This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yDW0tcBSYrWMIyQTWpILx5Dbn5E.roa File: yDW0tcBSYrWMIyQTWpILx5Dbn5E.roa (raw, json) Hash identifier: NK/ZQnyzGlC6QBkOiZSv7O8fGn+7m6JK9ftjBEjkzy8= Subject key identifier: C8:35:B4:B5:C0:52:62:B5:8C:23:24:13:5A:92:0B:C7:90:DB:9F:91 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B0309CCBCAB4FB1B42D00A584A49439A5 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yDW0tcBSYrWMIyQTWpILx5Dbn5E.roa Signing time: Tue 09 Dec 2025 12:15:32 +0000 ROA not before: Tue 09 Dec 2025 12:15:32 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 26383 IP address blocks: 62.76.232.0/24 maxlen: 24 62.76.234.0/24 maxlen: 24 62.76.238.0/24 maxlen: 24 62.76.239.0/24 maxlen: 24 192.124.175.0/24 maxlen: 24 192.124.176.0/24 maxlen: 24 192.124.209.0/24 maxlen: 24 193.108.112.0/24 maxlen: 24 193.124.2.0/24 maxlen: 24 193.124.22.0/24 maxlen: 24 193.124.41.0/24 maxlen: 24 193.124.46.0/24 maxlen: 24 194.58.38.0/24 maxlen: 24 194.58.39.0/24 maxlen: 24 194.58.40.0/24 maxlen: 24 194.58.59.0/24 maxlen: 24 194.58.66.0/24 maxlen: 24 194.58.68.0/24 maxlen: 24 194.87.2.0/24 maxlen: 24 194.87.10.0/24 maxlen: 24 194.87.17.0/24 maxlen: 24 194.87.18.0/24 maxlen: 24 194.87.23.0/24 maxlen: 24 194.87.30.0/24 maxlen: 24 194.87.39.0/24 maxlen: 24 194.87.41.0/24 maxlen: 24 194.87.47.0/24 maxlen: 24 194.87.48.0/24 maxlen: 24 194.87.58.0/24 maxlen: 24 194.87.73.0/24 maxlen: 24 194.87.82.0/24 maxlen: 24 194.87.89.0/24 maxlen: 24 194.87.105.0/24 maxlen: 24 194.87.106.0/24 maxlen: 24 194.87.108.0/24 maxlen: 24 194.87.123.0/24 maxlen: 24 194.87.125.0/24 maxlen: 24 194.87.128.0/24 maxlen: 24 194.87.137.0/24 maxlen: 24 194.87.162.0/24 maxlen: 24 194.87.178.0/24 maxlen: 24 194.87.198.0/24 maxlen: 24 194.87.227.0/24 maxlen: 24 194.87.230.0/24 maxlen: 24 194.87.240.0/24 maxlen: 24 194.87.245.0/24 maxlen: 24 195.58.47.0/24 maxlen: 24 195.133.55.0/24 maxlen: 24 195.133.67.0/24 maxlen: 24 195.133.83.0/24 maxlen: 24 195.133.92.0/24 maxlen: 24 212.192.221.0/24 maxlen: 24 212.192.223.0/24 maxlen: 24 212.193.1.0/24 maxlen: 24 212.193.2.0/24 maxlen: 24 212.193.6.0/24 maxlen: 24 212.193.18.0/24 maxlen: 24 212.193.20.0/24 maxlen: 24 212.193.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:09:cc:bc:ab:4f:b1:b4:2d:00:a5:84:a4:94:39:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Dec 9 12:15:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c835b4b5c05262b58c2324135a920bc790db9f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c3:2c:b4:e4:ea:52:92:eb:04:3f:bf:d3:c1: f2:82:9c:e0:84:a3:fe:f6:b2:2f:84:8c:a0:97:10: 4c:f8:f9:1f:e1:8c:d3:bd:c3:40:b2:79:e8:3f:21: 09:f4:89:d3:e7:9e:06:48:a1:98:7f:bc:b8:ae:36: 90:0e:9a:c6:08:23:25:41:e8:07:41:b1:9f:1f:b0: 1b:4f:e7:f6:ec:76:8f:3c:7b:02:67:82:e7:b1:24: 26:4d:5e:07:e0:e4:69:f4:bc:00:c5:4d:7c:cd:bc: eb:f6:23:6b:e3:ac:a0:ce:ca:03:d1:c0:37:6e:95: 68:b5:92:10:48:e3:02:9b:9b:c5:07:10:55:0f:17: 48:b9:5d:41:da:f0:62:22:a1:fd:9e:cc:b1:cb:09: 59:76:c4:4c:d3:77:6f:1a:eb:50:87:bd:4f:0c:1a: e2:e5:de:ac:3d:d3:5b:14:c3:6b:2a:89:77:d1:08: b8:42:f5:42:1e:b5:bf:1f:08:9a:53:1e:03:02:4d: 0d:b5:04:fb:60:d0:72:cc:57:0a:7e:8e:09:32:44: 88:7a:42:5b:8a:db:07:01:0a:5b:d1:64:9a:53:ab: ef:c4:25:5d:bd:c3:b1:44:5f:7f:06:92:9c:9f:81: 8d:9f:75:0d:96:fa:c3:10:7d:04:fa:5c:5f:ce:bb: 89:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:35:B4:B5:C0:52:62:B5:8C:23:24:13:5A:92:0B:C7:90:DB:9F:91 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yDW0tcBSYrWMIyQTWpILx5Dbn5E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.76.232.0/24 62.76.234.0/24 62.76.238.0/23 192.124.175.0-192.124.176.255 192.124.209.0/24 193.108.112.0/24 193.124.2.0/24 193.124.22.0/24 193.124.41.0/24 193.124.46.0/24 194.58.38.0-194.58.40.255 194.58.59.0/24 194.58.66.0/24 194.58.68.0/24 194.87.2.0/24 194.87.10.0/24 194.87.17.0-194.87.18.255 194.87.23.0/24 194.87.30.0/24 194.87.39.0/24 194.87.41.0/24 194.87.47.0-194.87.48.255 194.87.58.0/24 194.87.73.0/24 194.87.82.0/24 194.87.89.0/24 194.87.105.0-194.87.106.255 194.87.108.0/24 194.87.123.0/24 194.87.125.0/24 194.87.128.0/24 194.87.137.0/24 194.87.162.0/24 194.87.178.0/24 194.87.198.0/24 194.87.227.0/24 194.87.230.0/24 194.87.240.0/24 194.87.245.0/24 195.58.47.0/24 195.133.55.0/24 195.133.67.0/24 195.133.83.0/24 195.133.92.0/24 212.192.221.0/24 212.192.223.0/24 212.193.1.0-212.193.2.255 212.193.6.0/24 212.193.18.0/24 212.193.20.0/24 212.193.23.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:be:dd:28:48:32:45:64:29:a1:fb:06:77:8f:e6:41:49:3e: 33:6c:c7:c2:97:84:11:0b:57:5c:b1:a7:d5:49:f8:ad:ac:2a: 16:c8:ce:b5:eb:b3:8c:fe:b6:fd:67:0f:c6:38:fc:f2:21:b8: 9a:db:21:60:8a:77:dd:96:38:33:98:f9:29:f5:d8:e6:75:70: 47:e0:13:38:71:e9:03:0d:9d:8d:0b:e7:07:e9:f4:9e:4c:6d: 97:bb:37:78:60:74:34:e7:6a:b1:d6:14:13:0a:71:89:b7:8f: 89:ce:f7:b8:04:b9:20:55:67:a1:41:33:85:da:e2:ae:fb:aa: 6e:29:94:0b:62:88:8f:17:23:84:4c:52:87:9e:b3:b0:5d:c7: c9:38:da:4d:43:e4:fa:a3:96:21:21:c2:df:fa:58:ed:ee:75: 5f:9b:8f:25:e9:73:ab:4c:7f:73:52:65:5a:fb:58:75:35:b7: 86:f6:5e:6e:83:d5:c8:35:2d:35:c7:5c:bf:2a:a7:3d:7a:1d: 03:45:d3:49:82:bd:3f:db:bc:3d:f6:61:8c:d9:09:e2:2a:14: 50:0f:01:c3:a1:20:e6:88:f1:6f:82:07:6d:79:4c:92:de:76: 9a:d1:0e:6e:d4:a8:80:fb:58:7f:d1:95:8a:f1:bf:11:a3:39: bd:21:55:bd -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgISAZsDCcy8q0+xtC0ApYSklDmlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjUxMjA5MTIxNTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODM1YjRiNWMwNTI2MmI1OGMyMzI0MTM1YTkyMGJjNzkwZGI5ZjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMMstOTqUpLrBD+/08HygpzghKP+ 9rIvhIyglxBM+Pkf4YzTvcNAsnnoPyEJ9InT554GSKGYf7y4rjaQDprGCCMlQegH QbGfH7AbT+f27HaPPHsCZ4LnsSQmTV4H4ORp9LwAxU18zbzr9iNr46ygzsoD0cA3 bpVotZIQSOMCm5vFBxBVDxdIuV1B2vBiIqH9nsyxywlZdsRM03dvGutQh71PDBri 5d6sPdNbFMNrKol30Qi4QvVCHrW/HwiaUx4DAk0NtQT7YNByzFcKfo4JMkSIekJb itsHAQpb0WSaU6vvxCVdvcOxRF9/BpKcn4GNn3UNlvrDEH0E+lxfzruJywIDAQAB o4IDbzCCA2swHQYDVR0OBBYEFMg1tLXAUmK1jCMkE1qSC8eQ25+RMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEveURXMHRjQlNZcldNSXlRVFdwSUx4NURibjVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBgwYIKwYBBQUHAQcBAf8EggFyMIIBbjCCAWoEAgABMIIB YgMEAD5M6AMEAD5M6gMEAT5M7jAMAwQAwHyvAwQAwHywAwQAwHzRAwQAwWxwAwQA wXwCAwQAwXwWAwQAwXwpAwQAwXwuMAwDBAHCOiYDBADCOigDBADCOjsDBADCOkID BADCOkQDBADCVwIDBADCVwowDAMEAMJXEQMEAMJXEgMEAMJXFwMEAMJXHgMEAMJX JwMEAMJXKTAMAwQAwlcvAwQAwlcwAwQAwlc6AwQAwldJAwQAwldSAwQAwldZMAwD BADCV2kDBADCV2oDBADCV2wDBADCV3sDBADCV30DBADCV4ADBADCV4kDBADCV6ID BADCV7IDBADCV8YDBADCV+MDBADCV+YDBADCV/ADBADCV/UDBADDOi8DBADDhTcD BADDhUMDBADDhVMDBADDhVwDBADUwN0DBADUwN8wDAMEANTBAQMEANTBAgMEANTB BgMEANTBEgMEANTBFAMEANTBFzANBgkqhkiG9w0BAQsFAAOCAQEALr7dKEgyRWQp ofsGd4/mQUk+M2zHwpeEEQtXXLGn1Un4rawqFsjOteuzjP62/WcPxjj88iG4mtsh YIp33ZY4M5j5KfXY5nVwR+ATOHHpAw2djQvnB+n0nkxtl7s3eGB0NOdqsdYUEwpx ibePic73uAS5IFVnoUEzhdrirvuqbimUC2KIjxcjhExSh56zsF3HyTjaTUPk+qOW ISHC3/pY7e51X5uPJelzq0x/c1JlWvtYdTW3hvZeboPVyDUtNcdcvyqnPXodA0XT SYK9P9u8PfZhjNkJ4ioUUA8Bw6Eg5ojxb4IHbXlMkt52mtEObtSogPtYf9GVivG/ EaM5vSFVvQ== -----END CERTIFICATE-----Generated at Tue Dec 16 05:03:44 2025 by rpki-client