This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/2yys3LU7mts-Gl7bPeFVNGNeuMo.roa File: 2yys3LU7mts-Gl7bPeFVNGNeuMo.roa (raw, json) Hash identifier: Yt+g7nPKVN9s0l9R0GhUZc17Zle6twg1T3pZzSdURFs= Subject key identifier: DB:2C:AC:DC:B5:3B:9A:DB:3E:1A:5E:DB:3D:E1:55:34:63:5E:B8:CA Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701 Certificate serial: 019A5882C9C4AE8A020C9C6DFDCFC14889B4 Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/2yys3LU7mts-Gl7bPeFVNGNeuMo.roa Signing time: Thu 06 Nov 2025 09:32:37 +0000 ROA not before: Thu 06 Nov 2025 09:32:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 62.179.128.0/17 maxlen: 17 92.235.0.0/19 maxlen: 19 92.235.32.0/21 maxlen: 21 92.235.40.0/21 maxlen: 21 92.235.49.0/24 maxlen: 24 92.235.50.0/23 maxlen: 23 92.235.52.0/22 maxlen: 22 92.235.56.0/21 maxlen: 21 92.235.96.0/19 maxlen: 19 92.235.128.0/17 maxlen: 17 94.168.128.0/17 maxlen: 17 2001:67c:794::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:58:82:c9:c4:ae:8a:02:0c:9c:6d:fd:cf:c1:48:89:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90f25e6a6893f466d2695e90670c047443643701 Validity Not Before: Nov 6 09:32:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=db2cacdcb53b9adb3e1a5edb3de15534635eb8ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:27:a9:03:55:01:ff:5c:65:02:a9:dd:a7:70: 6c:f8:df:60:a3:5a:ca:d6:62:0c:07:d4:6c:5d:6c: 27:0a:be:b6:f5:1d:d1:99:e2:08:95:55:ab:a5:e9: 39:32:ea:03:5d:fa:87:b3:96:42:ff:dc:4c:33:ca: 25:f3:e7:57:19:d4:85:46:a0:9b:38:d4:3d:59:cf: cd:bd:50:4c:29:9a:d1:61:64:4e:d3:aa:16:be:41: 89:39:15:d6:c1:70:96:f1:86:2f:7c:7d:b6:4c:f7: 00:87:77:b8:9f:2b:94:c1:79:aa:00:f2:fc:b1:4a: b7:3f:6f:fa:e9:dc:d6:6b:89:6c:f4:20:a7:cf:86: 57:5a:05:1e:8e:71:76:26:b0:79:05:13:02:d1:e7: 9f:db:02:e1:9e:43:f4:8c:a3:2b:77:e8:44:8e:82: f7:b9:51:d8:22:28:37:10:d3:fc:ad:af:06:f2:ae: 26:1e:df:c4:e4:95:5a:02:97:5f:ca:55:9b:02:ea: d5:84:0c:92:ea:ac:e0:ea:dc:ee:0c:91:36:ce:3c: d6:63:6e:78:cb:ea:8d:a4:05:67:2d:23:5f:20:4d: 12:34:fc:93:16:2c:a4:f4:d0:30:72:1c:3c:ee:38: f6:95:78:61:03:9b:41:e5:80:38:14:b6:1e:95:56: 1e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:2C:AC:DC:B5:3B:9A:DB:3E:1A:5E:DB:3D:E1:55:34:63:5E:B8:CA X509v3 Authority Key Identifier: keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/2yys3LU7mts-Gl7bPeFVNGNeuMo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.179.128.0/17 92.235.0.0-92.235.47.255 92.235.49.0-92.235.63.255 92.235.96.0-92.235.255.255 94.168.128.0/17 IPv6: 2001:67c:794::/48 Signature Algorithm: sha256WithRSAEncryption 6f:fa:da:c6:6c:fe:90:bb:dc:e8:bb:91:48:f7:f5:bc:ba:e6: ff:8e:a5:b3:50:c0:96:23:5a:30:93:34:4c:60:07:5d:12:76: f6:56:5c:44:0d:66:f6:4a:c4:e5:70:d4:ea:13:c1:51:ef:9a: 6c:c4:43:fb:c0:04:01:00:f2:7c:fa:43:12:07:7c:45:94:c6: ca:d0:66:40:dc:65:e9:56:b0:17:c8:3c:e7:4c:43:0a:e4:28: 2a:48:b2:9b:8f:c0:69:d5:27:e8:9f:40:f1:db:83:e8:cc:e5: 9d:d7:29:3f:08:c2:ae:ad:1e:52:10:1d:5e:77:f1:7a:d5:27: c3:32:5a:3c:79:e2:7c:59:85:a0:11:c4:48:ab:7d:5f:b2:e4: 90:9c:93:48:dd:8a:f5:30:15:17:8b:cf:87:f8:10:f9:45:77: df:6e:e8:ef:4a:c1:e9:c1:3c:e8:79:d4:94:f1:60:88:31:5e: 0f:96:20:79:3c:7c:a4:77:fd:0c:fc:41:f8:e7:11:e1:2f:d8: e7:97:bf:58:ba:23:d0:74:88:5b:8b:98:86:63:54:d6:28:06: ad:a3:18:da:41:10:81:96:90:10:41:fe:bb:f9:0a:e3:f6:94: 64:c4:6e:ee:62:b1:d3:17:67:7c:75:8e:06:79:e0:70:a4:26: 73:99:fe:be -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISAZpYgsnErooCDJxt/c/BSIm0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZjI1ZTZhNjg5M2Y0NjZkMjY5NWU5MDY3MGMwNDc0NDM2 NDM3MDEwHhcNMjUxMTA2MDkzMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjJjYWNkY2I1M2I5YWRiM2UxYTVlZGIzZGUxNTUzNDYzNWViOGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCepA1UB/1xlAqndp3Bs+N9go1rK 1mIMB9RsXWwnCr629R3RmeIIlVWrpek5MuoDXfqHs5ZC/9xMM8ol8+dXGdSFRqCb ONQ9Wc/NvVBMKZrRYWRO06oWvkGJORXWwXCW8YYvfH22TPcAh3e4nyuUwXmqAPL8 sUq3P2/66dzWa4ls9CCnz4ZXWgUejnF2JrB5BRMC0eef2wLhnkP0jKMrd+hEjoL3 uVHYIig3ENP8ra8G8q4mHt/E5JVaApdfylWbAurVhAyS6qzg6tzuDJE2zjzWY254 y+qNpAVnLSNfIE0SNPyTFiyk9NAwchw87jj2lXhhA5tB5YA4FLYelVYemQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFNssrNy1O5rbPhpe2z3hVTRjXrjKMB8GA1UdIwQY MBaAFJDyXmpok/Rm0mlekGcMBHRDZDcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEt M2IwYjRiOGEyOTgzLzEvMnl5czNMVTdtdHMtR2w3YlBlRlZOR05ldU1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEtM2IwYjRiOGEyOTgz LzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA6BAIAATA0AwQHPrOAMAsD AwBc6wMEBFzrIDAMAwQAXOsxAwQGXOsAMAsDBAVc62ADAwJc6AMEB16ogDAPBAIA AjAJAwcAIAEGfAeUMA0GCSqGSIb3DQEBCwUAA4IBAQBv+trGbP6Qu9zou5FI9/W8 uub/jqWzUMCWI1owkzRMYAddEnb2VlxEDWb2SsTlcNTqE8FR75psxEP7wAQBAPJ8 +kMSB3xFlMbK0GZA3GXpVrAXyDznTEMK5CgqSLKbj8Bp1Sfon0Dx24PozOWd1yk/ CMKurR5SEB1ed/F61SfDMlo8eeJ8WYWgEcRIq31fsuSQnJNI3Yr1MBUXi8+H+BD5 RXffbujvSsHpwTzoedSU8WCIMV4PliB5PHykd/0M/EH45xHhL9jnl79YuiPQdIhb i5iGY1TWKAatoxjaQRCBlpAQQf67+Qrj9pRkxG7uYrHTF2d8dY4GeeBwpCZzmf6+ -----END CERTIFICATE-----Generated at Sat Nov 22 21:34:42 2025 by rpki-client