This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/Yoh0Lyzmd5QIYTDSCnlkZK_GSDc.roa File: Yoh0Lyzmd5QIYTDSCnlkZK_GSDc.roa (raw, json) Hash identifier: XFUC5N/kHKMoQLlS0Teo7ZsoW42gAN7BH2Jkjl6Ik+E= Subject key identifier: 62:88:74:2F:2C:E6:77:94:08:61:30:D2:0A:79:64:64:AF:C6:48:37 Certificate issuer: /CN=08fe040242651353d556b8c4240082190f271d13 Certificate serial: 019ABFF06DA5F294BE1E9A200FFC2D87C12A Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/Yoh0Lyzmd5QIYTDSCnlkZK_GSDc.roa Signing time: Wed 26 Nov 2025 11:33:16 +0000 ROA not before: Wed 26 Nov 2025 11:33:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 14618 IP address blocks: 81.85.63.0/24 maxlen: 24 185.22.168.0/24 maxlen: 24 185.22.170.0/24 maxlen: 24 185.22.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:f0:6d:a5:f2:94:be:1e:9a:20:0f:fc:2d:87:c1:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08fe040242651353d556b8c4240082190f271d13 Validity Not Before: Nov 26 11:33:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6288742f2ce67794086130d20a796464afc64837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1f:a5:5d:c4:df:9f:f6:e9:27:22:75:4f:41: fc:52:25:4b:87:fb:81:7c:1e:fe:06:d7:b1:d8:9a: ff:fc:43:d0:9a:e1:3d:a4:8f:8f:59:fc:b4:fd:4a: 01:1b:2a:f0:1a:ce:fb:ee:57:0d:88:11:c8:ac:d7: 4e:2a:87:51:90:a7:61:ac:e3:71:b8:a3:81:0b:f5: e4:ff:42:fb:b6:56:3f:a6:fc:37:ae:c5:64:74:27: fc:aa:1a:c0:61:9f:85:56:d4:72:ce:84:1e:0f:84: 9f:f3:37:cf:c6:f9:52:5c:02:3e:31:68:93:f9:83: de:55:76:18:c4:27:5d:85:26:8a:a0:5e:a4:14:55: 57:e1:eb:2c:f4:93:c0:6d:00:a7:19:53:5e:f9:15: 4b:f5:a7:6f:8d:bc:c7:e3:6b:98:46:e0:dd:07:ca: e8:40:94:f2:86:6a:5f:70:39:45:1a:91:88:68:22: c6:e3:f4:9e:0d:bc:93:ff:5e:88:ee:9b:30:0c:61: b3:18:9b:5a:21:fa:fb:de:5d:67:ab:1e:4c:b8:ac: b1:0b:20:9a:ec:a1:10:54:e3:eb:98:0f:cd:2d:4f: b5:9b:87:b0:fc:e8:9d:0a:c6:e4:74:30:89:a1:0e: 54:e9:a1:3f:0c:12:d4:92:41:07:06:f9:44:dd:45: e4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:88:74:2F:2C:E6:77:94:08:61:30:D2:0A:79:64:64:AF:C6:48:37 X509v3 Authority Key Identifier: keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/Yoh0Lyzmd5QIYTDSCnlkZK_GSDc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.85.63.0/24 185.22.168.0/24 185.22.170.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:bc:58:7e:dd:79:44:6e:9f:b4:f6:b5:2e:0a:fd:9c:c3:6d: 66:f2:50:9f:fe:1b:c7:33:99:82:bf:c1:23:fe:e6:e4:49:45: 97:c2:d8:ca:ac:74:fb:ac:a9:cd:c6:87:69:b2:8b:ec:69:f6: 24:5f:79:92:51:11:72:1a:d2:ca:21:bd:a6:7e:1d:e2:6b:77: 91:c8:79:1b:b9:45:4f:6f:18:95:28:5b:84:46:57:4e:9e:49: a5:ce:7c:79:7e:b4:80:c8:92:70:fb:7f:dc:3e:a7:a6:4d:61: cb:9a:15:85:08:95:4a:9d:2b:6d:ea:ad:3f:35:45:8e:e7:1f: b2:bd:be:54:80:e1:67:13:3a:56:9a:c7:f6:06:76:8a:fa:e7: d9:14:43:3f:2d:c0:63:29:2f:43:c4:3f:30:b5:f9:c3:05:1a: 61:14:fc:4b:6f:99:8a:bd:10:fa:8b:98:12:c6:39:47:54:46: ad:34:fe:5a:7a:23:9b:b6:72:d6:78:cf:31:e1:4e:64:45:f4: 13:fb:e5:39:02:a5:b3:62:ae:14:3f:e2:8c:02:46:0b:0f:1e: d7:75:36:54:f7:73:96:08:a6:24:1f:d1:5b:a0:e6:17:73:f8: d4:c0:a2:31:c8:7b:53:f8:d4:75:d8:a3:22:cc:fb:6c:b0:4b: 39:bf:46:bc -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZq/8G2l8pS+HpogD/wth8EqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZmUwNDAyNDI2NTEzNTNkNTU2YjhjNDI0MDA4MjE5MGYy NzFkMTMwHhcNMjUxMTI2MTEzMzE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Mjg4NzQyZjJjZTY3Nzk0MDg2MTMwZDIwYTc5NjQ2NGFmYzY0ODM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR+lXcTfn/bpJyJ1T0H8UiVLh/uB fB7+Btex2Jr//EPQmuE9pI+PWfy0/UoBGyrwGs777lcNiBHIrNdOKodRkKdhrONx uKOBC/Xk/0L7tlY/pvw3rsVkdCf8qhrAYZ+FVtRyzoQeD4Sf8zfPxvlSXAI+MWiT +YPeVXYYxCddhSaKoF6kFFVX4ess9JPAbQCnGVNe+RVL9advjbzH42uYRuDdB8ro QJTyhmpfcDlFGpGIaCLG4/SeDbyT/16I7pswDGGzGJtaIfr73l1nqx5MuKyxCyCa 7KEQVOPrmA/NLU+1m4ew/OidCsbkdDCJoQ5U6aE/DBLUkkEHBvlE3UXkTQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGKIdC8s5neUCGEw0gp5ZGSvxkg3MB8GA1UdIwQY MBaAFAj+BAJCZRNT1Va4xCQAghkPJx0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80ZWJjMzMtZWU1NC00MzdjLThhMWIt ZGVjNDgwN2NkN2U2LzEvWW9oMEx5em1kNVFJWVREU0NubGtaS19HU0RjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy80ZWJjMzMtZWU1NC00MzdjLThhMWItZGVjNDgwN2NkN2U2 LzEvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUVU/AwQA uRaoAwQBuRaqMA0GCSqGSIb3DQEBCwUAA4IBAQA/vFh+3XlEbp+09rUuCv2cw21m 8lCf/hvHM5mCv8Ej/ubkSUWXwtjKrHT7rKnNxodpsovsafYkX3mSURFyGtLKIb2m fh3ia3eRyHkbuUVPbxiVKFuERldOnkmlznx5frSAyJJw+3/cPqemTWHLmhWFCJVK nStt6q0/NUWO5x+yvb5UgOFnEzpWmsf2BnaK+ufZFEM/LcBjKS9DxD8wtfnDBRph FPxLb5mKvRD6i5gSxjlHVEatNP5aeiObtnLWeM8x4U5kRfQT++U5AqWzYq4UP+KM AkYLDx7XdTZU93OWCKYkH9FboOYXc/jUwKIxyHtT+NR12KMizPtssEs5v0a8 -----END CERTIFICATE-----Generated at Sat Dec 6 15:35:21 2025 by rpki-client