This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zyyaWhE7mFmWz67Vq9pbfLIUZbA.roa File: zyyaWhE7mFmWz67Vq9pbfLIUZbA.roa (raw, json) Hash identifier: LmI7ciEZh1BRFjnxpDvtzeRJPoh3MZBBdvgvF6PaH/4= Subject key identifier: CF:2C:9A:5A:11:3B:98:59:96:CF:AE:D5:AB:DA:5B:7C:B2:14:65:B0 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B30D3440AC7C39613F31B1B3E4B9AFF1B Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zyyaWhE7mFmWz67Vq9pbfLIUZbA.roa Signing time: Thu 18 Dec 2025 09:38:30 +0000 ROA not before: Thu 18 Dec 2025 09:38:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212862 IP address blocks: 185.196.40.0/24 maxlen: 24 185.196.41.0/24 maxlen: 24 185.220.240.0/22 maxlen: 24 194.38.56.0/22 maxlen: 24 212.115.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:d3:44:0a:c7:c3:96:13:f3:1b:1b:3e:4b:9a:ff:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Dec 18 09:38:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cf2c9a5a113b985996cfaed5abda5b7cb21465b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a9:58:9a:98:a3:97:65:06:cb:ee:a8:9c:40: d0:cf:49:37:ca:4f:fb:eb:04:5c:4e:37:cb:80:c5: ee:2c:d2:70:6b:4a:b8:ac:dd:75:98:73:db:8b:f1: db:72:69:9e:e7:61:5d:0d:84:98:d1:2d:5b:fa:0a: df:ec:61:71:53:ba:bc:ec:2d:f0:d3:7d:a2:c9:64: 01:69:46:0c:a7:5b:c9:da:3d:2b:d2:12:24:3d:50: ff:ce:3b:8b:d3:62:bb:a0:81:f6:a2:54:e6:27:29: e7:55:2f:cb:78:f3:6d:2d:b2:a5:ab:dd:28:ff:d9: 37:59:ad:6f:8f:5b:b1:6e:a0:50:24:48:71:97:d9: 41:47:b8:2e:8c:8c:07:29:ba:3e:b1:d5:3e:7f:31: 4a:ae:9c:47:5b:32:3a:95:22:e7:c7:aa:c6:c1:b0: a8:11:dc:13:fc:19:39:68:e7:e2:9e:2e:d3:b5:25: 0a:45:ca:69:e1:6b:c1:62:fb:96:60:d9:47:e3:a5: cf:7a:3f:7f:a5:2a:d9:5a:8c:22:8f:f6:1e:0e:2d: 4d:7e:79:0a:20:fb:c5:a0:6d:3f:de:a3:de:83:67: 0a:21:a1:0f:9f:7c:96:ac:b1:fb:ae:8d:ca:bc:ed: a1:bd:17:83:53:97:1d:c2:2b:55:0b:45:d6:39:54: a4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2C:9A:5A:11:3B:98:59:96:CF:AE:D5:AB:DA:5B:7C:B2:14:65:B0 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zyyaWhE7mFmWz67Vq9pbfLIUZbA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.40.0/23 185.220.240.0/22 194.38.56.0/22 212.115.44.0/22 Signature Algorithm: sha256WithRSAEncryption 21:92:4b:46:42:b1:12:a2:5c:97:84:15:4a:62:54:40:40:f8: a2:cc:8a:ac:30:9b:a3:57:7a:59:18:43:af:23:b1:e0:62:33: 3c:b2:a4:97:ae:2b:b6:57:4a:55:58:43:1b:35:42:33:be:f9: 1f:7f:ef:6a:80:1b:05:7d:d2:4b:b0:dd:1b:4e:85:6b:b5:9a: 3d:f8:d3:da:4c:cd:4a:ab:d3:ff:90:9f:10:2e:49:dd:f3:a8: 04:c2:dc:42:3a:ee:da:c1:2f:a8:65:b6:c7:ba:05:49:23:c7: 06:72:9a:95:92:99:4a:5e:05:a1:80:31:40:ce:dd:8d:f8:85: 89:f0:ce:8b:cd:c6:1b:53:1b:78:90:83:67:d7:47:d7:07:3a: 74:a0:17:5a:e7:80:e7:17:ec:42:63:48:06:66:31:bf:31:12: 6d:fb:f7:4a:01:0b:2c:2b:b5:cb:99:54:4e:b2:ce:34:42:11: 42:4d:af:8f:9f:3f:6b:2f:0b:a1:05:35:38:a4:da:3e:63:3e: 88:28:f1:73:f3:5d:3c:89:d5:7c:d8:31:47:f3:52:01:28:d0: 4d:3e:94:b2:7f:a3:88:47:80:d7:58:2f:e9:4b:f4:af:54:71: ba:bc:a4:46:fd:9e:00:5a:63:25:52:e5:58:4d:46:bc:e2:fd: 18:de:dc:b3 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZsw00QKx8OWE/MbGz5Lmv8bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjUxMjE4MDkzODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjJjOWE1YTExM2I5ODU5OTZjZmFlZDVhYmRhNWI3Y2IyMTQ2NWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6lYmpijl2UGy+6onEDQz0k3yk/7 6wRcTjfLgMXuLNJwa0q4rN11mHPbi/Hbcmme52FdDYSY0S1b+grf7GFxU7q87C3w 032iyWQBaUYMp1vJ2j0r0hIkPVD/zjuL02K7oIH2olTmJynnVS/LePNtLbKlq90o /9k3Wa1vj1uxbqBQJEhxl9lBR7gujIwHKbo+sdU+fzFKrpxHWzI6lSLnx6rGwbCo EdwT/Bk5aOfini7TtSUKRcpp4WvBYvuWYNlH46XPej9/pSrZWowij/YeDi1NfnkK IPvFoG0/3qPeg2cKIaEPn3yWrLH7ro3KvO2hvReDU5cdwitVC0XWOVSkdQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFM8smloRO5hZls+u1avaW3yyFGWwMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvenl5YVdoRTdtRm1XejY3VnE5cGJmTElVWmJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBucQoAwQC udzwAwQCwiY4AwQC1HMsMA0GCSqGSIb3DQEBCwUAA4IBAQAhkktGQrESolyXhBVK YlRAQPiizIqsMJujV3pZGEOvI7HgYjM8sqSXriu2V0pVWEMbNUIzvvkff+9qgBsF fdJLsN0bToVrtZo9+NPaTM1Kq9P/kJ8QLknd86gEwtxCOu7awS+oZbbHugVJI8cG cpqVkplKXgWhgDFAzt2N+IWJ8M6LzcYbUxt4kINn10fXBzp0oBda54DnF+xCY0gG ZjG/MRJt+/dKAQssK7XLmVROss40QhFCTa+Pnz9rLwuhBTU4pNo+Yz6IKPFz8108 idV82DFH81IBKNBNPpSyf6OIR4DXWC/pS/SvVHG6vKRG/Z4AWmMlUuVYTUa84v0Y 3tyz -----END CERTIFICATE-----Generated at Sun Dec 21 11:25:37 2025 by rpki-client