This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/ysUfI3GWZpaKyJEKnCEamSfyZE0.roa File: ysUfI3GWZpaKyJEKnCEamSfyZE0.roa (raw, json) Hash identifier: xIeKQUYqxB/N59SOlkm9vtcrQRRy7G3fg//ycDeAy7w= Subject key identifier: CA:C5:1F:23:71:96:66:96:8A:C8:91:0A:9C:21:1A:99:27:F2:64:4D Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Certificate serial: 019AFE1794A95B5E775E8FC4A8C434A96995 Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/ysUfI3GWZpaKyJEKnCEamSfyZE0.roa Signing time: Mon 08 Dec 2025 13:12:29 +0000 ROA not before: Mon 08 Dec 2025 13:12:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59651 IP address blocks: 45.80.104.0/23 maxlen: 23 193.202.8.0/23 maxlen: 23 193.202.82.0/23 maxlen: 23 212.119.42.0/23 maxlen: 23 212.119.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:17:94:a9:5b:5e:77:5e:8f:c4:a8:c4:34:a9:69:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Validity Not Before: Dec 8 13:12:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cac51f23719666968ac8910a9c211a9927f2644d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:69:72:c1:70:e3:c6:1f:8b:7d:e7:3a:17:ee: 87:ef:7b:c9:40:5f:6d:f7:52:5f:2a:a0:8e:46:76: 88:99:86:9d:29:6d:c1:39:e6:a2:aa:88:bc:c2:2b: e3:68:b5:09:f7:3b:5b:6e:08:17:a9:27:d7:b4:b5: a0:bd:4c:cb:29:c1:19:78:4a:af:2d:ea:a2:23:62: c1:2f:27:48:44:15:35:75:59:d0:73:82:2d:82:02: 4e:c4:39:b5:33:e0:79:ff:7b:44:4d:9e:4d:be:17: 6d:8b:59:e3:2f:76:b3:b1:21:d5:75:10:48:1f:a2: ca:4c:a4:c3:37:66:ef:d7:9d:52:0a:d6:28:c0:47: 2a:3a:8c:bb:81:3d:c6:f6:9a:68:ac:12:ab:e8:72: a2:8a:0d:f1:1e:b4:e9:00:a8:d5:3b:f0:ca:8d:68: 45:bf:ef:7e:bf:26:b1:be:46:30:67:46:38:77:9b: c0:12:ba:e3:b5:35:0e:b1:be:39:61:64:84:83:fe: e5:67:f7:7e:b6:4d:14:f0:c5:91:ed:d9:8d:f5:aa: db:7b:b6:2d:57:a0:2b:f9:fe:2b:bc:7f:f6:d4:55: 4c:9f:b4:fd:f6:3b:29:d9:67:1f:47:94:4d:54:58: 32:05:98:b0:cf:75:e6:47:7a:ee:82:38:d8:35:48: a9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C5:1F:23:71:96:66:96:8A:C8:91:0A:9C:21:1A:99:27:F2:64:4D X509v3 Authority Key Identifier: keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/ysUfI3GWZpaKyJEKnCEamSfyZE0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.104.0/23 193.202.8.0/23 193.202.82.0/23 212.119.42.0-212.119.45.255 Signature Algorithm: sha256WithRSAEncryption 44:87:67:47:19:66:8f:a9:5f:d5:7c:26:09:fd:37:5e:6f:c3: 40:a0:d5:5c:44:46:66:23:da:fd:33:14:28:26:cd:8a:13:ca: 00:36:2b:ca:bc:df:66:97:ee:ff:1e:b1:e7:5e:aa:32:6b:b1: ee:c8:1e:22:1f:2c:c1:5d:a1:f0:2b:e8:00:7a:67:c6:4a:ad: c4:fe:32:a1:09:d4:e7:b6:24:2f:92:fb:31:c5:57:03:6e:ea: 82:f9:bf:b3:3f:2e:c1:da:8b:d2:b9:79:5a:d9:f6:13:47:ce: f2:70:76:30:02:e7:6b:25:9d:80:3e:86:9d:e9:9a:aa:2e:2d: 9a:3f:19:f1:7d:30:f0:71:76:55:42:d7:a9:63:21:da:7a:bf: 40:96:9e:be:4b:f5:28:e1:49:63:dd:a4:cd:65:dc:2c:67:c1: 6b:62:ca:b0:6c:df:2d:0a:ab:a4:4b:5f:00:11:03:68:ca:c5: 9f:01:e2:23:e4:eb:79:3b:1f:0e:02:26:a5:7a:4f:d1:fc:03: 27:68:04:12:6b:e6:b1:4d:18:97:96:6b:92:17:f6:7f:c8:57: 11:ec:e2:05:b0:4b:0b:94:8a:86:1c:cd:37:bc:b8:93:e4:ea: 6a:7b:ac:40:39:af:c4:26:df:8a:6a:77:a3:25:59:a4:db:85: 6c:64:37:21 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr+F5SpW153Xo/EqMQ0qWmVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3 Y2Q0MjMwHhcNMjUxMjA4MTMxMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWM1MWYyMzcxOTY2Njk2OGFjODkxMGE5YzIxMWE5OTI3ZjI2NDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmlywXDjxh+Lfec6F+6H73vJQF9t 91JfKqCORnaImYadKW3BOeaiqoi8wivjaLUJ9ztbbggXqSfXtLWgvUzLKcEZeEqv LeqiI2LBLydIRBU1dVnQc4ItggJOxDm1M+B5/3tETZ5Nvhdti1njL3azsSHVdRBI H6LKTKTDN2bv151SCtYowEcqOoy7gT3G9pporBKr6HKiig3xHrTpAKjVO/DKjWhF v+9+vyaxvkYwZ0Y4d5vAErrjtTUOsb45YWSEg/7lZ/d+tk0U8MWR7dmN9arbe7Yt V6Ar+f4rvH/21FVMn7T99jsp2WcfR5RNVFgyBZiwz3XmR3rugjjYNUipBQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMrFHyNxlmaWisiRCpwhGpkn8mRNMB8GA1UdIwQY MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli LWExYjdjZWVmYTE2Yy8xL3lzVWZJM0dXWnBhS3lKRUtuQ0VhbVNmeVpFMC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjliLWExYjdjZWVmYTE2 Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwOQYIKwYBBQUHAQcBAf8EKjAoMCYEAgABMCADBAEtUGgD BAHByggDBAHBylIwDAMEAdR3KgMEAdR3LDANBgkqhkiG9w0BAQsFAAOCAQEARIdn Rxlmj6lf1XwmCf03Xm/DQKDVXERGZiPa/TMUKCbNihPKADYryrzfZpfu/x6x516q Mmux7sgeIh8swV2h8CvoAHpnxkqtxP4yoQnU57YkL5L7McVXA27qgvm/sz8uwdqL 0rl5Wtn2E0fO8nB2MALnayWdgD6Gnemaqi4tmj8Z8X0w8HF2VULXqWMh2nq/QJae vkv1KOFJY92kzWXcLGfBa2LKsGzfLQqrpEtfABEDaMrFnwHiI+TreTsfDgImpXpP 0fwDJ2gEEmvmsU0Yl5Zrkhf2f8hXEeziBbBLC5SKhhzNN7y4k+TqanusQDmvxCbf imp3oyVZpNuFbGQ3IQ== -----END CERTIFICATE-----Generated at Wed Dec 10 12:49:20 2025 by rpki-client