This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yigHPMFZfDfc9Da0OxgtKrpkXuE.roa File: yigHPMFZfDfc9Da0OxgtKrpkXuE.roa (raw, json) Hash identifier: LfDioF4HZasqk+O+2cTt4JOfEJzGzNltfGVOVb70Omw= Subject key identifier: CA:28:07:3C:C1:59:7C:37:DC:F4:36:B4:3B:18:2D:2A:BA:64:5E:E1 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B0D7022D218BD969331DC3292E35824CD Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yigHPMFZfDfc9Da0OxgtKrpkXuE.roa Signing time: Thu 11 Dec 2025 12:43:31 +0000 ROA not before: Thu 11 Dec 2025 12:43:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 87.120.68.0/23 maxlen: 24 87.121.60.0/23 maxlen: 23 87.121.61.0/24 maxlen: 24 93.123.74.0/23 maxlen: 24 185.252.160.0/23 maxlen: 24 212.87.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:70:22:d2:18:bd:96:93:31:dc:32:92:e3:58:24:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Dec 11 12:43:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ca28073cc1597c37dcf436b43b182d2aba645ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e8:f1:17:e9:4f:89:bb:2e:fb:cb:b3:6f:0e: ef:de:dd:50:25:d0:d4:5a:af:a5:28:af:b5:0a:f3: 70:d8:e2:dc:aa:d9:d0:e2:ee:af:31:bc:20:d6:6b: be:e3:5e:52:c4:e6:85:81:1f:6c:88:10:ce:93:6e: 66:9c:d0:bc:4b:20:be:de:1e:81:30:2d:f6:df:90: c9:e4:04:62:1f:68:46:56:eb:1a:62:65:ba:12:b3: 91:0b:d1:9f:10:32:23:69:f0:e7:92:11:fd:08:bf: 11:c3:95:3a:d4:02:1c:18:22:a7:4a:5c:fe:f8:a6: 82:b7:e3:f6:f0:e7:34:eb:01:1e:dc:2a:fe:2b:68: 64:54:4f:32:39:d8:7c:1c:8d:1e:bc:d2:c4:0b:f4: 8a:61:ca:ca:8b:da:fa:13:9e:66:4d:95:2f:02:51: 30:2f:6b:e7:76:3f:ef:d7:9c:8d:03:c3:6f:74:b8: 6d:d0:d0:c5:00:49:71:bc:ef:46:47:d3:8e:b0:1b: 57:a1:de:da:64:48:54:54:5a:32:d3:9b:92:7b:7f: e0:ff:58:20:7f:80:bc:03:c6:99:41:16:ce:8a:2d: 03:21:89:d9:cd:6e:1f:93:01:1d:93:bb:2a:b9:f4: 1c:f2:c5:58:39:ab:9f:ce:8c:26:18:d7:63:84:6f: 63:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:28:07:3C:C1:59:7C:37:DC:F4:36:B4:3B:18:2D:2A:BA:64:5E:E1 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yigHPMFZfDfc9Da0OxgtKrpkXuE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.68.0/23 87.121.60.0/23 93.123.74.0/23 185.252.160.0/23 212.87.204.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:c5:8c:bd:73:9e:b5:39:4a:fa:5f:26:b1:c3:b7:86:76:b6: 2e:dc:92:a3:09:d2:42:51:91:c5:49:46:4c:14:ac:35:b7:72: 6c:f3:ac:c0:85:a9:0a:75:67:9e:15:3f:2e:0a:2f:c6:91:70: da:c6:27:ce:43:3b:e0:a5:32:f9:40:f2:7a:c3:02:cf:8e:77: 0f:11:4d:b5:fc:c0:62:19:3e:ec:7f:1c:c6:a3:73:33:44:b9: 26:97:eb:99:19:ef:3c:94:26:35:cd:da:23:e3:2e:98:6a:e5: 21:05:fc:bb:3c:63:22:d1:88:52:f0:0a:37:2f:e3:c6:9c:2c: 17:f0:6b:f4:12:df:8f:8a:5d:ef:d4:52:9d:e3:61:7f:4f:56: 29:0e:1e:94:61:b1:70:d7:e7:de:fa:9a:61:d1:5a:fc:84:05: 66:87:19:b6:a1:91:af:ae:8b:d1:b3:0c:80:a4:a4:dc:e3:fc: 65:c8:64:95:43:07:86:c3:c8:31:1c:1d:f7:5b:11:42:cb:ca: 95:39:a9:56:ac:2d:6f:45:06:f0:52:f0:a9:b0:85:86:c3:98: 07:b4:38:05:6b:5d:a3:83:25:b0:8f:fa:80:1e:18:80:0a:86: 3d:9f:ab:72:80:5d:42:7f:ef:c3:b7:df:60:16:60:10:f3:d3: a5:5f:a6:37 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZsNcCLSGL2WkzHcMpLjWCTNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUxMjExMTI0MzMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTI4MDczY2MxNTk3YzM3ZGNmNDM2YjQzYjE4MmQyYWJhNjQ1ZWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ujxF+lPibsu+8uzbw7v3t1QJdDU Wq+lKK+1CvNw2OLcqtnQ4u6vMbwg1mu+415SxOaFgR9siBDOk25mnNC8SyC+3h6B MC3235DJ5ARiH2hGVusaYmW6ErORC9GfEDIjafDnkhH9CL8Rw5U61AIcGCKnSlz+ +KaCt+P28Oc06wEe3Cr+K2hkVE8yOdh8HI0evNLEC/SKYcrKi9r6E55mTZUvAlEw L2vndj/v15yNA8NvdLht0NDFAElxvO9GR9OOsBtXod7aZEhUVFoy05uSe3/g/1gg f4C8A8aZQRbOii0DIYnZzW4fkwEdk7squfQc8sVYOaufzowmGNdjhG9j9QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFMooBzzBWXw33PQ2tDsYLSq6ZF7hMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEveWlnSFBNRlpmRGZjOURhME94Z3RLcnBrWHVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBV3hEAwQB V3k8AwQBXXtKAwQBufygAwQA1FfMMA0GCSqGSIb3DQEBCwUAA4IBAQB6xYy9c561 OUr6Xyaxw7eGdrYu3JKjCdJCUZHFSUZMFKw1t3Js86zAhakKdWeeFT8uCi/GkXDa xifOQzvgpTL5QPJ6wwLPjncPEU21/MBiGT7sfxzGo3MzRLkml+uZGe88lCY1zdoj 4y6YauUhBfy7PGMi0YhS8Ao3L+PGnCwX8Gv0Et+Pil3v1FKd42F/T1YpDh6UYbFw 1+fe+pph0Vr8hAVmhxm2oZGvrovRswyApKTc4/xlyGSVQweGw8gxHB33WxFCy8qV OalWrC1vRQbwUvCpsIWGw5gHtDgFa12jgyWwj/qAHhiACoY9n6tygF1Cf+/Dt99g FmAQ89OlX6Y3 -----END CERTIFICATE-----Generated at Sun Dec 14 17:01:10 2025 by rpki-client