This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/yBmdgjqKFjOC_LFP16Md73QPZaM.roa File: yBmdgjqKFjOC_LFP16Md73QPZaM.roa (raw, json) Hash identifier: 7uCrDxR1l98wleRX/wBWwg1CUrRxAdBoi9KU5PuzGk0= Subject key identifier: C8:19:9D:82:3A:8A:16:33:82:FC:B1:4F:D7:A3:1D:EF:74:0F:65:A3 Certificate issuer: /CN=a7967d76c2d46720d4cfac0459fa3c3d22005044 Certificate serial: 019A9DAEEA8924ECB5375074432287A2389D Authority key identifier: A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/yBmdgjqKFjOC_LFP16Md73QPZaM.roa Signing time: Wed 19 Nov 2025 19:54:37 +0000 ROA not before: Wed 19 Nov 2025 19:54:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39422 IP address blocks: 176.108.232.0/21 maxlen: 21 176.108.232.0/22 maxlen: 22 176.108.232.0/23 maxlen: 23 176.108.232.0/24 maxlen: 24 176.108.233.0/24 maxlen: 24 176.108.234.0/24 maxlen: 24 176.108.235.0/24 maxlen: 24 176.108.236.0/22 maxlen: 22 176.108.236.0/24 maxlen: 24 176.108.237.0/24 maxlen: 24 176.108.238.0/23 maxlen: 23 176.108.238.0/24 maxlen: 24 176.108.239.0/24 maxlen: 24 195.182.202.0/23 maxlen: 23 195.182.202.0/24 maxlen: 24 195.182.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9d:ae:ea:89:24:ec:b5:37:50:74:43:22:87:a2:38:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7967d76c2d46720d4cfac0459fa3c3d22005044 Validity Not Before: Nov 19 19:54:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c8199d823a8a163382fcb14fd7a31def740f65a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2c:d5:b4:58:05:e1:4c:ef:67:40:61:2e:4d: eb:28:db:9d:70:b1:6c:ea:0d:cc:3a:46:ba:0e:3b: 13:d7:ff:ac:67:fc:83:b5:28:66:06:7b:6d:17:41: 71:64:9b:bb:af:3e:e8:d1:db:65:18:ee:0a:c5:44: 1a:38:8d:f2:10:b6:05:da:b9:0d:9a:7a:1e:af:05: ae:db:93:03:54:34:bb:46:7e:8e:b0:35:19:d4:a0: 04:a2:ce:b6:e6:f2:1d:dd:eb:c9:89:9e:b2:79:c7: cb:cd:d0:5d:2f:e4:2e:3f:70:50:fb:bc:25:65:91: 29:96:9a:c2:e3:e8:ae:82:11:9b:9a:b0:6e:92:eb: 0a:53:89:7b:10:b8:25:ae:33:04:ed:36:09:e8:5b: 06:80:2a:dd:32:0f:00:86:22:8d:34:5c:41:b3:18: 29:bf:ae:4b:11:b6:7f:d0:36:b5:f3:ad:47:19:71: fe:44:57:90:2d:4f:1e:df:9d:99:2c:1c:53:14:cf: 3a:33:67:62:60:a8:0e:c0:ce:dc:5f:5e:f2:d8:69: bb:f7:fa:a2:cf:54:61:36:24:31:26:86:43:6b:99: f9:73:7f:74:67:d5:41:f6:27:f9:a6:bd:c4:b1:15: 81:be:80:e1:00:f6:16:d0:46:e3:0c:a6:43:c7:d1: 68:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:19:9D:82:3A:8A:16:33:82:FC:B1:4F:D7:A3:1D:EF:74:0F:65:A3 X509v3 Authority Key Identifier: keyid:A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/yBmdgjqKFjOC_LFP16Md73QPZaM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.108.232.0/21 195.182.202.0/23 Signature Algorithm: sha256WithRSAEncryption 46:fa:0e:e5:2c:b9:79:69:ac:f7:75:6a:18:83:2c:80:e6:48: 7c:79:3b:73:0a:10:dc:d9:bd:9f:b4:a8:05:33:ab:9c:68:62: 55:81:20:44:be:bb:c2:f7:a8:7f:df:6d:d2:f1:8e:82:a1:38: 49:6d:52:da:86:c3:ab:1d:bf:99:f8:1d:a9:bd:23:ae:51:d6: 49:f0:b7:51:2e:39:e1:db:9e:37:79:ae:6b:b6:79:a8:f8:7a: 95:fe:80:56:09:d1:d1:59:3d:b5:55:cd:77:73:7d:3b:88:c9: 2b:60:c3:9b:fa:28:fb:bf:2f:4c:e4:a1:8a:96:75:8e:d3:db: d8:2f:4c:4d:4d:63:b4:4d:83:29:5f:76:83:2f:a2:cb:6f:01: 1c:a5:65:7e:9c:0a:16:93:5c:af:b3:38:86:b1:09:d5:13:7a: 97:57:86:b9:f9:66:e5:a8:47:65:2b:a1:c4:43:ef:1d:c9:58: 8e:c8:c8:18:f2:19:b4:f6:b4:52:a1:56:bb:3b:a8:c9:ce:7b: 71:1b:b5:3e:ba:af:45:11:0c:60:cf:bf:d7:1b:8a:7a:ea:60: 41:c4:7f:88:ae:e7:36:89:ff:a2:13:f4:ff:c3:23:8b:f4:77: 8a:63:22:b1:e7:60:a0:4c:4c:63:af:f9:9c:c9:c6:c3:b7:33: 24:20:15:79 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqdruqJJOy1N1B0QyKHojidMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3OTY3ZDc2YzJkNDY3MjBkNGNmYWMwNDU5ZmEzYzNkMjIw MDUwNDQwHhcNMjUxMTE5MTk1NDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODE5OWQ4MjNhOGExNjMzODJmY2IxNGZkN2EzMWRlZjc0MGY2NWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSzVtFgF4UzvZ0BhLk3rKNudcLFs 6g3MOka6DjsT1/+sZ/yDtShmBnttF0FxZJu7rz7o0dtlGO4KxUQaOI3yELYF2rkN mnoerwWu25MDVDS7Rn6OsDUZ1KAEos625vId3evJiZ6yecfLzdBdL+QuP3BQ+7wl ZZEplprC4+iughGbmrBukusKU4l7ELglrjME7TYJ6FsGgCrdMg8AhiKNNFxBsxgp v65LEbZ/0Da1861HGXH+RFeQLU8e352ZLBxTFM86M2diYKgOwM7cX17y2Gm79/qi z1RhNiQxJoZDa5n5c390Z9VB9if5pr3EsRWBvoDhAPYW0EbjDKZDx9FoLwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMgZnYI6ihYzgvyxT9ejHe90D2WjMB8GA1UdIwQY MBaAFKeWfXbC1Gcg1M+sBFn6PD0iAFBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDVaOWRzTFVaeURVejZ3RVdmbzhQU0lBVUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS84N2I3NjgtMTU0NS00OTRhLTg0Zjkt MWNmNTBhNTM2MDI2LzEveUJtZGdqcUtGak9DX0xGUDE2TWQ3M1FQWmFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS84N2I3NjgtMTU0NS00OTRhLTg0ZjktMWNmNTBhNTM2MDI2 LzEvcDVaOWRzTFVaeURVejZ3RVdmbzhQU0lBVUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDsGzoAwQB w7bKMA0GCSqGSIb3DQEBCwUAA4IBAQBG+g7lLLl5aaz3dWoYgyyA5kh8eTtzChDc 2b2ftKgFM6ucaGJVgSBEvrvC96h/323S8Y6CoThJbVLahsOrHb+Z+B2pvSOuUdZJ 8LdRLjnh2543ea5rtnmo+HqV/oBWCdHRWT21Vc13c307iMkrYMOb+ij7vy9M5KGK lnWO09vYL0xNTWO0TYMpX3aDL6LLbwEcpWV+nAoWk1yvsziGsQnVE3qXV4a5+Wbl qEdlK6HEQ+8dyViOyMgY8hm09rRSoVa7O6jJzntxG7U+uq9FEQxgz7/XG4p66mBB xH+Iruc2if+iE/T/wyOL9HeKYyKx52CgTExjr/mcycbDtzMkIBV5 -----END CERTIFICATE-----Generated at Sat Dec 6 17:18:06 2025 by rpki-client