10.0/24 maxlen: 24 192.124.190.0/24 maxlen: 24 193.124.4.0/24 maxlen: 24 193.124.7.0/24 maxlen: 24 193.124.89.0/24 maxlen: 24 193.124.226.0/24 maxlen: 24 194.58.58.0/24 maxlen: 24 194.58.155.0/24 maxlen: 24 194.58.223.0/24 maxlen: 24 194.87.33.0/24 maxlen: 24 194.87.52.0/24 maxlen: 24 194.87.53.0/24 maxlen: 24 194.87.59.0/24 maxlen: 24 194.87.75.0/24 maxlen: 24 194.87.78.0/24 maxlen: 24 194.87.119.0/24 maxlen: 24 194.87.136.0/24 maxlen: 24 194.87.169.0/24 maxlen: 24 194.87.179.0/24 maxlen: 24 194.87.193.0/24 maxlen: 24 194.87.194.0/24 maxlen: 24 194.87.195.0/24 maxlen: 24 194.87.228.0/24 maxlen: 24 194.87.229.0/24 maxlen: 24 194.87.231.0/24 maxlen: 24 194.135.24.0/24 maxlen: 24 195.133.19.0/24 maxlen: 24 195.133.24.0/23 maxlen: 23 195.133.29.0/24 maxlen: 24 195.133.35.0/24 maxlen: 24 195.133.40.0/23 maxlen: 23 195.133.50.0/23 maxlen: 23 195.133.57.0/24 maxlen: 24 195.133.58.0/24 maxlen: 24 195.133.92.0/23 maxlen: 23 212.192.241.0/24 maxlen: 24 212.192.242.0/24 maxlen: 24 212.192.249.0/24 maxlen: 24 212.193.0.0/24 maxlen: 24 212.193.26.0/23 maxlen: 23 2a01:57c0::/29 maxlen: 29 2a0c:ff40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:25:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:10:ce:e9:00:60:db:27:82:fc:50:a4:7a:ea:4c:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Dec 12 10:17:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=61e2ca9bf953fdd28c7884fe406688082be2549f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:cc:d9:aa:1c:83:83:ca:ed:76:e1:cf:ae:8d: 0f:28:5e:af:d7:3e:bd:04:9a:2d:6f:d2:c4:3b:e1: 39:96:ab:5d:13:eb:63:5d:c9:71:f0:89:bf:38:9d: fc:0f:02:d8:5d:77:b5:d2:48:07:d7:ba:a9:89:f4: 2b:66:8d:38:8b:79:13:49:cb:32:3d:fd:68:2d:72: b6:ef:b1:4d:96:09:81:2c:49:9d:19:00:96:37:d8: bb:d0:70:7d:2b:73:e6:a7:f4:02:46:b7:1c:d7:10: f6:69:a6:0b:3e:68:d6:64:b6:57:e7:2e:77:92:12: ef:8e:be:29:72:9a:75:d8:16:cb:74:ab:a6:bb:10: 45:0d:27:0c:6e:6d:2c:9c:36:b3:8d:a0:ab:07:10: fe:58:81:74:09:6b:ab:d2:25:71:e8:dc:4f:5f:0a: 2f:92:f4:14:de:51:cd:47:1f:ee:86:59:46:63:9a: d2:ee:a2:2a:1c:81:fc:2d:22:fa:ab:1b:0f:9d:02: 8e:82:c6:38:9e:ed:48:ff:aa:01:02:3e:12:25:22: 28:e1:3d:92:ee:b3:7d:34:ce:d2:ef:a3:70:f0:ac: a5:f0:f3:34:6b:23:d9:96:8d:40:e3:15:98:c8:39: 43:71:5b:4f:46:7d:82:69:c8:6c:b0:db:72:98:4c: 3a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:E2:CA:9B:F9:53:FD:D2:8C:78:84:FE:40:66:88:08:2B:E2:54:9F X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YeLKm_lT_dKMeIT-QGaICCviVJ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.76.227.0/24 185.72.10.0/24 192.124.190.0/24 193.124.4.0/24 193.124.7.0/24 193.124.89.0/24 193.124.226.0/24 194.58.58.0/24 194.58.155.0/24 194.58.223.0/24 194.87.33.0/24 194.87.52.0/23 194.87.59.0/24 194.87.75.0/24 194.87.78.0/24 194.87.119.0/24 194.87.136.0/24 194.87.169.0/24 194.87.179.0/24 194.87.193.0-194.87.195.255 194.87.228.0/23 194.87.231.0/24 194.135.24.0/24 195.133.19.0/24 195.133.24.0/23 195.133.29.0/24 195.133.35.0/24 195.133.40.0/23 195.133.50.0/23 195.133.57.0-195.133.58.255 195.133.92.0/23 212.192.241.0-212.192.242.255 212.192.249.0/24 212.193.0.0/24 212.193.26.0/23 IPv6: 2a01:57c0::/29 2a0c:ff40::/29 Signature Algorithm: sha256WithRSAEncryption 44:f8:5c:02:3c:6d:a7:44:16:f3:bf:b7:d6:b0:66:ed:ca:d0: e9:eb:3b:f5:91:f9:99:4c:ca:63:15:a5:7c:80:eb:10:24:b9: 46:41:50:04:b1:e2:79:ba:62:03:eb:e2:2c:50:1c:55:20:85: d1:ad:cf:6b:df:85:f2:16:a6:f8:5b:fd:83:e9:3e:cc:50:40: de:9f:72:08:0f:f4:22:e3:fb:d2:0e:c4:ea:88:0d:bd:e7:f0: 44:32:37:67:42:d2:83:8f:e0:9b:32:67:4e:7f:aa:d4:40:59: a0:e6:e5:7b:20:e6:db:69:cf:5a:85:37:01:53:d7:25:23:5e: cb:55:5e:43:9b:66:bd:01:b6:36:46:e7:1a:7c:d9:b6:3c:2e: ae:dd:c5:a1:a2:9f:f3:c8:01:93:15:e2:93:11:02:11:b3:c5: c7:8e:ec:7d:30:34:61:51:f2:ee:0f:dd:8c:3a:b8:d8:a2:57: 03:d4:ee:2c:2b:ef:18:29:fe:5b:97:29:7a:a4:66:3a:13:ab: 22:2f:92:b1:9c:83:e2:2c:02:79:67:bd:b9:ed:8e:6b:da:3a: 56:23:44:5e:a5:c5:fc:b0:3b:42:45:9b:e4:94:54:db:f6:8f: 54:6e:9b:21:d4:84:52:3e:18:2e:25:2f:b6:c4:f8:26:da:ee: 08:0d:15:14 -----BEGIN CERTIFICATE----- MIIF/zCCBOegAwIBAgISAZsSEM7pAGDbJ4L8UKR66kwMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjUxMjEyMTAxNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWUyY2E5YmY5NTNmZGQyOGM3ODg0ZmU0MDY2ODgwODJiZTI1NDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5szZqhyDg8rtduHPro0PKF6v1z69 BJotb9LEO+E5lqtdE+tjXclx8Im/OJ38DwLYXXe10kgH17qpifQrZo04i3kTScsy Pf1oLXK277FNlgmBLEmdGQCWN9i70HB9K3Pmp/QCRrcc1xD2aaYLPmjWZLZX5y53 khLvjr4pcpp12BbLdKumuxBFDScMbm0snDazjaCrBxD+WIF0CWur0iVx6NxPXwov kvQU3lHNRx/uhllGY5rS7qIqHIH8LSL6qxsPnQKOgsY4nu1I/6oBAj4SJSIo4T2S 7rN9NM7S76Nw8Kyl8PM0ayPZlo1A4xWYyDlDcVtPRn2CachssNtymEw6nQIDAQAB o4IDCzCCAwcwHQYDVR0OBBYEFGHiypv5U/3SjHiE/kBmiAgr4lSfMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvWWVMS21fbFRfZEtNZUlULVFHYUlDQ3ZpVko4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBHwYIKwYBBQUHAQcBAf8EggEOMIIBCjCB8QQCAAEwgeoD BAA+TOMDBAC5SAoDBADAfL4DBADBfAQDBADBfAcDBADBfFkDBADBfOIDBADCOjoD BADCOpsDBADCOt8DBADCVyEDBAHCVzQDBADCVzsDBADCV0sDBADCV04DBADCV3cD BADCV4gDBADCV6kDBADCV7MwDAMEAMJXwQMEAsJXwAMEAcJX5AMEAMJX5wMEAMKH GAMEAMOFEwMEAcOFGAMEAMOFHQMEAMOFIwMEAcOFKAMEAcOFMjAMAwQAw4U5AwQA w4U6AwQBw4VcMAwDBADUwPEDBADUwPIDBADUwPkDBADUwQADBAHUwRowFAQCAAIw DgMFAyoBV8ADBQMqDP9AMA0GCSqGSIb3DQEBCwUAA4IBAQBE+FwCPG2nRBbzv7fW sGbtytDp6zv1kfmZTMpjFaV8gOsQJLlGQVAEseJ5umID6+IsUBxVIIXRrc9r34Xy Fqb4W/2D6T7MUEDen3IID/Qi4/vSDsTqiA295/BEMjdnQtKDj+CbMmdOf6rUQFmg 5uV7IObbac9ahTcBU9clI17LVV5Dm2a9AbY2RucafNm2PC6u3cWhop/zyAGTFeKT EQIRs8XHjux9MDRhUfLuD92MOrjYolcD1O4sK+8YKf5blyl6pGY6E6siL5KxnIPi LAJ5Z7257Y5r2jpWI0RepcX8sDtCRZvklFTb9o9Ubpsh1IRSPhguJS+2xPgm2u4I DRUU -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:44 2025 by rpki-client