This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/yzpEnSw-M8gOCZBEXIGSEqBMezk.roa File: yzpEnSw-M8gOCZBEXIGSEqBMezk.roa (raw, json) Hash identifier: dfpiDw/zvnR/wH9MFZhv74V4Fel4hgPq5pSXvvY2tMs= Subject key identifier: CB:3A:44:9D:2C:3E:33:C8:0E:09:90:44:5C:81:92:12:A0:4C:7B:39 Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Certificate serial: 019A9A2CC94DE6DB18491271F90651C46AB9 Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/yzpEnSw-M8gOCZBEXIGSEqBMezk.roa Signing time: Wed 19 Nov 2025 03:33:37 +0000 ROA not before: Wed 19 Nov 2025 03:33:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 63023 IP address blocks: 80.66.84.0/24 maxlen: 24 130.49.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9a:2c:c9:4d:e6:db:18:49:12:71:f9:06:51:c4:6a:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Validity Not Before: Nov 19 03:33:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cb3a449d2c3e33c80e0990445c819212a04c7b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:db:5f:6e:c1:dd:71:57:5b:0d:83:7d:9f:69: 3b:a8:50:c2:5d:a7:39:18:c4:cf:51:8a:f3:93:2b: c8:86:cd:d4:38:2b:84:b1:3c:9c:45:52:ed:7a:de: e9:48:88:c9:69:38:ac:9f:e8:50:e8:9d:52:e3:81: 24:eb:a5:a4:0c:78:5b:a6:ef:2b:e2:33:77:29:7b: f3:2a:78:76:61:14:8e:5d:2f:85:10:ee:16:91:32: c6:33:06:2d:db:af:09:d6:34:8e:32:41:e0:38:80: 17:6a:ff:d2:57:01:39:d0:4e:c1:47:68:70:b5:e7: 1e:2f:49:be:c9:7d:7f:8d:ff:65:6b:af:17:49:b6: 43:b4:5b:c9:c1:db:aa:a0:a5:df:51:7e:a7:80:bf: 53:81:11:e1:db:12:5a:1e:2c:34:e4:79:b1:c6:d0: 41:85:17:04:62:8b:f3:c0:5c:f9:27:05:50:ae:8f: a0:86:cc:6c:5f:dd:46:8d:91:2b:b0:2d:1a:8c:2f: 4b:53:c2:35:00:8e:56:78:73:f4:1b:0f:0c:39:57: ba:3d:ae:90:2c:a0:4e:93:b7:88:33:b3:82:e2:73: 51:61:26:76:b8:41:76:4d:d7:9d:9d:aa:67:8d:0a: 63:e9:79:e3:03:51:ea:e0:5d:b7:fa:1e:37:68:f2: 2a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3A:44:9D:2C:3E:33:C8:0E:09:90:44:5C:81:92:12:A0:4C:7B:39 X509v3 Authority Key Identifier: keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/yzpEnSw-M8gOCZBEXIGSEqBMezk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.66.84.0/24 130.49.214.0/24 Signature Algorithm: sha256WithRSAEncryption 75:40:de:62:ed:24:cf:2c:7b:63:21:56:a0:f1:7e:d4:f0:e0: f4:fe:44:32:fd:62:7d:b0:f9:9a:7a:84:f8:77:55:d9:b0:bb: 59:37:16:4c:56:44:b1:76:bf:61:ac:f4:68:26:e9:e5:2f:0f: 63:30:0d:4b:4b:10:67:f2:62:c1:db:25:b7:40:9a:e4:83:f7: f7:ec:d8:8e:fc:f9:6a:b0:30:02:e9:29:72:4e:4b:61:ec:6d: a0:89:2f:23:66:2d:2f:1c:46:3e:42:3c:19:26:f5:23:48:6e: 75:65:12:5e:bd:21:57:8d:04:9b:d7:63:bd:67:97:1c:91:3b: 18:fd:ad:ad:da:7e:cb:69:a7:9f:f7:61:b6:0a:cb:2e:e8:67: c6:bc:fc:be:55:c3:35:aa:61:eb:13:d0:4b:72:f4:8e:3d:66: db:a0:12:32:39:e3:f1:26:35:53:00:7d:8c:61:58:88:a3:d2: a4:90:0c:b2:47:fa:56:ea:46:fe:66:d8:35:c8:89:36:b6:73: 89:aa:7d:a5:16:2d:72:81:22:70:3f:31:a5:14:40:bc:53:3e: f8:c1:c0:0c:ce:65:fa:be:60:eb:b3:6f:0e:4e:0b:f1:d9:f9: 5a:b4:48:4e:93:43:36:25:b9:8b:df:9c:c2:c6:ef:94:4b:d1: 52:1c:b3:22 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqaLMlN5tsYSRJx+QZRxGq5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz YzI4YzAwHhcNMjUxMTE5MDMzMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjNhNDQ5ZDJjM2UzM2M4MGUwOTkwNDQ1YzgxOTIxMmEwNGM3YjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNtfbsHdcVdbDYN9n2k7qFDCXac5 GMTPUYrzkyvIhs3UOCuEsTycRVLtet7pSIjJaTisn+hQ6J1S44Ek66WkDHhbpu8r 4jN3KXvzKnh2YRSOXS+FEO4WkTLGMwYt268J1jSOMkHgOIAXav/SVwE50E7BR2hw teceL0m+yX1/jf9la68XSbZDtFvJwduqoKXfUX6ngL9TgRHh2xJaHiw05HmxxtBB hRcEYovzwFz5JwVQro+ghsxsX91GjZErsC0ajC9LU8I1AI5WeHP0Gw8MOVe6Pa6Q LKBOk7eIM7OC4nNRYSZ2uEF2TdednapnjQpj6XnjA1Hq4F23+h43aPIq2QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMs6RJ0sPjPIDgmQRFyBkhKgTHs5MB8GA1UdIwQY MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt YThkMzYxY2U2NGFhLzEveXpwRW5Tdy1NOGdPQ1pCRVhJR1NFcUJNZXprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUEJUAwQA gjHWMA0GCSqGSIb3DQEBCwUAA4IBAQB1QN5i7STPLHtjIVag8X7U8OD0/kQy/WJ9 sPmaeoT4d1XZsLtZNxZMVkSxdr9hrPRoJunlLw9jMA1LSxBn8mLB2yW3QJrkg/f3 7NiO/PlqsDAC6SlyTkth7G2giS8jZi0vHEY+QjwZJvUjSG51ZRJevSFXjQSb12O9 Z5cckTsY/a2t2n7Laaef92G2Cssu6GfGvPy+VcM1qmHrE9BLcvSOPWbboBIyOePx JjVTAH2MYViIo9KkkAyyR/pW6kb+Ztg1yIk2tnOJqn2lFi1ygSJwPzGlFEC8Uz74 wcAMzmX6vmDrs28OTgvx2flatEhOk0M2JbmL35zCxu+US9FSHLMi -----END CERTIFICATE-----Generated at Sat Dec 6 03:55:20 2025 by rpki-client