This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/yhxb6agGPS9k6GNN-vecJj4o6qE.roa File: yhxb6agGPS9k6GNN-vecJj4o6qE.roa (raw, json) Hash identifier: e7Hrf7CwI0xW1tRZQ0SmjI7Y7QtrbZV4bfoM0wGu8w0= Subject key identifier: CA:1C:5B:E9:A8:06:3D:2F:64:E8:63:4D:FA:F7:9C:26:3E:28:EA:A1 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019AC105D5C63F8A1ED1878FAA9A3FB0487A Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/yhxb6agGPS9k6GNN-vecJj4o6qE.roa Signing time: Wed 26 Nov 2025 16:36:16 +0000 ROA not before: Wed 26 Nov 2025 16:36:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6830 IP address blocks: 88.148.21.0/24 maxlen: 24 88.148.104.0/24 maxlen: 24 89.32.167.0/24 maxlen: 24 89.43.87.0/24 maxlen: 24 93.115.157.0/24 maxlen: 24 94.76.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c1:05:d5:c6:3f:8a:1e:d1:87:8f:aa:9a:3f:b0:48:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Nov 26 16:36:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ca1c5be9a8063d2f64e8634dfaf79c263e28eaa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6c:d0:61:a3:6e:4c:21:b5:e7:1b:9c:40:bf: 05:e2:aa:38:48:91:f0:83:d0:fa:49:c9:25:f0:7d: 52:49:14:85:c9:f3:86:bc:8d:75:5a:4c:21:1e:e6: 9f:ef:e7:ca:4f:2f:f7:90:9e:8f:5f:a0:19:8d:0f: f9:81:e5:5a:10:27:11:23:31:aa:9a:a2:ab:9b:ba: 5a:15:60:6b:e6:f2:b6:aa:bd:36:6b:ab:0b:03:36: c9:9a:a1:ac:55:b5:8e:e2:72:b0:cc:c5:34:e6:00: 9f:0a:47:a1:81:99:c0:e4:05:11:4e:ba:63:cd:45: fd:fe:d8:9e:14:13:a4:85:25:31:05:66:60:82:12: 1b:fc:17:99:a3:43:2a:59:76:56:23:90:38:dd:4c: e2:c0:c1:50:47:70:c6:ab:da:22:46:0f:cc:71:ba: 68:d6:77:2a:dc:35:d6:53:a8:a0:b0:ab:cf:8e:fd: b2:10:56:ea:3b:a5:c0:f2:07:27:da:10:e9:17:54: 8d:57:c8:64:7f:f3:7b:b2:8f:04:e2:2f:53:3f:26: 86:06:46:9c:76:00:37:40:b8:c7:ac:e9:e5:16:3a: a1:78:2c:ea:5c:4d:9d:50:f8:88:cc:4b:ce:40:15: aa:42:d2:b0:0f:c1:06:f5:ef:13:0a:2d:10:63:47: 2b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1C:5B:E9:A8:06:3D:2F:64:E8:63:4D:FA:F7:9C:26:3E:28:EA:A1 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/yhxb6agGPS9k6GNN-vecJj4o6qE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.148.21.0/24 88.148.104.0/24 89.32.167.0/24 89.43.87.0/24 93.115.157.0/24 94.76.182.0/24 Signature Algorithm: sha256WithRSAEncryption ca:b3:a1:6c:a0:6e:ff:36:43:fb:0a:0c:02:ce:ae:25:f6:bc: fc:a9:d0:65:8a:1e:51:af:e8:22:1a:a4:7e:41:23:a0:62:06: 79:a0:aa:91:4c:50:60:f9:c4:26:32:5c:03:f1:5b:92:fb:13: cf:04:d1:de:54:1f:b3:1c:ad:95:06:f5:44:41:db:7f:84:7f: ee:5a:53:04:cc:a1:22:7b:bf:d1:d4:4b:d2:0b:20:07:df:0b: 9a:ec:a9:31:4b:a1:d4:33:4e:6b:0c:d9:e8:4e:d1:18:5f:69: c6:23:79:b4:0e:a0:57:96:80:0c:bf:9a:47:1f:9f:48:fd:e9: 1a:00:5f:af:7a:3a:73:7e:89:ce:3f:3f:d2:f7:9e:82:ed:48: 09:3e:68:0e:27:d2:c9:1d:f3:c4:3e:2c:94:00:3e:4c:35:52: 96:c8:d6:fb:ff:9e:28:32:5d:8c:7d:9d:35:d1:4a:51:23:d2: da:0d:d1:1c:aa:ca:58:e4:2c:2a:93:9b:83:75:c2:2d:de:9a: b4:44:2b:68:4b:a9:f9:03:c8:e0:3d:86:9d:66:82:8d:3e:ce: c6:a5:35:a5:b9:59:55:63:35:d3:d6:4d:7e:56:b8:c2:43:0b: 59:92:e7:73:a2:fd:5c:6d:99:56:4d:8c:33:8d:4d:dd:46:ee: 42:31:b1:a2 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZrBBdXGP4oe0YePqpo/sEh6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjUxMTI2MTYzNjE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTFjNWJlOWE4MDYzZDJmNjRlODYzNGRmYWY3OWMyNjNlMjhlYWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmzQYaNuTCG15xucQL8F4qo4SJHw g9D6Sckl8H1SSRSFyfOGvI11WkwhHuaf7+fKTy/3kJ6PX6AZjQ/5geVaECcRIzGq mqKrm7paFWBr5vK2qr02a6sLAzbJmqGsVbWO4nKwzMU05gCfCkehgZnA5AURTrpj zUX9/tieFBOkhSUxBWZgghIb/BeZo0MqWXZWI5A43UziwMFQR3DGq9oiRg/Mcbpo 1ncq3DXWU6igsKvPjv2yEFbqO6XA8gcn2hDpF1SNV8hkf/N7so8E4i9TPyaGBkac dgA3QLjHrOnlFjqheCzqXE2dUPiIzEvOQBWqQtKwD8EG9e8TCi0QY0crPQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFMocW+moBj0vZOhjTfr3nCY+KOqhMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEveWh4YjZhZ0dQUzlrNkdOTi12ZWNKajRvNnFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAWJQVAwQA WJRoAwQAWSCnAwQAWStXAwQAXXOdAwQAXky2MA0GCSqGSIb3DQEBCwUAA4IBAQDK s6FsoG7/NkP7CgwCzq4l9rz8qdBlih5Rr+giGqR+QSOgYgZ5oKqRTFBg+cQmMlwD 8VuS+xPPBNHeVB+zHK2VBvVEQdt/hH/uWlMEzKEie7/R1EvSCyAH3wua7KkxS6HU M05rDNnoTtEYX2nGI3m0DqBXloAMv5pHH59I/ekaAF+vejpzfonOPz/S956C7UgJ PmgOJ9LJHfPEPiyUAD5MNVKWyNb7/54oMl2MfZ010UpRI9LaDdEcqspY5Cwqk5uD dcIt3pq0RCtoS6n5A8jgPYadZoKNPs7GpTWluVlVYzXT1k1+VrjCQwtZkudzov1c bZlWTYwzjU3dRu5CMbGi -----END CERTIFICATE-----Generated at Sat Dec 6 12:44:42 2025 by rpki-client