This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Yo1yRImGU_G1MONfoe4nlQj4yM4.roa File: Yo1yRImGU_G1MONfoe4nlQj4yM4.roa (raw, json) Hash identifier: OjIAaD7BSbnZ62LZQPcicsjwlkflnbNeuXfNLm2u9yA= Subject key identifier: 62:8D:72:44:89:86:53:F1:B5:30:E3:5F:A1:EE:27:95:08:F8:C8:CE Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019A72FF2FE87C05B20827997926AECF21F0 Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Yo1yRImGU_G1MONfoe4nlQj4yM4.roa Signing time: Tue 11 Nov 2025 12:58:37 +0000 ROA not before: Tue 11 Nov 2025 12:58:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 7018 IP address blocks: 63.246.144.0/24 maxlen: 24 103.216.197.0/24 maxlen: 24 162.218.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:72:ff:2f:e8:7c:05:b2:08:27:99:79:26:ae:cf:21:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Nov 11 12:58:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=628d7244898653f1b530e35fa1ee279508f8c8ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:78:6a:40:bc:97:b9:cb:88:69:18:94:05:ef: 32:3a:32:19:43:23:a5:38:e4:d0:ec:a7:15:b0:56: 86:ec:69:46:74:a4:7e:3c:8f:06:a9:80:92:b1:84: 70:d6:aa:2f:0e:50:16:a7:16:41:d2:6e:c4:81:7b: df:a5:44:05:bc:a8:66:bd:08:5f:e3:70:4b:49:45: 6d:fb:3b:9f:19:7e:18:36:68:77:a8:4f:57:78:98: 3f:af:e2:6b:6b:d0:72:03:c4:4e:19:0d:66:d4:6b: 37:6b:23:4e:a4:da:f7:a0:db:b4:13:46:e1:e5:53: c8:7e:6d:1c:05:a7:e5:e4:88:15:f1:80:ab:bb:4c: 71:bf:18:d6:9e:79:82:d7:9b:34:ec:15:2a:a7:d5: 2a:b6:f0:d6:37:11:71:78:f6:78:35:fe:34:95:52: 62:00:44:94:76:e3:b2:c6:03:25:b8:f7:53:17:a5: 84:2b:54:ea:3d:47:09:db:88:06:d3:ca:d7:f1:3d: fe:ba:c9:9f:c9:51:3d:cb:52:df:73:9c:e8:6e:42: ac:ed:9a:a3:d1:ed:36:21:6c:28:ad:0c:1b:e5:eb: 0e:9a:cb:57:4b:22:25:e8:0c:a8:7a:27:2c:e0:7d: 0c:e7:71:53:e7:c0:fd:5f:9b:82:59:a7:c6:0f:44: 62:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:8D:72:44:89:86:53:F1:B5:30:E3:5F:A1:EE:27:95:08:F8:C8:CE X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Yo1yRImGU_G1MONfoe4nlQj4yM4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 63.246.144.0/24 103.216.197.0/24 162.218.91.0/24 Signature Algorithm: sha256WithRSAEncryption 56:08:71:31:8e:ee:bc:ab:d6:65:77:e7:d0:12:66:8d:bc:36: 9e:fa:53:40:81:93:b2:3f:5e:36:ed:d0:cb:bc:c6:a0:4e:67: da:11:6b:2f:06:84:4d:ea:64:d3:16:a1:8e:6b:f4:cc:b1:6d: 76:55:86:e5:53:64:2d:0d:6d:39:28:e5:33:27:3d:8e:ff:55: 31:35:5b:92:b1:69:33:c5:62:7e:90:4c:5f:22:2d:f6:0b:6d: 35:78:9e:cc:78:ec:93:23:d1:ed:b8:86:f2:3c:8e:b2:0d:c7: 55:37:ee:a8:55:31:af:93:87:19:ee:38:23:07:1f:62:c0:f8: c4:c9:65:6f:b4:74:78:31:c4:c7:cf:34:a6:d9:ba:d5:3f:5c: 96:cb:41:3d:0d:8c:39:c8:80:7e:74:a2:b3:0c:0c:db:13:06: fd:33:9f:ef:63:ff:e8:f6:b3:15:a6:c7:b8:9b:d3:fa:e4:06: 26:a8:24:df:a2:1f:4f:7b:dd:cf:ce:70:5a:ef:3e:23:0f:f0: a9:52:82:28:bc:51:01:04:c4:2a:74:ca:07:d6:24:90:6a:74: ae:c9:67:25:0b:60:76:3d:a9:93:20:8b:72:36:17:ee:99:d4: b3:04:8c:92:2a:65:4d:3b:23:0c:dd:29:80:e8:43:cd:de:af: ae:fc:2c:33 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZpy/y/ofAWyCCeZeSauzyHwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjUxMTExMTI1ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjhkNzI0NDg5ODY1M2YxYjUzMGUzNWZhMWVlMjc5NTA4ZjhjOGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHhqQLyXucuIaRiUBe8yOjIZQyOl OOTQ7KcVsFaG7GlGdKR+PI8GqYCSsYRw1qovDlAWpxZB0m7EgXvfpUQFvKhmvQhf 43BLSUVt+zufGX4YNmh3qE9XeJg/r+Jra9ByA8ROGQ1m1Gs3ayNOpNr3oNu0E0bh 5VPIfm0cBafl5IgV8YCru0xxvxjWnnmC15s07BUqp9UqtvDWNxFxePZ4Nf40lVJi AESUduOyxgMluPdTF6WEK1TqPUcJ24gG08rX8T3+usmfyVE9y1Lfc5zobkKs7Zqj 0e02IWworQwb5esOmstXSyIl6Ayoeics4H0M53FT58D9X5uCWafGD0Ri1wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGKNckSJhlPxtTDjX6HuJ5UI+MjOMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvWW8xeVJJbUdVX0cxTU9OZm9lNG5sUWo0eU00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAP/aQAwQA Z9jFAwQAotpbMA0GCSqGSIb3DQEBCwUAA4IBAQBWCHExju68q9Zld+fQEmaNvDae +lNAgZOyP1427dDLvMagTmfaEWsvBoRN6mTTFqGOa/TMsW12VYblU2QtDW05KOUz Jz2O/1UxNVuSsWkzxWJ+kExfIi32C201eJ7MeOyTI9HtuIbyPI6yDcdVN+6oVTGv k4cZ7jgjBx9iwPjEyWVvtHR4McTHzzSm2brVP1yWy0E9DYw5yIB+dKKzDAzbEwb9 M5/vY//o9rMVpse4m9P65AYmqCTfoh9Pe93PznBa7z4jD/CpUoIovFEBBMQqdMoH 1iSQanSuyWclC2B2PamTIItyNhfumdSzBIySKmVNOyMM3SmA6EPN3q+u/Cwz -----END CERTIFICATE-----Generated at Thu Dec 4 05:53:55 2025 by rpki-client