This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/yLBzNCzZxN9GCNxn6p5sTKdHE4o.roa File: yLBzNCzZxN9GCNxn6p5sTKdHE4o.roa (raw, json) Hash identifier: PNqz9ZvJldDK2U1Jiu+rgZHN7bn1a9wpMIJrSIx6BRc= Subject key identifier: C8:B0:73:34:2C:D9:C4:DF:46:08:DC:67:EA:9E:6C:4C:A7:47:13:8A Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019AED213DF444D2EA38C457ABEF31FD9C48 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/yLBzNCzZxN9GCNxn6p5sTKdHE4o.roa Signing time: Fri 05 Dec 2025 06:09:29 +0000 ROA not before: Fri 05 Dec 2025 06:09:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 984 IP address blocks: 95.177.63.0/24 maxlen: 24 95.177.67.0/24 maxlen: 24 95.177.74.0/24 maxlen: 24 95.177.85.0/24 maxlen: 24 213.177.226.0/23 maxlen: 24 213.177.230.0/23 maxlen: 24 213.177.234.0/23 maxlen: 24 213.177.238.0/23 maxlen: 24 213.177.242.0/23 maxlen: 24 213.177.246.0/23 maxlen: 24 213.177.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:21:3d:f4:44:d2:ea:38:c4:57:ab:ef:31:fd:9c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Dec 5 06:09:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c8b073342cd9c4df4608dc67ea9e6c4ca747138a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6f:e5:dd:e0:8e:23:32:a1:bb:0c:8d:bb:61: e9:41:a4:44:e8:de:e1:0c:27:f9:1a:e8:7e:cd:85: e4:d5:b7:67:a1:0a:81:32:1e:63:f7:80:ed:69:10: 18:e3:13:bd:74:c2:46:2e:73:9c:ad:3b:3e:34:09: 3a:66:bb:d9:a5:5a:ac:40:d5:0a:4c:2d:12:b2:5b: 3a:5e:40:cf:ba:05:96:27:bd:2c:26:c1:4d:b8:bb: 9e:70:ee:d5:cb:c3:15:66:ed:89:2d:c3:8d:3e:5e: 7e:bb:0f:87:86:1d:9c:3e:59:a7:63:5b:ff:33:86: 21:5d:e1:a1:15:18:d5:2b:3a:7c:a6:a1:56:98:97: 3b:00:9c:6d:c0:42:10:a4:ff:1b:17:53:2a:67:2c: 85:0e:2d:40:61:f9:34:4e:a3:c3:87:dd:16:01:32: 37:30:07:e5:d2:bf:35:27:c5:e1:e1:96:94:dd:52: 83:42:8c:ce:25:f8:43:b5:d5:14:e3:05:f7:e8:77: 2c:2a:a3:3c:a6:9d:2c:04:9c:2a:7c:45:b0:d0:d8: a3:3c:51:b4:8f:8e:0f:b8:12:d5:26:01:20:d8:cd: 87:ef:f3:3b:b5:6e:70:5a:6f:98:58:3f:fc:b7:81: 46:b5:f6:07:f5:be:a3:71:81:1f:77:1d:10:e9:40: 58:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B0:73:34:2C:D9:C4:DF:46:08:DC:67:EA:9E:6C:4C:A7:47:13:8A X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/yLBzNCzZxN9GCNxn6p5sTKdHE4o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.177.63.0/24 95.177.67.0/24 95.177.74.0/24 95.177.85.0/24 213.177.226.0/23 213.177.230.0/23 213.177.234.0/23 213.177.238.0/23 213.177.242.0/23 213.177.246.0/23 213.177.250.0/23 Signature Algorithm: sha256WithRSAEncryption 88:08:50:6f:74:e3:d6:27:f0:b9:92:3d:0d:dc:d7:4c:61:57: 44:8b:72:9f:92:dc:e4:1c:8a:55:10:da:12:31:f9:06:9f:48: a1:74:00:e4:33:b3:ee:80:4e:78:83:72:b6:24:31:2f:7f:86: ba:80:f1:43:87:c6:bf:c8:b5:0c:90:8f:3a:f8:0d:b7:cc:16: 88:65:40:b1:3f:e7:8a:76:f6:28:12:be:c9:c7:3f:d4:fe:39: 88:81:54:ab:63:88:b1:8f:cc:a4:0f:eb:b4:9d:83:33:78:e6: f8:4b:f1:97:20:d0:71:50:e0:41:4f:ed:50:a2:b2:ca:93:40: 41:27:2d:e5:ae:12:70:97:22:ad:8b:7b:0c:2d:be:d6:a1:63: 21:7e:24:02:29:cc:bd:5a:24:54:13:62:ff:d9:5e:f1:b4:87: 94:d6:f0:df:30:f9:8c:d7:ac:41:1f:0f:a9:fa:9f:a1:c8:c9: 15:09:b7:98:df:94:18:a0:8c:03:af:ef:f9:af:dc:97:f9:0b: 81:ec:89:60:56:91:a6:3b:41:50:e8:43:f1:87:e7:f8:25:6e: 1d:1a:8d:78:e4:7f:63:aa:40:56:df:d2:ae:b9:2f:8b:ab:d2: 1e:cd:26:09:f1:d0:f4:2c:c8:0b:6e:86:92:bc:9c:ac:eb:4a: d6:02:ed:79 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZrtIT30RNLqOMRXq+8x/ZxIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMjA1MDYwOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGIwNzMzNDJjZDljNGRmNDYwOGRjNjdlYTllNmM0Y2E3NDcxMzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3W/l3eCOIzKhuwyNu2HpQaRE6N7h DCf5Guh+zYXk1bdnoQqBMh5j94DtaRAY4xO9dMJGLnOcrTs+NAk6ZrvZpVqsQNUK TC0Ssls6XkDPugWWJ70sJsFNuLuecO7Vy8MVZu2JLcONPl5+uw+Hhh2cPlmnY1v/ M4YhXeGhFRjVKzp8pqFWmJc7AJxtwEIQpP8bF1MqZyyFDi1AYfk0TqPDh90WATI3 MAfl0r81J8Xh4ZaU3VKDQozOJfhDtdUU4wX36HcsKqM8pp0sBJwqfEWw0NijPFG0 j44PuBLVJgEg2M2H7/M7tW5wWm+YWD/8t4FGtfYH9b6jcYEfdx0Q6UBY/wIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFMiwczQs2cTfRgjcZ+qebEynRxOKMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEveUxCek5Delp4TjlHQ054bjZwNXNUS2RIRTRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAX7E/AwQA X7FDAwQAX7FKAwQAX7FVAwQB1bHiAwQB1bHmAwQB1bHqAwQB1bHuAwQB1bHyAwQB 1bH2AwQB1bH6MA0GCSqGSIb3DQEBCwUAA4IBAQCICFBvdOPWJ/C5kj0N3NdMYVdE i3KfktzkHIpVENoSMfkGn0ihdADkM7PugE54g3K2JDEvf4a6gPFDh8a/yLUMkI86 +A23zBaIZUCxP+eKdvYoEr7Jxz/U/jmIgVSrY4ixj8ykD+u0nYMzeOb4S/GXINBx UOBBT+1QorLKk0BBJy3lrhJwlyKti3sMLb7WoWMhfiQCKcy9WiRUE2L/2V7xtIeU 1vDfMPmM16xBHw+p+p+hyMkVCbeY35QYoIwDr+/5r9yX+QuB7IlgVpGmO0FQ6EPx h+f4JW4dGo145H9jqkBW39KuuS+Lq9IezSYJ8dD0LMgLboaSvJys60rWAu15 -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:26 2025 by rpki-client