This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/yw8DESSBr60q1emz0AQWHVmDiSc.roa File: yw8DESSBr60q1emz0AQWHVmDiSc.roa (raw, json) Hash identifier: 62HhiJzKA1YpCJz4IDxH8lXY6DCkSVDgw8b+vMmzYQw= Subject key identifier: CB:0F:03:11:24:81:AF:AD:2A:D5:E9:B3:D0:04:16:1D:59:83:89:27 Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Certificate serial: 019AC095383250FDDC3ED96EA2E8C420205D Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/yw8DESSBr60q1emz0AQWHVmDiSc.roa Signing time: Wed 26 Nov 2025 14:33:15 +0000 ROA not before: Wed 26 Nov 2025 14:33:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 400536 IP address blocks: 5.10.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c0:95:38:32:50:fd:dc:3e:d9:6e:a2:e8:c4:20:20:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Validity Not Before: Nov 26 14:33:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cb0f03112481afad2ad5e9b3d004161d59838927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0a:f2:40:44:cc:af:0f:c3:4b:91:b9:46:e4: 9e:73:65:15:33:48:e4:ea:42:59:be:39:86:87:8b: 77:ff:50:8c:c7:2b:ea:47:d1:d5:51:d8:7f:7c:e9: ae:7a:d3:10:ad:b9:6e:d9:f3:1f:e8:1c:bb:78:17: 6a:7d:82:7d:89:8a:60:3e:47:d1:87:8a:58:29:0e: 06:8f:10:f9:7e:1a:2d:fd:de:9a:50:4a:13:a9:53: dc:9c:69:11:c7:47:3b:42:ee:bc:d6:99:80:c6:a4: 32:a6:ef:ae:67:50:32:80:31:53:ec:ef:54:83:97: 89:a7:35:71:1c:38:f6:68:9a:31:15:8e:e7:c9:37: 5e:54:84:f3:42:0f:50:93:00:2c:3b:f2:95:32:60: 31:8e:5f:af:ca:20:1c:76:6d:7d:9d:bf:94:5b:0a: 90:f2:3e:d3:43:da:69:ce:3a:87:23:68:a2:89:a2: ac:35:7a:ce:6e:34:72:64:6e:21:b1:66:e5:e1:58: 23:22:18:7e:eb:c4:cd:00:11:1a:77:06:8c:08:a4: ca:56:39:fb:36:74:92:17:0c:ba:b8:39:97:31:3a: a0:fe:b1:c6:06:30:78:98:98:2e:df:90:db:36:eb: 4d:32:70:1d:07:68:43:1a:7c:28:e0:78:0f:d4:46: b2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0F:03:11:24:81:AF:AD:2A:D5:E9:B3:D0:04:16:1D:59:83:89:27 X509v3 Authority Key Identifier: keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/yw8DESSBr60q1emz0AQWHVmDiSc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.10.216.0/24 Signature Algorithm: sha256WithRSAEncryption 58:bc:d5:03:9d:b7:ea:2c:0c:05:1c:e8:b3:72:3f:1e:43:af: 08:3b:a8:9d:d0:a3:19:89:e9:a5:4c:6e:3b:e5:e7:ca:f0:95: 3c:5b:21:e8:57:de:32:fa:9e:58:e3:e3:47:10:9e:d4:d7:25: 6b:5a:50:b1:5d:1f:91:bb:6b:ae:0e:f5:da:31:13:98:42:bb: 6d:3b:67:4b:9c:a9:f1:9a:3a:81:81:1a:50:29:76:00:e4:d9: 9b:d7:68:25:07:6c:a3:17:45:80:6a:29:9e:47:18:21:f7:e3: 81:0e:44:92:72:b1:c7:d8:68:43:cd:be:4c:2d:66:a0:1f:ae: f9:aa:5e:de:b0:3d:44:64:6f:f4:c1:47:ac:1b:01:d5:35:f1: ca:41:20:e0:f4:7f:1b:64:5d:fb:91:3d:47:1a:4c:2a:14:11: 7b:6b:30:49:91:39:71:f2:72:1b:c9:7b:c4:3d:fb:7e:6f:70: 4e:65:7a:92:a5:44:70:e3:25:e2:0e:0d:47:77:6d:ba:46:99: 30:a9:42:8a:c1:b6:c2:0f:cb:05:eb:ec:ab:cb:11:f7:67:bf: 7a:e5:ac:77:eb:8c:78:b3:2f:57:d0:1e:e3:72:ef:29:d5:64: d5:60:a1:6c:0d:86:21:fe:87:71:03:8a:ee:4b:de:68:1c:4f: c0:cb:00:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrAlTgyUP3cPtluoujEICBdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi NzEzMmYwHhcNMjUxMTI2MTQzMzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjBmMDMxMTI0ODFhZmFkMmFkNWU5YjNkMDA0MTYxZDU5ODM4OTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgryQETMrw/DS5G5RuSec2UVM0jk 6kJZvjmGh4t3/1CMxyvqR9HVUdh/fOmuetMQrblu2fMf6By7eBdqfYJ9iYpgPkfR h4pYKQ4GjxD5fhot/d6aUEoTqVPcnGkRx0c7Qu681pmAxqQypu+uZ1AygDFT7O9U g5eJpzVxHDj2aJoxFY7nyTdeVITzQg9QkwAsO/KVMmAxjl+vyiAcdm19nb+UWwqQ 8j7TQ9ppzjqHI2iiiaKsNXrObjRyZG4hsWbl4VgjIhh+68TNABEadwaMCKTKVjn7 NnSSFwy6uDmXMTqg/rHGBjB4mJgu35DbNutNMnAdB2hDGnwo4HgP1EayGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMsPAxEkga+tKtXps9AEFh1Zg4knMB8GA1UdIwQY MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt ZGVlNzY4NjAwMTNkLzEveXc4REVTU0JyNjBxMWVtejBBUVdIVm1EaVNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQrYMA0G CSqGSIb3DQEBCwUAA4IBAQBYvNUDnbfqLAwFHOizcj8eQ68IO6id0KMZiemlTG47 5efK8JU8WyHoV94y+p5Y4+NHEJ7U1yVrWlCxXR+Ru2uuDvXaMROYQrttO2dLnKnx mjqBgRpQKXYA5Nmb12glB2yjF0WAaimeRxgh9+OBDkSScrHH2GhDzb5MLWagH675 ql7esD1EZG/0wUesGwHVNfHKQSDg9H8bZF37kT1HGkwqFBF7azBJkTlx8nIbyXvE Pft+b3BOZXqSpURw4yXiDg1Hd226RpkwqUKKwbbCD8sF6+yryxH3Z7965ax364x4 sy9X0B7jcu8p1WTVYKFsDYYh/odxA4ruS95oHE/AywCJ -----END CERTIFICATE-----Generated at Sat Dec 6 09:53:28 2025 by rpki-client