This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/dYaiP8zOqyAblX7K10poXjDwYNY.roa File: dYaiP8zOqyAblX7K10poXjDwYNY.roa (raw, json) Hash identifier: mFA0v7BdHpz3pIPUmIZnn1+6O635wtYSPjjMIkR3dB8= Subject key identifier: 75:86:A2:3F:CC:CE:AB:20:1B:95:7E:CA:D7:4A:68:5E:30:F0:60:D6 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B06EA311F81C83218CCFD88DD9B980D4E Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/dYaiP8zOqyAblX7K10poXjDwYNY.roa Signing time: Wed 10 Dec 2025 06:19:29 +0000 ROA not before: Wed 10 Dec 2025 06:19:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 62.106.89.0/24 maxlen: 24 2a10:7403::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:ea:31:1f:81:c8:32:18:cc:fd:88:dd:9b:98:0d:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Dec 10 06:19:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7586a23fccceab201b957ecad74a685e30f060d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5a:d2:0f:5f:b5:79:ca:19:04:29:b5:80:50: 36:6b:3e:c8:56:ab:5c:2e:95:d2:b2:41:cb:31:70: 8a:76:dc:fa:a9:7f:88:d9:34:43:c0:71:ac:0e:ff: 15:de:a0:fa:59:61:a0:fa:8c:b8:bb:1e:d5:30:1f: 23:bb:ca:8d:ed:ec:4b:e5:d8:4f:87:a8:74:f3:df: a8:6e:13:2a:d0:f5:c3:01:b9:fb:3c:60:48:aa:26: 39:27:8f:9c:43:d0:c1:86:da:d5:04:13:44:87:74: 05:2b:f6:d5:e9:17:2c:5c:ba:06:84:a8:56:c3:8c: dd:b2:f0:71:fa:81:19:cf:72:de:5c:00:dd:ea:6a: 6f:57:fe:8a:60:0c:a1:22:c1:5f:13:c2:79:5c:8c: 81:d9:67:5a:29:fc:bc:47:2e:92:1c:df:6f:77:cf: 6f:fc:74:6d:ee:00:a4:fd:70:02:a6:c8:bf:fb:75: 82:a8:3a:1d:4b:d3:60:42:cc:75:e4:60:5c:30:96: ba:b2:60:25:55:6b:8d:b9:fd:8b:ac:8b:b7:08:aa: db:d7:17:c7:c5:43:f0:60:f0:4b:f9:b5:b2:2a:3f: 59:0b:83:e8:64:c8:7a:5e:57:0a:f7:6b:1a:55:eb: 8e:9c:40:08:36:4b:64:94:ed:11:6c:16:43:df:f1: 45:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:86:A2:3F:CC:CE:AB:20:1B:95:7E:CA:D7:4A:68:5E:30:F0:60:D6 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/dYaiP8zOqyAblX7K10poXjDwYNY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.106.89.0/24 IPv6: 2a10:7403::/32 Signature Algorithm: sha256WithRSAEncryption 1f:7a:ab:69:c5:6b:77:37:94:d1:8b:eb:88:14:4f:6f:25:b0: ad:b0:b2:69:4d:86:50:9d:7e:0f:9f:fb:75:34:33:92:c3:1a: 52:3b:e3:47:d8:eb:44:47:da:c0:5c:26:82:a9:56:c2:a0:4d: e2:df:89:31:53:28:8b:21:4c:87:19:96:32:b5:1d:55:c0:7b: 1f:a0:42:ec:df:80:a3:59:86:83:83:87:0b:e7:9d:83:72:41: b2:20:27:af:c9:82:4b:f2:3c:15:07:a1:4c:55:6d:83:41:56: 96:5c:b2:5b:09:92:ef:d1:06:8c:09:93:e3:c3:d9:45:bf:92: c2:08:bd:12:a3:dd:48:b0:f2:93:77:6c:f1:a8:74:df:05:f4: e0:98:02:d8:15:7b:de:ea:48:14:c9:53:5e:63:ef:6b:9e:24: 3a:92:74:b5:06:70:e3:da:3c:d2:93:78:4e:da:40:47:47:8e: 2c:d4:72:34:87:c2:e4:53:ae:8b:c0:82:85:c6:31:85:72:c9: fe:e7:c0:fa:1a:d1:c4:4b:aa:68:c8:28:80:7c:4b:78:84:37: 8d:bf:26:9d:1c:ce:3e:40:e2:7f:3e:23:e0:a0:e6:5d:25:50: 8f:cd:66:5e:61:52:40:19:a7:7d:d6:73:3b:aa:06:40:4c:1b: a4:5a:cb:b2 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZsG6jEfgcgyGMz9iN2bmA1OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjUxMjEwMDYxOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTg2YTIzZmNjY2VhYjIwMWI5NTdlY2FkNzRhNjg1ZTMwZjA2MGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlrSD1+1ecoZBCm1gFA2az7IVqtc LpXSskHLMXCKdtz6qX+I2TRDwHGsDv8V3qD6WWGg+oy4ux7VMB8ju8qN7exL5dhP h6h089+obhMq0PXDAbn7PGBIqiY5J4+cQ9DBhtrVBBNEh3QFK/bV6RcsXLoGhKhW w4zdsvBx+oEZz3LeXADd6mpvV/6KYAyhIsFfE8J5XIyB2WdaKfy8Ry6SHN9vd89v /HRt7gCk/XACpsi/+3WCqDodS9NgQsx15GBcMJa6smAlVWuNuf2LrIu3CKrb1xfH xUPwYPBL+bWyKj9ZC4PoZMh6XlcK92saVeuOnEAINktklO0RbBZD3/FF9QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHWGoj/MzqsgG5V+ytdKaF4w8GDWMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvZFlhaVA4ek9xeUFibFg3SzEwcG9YakR3WU5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAPmpZMA0E AgACMAcDBQAqEHQDMA0GCSqGSIb3DQEBCwUAA4IBAQAfeqtpxWt3N5TRi+uIFE9v JbCtsLJpTYZQnX4Pn/t1NDOSwxpSO+NH2OtER9rAXCaCqVbCoE3i34kxUyiLIUyH GZYytR1VwHsfoELs34CjWYaDg4cL552DckGyICevyYJL8jwVB6FMVW2DQVaWXLJb CZLv0QaMCZPjw9lFv5LCCL0So91IsPKTd2zxqHTfBfTgmALYFXve6kgUyVNeY+9r niQ6knS1BnDj2jzSk3hO2kBHR44s1HI0h8LkU66LwIKFxjGFcsn+58D6GtHES6po yCiAfEt4hDeNvyadHM4+QOJ/PiPgoOZdJVCPzWZeYVJAGad91nM7qgZATBukWsuy -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:18 2025 by rpki-client