This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-Y9Wx-TxCWNbdKB6gIUmFvohfk4.roa File: 1-Y9Wx-TxCWNbdKB6gIUmFvohfk4.roa (raw, json) Hash identifier: gjQ2WMThQFuZL6W7ehJOfjnvm4HwwLoNfjQ0nb4qXoE= Subject key identifier: F9:8F:56:C7:E4:F1:09:63:5B:74:A0:7A:80:85:26:16:FA:21:7E:4E Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B0CED32E2C1EE5DFB7E2F80F4205FB333 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-Y9Wx-TxCWNbdKB6gIUmFvohfk4.roa Signing time: Thu 11 Dec 2025 10:20:30 +0000 ROA not before: Thu 11 Dec 2025 10:20:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197537 IP address blocks: 185.220.248.0/24 maxlen: 24 185.225.1.0/24 maxlen: 24 194.5.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 04:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:ed:32:e2:c1:ee:5d:fb:7e:2f:80:f4:20:5f:b3:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Dec 11 10:20:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f98f56c7e4f109635b74a07a80852616fa217e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:be:58:24:05:fb:69:e7:82:e2:cd:be:e3:b1: 12:e9:72:e5:1f:97:bd:ff:b7:88:eb:20:23:8f:68: f2:b9:b2:67:c2:85:ba:b6:49:6f:9b:7a:0d:70:fe: ac:4d:d9:23:3a:2e:16:bd:50:a7:9b:c8:98:d2:1b: e6:26:e7:7b:cd:fe:8d:de:cc:7d:f4:0c:6e:8e:4b: b3:9d:2f:2e:20:86:78:5a:af:ee:70:23:39:13:8c: 0e:f9:44:5f:45:d6:a6:f8:d6:a2:88:42:4c:40:95: 1c:7e:07:7f:ef:8f:c6:e9:7f:dd:f9:62:b8:ed:af: d2:a2:f0:46:a9:f7:df:ee:07:52:11:fd:46:ec:90: d4:e8:a2:b2:65:4d:2d:f0:24:45:17:ed:b9:45:c2: c5:d8:f9:7f:c7:0f:11:40:0a:2d:44:7f:5e:36:c6: 6d:0a:f4:e1:17:30:0c:bd:7f:00:53:b1:c9:34:3d: d1:37:5d:f2:13:8b:0a:b1:62:09:70:6d:eb:75:ed: 1c:49:7d:52:b0:5c:fe:a1:25:fb:48:0d:d9:1d:ed: 17:d4:29:d2:64:93:81:6f:dd:4b:dd:12:0d:a0:f1: d0:8a:57:49:51:25:67:56:ef:bd:aa:7a:d1:2f:b6: a2:d7:df:09:86:c6:f9:2a:42:8b:36:ec:d7:94:dd: 57:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8F:56:C7:E4:F1:09:63:5B:74:A0:7A:80:85:26:16:FA:21:7E:4E X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-Y9Wx-TxCWNbdKB6gIUmFvohfk4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.220.248.0/24 185.225.1.0/24 194.5.64.0/24 Signature Algorithm: sha256WithRSAEncryption 36:8e:3c:09:fd:bb:d8:8e:47:3a:2e:87:28:61:7e:67:79:d5: 6c:3b:14:7c:de:08:17:a8:5e:f8:f9:2e:80:cc:4c:88:77:7a: 6f:79:74:75:93:00:3b:01:f8:e3:2e:37:e6:cf:12:52:84:e4: ca:8c:02:ac:ae:e3:8e:fd:2d:fe:3c:68:54:ed:e0:5a:94:20: 14:0c:1d:da:8f:03:75:3f:d2:a1:20:a5:9b:af:ff:ec:bd:49: b7:e6:a5:50:35:fa:97:10:3c:fe:0a:d7:f2:0c:03:3d:6b:7a: a7:3f:e1:b9:c4:4e:d2:5d:9e:56:c5:40:57:28:8f:18:7c:97: 50:78:e0:72:7d:b0:d7:99:de:32:60:3c:12:06:56:ba:fe:8c: 04:62:73:a7:b4:0f:96:2b:13:aa:26:51:af:ca:bb:9c:ef:6c: bb:eb:b9:a8:98:2c:f1:45:42:76:dd:be:8f:8f:29:30:0f:c9: b0:b8:76:5b:a2:db:fb:8c:7c:05:66:48:b9:ac:c5:f8:71:bd: 13:25:b7:87:d5:92:46:ba:cd:44:f4:85:2c:f8:b1:8b:1b:ce: 1c:db:62:c6:b6:ed:9d:91:84:dc:54:b4:ca:7b:78:da:79:33: 4b:70:e4:07:5b:db:8e:62:fc:01:a5:94:e8:0a:67:5c:f8:12: 1c:a2:95:8f -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZsM7TLiwe5d+34vgPQgX7MzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjUxMjExMTAyMDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOThmNTZjN2U0ZjEwOTYzNWI3NGEwN2E4MDg1MjYxNmZhMjE3ZTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL5YJAX7aeeC4s2+47ES6XLlH5e9 /7eI6yAjj2jyubJnwoW6tklvm3oNcP6sTdkjOi4WvVCnm8iY0hvmJud7zf6N3sx9 9AxujkuznS8uIIZ4Wq/ucCM5E4wO+URfRdam+NaiiEJMQJUcfgd/74/G6X/d+WK4 7a/SovBGqfff7gdSEf1G7JDU6KKyZU0t8CRFF+25RcLF2Pl/xw8RQAotRH9eNsZt CvThFzAMvX8AU7HJND3RN13yE4sKsWIJcG3rde0cSX1SsFz+oSX7SA3ZHe0X1CnS ZJOBb91L3RINoPHQildJUSVnVu+9qnrRL7ai198Jhsb5KkKLNuzXlN1XsQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFPmPVsfk8QljW3SgeoCFJhb6IX5OMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvMS1ZOVd4LVR4Q1dOYmRLQjZnSVVtRnZvaGZrNC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZDAvMmI4MzRlLWJhZDItNDlmZi1iYTM4LWI0MzQyYmE5MWFi Yy8xL1lHZUV3UVVJVzUxcTFmYzZBN0lObWx3UlRLOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEALnc+AME ALnhAQMEAMIFQDANBgkqhkiG9w0BAQsFAAOCAQEANo48Cf272I5HOi6HKGF+Z3nV bDsUfN4IF6he+PkugMxMiHd6b3l0dZMAOwH44y435s8SUoTkyowCrK7jjv0t/jxo VO3gWpQgFAwd2o8DdT/SoSClm6//7L1Jt+alUDX6lxA8/grX8gwDPWt6pz/hucRO 0l2eVsVAVyiPGHyXUHjgcn2w15neMmA8EgZWuv6MBGJzp7QPlisTqiZRr8q7nO9s u+u5qJgs8UVCdt2+j48pMA/JsLh2W6Lb+4x8BWZIuazF+HG9EyW3h9WSRrrNRPSF LPixixvOHNtixrbtnZGE3FS0ynt42nkzS3DkB1vbjmL8AaWU6ApnXPgSHKKVjw== -----END CERTIFICATE-----Generated at Fri Dec 12 09:46:18 2025 by rpki-client