This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/yFVnEJP7VmWlHCimsj8mvmclw8M.roa File: yFVnEJP7VmWlHCimsj8mvmclw8M.roa (raw, json) Hash identifier: Id+C3+f0hiPCfYs2C9ySsYjpohP/fRM7b8PZS/7AKHg= Subject key identifier: C8:55:67:10:93:FB:56:65:A5:1C:28:A6:B2:3F:26:BE:67:25:C3:C3 Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 019A7781A9CB2D9682C969EF72925567F294 Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/yFVnEJP7VmWlHCimsj8mvmclw8M.roa Signing time: Wed 12 Nov 2025 09:59:37 +0000 ROA not before: Wed 12 Nov 2025 09:59:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 7029 IP address blocks: 82.163.68.0/22 maxlen: 24 149.126.88.0/22 maxlen: 24 185.86.142.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:77:81:a9:cb:2d:96:82:c9:69:ef:72:92:55:67:f2:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: Nov 12 09:59:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c855671093fb5665a51c28a6b23f26be6725c3c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ee:a3:f8:be:54:43:4e:7d:1a:42:1c:7f:82: e9:bb:82:36:c3:94:88:24:dc:ad:7d:eb:38:2d:23: fb:0e:eb:92:3f:2e:c7:05:2f:14:35:63:c5:fc:87: 0e:42:ed:3c:26:66:07:9c:36:92:1a:c2:d5:63:9a: b2:0a:3c:6e:30:70:3a:93:63:a4:a0:57:35:c2:b3: 7d:52:10:c4:55:8a:19:d9:4f:05:65:6b:b8:cf:73: fc:49:39:c2:59:50:91:be:be:c5:1c:45:99:fc:14: a8:ee:39:c9:ac:02:ec:1f:dd:5e:d1:61:26:bf:78: 34:64:2d:48:8b:20:fa:71:ea:34:b0:07:e2:2a:99: 76:b3:29:af:56:10:a6:84:98:63:77:ea:46:83:bc: 42:81:6c:99:bb:34:c7:be:a7:01:22:b1:5b:7f:c3: ff:b0:48:0d:2f:a9:9d:cf:f0:3f:61:e6:80:3a:fc: 70:1c:33:69:4a:18:c7:26:f8:64:87:3d:08:0e:b4: cb:85:53:99:4f:4f:20:d0:e4:88:3b:93:0f:a1:ab: 44:7b:e7:37:6b:22:0a:62:20:d8:23:59:6e:3a:c5: 9f:a9:d5:fa:c1:62:db:b8:a7:0b:27:04:18:50:1f: ef:50:d9:d9:a5:af:07:66:c6:62:4e:ad:3f:5c:13: 0b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:55:67:10:93:FB:56:65:A5:1C:28:A6:B2:3F:26:BE:67:25:C3:C3 X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/yFVnEJP7VmWlHCimsj8mvmclw8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.163.68.0/22 149.126.88.0/22 185.86.142.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:04:bc:3f:fd:7f:f2:4f:53:f0:ec:9b:68:7d:80:66:61:6a: 54:76:92:af:23:1a:fd:a0:b0:9d:08:4f:cf:64:cd:df:f4:15: bc:88:5d:77:c4:b1:d1:46:ad:f0:08:0e:6c:98:ed:94:5e:7e: 14:b5:f5:84:fd:a0:76:0c:ff:aa:86:8f:b6:73:ea:91:d9:81: 85:ba:d3:e1:e9:f8:24:61:cd:88:18:51:70:ca:2f:3f:6d:bb: c4:30:12:c0:21:04:68:df:6f:94:cb:af:48:34:5f:88:f1:40: 99:34:7d:21:77:bd:30:58:70:f0:5d:39:09:69:cc:f4:7f:ff: 78:c8:d6:a1:a2:ce:18:e5:67:b5:fe:04:01:7b:3c:3e:e0:93: 19:d0:6b:2d:b8:bb:1f:34:b5:44:bc:52:8a:3d:75:b7:a0:6e: e2:f1:a2:ad:47:d3:97:c6:12:01:bf:e2:c3:fe:0d:b3:22:70: c2:ee:f3:8a:4d:38:7b:1b:d7:7a:04:73:9d:32:ee:ea:7b:b3: 14:34:e5:a4:75:78:9a:af:ce:fa:92:19:66:76:c8:48:59:81: d4:76:9c:9e:e6:2c:7f:f4:f3:2e:9e:92:91:05:81:75:e4:81: 65:41:ef:2d:19:20:b8:3c:e7:5c:42:cc:15:8c:c1:29:4c:2b: e6:43:19:de -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZp3ganLLZaCyWnvcpJVZ/KUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjUxMTEyMDk1OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODU1NjcxMDkzZmI1NjY1YTUxYzI4YTZiMjNmMjZiZTY3MjVjM2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve6j+L5UQ059GkIcf4Lpu4I2w5SI JNytfes4LSP7DuuSPy7HBS8UNWPF/IcOQu08JmYHnDaSGsLVY5qyCjxuMHA6k2Ok oFc1wrN9UhDEVYoZ2U8FZWu4z3P8STnCWVCRvr7FHEWZ/BSo7jnJrALsH91e0WEm v3g0ZC1IiyD6ceo0sAfiKpl2symvVhCmhJhjd+pGg7xCgWyZuzTHvqcBIrFbf8P/ sEgNL6mdz/A/YeaAOvxwHDNpShjHJvhkhz0IDrTLhVOZT08g0OSIO5MPoatEe+c3 ayIKYiDYI1luOsWfqdX6wWLbuKcLJwQYUB/vUNnZpa8HZsZiTq0/XBMLCwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMhVZxCT+1ZlpRwoprI/Jr5nJcPDMB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEveUZWbkVKUDdWbVdsSENpbXNqOG12bWNsdzhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCUqNEAwQC lX5YAwQBuVaOMA0GCSqGSIb3DQEBCwUAA4IBAQCKBLw//X/yT1Pw7JtofYBmYWpU dpKvIxr9oLCdCE/PZM3f9BW8iF13xLHRRq3wCA5smO2UXn4UtfWE/aB2DP+qho+2 c+qR2YGFutPh6fgkYc2IGFFwyi8/bbvEMBLAIQRo32+Uy69INF+I8UCZNH0hd70w WHDwXTkJacz0f/94yNahos4Y5We1/gQBezw+4JMZ0GstuLsfNLVEvFKKPXW3oG7i 8aKtR9OXxhIBv+LD/g2zInDC7vOKTTh7G9d6BHOdMu7qe7MUNOWkdXiar876khlm dshIWYHUdpye5ix/9PMunpKRBYF15IFlQe8tGSC4POdcQswVjMEpTCvmQxne -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:30 2025 by rpki-client