This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YOygAetJjqoelmES8HxI2t1DZuc.roa File: YOygAetJjqoelmES8HxI2t1DZuc.roa (raw, json) Hash identifier: uYebeBxwEwnFGYWZmT4LaCWwVFNLneSjW0m2/gvZrlQ= Subject key identifier: 60:EC:A0:01:EB:49:8E:AA:1E:96:61:12:F0:7C:48:DA:DD:43:66:E7 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B645FAF84E2EC45E9A90CBF8E74D27535 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YOygAetJjqoelmES8HxI2t1DZuc.roa Signing time: Sun 28 Dec 2025 09:52:30 +0000 ROA not before: Sun 28 Dec 2025 09:52:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25369 IP address blocks: 31.58.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:64:5f:af:84:e2:ec:45:e9:a9:0c:bf:8e:74:d2:75:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 28 09:52:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=60eca001eb498eaa1e966112f07c48dadd4366e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f5:7f:c0:c4:a3:33:62:af:ce:61:90:ca:47: 84:89:8f:2c:84:11:01:6e:18:b8:b6:2f:f6:17:6d: 4f:7f:b6:5c:53:36:e1:9a:d2:46:c0:9a:3e:b1:a9: f7:46:d3:83:44:2c:4b:20:e8:a8:ca:23:21:67:62: b6:cc:de:36:88:4e:c9:dd:23:3c:bf:79:57:fd:c6: 0f:c1:f0:6c:be:28:b2:a5:5d:49:a2:66:28:45:e9: 84:d1:34:9e:91:c9:9e:a8:4f:ce:5b:41:6e:d5:bb: 8c:a0:77:24:7b:c3:85:48:4f:51:13:95:70:6c:cc: e4:e5:9d:25:31:01:a0:41:f6:df:99:f6:05:e6:90: fb:50:f0:36:85:e8:52:c8:ac:ab:4a:d4:a5:ad:dc: 9d:33:02:64:45:6a:8d:de:45:39:86:0a:d6:25:a7: 2d:82:77:89:43:c8:01:54:df:ad:4e:87:8b:f2:bc: 54:a1:88:70:ef:08:f8:9e:08:f0:1f:5d:05:55:d6: 6d:9d:56:67:33:16:e3:4c:a5:90:a0:58:32:c2:cd: 28:53:d4:75:a0:69:aa:ab:26:02:67:f4:cf:ff:0f: d5:8d:b9:13:52:99:65:1a:cb:47:f5:61:45:79:42: c9:2c:b4:b0:d2:51:cd:de:5e:a5:eb:e9:9c:5d:4a: 21:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EC:A0:01:EB:49:8E:AA:1E:96:61:12:F0:7C:48:DA:DD:43:66:E7 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YOygAetJjqoelmES8HxI2t1DZuc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.60.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:93:6c:40:c3:3e:84:7d:de:55:e4:47:24:be:a8:20:d6:9b: 12:87:f3:1d:59:43:75:ac:a6:5f:9c:a7:98:e9:02:53:c4:cf: d1:cb:40:fd:d2:08:b6:6e:58:40:84:90:2c:d4:0a:65:1c:72: cb:3a:9b:e0:56:34:3c:0f:95:dc:25:ee:69:e7:c4:3b:57:e5: 4f:f5:1c:38:01:e9:db:b7:20:5e:f8:0f:78:9e:3d:22:0e:53: bc:a5:54:89:9b:17:61:ce:42:57:d9:3c:6c:a6:22:6e:26:78: 93:14:0c:74:3d:b9:91:79:e7:a0:d3:29:6a:fa:03:35:6d:09: a5:a0:07:26:0a:fe:b5:0d:fc:14:dd:4a:21:cb:12:46:4e:99: fd:59:7b:38:9a:30:39:77:c9:78:ea:c0:39:47:b6:8c:35:dd: 6b:ae:d2:29:d7:f7:c5:17:cc:47:17:42:de:7a:1f:3a:5a:be: 8f:58:b7:a8:ef:de:56:6e:cf:8c:4a:df:48:34:60:04:9d:da: f6:b3:a1:ad:41:41:8f:b7:ce:58:50:e0:e8:51:ea:dc:ff:fb: ef:a0:2f:9a:bd:e7:c2:c9:f9:3a:f3:e0:b9:8c:ea:83:5b:c4: 2f:9d:80:ea:f1:8b:7a:91:12:64:30:6a:49:35:e0:14:3d:4e: 9b:4c:09:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtkX6+E4uxF6akMv4500nU1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjI4MDk1MjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGVjYTAwMWViNDk4ZWFhMWU5NjYxMTJmMDdjNDhkYWRkNDM2NmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPV/wMSjM2KvzmGQykeEiY8shBEB bhi4ti/2F21Pf7ZcUzbhmtJGwJo+san3RtODRCxLIOioyiMhZ2K2zN42iE7J3SM8 v3lX/cYPwfBsviiypV1JomYoRemE0TSekcmeqE/OW0Fu1buMoHcke8OFSE9RE5Vw bMzk5Z0lMQGgQfbfmfYF5pD7UPA2hehSyKyrStSlrdydMwJkRWqN3kU5hgrWJact gneJQ8gBVN+tToeL8rxUoYhw7wj4ngjwH10FVdZtnVZnMxbjTKWQoFgyws0oU9R1 oGmqqyYCZ/TP/w/VjbkTUpllGstH9WFFeULJLLSw0lHN3l6l6+mcXUohMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGDsoAHrSY6qHpZhEvB8SNrdQ2bnMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvWU95Z0FldEpqcW9lbG1FUzhIeEkydDFEWnVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCHzo8MA0G CSqGSIb3DQEBCwUAA4IBAQBPk2xAwz6Efd5V5Eckvqgg1psSh/MdWUN1rKZfnKeY 6QJTxM/Ry0D90gi2blhAhJAs1AplHHLLOpvgVjQ8D5XcJe5p58Q7V+VP9Rw4Aenb tyBe+A94nj0iDlO8pVSJmxdhzkJX2TxspiJuJniTFAx0PbmReeeg0ylq+gM1bQml oAcmCv61DfwU3UohyxJGTpn9WXs4mjA5d8l46sA5R7aMNd1rrtIp1/fFF8xHF0Le eh86Wr6PWLeo795Wbs+MSt9INGAEndr2s6GtQUGPt85YUODoUerc//vvoC+avefC yfk68+C5jOqDW8QvnYDq8Yt6kRJkMGpJNeAUPU6bTAnN -----END CERTIFICATE-----Generated at Tue Dec 30 23:53:56 2025 by rpki-client