This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/yO9sM3Dqyygq-N46b0jWKjNmuu4.roa File: yO9sM3Dqyygq-N46b0jWKjNmuu4.roa (raw, json) Hash identifier: ZYzYqF0JFtlb4C5F4uKW1WdeJkwaMXC9t3i6JUhvzN0= Subject key identifier: C8:EF:6C:33:70:EA:CB:28:2A:F8:DE:3A:6F:48:D6:2A:33:66:BA:EE Certificate issuer: /CN=c39bc30a748960b227a1bf26216067edd05c1a7d Certificate serial: 019ADDB6AE29028B859BECFC59846D1F62C5 Authority key identifier: C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/yO9sM3Dqyygq-N46b0jWKjNmuu4.roa Signing time: Tue 02 Dec 2025 06:18:48 +0000 ROA not before: Tue 02 Dec 2025 06:18:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51683 IP address blocks: 31.40.241.0/24 maxlen: 24 31.40.243.0/24 maxlen: 24 185.9.138.0/24 maxlen: 24 185.115.209.0/24 maxlen: 24 2a07:9d40::/48 maxlen: 48 2a07:9d40:1::/48 maxlen: 48 2a07:9d40:2::/48 maxlen: 48 2a07:9d40:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.crl rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:dd:b6:ae:29:02:8b:85:9b:ec:fc:59:84:6d:1f:62:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c39bc30a748960b227a1bf26216067edd05c1a7d Validity Not Before: Dec 2 06:18:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c8ef6c3370eacb282af8de3a6f48d62a3366baee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5e:f0:4d:ea:61:0a:98:da:37:14:48:6c:38: 37:83:07:c1:94:cf:c0:3f:92:a7:55:96:85:62:5f: 09:ad:f8:00:e5:f2:2e:c6:ac:89:de:ff:b0:da:07: 11:d2:65:d2:42:bc:f0:57:cf:e6:71:88:e8:35:0a: 47:0a:6d:66:ba:1d:f7:6f:e0:e9:0b:85:fe:3a:69: 00:4c:6b:82:51:28:fb:03:9a:21:06:3e:a4:09:de: 1f:0b:8c:9a:9e:9e:ac:08:e2:e7:95:8d:df:1d:55: 19:a1:b7:0e:c2:79:8c:46:6e:b2:7e:1f:ff:76:9a: d4:46:da:43:c5:3a:67:3f:c8:c8:58:5a:21:d9:b0: 27:1a:0f:66:fe:3c:47:89:23:ab:3e:cf:a9:0c:f8: 17:26:b3:90:f0:3c:56:ba:f3:94:16:62:e9:25:52: 06:74:d7:5d:35:c6:78:3b:c3:83:c6:d9:87:f4:63: c5:8f:f8:d4:83:3b:c5:94:f5:cc:c3:51:70:8d:3e: 4f:79:e4:2d:82:91:05:d3:0c:b1:4f:a4:6e:e9:5d: 84:ff:41:1a:b2:5e:23:ad:bf:e3:3f:17:bb:5a:12: 52:0e:7d:f2:7a:ae:0f:b5:e7:86:78:11:0b:ed:8f: 71:bc:97:95:f1:63:11:79:36:a1:8b:86:a1:4d:8f: 0d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:EF:6C:33:70:EA:CB:28:2A:F8:DE:3A:6F:48:D6:2A:33:66:BA:EE X509v3 Authority Key Identifier: keyid:C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/yO9sM3Dqyygq-N46b0jWKjNmuu4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.241.0/24 31.40.243.0/24 185.9.138.0/24 185.115.209.0/24 IPv6: 2a07:9d40::/46 Signature Algorithm: sha256WithRSAEncryption 3a:74:39:70:40:02:4d:51:36:ae:d3:5a:1c:72:dd:39:79:e1: 0f:8c:d1:9a:9f:57:b6:86:9a:a3:1a:22:2d:b6:b4:2e:d0:0a: e4:cd:51:8e:20:50:35:e6:12:04:18:00:1d:54:dc:eb:9f:fa: a7:b1:00:d5:61:f0:e8:3d:7e:b2:31:7b:39:b7:45:df:77:7c: d9:8a:da:5e:73:77:0c:e0:ed:99:b1:f5:05:e8:e6:21:27:81: 23:03:7e:16:28:74:ee:9a:ee:e2:5a:17:d7:64:19:a9:3a:96: 15:16:4c:7c:ab:06:6f:30:93:21:e2:df:34:f5:b7:af:b6:08: f4:fd:84:52:5d:59:cb:a5:dc:0a:02:c6:64:5d:fa:4f:30:23: eb:ff:9b:a2:66:3d:25:1b:ab:b3:42:f8:4a:4d:fe:b8:c1:3b: 6d:72:7d:11:8e:00:2f:6a:a5:ef:68:23:27:df:fd:b7:31:45: 35:4f:68:e8:72:49:b4:24:ce:78:84:bb:ae:9b:6f:cb:73:95: d5:4b:da:29:4f:e5:cf:bd:39:31:09:86:1d:da:14:45:36:3c: 55:4b:ac:3b:d5:a9:5f:22:a0:2f:f9:c8:32:0f:44:9e:0c:07: 67:49:92:6b:b7:04:7e:02:3a:ef:b2:3e:33:6d:8d:13:02:0b: 25:ce:bf:02 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZrdtq4pAouFm+z8WYRtH2LFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzOWJjMzBhNzQ4OTYwYjIyN2ExYmYyNjIxNjA2N2VkZDA1 YzFhN2QwHhcNMjUxMjAyMDYxODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGVmNmMzMzcwZWFjYjI4MmFmOGRlM2E2ZjQ4ZDYyYTMzNjZiYWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF7wTephCpjaNxRIbDg3gwfBlM/A P5KnVZaFYl8JrfgA5fIuxqyJ3v+w2gcR0mXSQrzwV8/mcYjoNQpHCm1muh33b+Dp C4X+OmkATGuCUSj7A5ohBj6kCd4fC4yanp6sCOLnlY3fHVUZobcOwnmMRm6yfh// dprURtpDxTpnP8jIWFoh2bAnGg9m/jxHiSOrPs+pDPgXJrOQ8DxWuvOUFmLpJVIG dNddNcZ4O8ODxtmH9GPFj/jUgzvFlPXMw1FwjT5PeeQtgpEF0wyxT6Ru6V2E/0Ea sl4jrb/jPxe7WhJSDn3yeq4PteeGeBEL7Y9xvJeV8WMReTahi4ahTY8NZQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFMjvbDNw6ssoKvjeOm9I1iozZrruMB8GA1UdIwQY MBaAFMObwwp0iWCyJ6G/JiFgZ+3QXBp9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzV2RENuU0pZTElub2I4bUlXQm43ZEJjR24wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC80OTljNDEtOTQ1ZS00ZGEzLWE0OTgt OTIwOWY3YjdlZjgxLzEveU85c00zRHF5eWdxLU40NmIwaldLak5tdXU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC80OTljNDEtOTQ1ZS00ZGEzLWE0OTgtOTIwOWY3YjdlZjgx LzEvdzV2RENuU0pZTElub2I4bUlXQm43ZEJjR24wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQAHyjxAwQA HyjzAwQAuQmKAwQAuXPRMA8EAgACMAkDBwIqB51AAAAwDQYJKoZIhvcNAQELBQAD ggEBADp0OXBAAk1RNq7TWhxy3Tl54Q+M0ZqfV7aGmqMaIi22tC7QCuTNUY4gUDXm EgQYAB1U3Ouf+qexANVh8Og9frIxezm3Rd93fNmK2l5zdwzg7Zmx9QXo5iEngSMD fhYodO6a7uJaF9dkGak6lhUWTHyrBm8wkyHi3zT1t6+2CPT9hFJdWcul3AoCxmRd +k8wI+v/m6JmPSUbq7NC+EpN/rjBO21yfRGOAC9qpe9oIyff/bcxRTVPaOhySbQk zniEu66bb8tzldVL2ilP5c+9OTEJhh3aFEU2PFVLrDvVqV8ioC/5yDIPRJ4MB2dJ kmu3BH4COu+yPjNtjRMCCyXOvwI= -----END CERTIFICATE-----Generated at Sun Dec 7 03:27:22 2025 by rpki-client