This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YZY7JyfqnXHo0kBQa0cGuHn1V0I.roa File: YZY7JyfqnXHo0kBQa0cGuHn1V0I.roa (raw, json) Hash identifier: JyO0TPw7B4C+XRC60YN0FjTbFxzamUOfu2sMYy9zWdg= Subject key identifier: 61:96:3B:27:27:EA:9D:71:E8:D2:40:50:6B:47:06:B8:79:F5:57:42 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B0DBB3121DB0EB142B24AAF88C626817A Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YZY7JyfqnXHo0kBQa0cGuHn1V0I.roa Signing time: Thu 11 Dec 2025 14:05:30 +0000 ROA not before: Thu 11 Dec 2025 14:05:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213660 IP address blocks: 109.176.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:bb:31:21:db:0e:b1:42:b2:4a:af:88:c6:26:81:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 11 14:05:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=61963b2727ea9d71e8d240506b4706b879f55742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:03:7b:df:33:ae:b3:b3:8e:11:dd:ef:2b:dd: 76:21:11:30:ff:52:06:97:c5:86:42:80:ff:be:db: 58:16:15:2d:ea:22:08:62:31:d7:5a:16:98:1a:ee: fd:10:6a:48:96:bd:b1:db:ad:37:43:ca:a3:1a:de: 21:55:1e:d9:1f:8c:69:0a:58:97:3f:a9:d0:a5:f7: ea:f7:be:e8:be:cc:9b:92:64:99:33:46:82:36:e5: dc:8f:f7:be:aa:c1:a9:8c:cf:2c:5a:d0:2f:7c:65: 62:23:a4:a0:81:5d:97:b9:15:c1:0a:5c:3f:24:23: 48:24:b5:46:d2:dc:22:33:05:94:53:02:77:0d:1f: 6b:76:9d:da:24:91:a1:82:e2:96:28:da:1f:12:46: 4b:7c:c9:27:d0:16:dd:79:7b:59:f2:3c:6c:78:b5: 2c:6b:52:45:7a:8a:0b:c3:d8:61:90:07:75:8a:88: db:b6:2b:94:6a:75:a4:b1:45:d0:e3:c1:ab:80:48: ae:0c:13:60:8c:70:7c:da:4d:8c:77:b2:d2:b3:3a: 26:80:84:ee:7b:51:eb:32:8f:ae:ef:e3:9c:63:0e: 94:2e:be:a5:fc:d6:1c:07:c5:11:8a:2e:c0:59:91: be:b2:47:97:b2:f1:f2:2a:42:55:c3:34:c1:5c:1d: 25:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:96:3B:27:27:EA:9D:71:E8:D2:40:50:6B:47:06:B8:79:F5:57:42 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YZY7JyfqnXHo0kBQa0cGuHn1V0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.176.214.0/24 Signature Algorithm: sha256WithRSAEncryption 57:43:01:99:99:1b:2f:56:c4:f8:98:4d:e4:be:cc:f3:6a:52: 62:25:65:4b:57:f1:5e:df:5a:f1:7a:d8:31:da:2d:ef:b7:55: 0f:4d:20:f5:5b:5c:d6:f2:86:f3:9a:ad:0a:df:3a:92:11:77: 61:8e:6b:5e:52:be:d1:a4:dd:46:1a:ca:7a:56:df:40:30:04: 40:2e:1b:80:5f:9e:d7:6e:89:31:aa:3b:8e:ee:80:3d:b5:d2: 82:48:55:22:39:02:c0:f8:9d:35:58:43:65:a9:b8:d8:09:0a: ac:d0:ba:4d:15:12:b9:5d:3b:8e:1f:e5:52:7f:b6:f6:64:a4: 46:0c:29:79:8c:70:e3:e3:44:c6:5d:a0:d5:aa:34:06:19:5e: 29:4a:71:2c:9b:38:ca:3a:6d:9e:d6:14:07:79:f3:75:1f:79: d3:36:6f:f9:99:98:15:c5:e2:6e:1c:87:60:f4:da:5e:fc:b0: 27:2b:bc:74:e2:88:84:6b:2c:6b:8f:16:3b:80:0a:cb:02:86: 7f:db:bf:59:7f:47:32:b8:52:70:a1:b0:37:0b:c6:57:c4:13: b6:c7:8e:a0:8f:4e:c0:ad:45:44:37:0c:ec:38:94:e8:a3:da: a6:51:0a:c6:be:32:c7:2e:1e:08:e5:d4:d8:c2:29:b9:49:d7: 01:19:3a:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsNuzEh2w6xQrJKr4jGJoF6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjExMTQwNTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTk2M2IyNzI3ZWE5ZDcxZThkMjQwNTA2YjQ3MDZiODc5ZjU1NzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAN73zOus7OOEd3vK912IREw/1IG l8WGQoD/vttYFhUt6iIIYjHXWhaYGu79EGpIlr2x2603Q8qjGt4hVR7ZH4xpCliX P6nQpffq977ovsybkmSZM0aCNuXcj/e+qsGpjM8sWtAvfGViI6SggV2XuRXBClw/ JCNIJLVG0twiMwWUUwJ3DR9rdp3aJJGhguKWKNofEkZLfMkn0BbdeXtZ8jxseLUs a1JFeooLw9hhkAd1iojbtiuUanWksUXQ48GrgEiuDBNgjHB82k2Md7LSszomgITu e1HrMo+u7+OcYw6ULr6l/NYcB8URii7AWZG+skeXsvHyKkJVwzTBXB0lcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGGWOycn6p1x6NJAUGtHBrh59VdCMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvWVpZN0p5ZnFuWEhvMGtCUWEwY0d1SG4xVjBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbbDWMA0G CSqGSIb3DQEBCwUAA4IBAQBXQwGZmRsvVsT4mE3kvszzalJiJWVLV/Fe31rxetgx 2i3vt1UPTSD1W1zW8obzmq0K3zqSEXdhjmteUr7RpN1GGsp6Vt9AMARALhuAX57X bokxqjuO7oA9tdKCSFUiOQLA+J01WENlqbjYCQqs0LpNFRK5XTuOH+VSf7b2ZKRG DCl5jHDj40TGXaDVqjQGGV4pSnEsmzjKOm2e1hQHefN1H3nTNm/5mZgVxeJuHIdg 9Npe/LAnK7x04oiEayxrjxY7gArLAoZ/279Zf0cyuFJwobA3C8ZXxBO2x46gj07A rUVENwzsOJToo9qmUQrGvjLHLh4I5dTYwim5SdcBGToo -----END CERTIFICATE-----Generated at Sat Dec 20 01:11:07 2025 by rpki-client