This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/yoaFaDa_c-1rUFkpB2faanNCqC8.roa File: yoaFaDa_c-1rUFkpB2faanNCqC8.roa (raw, json) Hash identifier: /e393nrP2EDuPF4obiymELIhSNTAm4sES5N5D1KdlNU= Subject key identifier: CA:86:85:68:36:BF:73:ED:6B:50:59:29:07:67:DA:6A:73:42:A8:2F Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 019A96241265BEFE56582596CFE5D364E4F1 Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/yoaFaDa_c-1rUFkpB2faanNCqC8.roa Signing time: Tue 18 Nov 2025 08:45:37 +0000 ROA not before: Tue 18 Nov 2025 08:45:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215496 IP address blocks: 85.133.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:24:12:65:be:fe:56:58:25:96:cf:e5:d3:64:e4:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: Nov 18 08:45:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ca86856836bf73ed6b5059290767da6a7342a82f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8d:54:14:ba:b3:fc:37:42:74:5b:a1:2d:d2: 83:71:4c:77:67:30:42:a2:8a:32:01:d2:60:16:72: 92:ec:d4:a2:0e:6f:77:ea:0d:55:b9:e7:f2:a3:e1: 80:5f:ff:09:9f:05:43:8d:12:f7:34:96:49:bb:b8: 29:60:63:6f:58:64:ea:05:b6:8a:79:4d:03:67:a7: 45:82:5f:04:e8:be:87:ee:eb:21:04:90:ee:fa:a3: cf:55:bc:26:75:a5:61:4f:ee:ed:de:c7:14:6b:1e: 87:60:55:60:26:ad:d6:4b:00:8b:b6:44:0f:cb:e8: db:0e:96:e2:f1:24:9f:82:d4:05:cb:ff:79:d2:84: d0:d2:85:a7:6c:ce:fa:17:ce:4d:e0:53:8d:c4:39: 6c:60:f4:e8:14:c7:1c:8c:0c:68:8f:52:d3:12:86: 3e:25:5b:3a:4c:e8:f8:a7:e6:ec:a8:01:3f:1c:21: ba:59:0f:0f:9c:68:27:af:ab:a6:60:76:75:8f:59: 1f:55:38:18:26:0f:33:5a:49:3d:dd:fe:10:47:1c: 6a:34:f9:b5:db:8a:58:61:ac:ab:f6:1e:3f:c0:a1: 0f:c6:51:b4:b1:18:e8:6b:d9:8d:b2:49:d7:27:d6: ea:0e:2c:2e:96:1b:33:5d:3a:7f:69:97:9a:48:8c: 6e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:86:85:68:36:BF:73:ED:6B:50:59:29:07:67:DA:6A:73:42:A8:2F X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/yoaFaDa_c-1rUFkpB2faanNCqC8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.133.227.0/24 Signature Algorithm: sha256WithRSAEncryption 09:0c:d9:58:01:9d:75:47:34:5e:db:f4:51:9b:43:70:f5:65: 6a:7f:6a:f9:3a:f1:71:94:5b:0a:97:2d:68:bc:47:20:96:f0: 85:67:45:8b:90:5b:9f:56:da:d3:27:9a:1e:74:43:f2:dc:d1: 70:fe:f1:b1:35:5a:36:cc:b0:50:be:41:20:37:0e:95:9e:c1: 65:55:e9:50:ae:55:ba:8f:45:3c:03:b1:62:b4:a1:ba:b6:af: 3c:9d:8b:a0:ef:2c:92:09:61:97:cf:bd:99:40:0d:cf:64:b1: 82:e2:8d:23:f5:00:fc:7a:1f:e2:d7:07:d9:f9:db:5e:65:17: cd:98:19:e6:9a:21:4c:f7:bd:e1:17:1d:b3:7a:6f:b0:ee:46: e0:4f:b3:a6:15:b3:27:be:dc:00:9d:2d:7c:9c:b1:5e:96:95: a2:58:51:60:87:fc:e1:33:e6:3b:df:d9:e9:47:d9:b6:67:70: c0:e3:c7:5f:7e:68:f7:db:98:a2:0f:ea:91:01:cc:8a:d8:f8: e2:5e:e3:de:d1:0c:a4:31:04:13:cd:a7:6f:7e:5e:f6:97:86: f7:70:c5:19:18:5e:6d:80:f8:1b:52:93:5d:52:5e:a9:8b:8b: ee:c9:2b:01:c4:b9:f8:7c:77:8e:7a:a0:e1:0a:d1:6c:88:97: 0b:01:86:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqWJBJlvv5WWCWWz+XTZOTxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjUxMTE4MDg0NTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTg2ODU2ODM2YmY3M2VkNmI1MDU5MjkwNzY3ZGE2YTczNDJhODJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY1UFLqz/DdCdFuhLdKDcUx3ZzBC oooyAdJgFnKS7NSiDm936g1Vuefyo+GAX/8JnwVDjRL3NJZJu7gpYGNvWGTqBbaK eU0DZ6dFgl8E6L6H7ushBJDu+qPPVbwmdaVhT+7t3scUax6HYFVgJq3WSwCLtkQP y+jbDpbi8SSfgtQFy/950oTQ0oWnbM76F85N4FONxDlsYPToFMccjAxoj1LTEoY+ JVs6TOj4p+bsqAE/HCG6WQ8PnGgnr6umYHZ1j1kfVTgYJg8zWkk93f4QRxxqNPm1 24pYYayr9h4/wKEPxlG0sRjoa9mNsknXJ9bqDiwulhszXTp/aZeaSIxufQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMqGhWg2v3Pta1BZKQdn2mpzQqgvMB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEveW9hRmFEYV9jLTFyVUZrcEIyZmFhbk5DcUM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVYXjMA0G CSqGSIb3DQEBCwUAA4IBAQAJDNlYAZ11RzRe2/RRm0Nw9WVqf2r5OvFxlFsKly1o vEcglvCFZ0WLkFufVtrTJ5oedEPy3NFw/vGxNVo2zLBQvkEgNw6VnsFlVelQrlW6 j0U8A7FitKG6tq88nYug7yySCWGXz72ZQA3PZLGC4o0j9QD8eh/i1wfZ+dteZRfN mBnmmiFM973hFx2zem+w7kbgT7OmFbMnvtwAnS18nLFelpWiWFFgh/zhM+Y739np R9m2Z3DA48dffmj325iiD+qRAcyK2PjiXuPe0QykMQQTzadvfl72l4b3cMUZGF5t gPgbUpNdUl6pi4vuySsBxLn4fHeOeqDhCtFsiJcLAYYh -----END CERTIFICATE-----Generated at Sat Dec 6 18:40:06 2025 by rpki-client