This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/YN5BT06xMfbo1c_Z7AZWug-50dI.roa File: YN5BT06xMfbo1c_Z7AZWug-50dI.roa (raw, json) Hash identifier: IQTbSHfW7A6/vX1CnCMrP3c0x8Ql47ZxFKjq91S7rjA= Subject key identifier: 60:DE:41:4F:4E:B1:31:F6:E8:D5:CF:D9:EC:06:56:BA:0F:B9:D1:D2 Certificate issuer: /CN=f0f636fec7b5b2d18de3797e6984c06955e716d7 Certificate serial: 019A973E0DBBC7A6A75B47C1706CB501520B Authority key identifier: F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/YN5BT06xMfbo1c_Z7AZWug-50dI.roa Signing time: Tue 18 Nov 2025 13:53:37 +0000 ROA not before: Tue 18 Nov 2025 13:53:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211381 IP address blocks: 185.182.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:97:3e:0d:bb:c7:a6:a7:5b:47:c1:70:6c:b5:01:52:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0f636fec7b5b2d18de3797e6984c06955e716d7 Validity Not Before: Nov 18 13:53:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=60de414f4eb131f6e8d5cfd9ec0656ba0fb9d1d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ac:67:4f:df:24:61:de:d3:b7:0d:e9:c6:84: 1e:a3:53:3a:b6:4f:3f:ec:64:c8:da:88:f2:26:81: 3b:07:0f:4c:d5:f1:12:4f:ad:d6:dc:6f:a3:7d:c2: 66:5f:fe:d4:a9:3a:8c:24:3c:eb:3d:c2:39:66:d9: fb:cc:68:78:99:f9:db:11:02:79:b9:17:51:a2:3d: f4:99:6e:fe:ec:b0:9d:d7:af:b1:7e:f1:f6:b5:21: bc:c6:af:58:52:74:b0:6a:60:6f:6f:16:52:53:48: fb:5b:48:a8:0f:20:f2:7f:9b:06:6f:48:96:2e:41: 3d:72:16:47:08:e1:33:aa:55:7a:f3:31:6c:eb:cf: 5f:4f:6b:76:62:4d:e4:04:e6:82:05:ec:79:f0:b8: 18:85:ca:d5:b0:f0:1f:6b:5c:46:74:67:95:17:20: 70:6c:01:e9:18:71:28:ee:6a:84:07:77:4e:c3:84: bf:28:22:c9:0e:da:c9:82:c2:58:4c:12:b9:2b:54: aa:f5:78:ad:7c:23:ae:3a:6d:5e:f3:b3:77:7f:af: 4f:18:56:12:e7:86:23:5f:c9:81:0c:75:0e:49:27: b0:14:8b:fc:72:bd:82:14:38:c3:11:d6:e3:dd:cc: 43:a4:93:36:44:fb:e9:22:01:2f:aa:c0:a7:7f:7a: c9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:DE:41:4F:4E:B1:31:F6:E8:D5:CF:D9:EC:06:56:BA:0F:B9:D1:D2 X509v3 Authority Key Identifier: keyid:F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/YN5BT06xMfbo1c_Z7AZWug-50dI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.182.82.0/24 Signature Algorithm: sha256WithRSAEncryption 87:af:a6:c9:a9:9c:08:c4:51:ff:a5:42:a1:ac:80:73:c4:08: 9e:bb:a1:5a:2b:4e:16:f9:b0:b5:f1:7f:a0:38:20:fd:7c:02: 32:4d:dd:5b:d4:89:f3:1a:4e:46:d2:65:9b:83:4f:02:ef:76: 1b:ac:cf:5d:27:00:c4:24:d3:73:d6:a2:a8:eb:a3:e4:b5:db: 23:7d:d7:e5:6b:90:92:13:2b:0d:66:6a:8b:8d:eb:d6:84:e2: ba:43:02:75:9f:22:ce:cc:0d:da:0f:aa:ef:4b:70:c6:00:1c: 3c:03:9c:89:4a:61:ac:09:92:2d:34:9c:fc:ae:dc:35:4b:d2: 11:bd:92:ab:40:ef:8b:84:72:55:72:bf:e3:f8:44:c8:08:e9: 2b:82:4e:38:39:20:14:01:33:2e:43:0f:c4:2d:96:5b:b3:9c: ad:b9:ed:6d:e3:8e:6f:01:47:c3:d3:2a:43:f2:56:19:02:3d: 0f:6d:6d:9e:b9:27:fc:24:16:bb:ba:e0:96:a1:26:09:55:11: 52:48:9f:6c:fc:1e:5d:09:47:67:46:87:5d:8c:00:28:f6:d4: 3a:aa:b0:53:bc:47:21:6c:ce:06:3e:1d:c1:a0:30:f9:59:34: b2:2b:39:cc:50:47:46:ae:45:04:c7:8e:85:27:6b:1c:60:07: b7:55:17:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqXPg27x6anW0fBcGy1AVILMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZjYzNmZlYzdiNWIyZDE4ZGUzNzk3ZTY5ODRjMDY5NTVl NzE2ZDcwHhcNMjUxMTE4MTM1MzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGRlNDE0ZjRlYjEzMWY2ZThkNWNmZDllYzA2NTZiYTBmYjlkMWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqxnT98kYd7Ttw3pxoQeo1M6tk8/ 7GTI2ojyJoE7Bw9M1fEST63W3G+jfcJmX/7UqTqMJDzrPcI5Ztn7zGh4mfnbEQJ5 uRdRoj30mW7+7LCd16+xfvH2tSG8xq9YUnSwamBvbxZSU0j7W0ioDyDyf5sGb0iW LkE9chZHCOEzqlV68zFs689fT2t2Yk3kBOaCBex58LgYhcrVsPAfa1xGdGeVFyBw bAHpGHEo7mqEB3dOw4S/KCLJDtrJgsJYTBK5K1Sq9XitfCOuOm1e87N3f69PGFYS 54YjX8mBDHUOSSewFIv8cr2CFDjDEdbj3cxDpJM2RPvpIgEvqsCnf3rJjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGDeQU9OsTH26NXP2ewGVroPudHSMB8GA1UdIwQY MBaAFPD2Nv7HtbLRjeN5fmmEwGlV5xbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFBZMl9zZTFzdEdONDNsLWFZVEFhVlhuRnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hMDFhY2QtYTNkZS00ODM5LTlkMDIt NjQzYzFmZTM4Mzg1LzEvWU41QlQwNnhNZmJvMWNfWjdBWld1Zy01MGRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9hMDFhY2QtYTNkZS00ODM5LTlkMDItNjQzYzFmZTM4Mzg1 LzEvOFBZMl9zZTFzdEdONDNsLWFZVEFhVlhuRnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubZSMA0G CSqGSIb3DQEBCwUAA4IBAQCHr6bJqZwIxFH/pUKhrIBzxAieu6FaK04W+bC18X+g OCD9fAIyTd1b1InzGk5G0mWbg08C73YbrM9dJwDEJNNz1qKo66Pktdsjfdfla5CS EysNZmqLjevWhOK6QwJ1nyLOzA3aD6rvS3DGABw8A5yJSmGsCZItNJz8rtw1S9IR vZKrQO+LhHJVcr/j+ETICOkrgk44OSAUATMuQw/ELZZbs5ytue1t445vAUfD0ypD 8lYZAj0PbW2euSf8JBa7uuCWoSYJVRFSSJ9s/B5dCUdnRoddjAAo9tQ6qrBTvEch bM4GPh3BoDD5WTSyKznMUEdGrkUEx46FJ2scYAe3VRcz -----END CERTIFICATE-----Generated at Sat Dec 6 11:46:35 2025 by rpki-client