This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/YNS54cnBiZXAx-l4Ur4AJrbfFbY.roa File: YNS54cnBiZXAx-l4Ur4AJrbfFbY.roa (raw, json) Hash identifier: pfLNxgZZMxbPBGTv48W3fbrWnQxC60+V0ilpcnevY6Q= Subject key identifier: 60:D4:B9:E1:C9:C1:89:95:C0:C7:E9:78:52:BE:00:26:B6:DF:15:B6 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019AFE3A605EAFF51DFDB5687B34C0422802 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/YNS54cnBiZXAx-l4Ur4AJrbfFbY.roa Signing time: Mon 08 Dec 2025 13:50:29 +0000 ROA not before: Mon 08 Dec 2025 13:50:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9123 IP address blocks: 138.249.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 02:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:3a:60:5e:af:f5:1d:fd:b5:68:7b:34:c0:42:28:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Dec 8 13:50:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=60d4b9e1c9c18995c0c7e97852be0026b6df15b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bb:7e:43:7b:dc:65:e0:d8:cd:88:42:f0:6c: 86:4b:87:a5:f2:0c:9e:a0:fb:73:eb:74:9b:45:d7: de:17:a9:b8:ff:c1:3f:38:dd:9b:d7:06:d7:18:f5: 1a:a9:73:f7:7d:6e:7c:9a:52:77:d0:ef:92:27:7a: f9:33:eb:1b:f7:b6:9a:7a:5e:e5:86:ca:87:92:6f: d2:e9:e1:d9:6f:52:9b:ef:1d:4b:1b:f6:6a:35:0d: 7a:fc:8b:09:94:ab:75:af:d8:8c:29:37:d2:3b:7c: 3f:06:23:c7:b1:ff:51:1c:e3:d5:f0:8f:0d:c8:59: b4:9f:54:94:c5:b5:a1:86:d3:9a:3f:99:47:9f:c0: a7:d1:09:24:84:e5:f3:a4:c8:fb:fc:7c:69:d1:d9: 3a:9e:ec:25:46:39:74:ba:2e:a5:4e:79:87:25:79: 50:e7:b9:0a:e2:cc:ab:50:05:fc:c3:74:03:1d:59: ea:72:c2:1b:43:24:eb:0e:d1:13:48:b4:fc:66:9d: b1:32:85:53:9a:af:2a:a1:ea:7f:8a:e8:f6:c6:c7: cb:e8:2f:15:c4:ac:ca:93:81:24:c4:bc:3c:db:ba: 8a:fe:5e:ab:b8:f0:9e:60:f4:ea:22:ea:8f:db:c3: 99:10:fe:e8:8e:e2:ce:a9:74:0d:09:ad:f3:13:f9: dd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D4:B9:E1:C9:C1:89:95:C0:C7:E9:78:52:BE:00:26:B6:DF:15:B6 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/YNS54cnBiZXAx-l4Ur4AJrbfFbY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.102.0/24 Signature Algorithm: sha256WithRSAEncryption 58:48:40:a4:8f:0d:20:a2:0a:24:a0:7b:b6:e9:c4:58:9e:4d: 83:31:22:25:f5:0b:e0:ec:c2:85:fe:d0:15:fa:ac:57:8a:3d: d4:12:14:18:90:06:1a:34:d2:0f:3a:71:5a:f2:7b:6b:94:f8: 06:fa:43:9a:54:82:71:3f:59:5b:55:d6:3a:c9:4c:93:78:5e: 79:92:99:fb:83:e3:2a:40:73:2a:48:0c:47:7c:ea:2a:d2:03: 02:bb:e1:2d:38:b9:99:33:88:3f:4b:29:21:6e:1f:98:23:49: b3:10:ab:30:dd:71:66:1c:14:49:a7:08:f5:f4:45:6d:6f:17: c2:4b:23:d9:87:15:bf:17:63:e3:ca:47:51:67:a7:d9:7d:5a: a2:64:90:24:6c:6d:68:a8:48:e1:78:e9:90:8b:3e:13:8e:b2: 1a:f9:40:4c:15:f0:ab:a8:f0:e0:ea:3f:a1:5f:e0:c9:6c:73: 45:c9:e1:e8:a6:0b:1f:a9:b0:85:a6:de:4a:2f:31:de:83:76: a1:73:b8:6f:7d:da:93:85:8a:7c:7c:97:dd:af:91:49:73:0d: 71:10:10:fe:b6:d6:59:b8:e2:3b:aa:22:e4:f6:b3:2e:3d:70: 67:b2:73:36:d8:ed:49:36:89:1f:1f:55:cb:d6:67:e0:60:56: 12:20:f6:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr+OmBer/Ud/bVoezTAQigCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjUxMjA4MTM1MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGQ0YjllMWM5YzE4OTk1YzBjN2U5Nzg1MmJlMDAyNmI2ZGYxNWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbt+Q3vcZeDYzYhC8GyGS4el8gye oPtz63SbRdfeF6m4/8E/ON2b1wbXGPUaqXP3fW58mlJ30O+SJ3r5M+sb97aael7l hsqHkm/S6eHZb1Kb7x1LG/ZqNQ16/IsJlKt1r9iMKTfSO3w/BiPHsf9RHOPV8I8N yFm0n1SUxbWhhtOaP5lHn8Cn0QkkhOXzpMj7/Hxp0dk6nuwlRjl0ui6lTnmHJXlQ 57kK4syrUAX8w3QDHVnqcsIbQyTrDtETSLT8Zp2xMoVTmq8qoep/iuj2xsfL6C8V xKzKk4EkxLw827qK/l6ruPCeYPTqIuqP28OZEP7ojuLOqXQNCa3zE/ndiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGDUueHJwYmVwMfpeFK+ACa23xW2MB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvWU5TNTRjbkJpWlhBeC1sNFVyNEFKcmJmRmJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAivlmMA0G CSqGSIb3DQEBCwUAA4IBAQBYSECkjw0gogokoHu26cRYnk2DMSIl9Qvg7MKF/tAV +qxXij3UEhQYkAYaNNIPOnFa8ntrlPgG+kOaVIJxP1lbVdY6yUyTeF55kpn7g+Mq QHMqSAxHfOoq0gMCu+EtOLmZM4g/Sykhbh+YI0mzEKsw3XFmHBRJpwj19EVtbxfC SyPZhxW/F2PjykdRZ6fZfVqiZJAkbG1oqEjheOmQiz4TjrIa+UBMFfCrqPDg6j+h X+DJbHNFyeHopgsfqbCFpt5KLzHeg3ahc7hvfdqThYp8fJfdr5FJcw1xEBD+ttZZ uOI7qiLk9rMuPXBnsnM22O1JNokfH1XL1mfgYFYSIPbJ -----END CERTIFICATE-----Generated at Thu Dec 11 09:29:47 2025 by rpki-client