This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/f4478b-b6f3-40c2-b858-2c333a5a1646/1/YnVixS9QBSNC1Xd1ey8mGokC-Ds.roa File: YnVixS9QBSNC1Xd1ey8mGokC-Ds.roa (raw, json) Hash identifier: eDkLHOySAjp0NYwilNk4so4mTyd47A0v6j4fqq/qTBo= Subject key identifier: 62:75:62:C5:2F:50:05:23:42:D5:77:75:7B:2F:26:1A:89:02:F8:3B Certificate issuer: /CN=bf0b2a0daa8e5467cd33e94825a7863322d3853e Certificate serial: 019AA0C01942EC5BDAD18B8131B8AA8A2F69 Authority key identifier: BF:0B:2A:0D:AA:8E:54:67:CD:33:E9:48:25:A7:86:33:22:D3:85:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vwsqDaqOVGfNM-lIJaeGMyLThT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/f4478b-b6f3-40c2-b858-2c333a5a1646/1/YnVixS9QBSNC1Xd1ey8mGokC-Ds.roa Signing time: Thu 20 Nov 2025 10:12:15 +0000 ROA not before: Thu 20 Nov 2025 10:12:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39686 IP address blocks: 109.175.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/f4478b-b6f3-40c2-b858-2c333a5a1646/1/vwsqDaqOVGfNM-lIJaeGMyLThT4.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/f4478b-b6f3-40c2-b858-2c333a5a1646/1/vwsqDaqOVGfNM-lIJaeGMyLThT4.mft rsync://rpki.ripe.net/repository/DEFAULT/vwsqDaqOVGfNM-lIJaeGMyLThT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:c0:19:42:ec:5b:da:d1:8b:81:31:b8:aa:8a:2f:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf0b2a0daa8e5467cd33e94825a7863322d3853e Validity Not Before: Nov 20 10:12:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=627562c52f50052342d577757b2f261a8902f83b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f9:8e:cd:ab:85:94:95:e4:e1:bf:75:55:5a: 7a:a1:cb:31:cf:0a:70:fa:16:60:db:4f:ce:74:d2: 64:72:1a:ab:91:4d:20:34:d8:04:a0:b0:2b:a1:3b: 99:d0:34:46:e1:70:b3:31:74:45:cc:ce:25:8f:15: 5b:a7:8c:52:71:16:a6:78:37:5a:dd:b1:f7:f0:cf: 99:a2:58:c8:b1:e4:65:64:c9:1b:b4:59:68:f0:8e: 4a:c5:25:2f:a2:e4:47:f8:43:99:25:b5:83:8e:45: f8:37:b0:f9:f9:0d:f1:8d:07:3c:e2:09:fa:f7:c0: ea:15:b6:95:af:7a:3f:89:9b:0f:f9:72:79:7b:48: 28:5d:dd:0a:42:f8:f7:da:e2:65:3e:7d:f2:0b:f4: 4c:60:7e:0b:82:74:a8:45:4b:68:71:37:cd:57:35: b6:78:44:89:3c:de:da:e1:b2:17:b9:fe:27:88:e1: 74:e6:45:8d:1e:e4:92:45:12:3d:20:bb:f3:97:cb: 32:b9:07:18:4b:2a:ac:66:8a:1f:de:86:19:48:8d: 7a:98:ae:2a:c2:5a:63:26:0f:78:d6:04:d3:e0:36: 21:ad:5f:87:39:ff:b4:0d:d0:a4:9a:45:2d:ce:55: c9:28:8b:a8:27:ef:dd:4f:09:64:54:ca:bf:74:0c: db:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:75:62:C5:2F:50:05:23:42:D5:77:75:7B:2F:26:1A:89:02:F8:3B X509v3 Authority Key Identifier: keyid:BF:0B:2A:0D:AA:8E:54:67:CD:33:E9:48:25:A7:86:33:22:D3:85:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vwsqDaqOVGfNM-lIJaeGMyLThT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f4478b-b6f3-40c2-b858-2c333a5a1646/1/YnVixS9QBSNC1Xd1ey8mGokC-Ds.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f4478b-b6f3-40c2-b858-2c333a5a1646/1/vwsqDaqOVGfNM-lIJaeGMyLThT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.175.172.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:0b:70:97:57:7e:8e:51:28:4c:c4:cb:23:45:81:66:8c:a5: 45:0a:10:91:f0:06:3d:38:26:27:b3:9b:c1:7b:4f:20:7f:8c: c4:14:10:91:27:6d:01:08:18:56:5c:53:f2:3b:ce:08:5c:5d: 63:6e:a4:7d:41:2f:46:d7:f8:ff:17:3b:32:66:27:0b:2e:cc: 88:ea:81:31:c4:b2:91:17:14:72:18:94:ae:ae:df:ec:25:fe: e2:ca:30:09:0b:a5:4f:46:8f:3e:ef:a1:8a:c1:9d:a4:1e:33: a3:c0:9a:d5:f6:89:3f:88:11:92:97:f1:27:83:c6:35:68:6c: 10:66:93:ff:16:11:f6:53:f5:cf:e0:59:5f:45:64:d7:9d:b0: 7a:fe:55:86:9f:3d:1a:d3:48:0f:d2:6b:f3:60:06:a5:55:7c: 7a:de:c4:c5:7a:de:dd:fd:38:83:e6:05:9c:2e:6a:cd:99:7b: 6d:d3:d4:cd:cb:db:5e:4c:62:b8:d3:52:55:61:80:92:e6:e5: fe:d0:ed:78:c2:03:53:50:1a:1d:26:dd:b0:5d:0f:37:34:a5: 54:81:33:08:72:2b:12:18:ed:5f:5c:b5:7a:68:60:83:52:7d: 32:eb:f0:3e:8f:63:e0:b4:8a:93:09:9f:68:ea:84:37:19:3b: 97:ac:92:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqgwBlC7Fva0YuBMbiqii9pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMGIyYTBkYWE4ZTU0NjdjZDMzZTk0ODI1YTc4NjMzMjJk Mzg1M2UwHhcNMjUxMTIwMTAxMjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Mjc1NjJjNTJmNTAwNTIzNDJkNTc3NzU3YjJmMjYxYTg5MDJmODNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/mOzauFlJXk4b91VVp6ocsxzwpw +hZg20/OdNJkchqrkU0gNNgEoLAroTuZ0DRG4XCzMXRFzM4ljxVbp4xScRameDda 3bH38M+ZoljIseRlZMkbtFlo8I5KxSUvouRH+EOZJbWDjkX4N7D5+Q3xjQc84gn6 98DqFbaVr3o/iZsP+XJ5e0goXd0KQvj32uJlPn3yC/RMYH4LgnSoRUtocTfNVzW2 eESJPN7a4bIXuf4niOF05kWNHuSSRRI9ILvzl8syuQcYSyqsZoof3oYZSI16mK4q wlpjJg941gTT4DYhrV+HOf+0DdCkmkUtzlXJKIuoJ+/dTwlkVMq/dAzb+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGJ1YsUvUAUjQtV3dXsvJhqJAvg7MB8GA1UdIwQY MBaAFL8LKg2qjlRnzTPpSCWnhjMi04U+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdndzcURhcU9WR2ZOTS1sSUphZUdNeUxUaFQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9mNDQ3OGItYjZmMy00MGMyLWI4NTgt MmMzMzNhNWExNjQ2LzEvWW5WaXhTOVFCU05DMVhkMWV5OG1Hb2tDLURzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9mNDQ3OGItYjZmMy00MGMyLWI4NTgtMmMzMzNhNWExNjQ2 LzEvdndzcURhcU9WR2ZOTS1sSUphZUdNeUxUaFQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAba+sMA0G CSqGSIb3DQEBCwUAA4IBAQAqC3CXV36OUShMxMsjRYFmjKVFChCR8AY9OCYns5vB e08gf4zEFBCRJ20BCBhWXFPyO84IXF1jbqR9QS9G1/j/FzsyZicLLsyI6oExxLKR FxRyGJSurt/sJf7iyjAJC6VPRo8+76GKwZ2kHjOjwJrV9ok/iBGSl/Eng8Y1aGwQ ZpP/FhH2U/XP4FlfRWTXnbB6/lWGnz0a00gP0mvzYAalVXx63sTFet7d/TiD5gWc LmrNmXtt09TNy9teTGK401JVYYCS5uX+0O14wgNTUBodJt2wXQ83NKVUgTMIcisS GO1fXLV6aGCDUn0y6/A+j2PgtIqTCZ9o6oQ3GTuXrJKP -----END CERTIFICATE-----Generated at Sat Dec 6 15:39:14 2025 by rpki-client