This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JLyfakrkZVppaBFgB7uImvoZkGs.roa File: JLyfakrkZVppaBFgB7uImvoZkGs.roa (raw, json) Hash identifier: A0lypqgdgGyHpgj8AEp4QCCsG1NU3kAE4eRsa0jWIKA= Subject key identifier: 24:BC:9F:6A:4A:E4:65:5A:69:68:11:60:07:BB:88:9A:FA:19:90:6B Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019A96C534CD22D8E06D85A740CE4435176D Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JLyfakrkZVppaBFgB7uImvoZkGs.roa Signing time: Tue 18 Nov 2025 11:41:37 +0000 ROA not before: Tue 18 Nov 2025 11:41:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15731 IP address blocks: 194.87.114.0/23 maxlen: 23 194.87.134.0/23 maxlen: 23 195.58.58.0/23 maxlen: 23 195.133.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 08:40:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:c5:34:cd:22:d8:e0:6d:85:a7:40:ce:44:35:17:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Nov 18 11:41:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=24bc9f6a4ae4655a6968116007bb889afa19906b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:84:54:31:5a:cd:2d:7e:74:73:89:96:a6:e2: 94:d6:98:36:4d:70:e7:15:17:67:fa:bb:4f:a8:c9: 46:38:8d:f8:9d:f7:d0:d6:b8:1c:ed:d6:91:8f:83: b9:13:f8:a9:cc:f9:05:72:a1:6b:17:6c:e7:e1:f1: 9b:20:d8:9e:84:d7:40:af:de:21:21:a6:e2:92:26: 1b:e9:d0:c5:78:b8:06:16:9a:2f:bc:bd:3f:a0:f3: 1b:1a:4b:57:7c:76:77:fd:47:06:26:70:13:fc:80: 6a:af:9d:b8:bf:26:88:d2:cc:89:21:ce:71:ff:cb: f4:06:74:d6:94:59:b2:e2:0c:29:01:24:b2:ad:af: 3d:e4:8e:82:3c:02:c5:6a:6d:c4:f6:e3:d6:3e:8f: 7c:a0:0b:b7:ff:18:af:53:8e:63:de:78:9c:83:d4: b4:83:38:df:1d:13:5c:87:f8:af:c2:e2:02:fd:2c: 29:45:88:53:b7:a9:99:0c:1d:38:39:85:d0:1e:df: 6c:51:e2:31:3c:42:06:aa:37:89:8f:4e:21:b0:36: 17:1a:54:7d:3a:b1:96:09:be:70:68:1c:ca:f0:a7: 9a:1f:29:c6:22:c8:cf:da:8d:f7:72:f7:06:11:6b: 18:84:f2:b9:33:83:90:bc:6e:1d:9d:e8:c6:61:9f: a0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BC:9F:6A:4A:E4:65:5A:69:68:11:60:07:BB:88:9A:FA:19:90:6B X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JLyfakrkZVppaBFgB7uImvoZkGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.87.114.0/23 194.87.134.0/23 195.58.58.0/23 195.133.84.0/23 Signature Algorithm: sha256WithRSAEncryption 75:c1:8b:87:01:ca:8e:6c:b3:79:e8:26:6e:76:23:04:b8:af: 05:37:18:89:7b:0c:62:2b:0f:9b:53:7a:0f:ca:e5:81:58:d9: c4:fb:bb:37:28:f4:6f:c2:b2:97:14:6f:f9:3f:a5:09:01:57: fc:2d:bc:7d:e8:c1:2b:06:79:e5:6b:09:6b:38:b2:9a:e7:7f: f9:07:95:3e:a7:5b:07:97:08:07:a4:27:65:9e:04:a7:80:23: 1f:00:c7:63:b5:4a:97:31:8e:02:f1:68:59:f0:2a:05:09:33: 8e:1b:f9:c8:9e:b8:65:3e:33:6c:f9:3a:08:14:01:54:7c:63: ba:86:8d:5b:f7:83:14:6c:bf:cc:03:7e:d8:81:a1:25:4a:d3: 02:03:4e:6e:e8:e2:6c:50:3d:89:d5:92:fb:24:28:6f:84:11: 9d:e2:62:66:e4:5f:79:79:20:6e:5c:57:a9:01:7c:2d:c3:cd: a7:f8:21:ce:7f:c3:b9:5a:12:1a:56:c2:61:75:2a:88:10:8b: d0:b3:6f:fe:32:fc:05:a3:98:bd:17:d4:95:78:94:43:be:e4: a0:e8:1a:38:bd:ce:a5:08:b9:a6:09:ae:43:ca:78:04:bc:86: 12:9d:05:1a:75:7b:7a:9a:a0:30:48:1c:ba:df:a9:b3:57:30: 00:47:83:a4 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZqWxTTNItjgbYWnQM5ENRdtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjUxMTE4MTE0MTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGJjOWY2YTRhZTQ2NTVhNjk2ODExNjAwN2JiODg5YWZhMTk5MDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYRUMVrNLX50c4mWpuKU1pg2TXDn FRdn+rtPqMlGOI34nffQ1rgc7daRj4O5E/ipzPkFcqFrF2zn4fGbINiehNdAr94h IabikiYb6dDFeLgGFpovvL0/oPMbGktXfHZ3/UcGJnAT/IBqr524vyaI0syJIc5x /8v0BnTWlFmy4gwpASSyra895I6CPALFam3E9uPWPo98oAu3/xivU45j3nicg9S0 gzjfHRNch/ivwuIC/SwpRYhTt6mZDB04OYXQHt9sUeIxPEIGqjeJj04hsDYXGlR9 OrGWCb5waBzK8KeaHynGIsjP2o33cvcGEWsYhPK5M4OQvG4dnejGYZ+guQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCS8n2pK5GVaaWgRYAe7iJr6GZBrMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvSkx5ZmFrcmtaVnBwYUJGZ0I3dUltdm9aa0dzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBwldyAwQB wleGAwQBwzo6AwQBw4VUMA0GCSqGSIb3DQEBCwUAA4IBAQB1wYuHAcqObLN56CZu diMEuK8FNxiJewxiKw+bU3oPyuWBWNnE+7s3KPRvwrKXFG/5P6UJAVf8Lbx96MEr BnnlawlrOLKa53/5B5U+p1sHlwgHpCdlngSngCMfAMdjtUqXMY4C8WhZ8CoFCTOO G/nInrhlPjNs+ToIFAFUfGO6ho1b94MUbL/MA37YgaElStMCA05u6OJsUD2J1ZL7 JChvhBGd4mJm5F95eSBuXFepAXwtw82n+CHOf8O5WhIaVsJhdSqIEIvQs2/+MvwF o5i9F9SVeJRDvuSg6Bo4vc6lCLmmCa5DyngEvIYSnQUadXt6mqAwSBy636mzVzAA R4Ok -----END CERTIFICATE-----Generated at Fri Dec 5 16:35:46 2025 by rpki-client