This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/Yrt_BouTpfD_-Lptb2QjKUeabDQ.roa File: Yrt_BouTpfD_-Lptb2QjKUeabDQ.roa (raw, json) Hash identifier: RVwFt2z75ZWHxQq8Pa0dw4qlC4U1TJ+Gtxhhest4JkU= Subject key identifier: 62:BB:7F:06:8B:93:A5:F0:FF:F8:BA:6D:6F:64:23:29:47:9A:6C:34 Certificate issuer: /CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da Certificate serial: 019A76F2D6EF73EA6891D1B76BB11A41CFEF Authority key identifier: 4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/Yrt_BouTpfD_-Lptb2QjKUeabDQ.roa Signing time: Wed 12 Nov 2025 07:23:37 +0000 ROA not before: Wed 12 Nov 2025 07:23:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204457 IP address blocks: 87.121.22.0/24 maxlen: 24 185.248.12.0/22 maxlen: 22 185.248.12.0/24 maxlen: 24 185.248.13.0/24 maxlen: 24 185.248.14.0/24 maxlen: 24 185.248.15.0/24 maxlen: 24 194.4.153.0/24 maxlen: 24 2a0a:a580::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:76:f2:d6:ef:73:ea:68:91:d1:b7:6b:b1:1a:41:cf:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da Validity Not Before: Nov 12 07:23:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=62bb7f068b93a5f0fff8ba6d6f642329479a6c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:88:57:9c:f6:89:40:e5:af:4b:75:89:70:39: be:50:b7:20:92:f9:c0:a4:97:3b:a8:44:61:e8:72: 24:4b:a7:7b:00:2e:a1:76:b4:72:ce:a7:9d:f2:31: 70:56:4d:fd:c7:88:97:6f:b2:31:7b:de:22:ef:09: 86:28:5d:d1:f8:4d:08:95:ef:ce:3f:78:91:9b:02: 45:68:65:d2:c6:fe:70:08:d1:82:12:47:29:d8:30: 9a:cc:2e:4f:67:97:b3:6c:c8:fe:f5:48:e1:8e:7b: cc:e4:d7:5f:fd:a3:a6:6c:c1:68:a8:c8:25:5c:a3: 31:00:b7:eb:df:f3:ee:8d:22:e5:32:61:70:b4:3f: bb:7f:1b:08:b3:cf:33:2d:dc:c8:99:d8:ac:93:b3: 2a:52:47:bc:34:ba:a0:fa:c6:26:74:08:b2:90:f5: 85:ee:b4:73:ef:6e:2e:0f:fa:d7:f8:d2:31:dd:c8: 5e:1e:3e:97:48:af:33:7f:71:2b:a1:14:0f:0c:69: ad:b3:c9:3c:38:63:8e:90:30:a8:60:12:27:cd:28: 6f:e5:81:6a:cc:d9:13:4a:d5:f6:07:1b:7a:5c:c4: 03:21:65:44:52:65:d2:fc:51:bd:29:5b:33:79:88: 2b:31:27:76:57:5b:cd:57:e3:fa:bd:41:91:b3:50: 13:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:BB:7F:06:8B:93:A5:F0:FF:F8:BA:6D:6F:64:23:29:47:9A:6C:34 X509v3 Authority Key Identifier: keyid:4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/Yrt_BouTpfD_-Lptb2QjKUeabDQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.121.22.0/24 185.248.12.0/22 194.4.153.0/24 IPv6: 2a0a:a580::/29 Signature Algorithm: sha256WithRSAEncryption 1f:b9:84:1f:f5:05:41:0a:5f:76:5e:1e:5a:00:cb:63:66:c7: f0:de:17:4c:49:00:cf:27:3d:4f:bb:14:2b:0a:33:8e:3f:0f: 2b:64:c6:bb:16:05:e1:1b:4c:5c:0d:b8:d5:94:ca:ea:e7:f1: 00:03:87:fe:ff:e6:79:4f:ba:65:ef:91:ed:06:e7:84:46:6d: c2:ca:51:ed:10:6b:7d:f8:4b:f2:0c:84:6a:90:00:f8:5a:8d: bf:68:fd:20:3c:dc:e7:4d:49:ac:78:2e:88:b2:83:95:77:49: 29:44:72:96:fb:1d:2b:82:fe:f6:f6:a2:c0:87:3c:be:d9:4f: cd:5c:ac:10:e0:3e:62:6c:3a:7d:ae:00:bb:f7:fd:69:ef:7a: 08:5a:18:ff:9c:d8:7d:ed:15:f0:ea:62:23:70:f6:fc:b5:e8: 84:22:6b:b5:ba:17:23:4a:73:5b:1c:6e:7e:0a:6f:6a:c7:6c: 53:d8:4a:74:41:c4:9b:8a:03:01:40:18:05:c6:32:ea:3e:52: 34:9f:dc:0c:71:7d:46:e2:58:3b:b9:32:41:dc:45:b8:02:96: 29:1f:76:d6:58:ed:19:fc:b3:46:8c:f8:d8:d2:6c:f1:58:10: 74:af:05:74:9b:c0:7d:26:33:9c:43:d6:93:d2:fd:16:bc:a3: 82:c6:eb:1b -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZp28tbvc+pokdG3a7EaQc/vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhMDk3M2MxZjQ0M2VjNGE4Mzg3YWFkN2FjYTc1ZDA3YjZm YWE5ZGEwHhcNMjUxMTEyMDcyMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmJiN2YwNjhiOTNhNWYwZmZmOGJhNmQ2ZjY0MjMyOTQ3OWE2YzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIhXnPaJQOWvS3WJcDm+ULcgkvnA pJc7qERh6HIkS6d7AC6hdrRyzqed8jFwVk39x4iXb7Ixe94i7wmGKF3R+E0Ile/O P3iRmwJFaGXSxv5wCNGCEkcp2DCazC5PZ5ezbMj+9UjhjnvM5Ndf/aOmbMFoqMgl XKMxALfr3/PujSLlMmFwtD+7fxsIs88zLdzImdisk7MqUke8NLqg+sYmdAiykPWF 7rRz724uD/rX+NIx3cheHj6XSK8zf3EroRQPDGmts8k8OGOOkDCoYBInzShv5YFq zNkTStX2Bxt6XMQDIWVEUmXS/FG9KVszeYgrMSd2V1vNV+P6vUGRs1ATKQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFGK7fwaLk6Xw//i6bW9kIylHmmw0MB8GA1UdIwQY MBaAFEoJc8H0Q+xKg4eq16ynXQe2+qnaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2dsendmUkQ3RXFEaDZyWHJLZGRCN2I2cWRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xOGUwZjUtNGUxNC00MzFhLWI3OTMt MTIxNzcyOWFmMWM4LzEvWXJ0X0JvdVRwZkRfLUxwdGIyUWpLVWVhYkRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8xOGUwZjUtNGUxNC00MzFhLWI3OTMtMTIxNzcyOWFmMWM4 LzEvU2dsendmUkQ3RXFEaDZyWHJLZGRCN2I2cWRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAV3kWAwQC ufgMAwQAwgSZMA0EAgACMAcDBQMqCqWAMA0GCSqGSIb3DQEBCwUAA4IBAQAfuYQf 9QVBCl92Xh5aAMtjZsfw3hdMSQDPJz1PuxQrCjOOPw8rZMa7FgXhG0xcDbjVlMrq 5/EAA4f+/+Z5T7pl75HtBueERm3CylHtEGt9+EvyDIRqkAD4Wo2/aP0gPNznTUms eC6IsoOVd0kpRHKW+x0rgv729qLAhzy+2U/NXKwQ4D5ibDp9rgC79/1p73oIWhj/ nNh97RXw6mIjcPb8teiEImu1uhcjSnNbHG5+Cm9qx2xT2Ep0QcSbigMBQBgFxjLq PlI0n9wMcX1G4lg7uTJB3EW4ApYpH3bWWO0Z/LNGjPjY0mzxWBB0rwV0m8B9JjOc Q9aT0v0WvKOCxusb -----END CERTIFICATE-----Generated at Sat Dec 6 17:18:05 2025 by rpki-client