This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/yqQOwfOV6Nv3bX6IX_p4FPOyWPM.roa File: yqQOwfOV6Nv3bX6IX_p4FPOyWPM.roa (raw, json) Hash identifier: e5fBn2lR+jx5NqULX47EuWrBVkXmNKa5RlSeE688KGg= Subject key identifier: CA:A4:0E:C1:F3:95:E8:DB:F7:6D:7E:88:5F:FA:78:14:F3:B2:58:F3 Certificate issuer: /CN=5a955ca458468c5776b8d9936dfe9b0b2668731c Certificate serial: 019A9236D256F3F09F690E425B18B97BFF51 Authority key identifier: 5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/yqQOwfOV6Nv3bX6IX_p4FPOyWPM.roa Signing time: Mon 17 Nov 2025 14:27:37 +0000 ROA not before: Mon 17 Nov 2025 14:27:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 3215 IP address blocks: 185.197.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:92:36:d2:56:f3:f0:9f:69:0e:42:5b:18:b9:7b:ff:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a955ca458468c5776b8d9936dfe9b0b2668731c Validity Not Before: Nov 17 14:27:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=caa40ec1f395e8dbf76d7e885ffa7814f3b258f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:38:5b:fc:fd:45:cb:30:34:b7:6a:ce:71:9d: 44:1c:f3:54:df:b8:3d:f7:f1:ba:a4:69:25:be:3f: a7:9c:6e:95:72:f7:d8:8b:c1:be:86:a3:84:9d:47: 73:3c:87:c1:1c:01:0b:a2:97:41:c2:57:df:12:71: b8:6b:dd:a3:d5:dc:e3:73:da:07:f9:9c:11:06:26: bd:b8:c0:2c:06:04:1f:1a:19:24:5f:1d:41:b0:e7: 8a:03:26:52:90:65:e9:0c:66:3e:f7:6f:69:fb:71: 04:87:8f:c5:b2:b2:4b:1f:81:c7:3a:06:84:9d:1d: 07:6c:fb:6f:4f:71:22:3d:50:bf:40:dc:12:df:0f: b2:1b:ca:c8:7f:4d:ee:8e:13:e8:87:5b:de:e9:60: 8e:03:13:b7:dd:2b:dc:5d:4e:bb:b9:8f:c2:42:43: 92:ae:58:6f:a7:61:4e:04:40:c7:41:fa:50:15:77: db:6f:d5:14:a6:c5:75:33:f8:9f:6c:99:06:c1:95: 48:32:05:d1:41:80:44:55:9c:46:40:03:e4:a2:87: 46:70:3b:f4:fa:db:65:16:39:bb:e5:2e:14:78:98: 0b:ed:5a:9a:f4:c5:5c:33:77:ec:b9:1b:5d:68:d7: c7:d3:ce:4c:b2:65:ac:bf:8d:79:e9:99:bf:3e:28: 74:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A4:0E:C1:F3:95:E8:DB:F7:6D:7E:88:5F:FA:78:14:F3:B2:58:F3 X509v3 Authority Key Identifier: keyid:5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/yqQOwfOV6Nv3bX6IX_p4FPOyWPM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.197.102.0/24 Signature Algorithm: sha256WithRSAEncryption 84:80:ed:f2:87:e0:60:a9:b7:aa:81:04:5b:f4:ce:ef:19:9d: ef:e5:96:47:54:ed:27:9d:35:0e:d0:1a:a6:03:82:d4:8b:d3: 00:76:fb:a2:ba:c7:6d:7d:84:56:1c:08:55:19:54:8b:22:c3: 28:1b:ff:3a:7c:ea:58:a1:4c:ed:60:60:98:de:cb:9f:96:41: be:0e:92:36:ea:9e:6c:10:9b:5d:91:35:ae:90:37:3d:ba:e3: fd:c8:d7:70:41:02:e1:b8:6e:7f:2f:77:aa:4c:f6:04:ed:dd: ab:ed:a7:5a:b4:f6:a5:cb:0b:0d:05:6f:96:a0:f2:43:30:63: e2:46:bc:8b:07:36:3d:92:bf:d1:d6:60:24:ba:b1:3d:2a:c8: db:17:78:02:ac:1e:f5:9b:67:0d:25:50:f3:05:8e:77:f4:dc: 0c:a7:df:bb:bb:47:3e:d2:de:23:d4:be:d7:a0:ac:39:2c:8a: 18:25:89:24:e7:41:f8:a8:15:6d:67:f6:07:6e:09:e5:d2:12: 75:2d:27:88:ff:b0:c3:c7:ba:20:b6:d5:f9:e7:e2:f2:e0:88: 2f:05:b6:40:ca:fc:b8:7d:87:05:95:26:ee:b3:dd:fe:b9:51: be:25:d0:86:be:07:eb:d9:55:69:4e:9a:e2:60:da:e6:e5:a8: 4f:49:1f:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqSNtJW8/CfaQ5CWxi5e/9RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTU1Y2E0NTg0NjhjNTc3NmI4ZDk5MzZkZmU5YjBiMjY2 ODczMWMwHhcNMjUxMTE3MTQyNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWE0MGVjMWYzOTVlOGRiZjc2ZDdlODg1ZmZhNzgxNGYzYjI1OGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Thb/P1FyzA0t2rOcZ1EHPNU37g9 9/G6pGklvj+nnG6VcvfYi8G+hqOEnUdzPIfBHAELopdBwlffEnG4a92j1dzjc9oH +ZwRBia9uMAsBgQfGhkkXx1BsOeKAyZSkGXpDGY+929p+3EEh4/FsrJLH4HHOgaE nR0HbPtvT3EiPVC/QNwS3w+yG8rIf03ujhPoh1ve6WCOAxO33SvcXU67uY/CQkOS rlhvp2FOBEDHQfpQFXfbb9UUpsV1M/ifbJkGwZVIMgXRQYBEVZxGQAPkoodGcDv0 +ttlFjm75S4UeJgL7Vqa9MVcM3fsuRtdaNfH085MsmWsv4156Zm/Pih0GwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMqkDsHzlejb921+iF/6eBTzsljzMB8GA1UdIwQY MBaAFFqVXKRYRoxXdrjZk23+mwsmaHMcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BWY3BGaEdqRmQydU5tVGJmNmJDeVpvY3h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9iZTlhMDAtZTBiMS00NTQxLTljMGYt MTM4NThkYTg1ZjUzLzEveXFRT3dmT1Y2TnYzYlg2SVhfcDRGUE95V1BNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9iZTlhMDAtZTBiMS00NTQxLTljMGYtMTM4NThkYTg1ZjUz LzEvV3BWY3BGaEdqRmQydU5tVGJmNmJDeVpvY3h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucVmMA0G CSqGSIb3DQEBCwUAA4IBAQCEgO3yh+BgqbeqgQRb9M7vGZ3v5ZZHVO0nnTUO0Bqm A4LUi9MAdvuiusdtfYRWHAhVGVSLIsMoG/86fOpYoUztYGCY3suflkG+DpI26p5s EJtdkTWukDc9uuP9yNdwQQLhuG5/L3eqTPYE7d2r7adatPalywsNBW+WoPJDMGPi RryLBzY9kr/R1mAkurE9KsjbF3gCrB71m2cNJVDzBY539NwMp9+7u0c+0t4j1L7X oKw5LIoYJYkk50H4qBVtZ/YHbgnl0hJ1LSeI/7DDx7ogttX55+Ly4IgvBbZAyvy4 fYcFlSbus93+uVG+JdCGvgfr2VVpTpriYNrm5ahPSR9V -----END CERTIFICATE-----Generated at Sat Dec 6 15:42:06 2025 by rpki-client