This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/YBy000w0AHpR1nPLEkw0zwU0dV0.roa File: YBy000w0AHpR1nPLEkw0zwU0dV0.roa (raw, json) Hash identifier: bQJxvj2zN3/OMtsDqLLLAZhZ+WTAOLTUNHmo1xJ7g9E= Subject key identifier: 60:1C:B4:D3:4C:34:00:7A:51:D6:73:CB:12:4C:34:CF:05:34:75:5D Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019B07EA89A14CF6B7185890DD55EDB523DE Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/YBy000w0AHpR1nPLEkw0zwU0dV0.roa Signing time: Wed 10 Dec 2025 10:59:29 +0000 ROA not before: Wed 10 Dec 2025 10:59:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197787 IP address blocks: 217.114.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:ea:89:a1:4c:f6:b7:18:58:90:dd:55:ed:b5:23:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Dec 10 10:59:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=601cb4d34c34007a51d673cb124c34cf0534755d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:60:79:02:25:c0:af:a7:c9:6c:76:cb:43:65: f2:91:c4:3a:47:f1:ea:0e:ae:2b:51:4e:a8:18:49: 4c:97:54:4b:be:69:08:b5:04:ac:09:f9:41:28:ed: 09:22:2c:00:80:d1:b1:7d:10:32:2a:b3:3f:c4:4f: a7:71:cf:21:56:23:a8:f6:61:ee:18:37:54:1e:f5: 87:73:46:10:11:d9:0a:da:4c:fa:b2:b9:e4:7d:3d: 2f:4c:a0:07:56:11:40:a5:51:f8:4d:bd:20:37:50: 74:9f:17:e4:18:55:0a:aa:fd:51:03:93:79:33:66: 66:0f:8e:43:ef:9e:95:a2:69:38:96:e6:9c:1a:a7: 35:33:55:56:9e:f4:c7:59:e8:54:cc:fd:31:ae:53: ba:b0:89:23:a2:4a:d5:04:23:05:65:e7:e3:84:8f: e1:e8:3f:4c:5d:c3:f3:81:08:1e:52:4f:ac:4d:2a: 5b:87:8e:1f:5c:f0:47:d3:9f:82:e5:59:64:66:45: 9c:b9:e8:bb:72:7d:54:f2:eb:c1:e1:eb:b6:a9:47: a6:0d:5e:f0:19:89:00:01:40:35:83:ce:e3:41:98: 89:6e:32:fc:d5:93:21:6c:12:6d:3c:96:dd:ff:ff: 15:36:60:d2:eb:77:83:f2:b2:38:fc:04:5c:22:9c: 21:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1C:B4:D3:4C:34:00:7A:51:D6:73:CB:12:4C:34:CF:05:34:75:5D X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/YBy000w0AHpR1nPLEkw0zwU0dV0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.114.46.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:29:44:54:dd:d7:e5:58:e7:54:aa:56:69:8d:b3:27:22:64: 00:60:39:a3:10:e0:e8:c0:d3:f3:37:27:d1:66:3f:c3:e4:fa: da:4a:dd:f8:18:74:3d:8e:44:19:bb:81:8f:c4:d1:60:87:8a: 27:84:c2:11:a7:cc:00:74:f5:8b:cf:ae:a8:1a:cb:12:1a:70: a2:a8:17:06:76:4b:f0:31:68:dc:09:3e:e9:a9:94:6f:42:14: 20:1b:59:53:01:4c:ae:3c:46:09:e6:2f:af:b0:e3:70:42:f9: 2b:8c:f6:fa:fc:9e:31:aa:fe:39:0d:fd:13:27:61:79:4e:54: d2:ff:47:e6:24:df:b6:b9:3d:4f:9f:fb:c2:1d:b4:7e:6b:78: 4f:4c:87:3f:db:d8:61:d5:26:9d:98:23:8b:3a:fc:00:72:58: 05:4c:47:65:e3:32:e0:5e:27:ea:30:39:0c:c6:32:0f:cd:3f: b9:e2:1f:ad:d8:79:45:b9:53:ab:96:7a:c3:73:5d:3c:8f:c4: 93:1c:58:ba:c1:c8:fa:d1:27:8a:9f:02:fe:f3:16:7a:1c:7f: 8c:c3:fe:11:79:b3:14:91:7e:43:80:54:aa:89:7f:ab:16:db: 54:12:d6:4a:6e:3a:04:ce:8e:68:19:84:58:eb:e1:2c:a5:af: d5:06:85:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsH6omhTPa3GFiQ3VXttSPeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjUxMjEwMTA1OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDFjYjRkMzRjMzQwMDdhNTFkNjczY2IxMjRjMzRjZjA1MzQ3NTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGB5AiXAr6fJbHbLQ2XykcQ6R/Hq Dq4rUU6oGElMl1RLvmkItQSsCflBKO0JIiwAgNGxfRAyKrM/xE+ncc8hViOo9mHu GDdUHvWHc0YQEdkK2kz6srnkfT0vTKAHVhFApVH4Tb0gN1B0nxfkGFUKqv1RA5N5 M2ZmD45D756Vomk4luacGqc1M1VWnvTHWehUzP0xrlO6sIkjokrVBCMFZefjhI/h 6D9MXcPzgQgeUk+sTSpbh44fXPBH05+C5VlkZkWcuei7cn1U8uvB4eu2qUemDV7w GYkAAUA1g87jQZiJbjL81ZMhbBJtPJbd//8VNmDS63eD8rI4/ARcIpwhrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGActNNMNAB6UdZzyxJMNM8FNHVdMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvWUJ5MDAwdzBBSHBSMW5QTEVrdzB6d1UwZFYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XIuMA0G CSqGSIb3DQEBCwUAA4IBAQBKKURU3dflWOdUqlZpjbMnImQAYDmjEODowNPzNyfR Zj/D5PraSt34GHQ9jkQZu4GPxNFgh4onhMIRp8wAdPWLz66oGssSGnCiqBcGdkvw MWjcCT7pqZRvQhQgG1lTAUyuPEYJ5i+vsONwQvkrjPb6/J4xqv45Df0TJ2F5TlTS /0fmJN+2uT1Pn/vCHbR+a3hPTIc/29hh1SadmCOLOvwAclgFTEdl4zLgXifqMDkM xjIPzT+54h+t2HlFuVOrlnrDc108j8STHFi6wcj60SeKnwL+8xZ6HH+Mw/4RebMU kX5DgFSqiX+rFttUEtZKbjoEzo5oGYRY6+Espa/VBoWN -----END CERTIFICATE-----Generated at Mon Dec 15 06:04:35 2025 by rpki-client