This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/YI526rDjmCm4ZHVI5LkZmsJxBYA.roa File: YI526rDjmCm4ZHVI5LkZmsJxBYA.roa (raw, json) Hash identifier: mnwhg/AU2eU/IE/2TNO5wxiOwcdktq7wIdfPQ68gGbo= Subject key identifier: 60:8E:76:EA:B0:E3:98:29:B8:64:75:48:E4:B9:19:9A:C2:71:05:80 Certificate issuer: /CN=66306e3acf3eb903cc73973fb62860b663516c93 Certificate serial: 019A7D7A99ABE9D73CA7509E9D88162AB43E Authority key identifier: 66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/YI526rDjmCm4ZHVI5LkZmsJxBYA.roa Signing time: Thu 13 Nov 2025 13:49:37 +0000 ROA not before: Thu 13 Nov 2025 13:49:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203979 IP address blocks: 80.173.204.0/24 maxlen: 24 80.173.205.0/24 maxlen: 24 80.173.206.0/24 maxlen: 24 80.173.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7d:7a:99:ab:e9:d7:3c:a7:50:9e:9d:88:16:2a:b4:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66306e3acf3eb903cc73973fb62860b663516c93 Validity Not Before: Nov 13 13:49:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=608e76eab0e39829b8647548e4b9199ac2710580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9e:bb:77:36:a4:74:9b:cb:23:a9:41:d9:13: 01:33:63:f6:35:57:e2:d4:45:b5:d2:fe:8a:09:c1: ba:89:dc:20:37:3a:8f:4d:a3:2e:19:fc:19:d4:17: a9:69:48:83:91:2e:98:4c:b0:af:b7:29:5d:ed:07: 34:74:97:e9:d4:f4:61:57:4a:9f:a8:bb:46:54:8d: d3:84:34:46:7c:eb:ba:46:98:ae:7b:2e:c4:b6:fc: 6b:04:9c:e6:33:8c:bf:c0:94:88:fa:60:15:a7:c6: b8:de:ed:f1:b1:35:64:e3:e6:9f:36:2e:31:f3:72: e3:25:60:13:db:14:cd:fe:24:08:53:f1:85:8a:0c: fb:84:07:ce:57:1a:97:ec:0e:e7:73:6d:1f:3d:92: c3:7d:d5:7b:a5:74:19:3e:d3:a8:a9:2f:d3:8a:60: 37:b5:14:0f:cc:0c:87:ec:78:df:81:52:9d:d0:14: 30:58:1a:5f:3b:26:bc:85:7e:61:2b:ec:7e:33:ba: 1b:8e:63:b4:2a:48:7b:6e:d8:45:d8:86:99:48:43: dd:70:8e:fa:9b:4f:80:ee:7c:2f:75:65:9a:9f:b0: 47:71:fe:98:64:e9:ce:14:c9:8d:d3:46:89:95:36: ca:fb:88:d8:1a:0a:e2:4c:e3:67:b4:d3:b8:26:cb: d0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8E:76:EA:B0:E3:98:29:B8:64:75:48:E4:B9:19:9A:C2:71:05:80 X509v3 Authority Key Identifier: keyid:66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/YI526rDjmCm4ZHVI5LkZmsJxBYA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.173.204.0/22 Signature Algorithm: sha256WithRSAEncryption 54:c4:0e:8d:cc:69:21:54:f1:f5:47:2c:30:7a:b8:70:73:5d: ff:da:27:ac:ee:af:75:63:44:5f:e6:27:3f:ef:15:4a:91:d6: 90:93:57:a2:bf:59:26:b7:c0:3e:c8:69:f2:08:a2:65:e8:43: cf:de:d2:cc:71:a8:6c:3f:4d:bf:85:78:54:b9:d0:65:95:bc: 76:0e:47:7f:37:71:2b:20:04:06:97:b9:79:9e:cd:af:65:41: 22:d2:92:51:18:b1:ec:19:0e:f0:4d:c7:43:26:77:f7:c4:f5: 50:aa:41:03:67:2e:f8:40:94:c9:87:f4:43:f1:69:11:95:bc: 4a:2c:63:a8:5c:17:7e:bc:d8:94:13:08:10:5e:6e:e4:21:e7: cc:ec:4b:9b:54:4b:5e:3f:9e:39:5e:f3:cb:93:0d:77:53:2e: 03:39:87:30:f0:1f:7f:4c:6c:59:41:54:50:40:cc:b4:1d:76: fe:1c:f1:01:4e:d8:bf:74:24:d9:e6:26:fb:ae:dd:39:d7:d4: 5a:88:cd:5c:64:c4:5b:59:79:b9:ea:bb:4a:9d:47:1c:66:cc: 85:8f:9c:b6:c2:53:ee:14:68:14:b0:ae:b9:60:0c:83:1d:33: 9b:0f:03:9b:4e:21:7e:62:53:61:76:c7:74:3a:b7:57:38:5b: d7:36:a8:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp9epmr6dc8p1CenYgWKrQ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MzA2ZTNhY2YzZWI5MDNjYzczOTczZmI2Mjg2MGI2NjM1 MTZjOTMwHhcNMjUxMTEzMTM0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDhlNzZlYWIwZTM5ODI5Yjg2NDc1NDhlNGI5MTk5YWMyNzEwNTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0p67dzakdJvLI6lB2RMBM2P2NVfi 1EW10v6KCcG6idwgNzqPTaMuGfwZ1BepaUiDkS6YTLCvtyld7Qc0dJfp1PRhV0qf qLtGVI3ThDRGfOu6Rpiuey7EtvxrBJzmM4y/wJSI+mAVp8a43u3xsTVk4+afNi4x 83LjJWAT2xTN/iQIU/GFigz7hAfOVxqX7A7nc20fPZLDfdV7pXQZPtOoqS/TimA3 tRQPzAyH7HjfgVKd0BQwWBpfOya8hX5hK+x+M7objmO0Kkh7bthF2IaZSEPdcI76 m0+A7nwvdWWan7BHcf6YZOnOFMmN00aJlTbK+4jYGgriTONntNO4JsvQ9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGCOduqw45gpuGR1SOS5GZrCcQWAMB8GA1UdIwQY MBaAFGYwbjrPPrkDzHOXP7YoYLZjUWyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmpCdU9zOC11UVBNYzVjX3RpaGd0bU5SYkpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82NGRhYmItN2EwMS00MGQ1LWE1ODct ZWUyN2NiY2E3NDdlLzEvWUk1MjZyRGptQ200WkhWSTVMa1ptc0p4QllBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82NGRhYmItN2EwMS00MGQ1LWE1ODctZWUyN2NiY2E3NDdl LzEvWmpCdU9zOC11UVBNYzVjX3RpaGd0bU5SYkpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUK3MMA0G CSqGSIb3DQEBCwUAA4IBAQBUxA6NzGkhVPH1Rywwerhwc13/2ies7q91Y0Rf5ic/ 7xVKkdaQk1eiv1kmt8A+yGnyCKJl6EPP3tLMcahsP02/hXhUudBllbx2Dkd/N3Er IAQGl7l5ns2vZUEi0pJRGLHsGQ7wTcdDJnf3xPVQqkEDZy74QJTJh/RD8WkRlbxK LGOoXBd+vNiUEwgQXm7kIefM7EubVEteP545XvPLkw13Uy4DOYcw8B9/TGxZQVRQ QMy0HXb+HPEBTti/dCTZ5ib7rt0519RaiM1cZMRbWXm56rtKnUccZsyFj5y2wlPu FGgUsK65YAyDHTObDwObTiF+YlNhdsd0OrdXOFvXNqj/ -----END CERTIFICATE-----Generated at Sat Dec 6 09:55:46 2025 by rpki-client