This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/ymgfqUNrxCFxxzWRZDTsTHDQ5qI.roa File: ymgfqUNrxCFxxzWRZDTsTHDQ5qI.roa (raw, json) Hash identifier: PUzNIv/ioXbZZoJUJezcZ8P2QSpd1W55TTBz10BXkDQ= Subject key identifier: CA:68:1F:A9:43:6B:C4:21:71:C7:35:91:64:34:EC:4C:70:D0:E6:A2 Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9 Certificate serial: 019ABB43D28FA3EEFA62A34A24C983425FCE Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/ymgfqUNrxCFxxzWRZDTsTHDQ5qI.roa Signing time: Tue 25 Nov 2025 13:46:15 +0000 ROA not before: Tue 25 Nov 2025 13:46:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60976 IP address blocks: 91.232.73.0/24 maxlen: 24 185.222.122.0/24 maxlen: 24 185.222.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bb:43:d2:8f:a3:ee:fa:62:a3:4a:24:c9:83:42:5f:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9 Validity Not Before: Nov 25 13:46:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ca681fa9436bc42171c735916434ec4c70d0e6a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b9:a3:f0:4a:1f:66:2e:e3:d6:60:f9:06:bc: 75:89:cd:5b:d2:c5:e9:d1:88:73:d9:58:f9:27:ae: 90:f7:ce:04:cd:9c:5a:ad:0e:8b:3c:20:56:38:8b: 4d:91:27:56:65:1e:26:84:0a:f9:c3:db:ea:83:01: 92:35:b0:ab:6b:fb:dd:32:b3:03:d5:9e:eb:6b:90: b0:45:e6:da:ef:37:9d:ff:a6:6c:5b:73:53:9e:51: 69:31:39:f5:54:98:02:7b:f7:01:b6:a6:49:e3:5b: ab:f8:a8:67:d8:af:60:23:64:ab:28:00:50:88:25: e6:83:29:1e:e4:46:d6:7b:34:f4:31:84:52:16:e4: f9:58:12:0f:9e:78:67:61:4d:33:41:b1:6a:1d:3e: 74:d4:94:32:fe:7d:8b:71:81:41:d9:04:0d:69:6f: 05:f7:7c:b8:5c:73:4d:90:09:ae:17:e8:f2:48:66: 2d:f2:cf:44:f0:91:7c:8a:c5:3e:df:98:c9:13:cd: 54:59:e4:b5:ce:8b:13:91:2c:0e:8c:35:be:a7:a7: a0:b1:c8:39:bc:cf:42:fc:26:d3:ec:1f:57:4a:7a: 71:3d:75:ce:a7:23:36:9a:1f:4f:21:44:73:a4:62: 7f:b5:1c:36:97:e8:cc:be:6f:bf:56:af:f2:de:00: 47:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:68:1F:A9:43:6B:C4:21:71:C7:35:91:64:34:EC:4C:70:D0:E6:A2 X509v3 Authority Key Identifier: keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/ymgfqUNrxCFxxzWRZDTsTHDQ5qI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.73.0/24 185.222.122.0/23 Signature Algorithm: sha256WithRSAEncryption 56:ea:b8:ae:e7:f7:17:be:73:d2:84:ac:e6:e9:b1:ba:8c:02: 5a:b3:36:df:d3:3a:ac:c9:1a:d1:f7:bd:db:63:bc:6d:5c:0d: a3:fc:14:92:5f:6b:f8:75:b0:c5:9d:bd:8b:85:2d:cf:26:06: ab:5b:d6:15:12:81:6c:0b:4a:5d:ad:f6:90:62:de:80:9b:4e: d8:b5:85:49:2c:2d:9b:c5:45:bd:1a:e8:75:9e:53:14:98:2f: 9c:58:03:bc:3a:0d:7a:1d:cc:8c:3f:51:3c:b1:5b:56:b7:4e: 3d:d5:ee:45:89:34:be:c8:74:43:2b:af:ed:a8:41:9b:99:ff: 2b:cc:06:b1:86:fa:da:03:62:93:ed:cd:ca:ef:49:2c:7a:79: e1:94:23:18:f1:0d:d8:45:9d:15:9b:c3:38:39:e8:8a:c5:f5: 49:94:e0:8c:50:56:97:4a:e4:fe:d6:27:9e:ef:f1:26:0b:bf: 91:72:62:bd:19:08:7e:90:e8:f1:10:f1:3c:07:9a:7c:b5:4c: 04:40:d9:c6:4b:45:c9:85:36:0b:bf:f6:7c:14:cc:eb:c3:9f: a9:6e:13:d8:97:22:94:d8:c4:3c:06:1b:7c:fd:42:a9:76:eb: be:1a:55:c0:13:d6:b7:c5:af:8e:c4:8f:35:dd:dd:d9:37:98: e8:cd:89:fe -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZq7Q9KPo+76YqNKJMmDQl/OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiOWI1NmQ4ZDk2ZWJjYjVmY2Y4N2RlMmVjMmI1MmMxOTRj Y2Y5ZjkwHhcNMjUxMTI1MTM0NjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTY4MWZhOTQzNmJjNDIxNzFjNzM1OTE2NDM0ZWM0YzcwZDBlNmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurmj8EofZi7j1mD5Brx1ic1b0sXp 0Yhz2Vj5J66Q984EzZxarQ6LPCBWOItNkSdWZR4mhAr5w9vqgwGSNbCra/vdMrMD 1Z7ra5CwReba7zed/6ZsW3NTnlFpMTn1VJgCe/cBtqZJ41ur+Khn2K9gI2SrKABQ iCXmgyke5EbWezT0MYRSFuT5WBIPnnhnYU0zQbFqHT501JQy/n2LcYFB2QQNaW8F 93y4XHNNkAmuF+jySGYt8s9E8JF8isU+35jJE81UWeS1zosTkSwOjDW+p6egscg5 vM9C/CbT7B9XSnpxPXXOpyM2mh9PIURzpGJ/tRw2l+jMvm+/Vq/y3gBHuwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMpoH6lDa8Qhccc1kWQ07Exw0OaiMB8GA1UdIwQY MBaAFLubVtjZbry1/Ph94uwrUsGUzPn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84ZjM5NDItMTdmNy00OTNjLWJjNmIt NGY0ZmU4MDNiMDE1LzEveW1nZnFVTnJ4Q0Z4eHpXUlpEVHNUSERRNXFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84ZjM5NDItMTdmNy00OTNjLWJjNmItNGY0ZmU4MDNiMDE1 LzEvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+hJAwQB ud56MA0GCSqGSIb3DQEBCwUAA4IBAQBW6riu5/cXvnPShKzm6bG6jAJaszbf0zqs yRrR973bY7xtXA2j/BSSX2v4dbDFnb2LhS3PJgarW9YVEoFsC0pdrfaQYt6Am07Y tYVJLC2bxUW9Guh1nlMUmC+cWAO8Og16HcyMP1E8sVtWt0491e5FiTS+yHRDK6/t qEGbmf8rzAaxhvraA2KT7c3K70ksennhlCMY8Q3YRZ0Vm8M4OeiKxfVJlOCMUFaX SuT+1iee7/EmC7+RcmK9GQh+kOjxEPE8B5p8tUwEQNnGS0XJhTYLv/Z8FMzrw5+p bhPYlyKU2MQ8Bht8/UKpduu+GlXAE9a3xa+OxI813d3ZN5jozYn+ -----END CERTIFICATE-----Generated at Sun Dec 7 00:10:44 2025 by rpki-client