This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/yfM2MaiTfFDOsvvuc9oTKlnjCok.roa File: yfM2MaiTfFDOsvvuc9oTKlnjCok.roa (raw, json) Hash identifier: XLeVu8EohnDcMakSxmYm/IQDDAg+4NcTPBIPIC2LLwk= Subject key identifier: C9:F3:36:31:A8:93:7C:50:CE:B2:FB:EE:73:DA:13:2A:59:E3:0A:89 Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 019AA64118C7CA43E8ECB605BE6B8B7C2553 Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/yfM2MaiTfFDOsvvuc9oTKlnjCok.roa Signing time: Fri 21 Nov 2025 11:51:15 +0000 ROA not before: Fri 21 Nov 2025 11:51:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 10557 IP address blocks: 31.13.214.0/24 maxlen: 24 37.60.142.0/24 maxlen: 24 37.61.225.0/24 maxlen: 24 37.61.230.0/24 maxlen: 24 87.120.58.0/24 maxlen: 24 87.120.62.0/24 maxlen: 24 87.120.247.0/24 maxlen: 24 87.121.102.0/24 maxlen: 24 93.123.25.0/24 maxlen: 24 93.123.111.0/24 maxlen: 24 94.156.40.0/23 maxlen: 23 94.156.43.0/24 maxlen: 24 94.156.62.0/23 maxlen: 23 94.156.132.0/23 maxlen: 23 94.156.145.0/24 maxlen: 24 94.156.224.0/23 maxlen: 23 158.120.252.0/23 maxlen: 23 188.212.110.0/24 maxlen: 24 192.175.2.0/24 maxlen: 24 198.160.152.0/24 maxlen: 24 203.17.237.0/24 maxlen: 24 203.25.139.0/24 maxlen: 24 203.78.161.0/24 maxlen: 24 203.78.163.0/24 maxlen: 24 203.78.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:41:18:c7:ca:43:e8:ec:b6:05:be:6b:8b:7c:25:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Nov 21 11:51:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c9f33631a8937c50ceb2fbee73da132a59e30a89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:48:5f:6c:18:a9:52:2c:ea:b5:a5:f5:09:ed: b8:c2:21:92:3e:b6:79:a8:ca:2a:12:6c:4d:73:25: 46:b6:c3:fc:52:5e:a0:24:27:be:00:88:ff:b8:5a: 17:8c:2c:8d:29:46:f7:d0:44:be:ec:13:33:4f:45: a0:dc:11:64:15:2d:82:e4:de:ba:19:c5:86:99:f0: 18:8a:ab:d9:76:40:ea:85:2a:3d:a5:0b:e0:4b:2d: 6d:58:39:03:aa:da:d9:f1:92:0c:e1:97:71:fe:59: f5:f6:cc:e6:3d:aa:9f:55:37:d4:bd:b2:d4:d2:71: 60:6e:1e:0d:55:c1:5c:25:1e:7f:20:f4:90:02:15: df:38:49:88:aa:d0:5e:06:db:f6:25:00:ae:41:e2: 62:cd:41:36:f9:92:71:a7:ec:f2:d5:80:9a:e4:24: 2b:9a:34:2b:c0:d6:e6:3c:c6:cd:d6:7e:d1:56:45: ee:cd:92:78:f1:6d:6c:78:30:10:d4:a9:0b:bd:a8: 4f:60:6f:cc:71:57:b7:e0:61:b3:56:89:ec:8c:9c: 9f:30:c4:e6:67:b6:ef:02:47:c6:8c:7e:a6:91:15: 70:15:fb:92:50:18:bc:47:ec:12:5f:33:b3:85:7a: 51:70:1b:cf:92:7a:82:97:72:52:03:9f:0c:25:0a: 23:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F3:36:31:A8:93:7C:50:CE:B2:FB:EE:73:DA:13:2A:59:E3:0A:89 X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/yfM2MaiTfFDOsvvuc9oTKlnjCok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.13.214.0/24 37.60.142.0/24 37.61.225.0/24 37.61.230.0/24 87.120.58.0/24 87.120.62.0/24 87.120.247.0/24 87.121.102.0/24 93.123.25.0/24 93.123.111.0/24 94.156.40.0/23 94.156.43.0/24 94.156.62.0/23 94.156.132.0/23 94.156.145.0/24 94.156.224.0/23 158.120.252.0/23 188.212.110.0/24 192.175.2.0/24 198.160.152.0/24 203.17.237.0/24 203.25.139.0/24 203.78.161.0/24 203.78.163.0-203.78.164.255 Signature Algorithm: sha256WithRSAEncryption 47:73:a5:06:50:2c:b1:a3:0f:33:74:c2:01:8a:5b:45:27:b7: f5:4b:3c:85:15:56:29:80:e1:92:41:5a:eb:ba:d7:d3:b6:06: 6f:b5:a5:7f:d1:fe:23:48:13:7e:6e:68:fc:84:bb:43:97:6a: a9:16:32:4d:17:2e:43:6f:3f:df:93:e6:cb:d6:5b:8b:69:7d: 9a:14:2d:b9:c0:5b:25:f5:5f:4c:23:6c:27:0a:00:22:bf:c1: 7a:23:43:88:b2:7f:a7:5d:c2:e6:94:43:3f:a0:5d:a4:0e:36: 71:b0:a8:1d:66:8b:eb:da:50:8d:cc:0c:6f:40:cd:da:af:8e: 5e:78:ee:f5:97:ae:2a:eb:6a:d6:4d:00:dc:a5:c9:15:75:cb: 01:2c:76:02:98:e7:06:11:32:85:49:a5:f6:70:36:57:e5:fc: 8b:6f:b3:08:ac:c2:df:13:6d:1d:f9:2f:e9:3b:f5:9f:f5:57: ce:ae:46:3d:01:b8:ef:0c:4a:24:c2:78:7d:a3:9c:b6:25:21: f9:cd:dc:b8:49:d7:80:f2:6f:49:5c:fd:c8:54:f6:34:73:be: df:e1:b1:e7:67:7c:e0:f5:96:19:8d:21:99:ff:63:cc:28:e9: 6f:f4:35:11:4b:a6:48:b8:1d:b6:b0:cf:8b:f0:ac:23:57:71: b6:bd:bb:f1 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZqmQRjHykPo7LYFvmuLfCVTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjUxMTIxMTE1MTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWYzMzYzMWE4OTM3YzUwY2ViMmZiZWU3M2RhMTMyYTU5ZTMwYTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEhfbBipUizqtaX1Ce24wiGSPrZ5 qMoqEmxNcyVGtsP8Ul6gJCe+AIj/uFoXjCyNKUb30ES+7BMzT0Wg3BFkFS2C5N66 GcWGmfAYiqvZdkDqhSo9pQvgSy1tWDkDqtrZ8ZIM4Zdx/ln19szmPaqfVTfUvbLU 0nFgbh4NVcFcJR5/IPSQAhXfOEmIqtBeBtv2JQCuQeJizUE2+ZJxp+zy1YCa5CQr mjQrwNbmPMbN1n7RVkXuzZJ48W1seDAQ1KkLvahPYG/McVe34GGzVonsjJyfMMTm Z7bvAkfGjH6mkRVwFfuSUBi8R+wSXzOzhXpRcBvPknqCl3JSA58MJQojywIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMnzNjGok3xQzrL77nPaEypZ4wqJMB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEveWZNMk1haVRmRkRPc3Z2dWM5b1RLbG5qQ29rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG1BggrBgEFBQcBBwEB/wSBpTCBojCBnwQCAAEwgZgDBAAf DdYDBAAlPI4DBAAlPeEDBAAlPeYDBABXeDoDBABXeD4DBABXePcDBABXeWYDBABd exkDBABde28DBAFenCgDBABenCsDBAFenD4DBAFenIQDBABenJEDBAFenOADBAGe ePwDBAC81G4DBADArwIDBADGoJgDBADLEe0DBADLGYsDBADLTqEwDAMEAMtOowME AMtOpDANBgkqhkiG9w0BAQsFAAOCAQEAR3OlBlAssaMPM3TCAYpbRSe39Us8hRVW KYDhkkFa67rX07YGb7Wlf9H+I0gTfm5o/IS7Q5dqqRYyTRcuQ28/35Pmy9Zbi2l9 mhQtucBbJfVfTCNsJwoAIr/BeiNDiLJ/p13C5pRDP6BdpA42cbCoHWaL69pQjcwM b0DN2q+OXnju9ZeuKutq1k0A3KXJFXXLASx2ApjnBhEyhUml9nA2V+X8i2+zCKzC 3xNtHfkv6Tv1n/VXzq5GPQG47wxKJMJ4faOctiUh+c3cuEnXgPJvSVz9yFT2NHO+ 3+Gx52d84PWWGY0hmf9jzCjpb/Q1EUumSLgdtrDPi/CsI1dxtr278Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:42:05 2025 by rpki-client