This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PYvVBtX6dj9_4amDud71kaTnJ7w.roa File: PYvVBtX6dj9_4amDud71kaTnJ7w.roa (raw, json) Hash identifier: 5fSJc7G0zUfBPLbvUdA6p/ugeZOex9qSa6CjviFBpPc= Subject key identifier: 3D:8B:D5:06:D5:FA:76:3F:7F:E1:A9:83:B9:DE:F5:91:A4:E7:27:BC Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B2BDD6EEB32F3D291F74654AF81EC414B Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PYvVBtX6dj9_4amDud71kaTnJ7w.roa Signing time: Wed 17 Dec 2025 10:31:30 +0000 ROA not before: Wed 17 Dec 2025 10:31:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214654 IP address blocks: 185.206.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:dd:6e:eb:32:f3:d2:91:f7:46:54:af:81:ec:41:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Dec 17 10:31:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3d8bd506d5fa763f7fe1a983b9def591a4e727bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:04:57:23:76:1d:f7:94:6a:c2:3b:0b:0e:82: 17:d7:66:c6:db:67:e8:26:ad:6f:9e:51:d5:8a:ce: a0:74:a5:f2:ec:18:e4:14:43:a2:a7:09:e5:88:68: e3:fa:b8:a8:98:82:07:a3:eb:ce:3d:5e:ab:b9:c4: f3:15:f5:19:78:52:b3:89:7f:dc:8f:7c:64:a7:84: a6:9b:81:08:62:6d:d0:05:dc:69:95:8b:69:47:71: 30:98:90:a2:ce:ca:66:b4:05:02:23:98:42:18:71: 2c:d8:0a:94:d0:0e:be:f1:4b:fb:ec:e3:40:ca:94: e2:9d:be:63:e7:8f:29:78:6b:9a:59:20:55:cd:df: be:69:5c:6f:d5:ff:20:90:74:83:7a:17:cb:c5:16: 8d:3b:7f:f3:93:79:47:37:45:00:74:0d:cb:62:07: 11:5b:98:49:51:33:81:6a:a9:66:7e:80:0f:26:1f: 2d:28:a2:1a:c7:0d:25:c2:5c:9c:bd:65:91:b7:0a: 99:ec:78:be:d7:7d:f0:1d:ed:87:08:1c:a6:bb:85: 45:e0:ac:81:61:b9:08:bd:e7:fe:d7:23:75:d4:30: 93:0f:47:57:02:09:0f:64:7f:7a:d2:83:f4:48:78: b2:0d:55:0e:f9:85:9c:28:94:d7:c1:ac:ba:f1:c7: ad:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8B:D5:06:D5:FA:76:3F:7F:E1:A9:83:B9:DE:F5:91:A4:E7:27:BC X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PYvVBtX6dj9_4amDud71kaTnJ7w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.206.250.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:b0:2e:4c:f9:eb:b2:42:32:da:07:2f:ea:8b:bf:2b:31:ad: 4b:31:f1:3e:9f:81:f2:db:f2:0f:de:55:13:b0:f0:68:38:88: 90:bd:c5:7d:a4:e3:6b:67:66:37:9f:e5:80:92:fa:1e:05:45: 21:f4:e5:bc:7c:e7:86:7b:dd:d9:b5:67:0a:a7:90:46:45:c7: 0b:3b:16:92:06:01:24:50:66:fd:28:3b:5d:97:2e:4a:cd:7a: d8:ac:d9:77:94:9f:6d:5b:b6:50:4b:10:aa:80:cf:47:b1:3d: 37:1c:0a:2b:9c:34:b7:6b:24:86:6a:03:aa:09:9e:fe:02:19: fa:9e:61:4d:f6:61:16:ec:b0:c8:3c:d1:77:9f:e5:26:1c:9c: 34:9a:16:d9:5a:e5:9c:c1:47:c7:8e:53:37:f2:20:1d:34:75: c1:1c:9d:f0:a4:3d:ac:9c:d7:75:26:46:2c:f1:96:a1:22:69: 16:e9:87:d5:18:95:c2:c4:6e:ab:9e:3d:a3:00:46:7d:c4:3e: cf:12:eb:5f:7b:2e:66:d7:32:bd:70:c0:74:4a:ca:00:3f:b2: 1c:93:6b:8d:1f:ae:ee:70:51:40:be:64:73:d9:64:01:63:64: 4a:4e:ab:14:70:f3:ff:14:eb:91:2f:56:db:2a:6b:3b:95:f3: cc:b5:79:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsr3W7rMvPSkfdGVK+B7EFLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjUxMjE3MTAzMTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDhiZDUwNmQ1ZmE3NjNmN2ZlMWE5ODNiOWRlZjU5MWE0ZTcyN2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQRXI3Yd95RqwjsLDoIX12bG22fo Jq1vnlHVis6gdKXy7BjkFEOipwnliGjj+riomIIHo+vOPV6rucTzFfUZeFKziX/c j3xkp4Smm4EIYm3QBdxplYtpR3EwmJCizspmtAUCI5hCGHEs2AqU0A6+8Uv77ONA ypTinb5j548peGuaWSBVzd++aVxv1f8gkHSDehfLxRaNO3/zk3lHN0UAdA3LYgcR W5hJUTOBaqlmfoAPJh8tKKIaxw0lwlycvWWRtwqZ7Hi+133wHe2HCBymu4VF4KyB YbkIvef+1yN11DCTD0dXAgkPZH960oP0SHiyDVUO+YWcKJTXway68cet9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD2L1QbV+nY/f+Gpg7ne9ZGk5ye8MB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvUFl2VkJ0WDZkajlfNGFtRHVkNzFrYVRuSjd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc76MA0G CSqGSIb3DQEBCwUAA4IBAQCOsC5M+euyQjLaBy/qi78rMa1LMfE+n4Hy2/IP3lUT sPBoOIiQvcV9pONrZ2Y3n+WAkvoeBUUh9OW8fOeGe93ZtWcKp5BGRccLOxaSBgEk UGb9KDtdly5KzXrYrNl3lJ9tW7ZQSxCqgM9HsT03HAornDS3aySGagOqCZ7+Ahn6 nmFN9mEW7LDIPNF3n+UmHJw0mhbZWuWcwUfHjlM38iAdNHXBHJ3wpD2snNd1JkYs 8ZahImkW6YfVGJXCxG6rnj2jAEZ9xD7PEutfey5m1zK9cMB0SsoAP7Ick2uNH67u cFFAvmRz2WQBY2RKTqsUcPP/FOuRL1bbKms7lfPMtXnA -----END CERTIFICATE-----Generated at Thu Dec 18 09:35:50 2025 by rpki-client