This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/ylzjYPYG3Nb2ogbtj66mALe2goU.roa File: ylzjYPYG3Nb2ogbtj66mALe2goU.roa (raw, json) Hash identifier: KlR+aY9NoNWb2YBemr5vtpJim3Q+7M9uv5foxei+1V8= Subject key identifier: CA:5C:E3:60:F6:06:DC:D6:F6:A2:06:ED:8F:AE:A6:00:B7:B6:82:85 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019AC64F7A16AB1BB61B1266FBD1AD2A7D7D Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/ylzjYPYG3Nb2ogbtj66mALe2goU.roa Signing time: Thu 27 Nov 2025 17:14:48 +0000 ROA not before: Thu 27 Nov 2025 17:14:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13213 IP address blocks: 84.236.196.0/24 maxlen: 24 88.148.29.0/24 maxlen: 24 93.115.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c6:4f:7a:16:ab:1b:b6:1b:12:66:fb:d1:ad:2a:7d:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Nov 27 17:14:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ca5ce360f606dcd6f6a206ed8faea600b7b68285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c4:d5:9f:21:3d:68:3f:17:dd:39:1e:24:51: c7:0e:6c:90:17:c8:06:fe:72:3d:14:2d:7a:4b:e3: af:22:1c:8d:79:0f:5d:f2:ef:38:95:e8:24:ce:cb: d7:5a:cf:fb:1f:50:0e:2d:b1:30:be:fd:a0:0b:36: 27:68:c5:13:01:53:fd:2c:68:ea:77:e8:8d:ac:8f: ff:83:27:4f:f0:cb:a0:0e:4e:3a:e6:d4:b1:76:0b: 32:4b:ed:5f:12:80:7f:a9:d6:78:fd:a3:a4:f7:16: d1:40:be:63:33:56:7f:3b:6d:c0:d5:0b:4c:25:4c: 03:b1:c0:e6:84:12:ae:18:b8:e8:41:12:92:7c:cf: 18:20:b2:cb:35:4e:5d:e6:55:16:53:84:04:14:20: 79:32:f9:1d:c1:56:e0:f6:7f:92:21:16:28:4c:ce: 22:18:13:fd:2e:de:e1:7a:77:b2:93:c5:e8:cb:75: ad:af:e9:9a:00:29:f4:ce:9a:41:55:7e:5f:d2:fa: f4:8a:43:47:f0:17:41:d6:b3:1b:66:9a:3d:5a:1d: af:ed:17:35:da:9b:29:92:37:7b:9c:53:73:fe:07: 14:55:de:1e:58:da:5f:3d:1c:c5:b6:12:cf:6a:2c: 39:72:80:cd:fb:16:41:20:02:e0:c5:7a:a4:9d:be: eb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:5C:E3:60:F6:06:DC:D6:F6:A2:06:ED:8F:AE:A6:00:B7:B6:82:85 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/ylzjYPYG3Nb2ogbtj66mALe2goU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.236.196.0/24 88.148.29.0/24 93.115.158.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:0e:bc:7e:b8:41:5a:2a:0e:31:51:af:72:6c:37:97:ae:59: 1b:6a:52:f7:86:bc:69:ef:1c:dc:72:f8:3b:32:21:46:fd:d4: 17:d1:df:24:85:e7:10:a5:27:71:02:53:cf:5c:6e:29:26:58: 65:b7:3a:53:f8:5c:67:58:46:df:cc:fc:e7:d6:35:1d:1a:8e: 84:6e:5f:de:b4:6a:39:bc:37:71:1d:f1:80:1d:31:5d:bf:a1: bd:47:cf:d3:a3:c6:b9:2e:4a:90:53:3f:0a:6d:99:34:39:02: 0f:c8:91:bd:5a:57:63:42:93:bb:fa:2a:46:3a:fe:a2:a7:a9: a9:5b:5b:15:38:ed:78:b2:cc:9a:fa:14:ed:24:f9:34:1c:85: 15:f0:d6:f0:62:39:ea:70:fd:68:f8:0b:ef:66:46:43:f2:c4: 32:6c:ed:ed:d6:68:1c:1e:83:9b:91:80:e3:fd:08:4a:fb:f2: 31:be:18:dd:49:ce:da:7d:a2:cf:74:71:74:aa:3a:0f:59:61: 0c:af:85:0b:fb:c8:07:a8:dd:aa:0a:e7:d0:aa:23:60:fc:95: ab:dd:a2:80:06:86:51:4a:60:de:74:61:55:49:56:9b:26:f7: cb:b5:4b:04:42:c8:29:00:bf:7c:ba:27:39:7d:3a:21:61:1e: 3b:83:24:2c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrGT3oWqxu2GxJm+9GtKn19MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjUxMTI3MTcxNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTVjZTM2MGY2MDZkY2Q2ZjZhMjA2ZWQ4ZmFlYTYwMGI3YjY4Mjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssTVnyE9aD8X3TkeJFHHDmyQF8gG /nI9FC16S+OvIhyNeQ9d8u84legkzsvXWs/7H1AOLbEwvv2gCzYnaMUTAVP9LGjq d+iNrI//gydP8MugDk465tSxdgsyS+1fEoB/qdZ4/aOk9xbRQL5jM1Z/O23A1QtM JUwDscDmhBKuGLjoQRKSfM8YILLLNU5d5lUWU4QEFCB5MvkdwVbg9n+SIRYoTM4i GBP9Lt7heneyk8Xoy3Wtr+maACn0zppBVX5f0vr0ikNH8BdB1rMbZpo9Wh2v7Rc1 2pspkjd7nFNz/gcUVd4eWNpfPRzFthLPaiw5coDN+xZBIALgxXqknb7rQQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMpc42D2BtzW9qIG7Y+upgC3toKFMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEveWx6allQWUczTmIyb2didGo2Nm1BTGUyZ29VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVOzEAwQA WJQdAwQAXXOeMA0GCSqGSIb3DQEBCwUAA4IBAQAvDrx+uEFaKg4xUa9ybDeXrlkb alL3hrxp7xzccvg7MiFG/dQX0d8khecQpSdxAlPPXG4pJlhltzpT+FxnWEbfzPzn 1jUdGo6Ebl/etGo5vDdxHfGAHTFdv6G9R8/To8a5LkqQUz8KbZk0OQIPyJG9Wldj QpO7+ipGOv6ip6mpW1sVOO14ssya+hTtJPk0HIUV8NbwYjnqcP1o+AvvZkZD8sQy bO3t1mgcHoObkYDj/QhK+/IxvhjdSc7afaLPdHF0qjoPWWEMr4UL+8gHqN2qCufQ qiNg/JWr3aKABoZRSmDedGFVSVabJvfLtUsEQsgpAL98uic5fTohYR47gyQs -----END CERTIFICATE-----Generated at Sat Dec 6 22:01:30 2025 by rpki-client