This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/YN2VFw_zTeeZnInVavIDMDIvgpk.roa File: YN2VFw_zTeeZnInVavIDMDIvgpk.roa (raw, json) Hash identifier: ZmQc74lSOd2QLjl/upSDqgH5EL7OSadc/HBKJOMdRUE= Subject key identifier: 60:DD:95:17:0F:F3:4D:E7:99:9C:89:D5:6A:F2:03:30:32:2F:82:99 Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B4A587602B216638426F6DC84E6E5470A Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/YN2VFw_zTeeZnInVavIDMDIvgpk.roa Signing time: Tue 23 Dec 2025 08:34:29 +0000 ROA not before: Tue 23 Dec 2025 08:34:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2a05:9a40::/29 maxlen: 29 2a06:5fc0::/29 maxlen: 29 2a0b:ac00::/29 maxlen: 29 2a0f:9b40::/29 maxlen: 29 2a10:3f80::/29 maxlen: 29 2a10:77c0::/29 maxlen: 29 2a13:b4c1::/32 maxlen: 32 2a13:b9c0::/29 maxlen: 29 2a13:bb40::/29 maxlen: 29 2a13:c240::/29 maxlen: 29 2a13:c340::/29 maxlen: 29 2a13:c441::/32 maxlen: 32 2a14:1100::/32 maxlen: 32 2a14:1101::/32 maxlen: 32 2a14:1102::/32 maxlen: 32 2a14:1103::/32 maxlen: 32 2a14:1104::/32 maxlen: 32 2a14:1105::/32 maxlen: 32 2a14:1106::/32 maxlen: 32 2a14:1107::/32 maxlen: 32 2a14:42c0::/29 maxlen: 29 2a14:62c0::/29 maxlen: 29 2a14:6a40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:58:76:02:b2:16:63:84:26:f6:dc:84:e6:e5:47:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Dec 23 08:34:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=60dd95170ff34de7999c89d56af20330322f8299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e8:8f:63:fa:61:b6:b7:34:91:ca:85:7c:dc: 2a:94:59:2a:be:e6:56:89:aa:13:a6:a7:a7:ba:fe: 87:40:a2:30:fe:e9:54:a5:7e:69:dc:97:8f:6e:a6: 63:02:c4:a4:9b:44:b2:75:94:58:22:e2:ff:22:6b: 5d:03:7a:bc:b1:75:c7:0f:6b:81:b2:bf:ff:08:39: 62:53:66:61:82:1f:90:bc:25:33:22:d2:2e:7d:0d: 5e:3c:6f:f3:44:10:34:f4:78:9e:71:65:3a:44:50: ca:87:c4:f9:6b:93:2f:93:f9:a5:40:6d:cc:65:30: 80:4c:b1:e7:c1:47:26:6e:73:0f:54:1d:0c:99:5b: 27:a0:31:b1:80:7d:4e:93:45:e0:f9:b4:c1:ea:9b: 69:b9:e5:ec:eb:c5:9a:fe:51:c9:48:b0:20:19:b8: 38:44:e3:dc:9c:7c:84:3e:7a:a2:9e:98:e8:e5:5b: 74:21:01:36:44:45:83:1f:99:12:9a:e1:a8:a3:5f: ea:25:c1:3c:f0:df:0d:50:4d:42:12:6d:1f:98:fc: 1e:21:ba:d8:46:f8:e9:5e:c0:a5:f0:07:6e:bf:c5: a3:e7:c4:6e:9d:ee:f8:42:3b:c2:66:19:dd:c8:e5: aa:b7:1a:6f:65:97:ac:06:ae:68:b8:a6:54:19:72: c9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:DD:95:17:0F:F3:4D:E7:99:9C:89:D5:6A:F2:03:30:32:2F:82:99 X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/YN2VFw_zTeeZnInVavIDMDIvgpk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:9a40::/29 2a06:5fc0::/29 2a0b:ac00::/29 2a0f:9b40::/29 2a10:3f80::/29 2a10:77c0::/29 2a13:b4c1::/32 2a13:b9c0::/29 2a13:bb40::/29 2a13:c240::/29 2a13:c340::/29 2a13:c441::/32 2a14:1100::/29 2a14:42c0::/29 2a14:62c0::/29 2a14:6a40::/32 Signature Algorithm: sha256WithRSAEncryption 85:78:2f:ae:35:1c:b2:fe:e4:81:b7:5e:c1:6b:16:51:e0:fe: 8b:a2:81:e0:b0:31:fb:94:2b:0f:84:ac:9d:23:b5:04:54:2e: 4f:6d:59:51:1a:78:e1:92:57:3d:3e:bb:fe:55:39:25:b5:19: 88:0b:60:04:33:63:69:c5:7c:e0:d4:6e:9f:9b:34:72:50:6e: e5:79:20:cd:ba:b0:83:84:a4:7f:70:1a:99:c4:4c:1f:0d:f5: cb:e4:af:6c:f8:a1:76:21:5b:95:cd:73:4a:09:93:ca:96:70: 21:72:bf:81:9f:83:a5:de:38:ba:19:49:74:37:44:e8:fa:6c: 38:cc:ba:f3:95:2d:ee:08:1a:ab:ed:4b:da:12:f2:15:68:55: c4:5d:7c:73:0b:f7:18:f4:55:ce:ab:51:e8:c7:b1:a4:47:e9: c4:eb:3b:9e:12:8f:8f:55:03:fc:4c:aa:cb:fc:b9:f9:72:37: 1c:0b:d8:81:a0:ca:97:d2:e6:b1:c5:ad:90:fd:76:9e:06:15: 61:32:54:72:2e:70:61:3b:31:1c:c5:e5:da:d1:14:eb:fc:14: 8a:c6:f1:9d:69:ba:10:e4:80:c0:fc:14:56:2f:ed:84:16:f1: 56:de:f3:fc:d4:2d:e0:d1:23:19:d7:89:59:bf:6f:ac:19:8f: 20:d6:c1:21 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgISAZtKWHYCshZjhCb23ITm5UcKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjUxMjIzMDgzNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGRkOTUxNzBmZjM0ZGU3OTk5Yzg5ZDU2YWYyMDMzMDMyMmY4Mjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OiPY/phtrc0kcqFfNwqlFkqvuZW iaoTpqenuv6HQKIw/ulUpX5p3JePbqZjAsSkm0SydZRYIuL/ImtdA3q8sXXHD2uB sr//CDliU2Zhgh+QvCUzItIufQ1ePG/zRBA09HiecWU6RFDKh8T5a5Mvk/mlQG3M ZTCATLHnwUcmbnMPVB0MmVsnoDGxgH1Ok0Xg+bTB6ptpueXs68Wa/lHJSLAgGbg4 ROPcnHyEPnqinpjo5Vt0IQE2REWDH5kSmuGoo1/qJcE88N8NUE1CEm0fmPweIbrY RvjpXsCl8Aduv8Wj58Rune74QjvCZhndyOWqtxpvZZesBq5ouKZUGXLJlwIDAQAB o4ICdDCCAnAwHQYDVR0OBBYEFGDdlRcP803nmZyJ1WryAzAyL4KZMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvWU4yVkZ3X3pUZWVabkluVmF2SURNREl2Z3BrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGJBggrBgEFBQcBBwEB/wR6MHgwdgQCAAIwcAMFAyoFmkAD BQMqBl/AAwUDKgusAAMFAyoPm0ADBQMqED+AAwUDKhB3wAMFACoTtMEDBQMqE7nA AwUDKhO7QAMFAyoTwkADBQMqE8NAAwUAKhPEQQMFAyoUEQADBQMqFELAAwUDKhRi wAMFACoUakAwDQYJKoZIhvcNAQELBQADggEBAIV4L641HLL+5IG3XsFrFlHg/oui geCwMfuUKw+ErJ0jtQRULk9tWVEaeOGSVz0+u/5VOSW1GYgLYAQzY2nFfODUbp+b NHJQbuV5IM26sIOEpH9wGpnETB8N9cvkr2z4oXYhW5XNc0oJk8qWcCFyv4Gfg6Xe OLoZSXQ3ROj6bDjMuvOVLe4IGqvtS9oS8hVoVcRdfHML9xj0Vc6rUejHsaRH6cTr O54Sj49VA/xMqsv8uflyNxwL2IGgypfS5rHFrZD9dp4GFWEyVHIucGE7MRzF5drR FOv8FIrG8Z1puhDkgMD8FFYv7YQW8Vbe8/zULeDRIxnXiVm/b6wZjyDWwSE= -----END CERTIFICATE-----Generated at Wed Dec 24 00:27:49 2025 by rpki-client