This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/iYBxDHT1PC4J8T7eH00SO3_bKB0.roa File: iYBxDHT1PC4J8T7eH00SO3_bKB0.roa (raw, json) Hash identifier: yDEYuhYfyLUjp27Wh5AiJKt+PSf+I2VRYSD8+ZyRxMo= Subject key identifier: 89:80:71:0C:74:F5:3C:2E:09:F1:3E:DE:1F:4D:12:3B:7F:DB:28:1D Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B37D3DE2504BC217E46B0F08272EDE06E Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/iYBxDHT1PC4J8T7eH00SO3_bKB0.roa Signing time: Fri 19 Dec 2025 18:16:30 +0000 ROA not before: Fri 19 Dec 2025 18:16:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215607 IP address blocks: 5.175.186.0/24 maxlen: 24 5.175.223.0/24 maxlen: 24 77.90.33.0/24 maxlen: 24 85.93.5.0/24 maxlen: 24 89.106.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:d3:de:25:04:bc:21:7e:46:b0:f0:82:72:ed:e0:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 19 18:16:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8980710c74f53c2e09f13ede1f4d123b7fdb281d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:62:2b:28:21:86:20:f1:22:89:a9:84:71:20: 02:f7:23:87:fe:40:84:dd:f1:19:cd:36:80:e0:ff: d1:e4:53:70:ab:84:45:56:06:4a:6a:33:fb:2b:9a: 19:92:0b:de:fc:32:f5:74:95:de:78:ec:b6:70:68: aa:40:c5:fc:45:3a:5c:03:5c:94:b6:74:16:bb:f5: 35:95:6a:2f:f1:b2:19:37:96:2e:69:fb:ae:da:07: 36:e1:94:85:71:43:f7:91:f5:64:14:a8:eb:49:c9: 53:ad:bf:ea:17:c9:80:84:29:f0:f6:e8:7d:a7:01: c9:e6:fd:aa:87:22:56:53:e5:e9:d8:f5:c4:e0:8d: 08:45:2f:82:4a:0e:c4:80:24:0e:95:c1:44:54:ef: 0d:ca:66:2a:a6:d4:48:41:1b:54:82:b8:c3:5b:27: ce:f8:ed:43:a4:86:53:f1:e3:43:7d:b9:2c:aa:23: 32:05:60:c1:9c:45:dd:ce:3b:c3:5b:19:39:b2:a0: e6:dd:25:71:c7:79:19:48:54:48:92:6a:16:82:ea: fe:b0:90:9a:6c:7b:66:f8:fa:5d:de:ab:14:83:15: 6c:5e:2e:54:a3:85:b0:ca:be:89:30:a0:be:d6:ef: 92:2e:ed:47:48:6f:1a:fb:4c:a4:b8:70:86:bc:5f: d2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:80:71:0C:74:F5:3C:2E:09:F1:3E:DE:1F:4D:12:3B:7F:DB:28:1D X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/iYBxDHT1PC4J8T7eH00SO3_bKB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.186.0/24 5.175.223.0/24 77.90.33.0/24 85.93.5.0/24 89.106.89.0/24 Signature Algorithm: sha256WithRSAEncryption 62:23:e1:13:80:b7:04:ad:21:65:12:c6:c7:eb:8e:e3:a3:ec: 6d:78:23:08:42:0f:b6:72:d9:28:99:e0:de:9b:b7:ae:67:f8: 7e:66:9d:9d:05:ae:f9:14:36:cc:83:c9:c1:cb:9f:22:1f:94: 93:de:8b:44:be:8a:97:c1:80:a3:a4:86:e3:53:e1:53:db:29: 4b:f0:7e:81:32:83:1e:e6:02:7b:88:ba:83:2b:a1:61:f3:91: 8d:b6:da:a1:dd:14:96:2c:27:a5:9c:b1:09:fa:e0:8c:43:51: 11:ae:fc:b2:d9:97:84:03:12:b0:56:ef:3d:dd:44:ec:45:de: 10:7d:db:fa:2f:91:9d:82:09:5d:6c:4a:1a:5b:02:e4:65:cc: dc:3e:15:fc:e9:64:a0:2d:26:d8:78:ce:29:7a:9a:79:55:e5: 4e:a4:29:62:c1:d8:b0:c9:b0:4f:a3:a9:af:bf:c3:9d:f2:42: 95:0d:d7:2a:44:36:15:cf:73:6f:51:2d:ed:6a:f6:b7:12:4b: 91:29:57:0f:b4:47:0f:1e:50:51:dc:b3:de:67:0d:73:4a:c4: 45:9e:ee:0e:6e:9d:89:b7:c2:67:1f:5c:91:e1:21:bd:83:35: 1c:85:ed:fb:37:c3:a8:f0:3f:1f:c5:b1:54:77:47:30:ce:0b: 5c:4f:df:35 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZs3094lBLwhfkaw8IJy7eBuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjE5MTgxNjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTgwNzEwYzc0ZjUzYzJlMDlmMTNlZGUxZjRkMTIzYjdmZGIyODFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWIrKCGGIPEiiamEcSAC9yOH/kCE 3fEZzTaA4P/R5FNwq4RFVgZKajP7K5oZkgve/DL1dJXeeOy2cGiqQMX8RTpcA1yU tnQWu/U1lWov8bIZN5Yuafuu2gc24ZSFcUP3kfVkFKjrSclTrb/qF8mAhCnw9uh9 pwHJ5v2qhyJWU+Xp2PXE4I0IRS+CSg7EgCQOlcFEVO8NymYqptRIQRtUgrjDWyfO +O1DpIZT8eNDfbksqiMyBWDBnEXdzjvDWxk5sqDm3SVxx3kZSFRIkmoWgur+sJCa bHtm+Ppd3qsUgxVsXi5Uo4Wwyr6JMKC+1u+SLu1HSG8a+0ykuHCGvF/SXwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFImAcQx09TwuCfE+3h9NEjt/2ygdMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvaVlCeERIVDFQQzRKOFQ3ZUgwMFNPM19iS0IwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQABa+6AwQA Ba/fAwQATVohAwQAVV0FAwQAWWpZMA0GCSqGSIb3DQEBCwUAA4IBAQBiI+ETgLcE rSFlEsbH647jo+xteCMIQg+2ctkomeDem7euZ/h+Zp2dBa75FDbMg8nBy58iH5ST 3otEvoqXwYCjpIbjU+FT2ylL8H6BMoMe5gJ7iLqDK6Fh85GNttqh3RSWLCelnLEJ +uCMQ1ERrvyy2ZeEAxKwVu893UTsRd4Qfdv6L5GdggldbEoaWwLkZczcPhX86WSg LSbYeM4pepp5VeVOpCliwdiwybBPo6mvv8Od8kKVDdcqRDYVz3NvUS3tava3EkuR KVcPtEcPHlBR3LPeZw1zSsRFnu4Obp2Jt8JnH1yR4SG9gzUche37N8Oo8D8fxbFU d0cwzgtcT981 -----END CERTIFICATE-----Generated at Mon Dec 22 04:58:12 2025 by rpki-client