This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ygf0J--wA4E8MngQkgVZoYgH7Zo.roa File: Ygf0J--wA4E8MngQkgVZoYgH7Zo.roa (raw, json) Hash identifier: 3iiUV45z7ngA4i69ZCtkguyzAg5RNGtVWPfq7gtvKkA= Subject key identifier: 62:07:F4:27:EF:B0:03:81:3C:32:78:10:92:05:59:A1:88:07:ED:9A Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B4A48EC87844B3B9B94565C2DFAC28987 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ygf0J--wA4E8MngQkgVZoYgH7Zo.roa Signing time: Tue 23 Dec 2025 08:17:31 +0000 ROA not before: Tue 23 Dec 2025 08:17:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 31.56.125.0/24 maxlen: 24 31.56.141.0/24 maxlen: 24 31.57.191.0/24 maxlen: 24 31.57.221.0/24 maxlen: 24 31.57.237.0/24 maxlen: 24 31.58.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 05:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:48:ec:87:84:4b:3b:9b:94:56:5c:2d:fa:c2:89:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 23 08:17:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6207f427efb003813c327810920559a18807ed9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:88:e1:68:79:9a:ae:57:5d:04:a2:5b:64:c4: ff:63:8a:31:ff:f7:55:ca:7e:36:7b:40:42:ef:41: 94:c1:c3:e4:c9:66:87:e9:fb:08:af:01:0e:c4:d0: 01:e9:24:a7:c0:d1:9f:9f:08:f4:b1:dd:50:b7:9b: 71:fa:00:41:45:24:b3:48:0a:6f:60:2b:ee:00:38: ba:29:18:16:92:89:09:e6:5c:89:50:98:ca:39:57: 93:42:e9:e1:17:ae:37:1a:7c:08:29:75:96:3d:34: cd:50:07:01:d7:5a:1e:24:68:55:74:c6:11:a1:66: a9:a2:2f:2e:a9:9d:b9:d1:6d:ed:2d:85:42:68:3f: 43:9c:aa:51:b0:fe:64:0c:42:b8:3c:04:26:77:88: a8:a0:ec:7b:11:47:31:a0:4f:86:8d:ef:64:d8:80: a1:dd:d5:54:55:cd:99:23:01:b4:0d:34:99:bc:4e: 3c:b0:02:b2:08:6f:96:2d:f8:98:f4:5d:78:64:23: ea:c0:0d:aa:4f:df:e0:64:15:a5:d7:4e:65:98:ef: ae:2d:e9:64:0f:e8:ab:ca:98:73:16:9f:68:92:46: 65:a4:30:aa:36:28:4f:5f:94:ba:31:6e:1e:6a:54: cc:36:a9:06:97:63:cc:2d:d6:e4:ec:fc:ae:d9:b6: 08:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:07:F4:27:EF:B0:03:81:3C:32:78:10:92:05:59:A1:88:07:ED:9A X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ygf0J--wA4E8MngQkgVZoYgH7Zo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.125.0/24 31.56.141.0/24 31.57.191.0/24 31.57.221.0/24 31.57.237.0/24 31.58.231.0/24 Signature Algorithm: sha256WithRSAEncryption 81:19:47:41:a1:db:8a:98:9f:c2:d8:dd:61:2f:90:f2:b0:aa: 03:8c:38:1d:61:24:a2:f5:3b:ce:3a:80:fa:73:d1:5e:8d:fb: 17:e9:14:d4:f7:db:8e:f7:d8:df:f3:e3:2d:de:b2:c0:53:85: 48:3f:f6:30:38:64:89:1b:c0:aa:86:ee:ad:b9:8a:d3:38:f2: f8:e7:98:7d:af:a1:e5:e1:e0:2a:a1:ba:64:fe:c2:24:c0:28: 08:47:35:57:a5:16:15:78:b0:d1:90:6d:45:23:48:1e:44:2b: c6:f7:83:dd:53:b4:27:a7:7c:5a:e0:8a:92:42:fe:3a:8f:13: ec:d4:41:12:ff:4d:89:67:ec:2b:77:31:07:99:7b:e1:05:c9: de:20:e1:66:63:d4:aa:7c:b2:f0:c8:db:2e:7c:29:5d:1e:30: bf:06:34:40:be:59:34:fd:7a:d1:99:1e:df:b1:d6:ca:c5:c7: 6a:41:a9:85:c6:72:4c:04:f8:a7:83:37:ce:40:cb:84:bb:8a: 91:75:47:73:b5:dc:8c:c8:d5:6f:2c:9a:0a:0a:47:0e:d8:b9: 73:60:33:82:5b:31:1c:68:70:7e:b0:bf:9d:4a:73:e3:87:1b: 91:af:b1:e5:84:8a:56:40:c4:22:9d:4d:f3:5e:57:7f:d7:d0: ec:d7:cd:ba -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZtKSOyHhEs7m5RWXC36womHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjIzMDgxNzMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjA3ZjQyN2VmYjAwMzgxM2MzMjc4MTA5MjA1NTlhMTg4MDdlZDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4jhaHmarlddBKJbZMT/Y4ox//dV yn42e0BC70GUwcPkyWaH6fsIrwEOxNAB6SSnwNGfnwj0sd1Qt5tx+gBBRSSzSApv YCvuADi6KRgWkokJ5lyJUJjKOVeTQunhF643GnwIKXWWPTTNUAcB11oeJGhVdMYR oWapoi8uqZ250W3tLYVCaD9DnKpRsP5kDEK4PAQmd4iooOx7EUcxoE+Gje9k2ICh 3dVUVc2ZIwG0DTSZvE48sAKyCG+WLfiY9F14ZCPqwA2qT9/gZBWl105lmO+uLelk D+iryphzFp9okkZlpDCqNihPX5S6MW4ealTMNqkGl2PMLdbk7Pyu2bYIBwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFGIH9CfvsAOBPDJ4EJIFWaGIB+2aMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvWWdmMEotLXdBNEU4TW5nUWtnVlpvWWdIN1pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAHzh9AwQA HziNAwQAHzm/AwQAHzndAwQAHzntAwQAHzrnMA0GCSqGSIb3DQEBCwUAA4IBAQCB GUdBoduKmJ/C2N1hL5DysKoDjDgdYSSi9TvOOoD6c9FejfsX6RTU99uO99jf8+Mt 3rLAU4VIP/YwOGSJG8Cqhu6tuYrTOPL455h9r6Hl4eAqobpk/sIkwCgIRzVXpRYV eLDRkG1FI0geRCvG94PdU7Qnp3xa4IqSQv46jxPs1EES/02JZ+wrdzEHmXvhBcne IOFmY9SqfLLwyNsufCldHjC/BjRAvlk0/XrRmR7fsdbKxcdqQamFxnJMBPingzfO QMuEu4qRdUdztdyMyNVvLJoKCkcO2LlzYDOCWzEcaHB+sL+dSnPjhxuRr7HlhIpW QMQinU3zXld/19Ds1826 -----END CERTIFICATE-----Generated at Sat Dec 27 10:43:57 2025 by rpki-client