This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/YBIU31Bau4IHlrYcDanR7_BCiuw.roa File: YBIU31Bau4IHlrYcDanR7_BCiuw.roa (raw, json) Hash identifier: t02Hz19f7jw3zKy57+diFTpZafQk0Oywl27vP0An1/U= Subject key identifier: 60:12:14:DF:50:5A:BB:82:07:96:B6:1C:0D:A9:D1:EF:F0:42:8A:EC Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3 Certificate serial: 019AFDC9301205790A65057C29270D19224E Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/YBIU31Bau4IHlrYcDanR7_BCiuw.roa Signing time: Mon 08 Dec 2025 11:46:51 +0000 ROA not before: Mon 08 Dec 2025 11:46:51 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210848 IP address blocks: 45.80.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:c9:30:12:05:79:0a:65:05:7c:29:27:0d:19:22:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3 Validity Not Before: Dec 8 11:46:51 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=601214df505abb820796b61c0da9d1eff0428aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:60:3b:cd:ba:b9:0a:74:43:0f:f5:04:f4:51: 46:8b:00:23:34:19:68:42:58:c0:d4:41:7b:f7:4d: b5:a7:de:7f:4d:3d:8a:fd:93:cd:cd:ab:07:15:1a: ad:4e:87:ef:07:68:42:19:4e:d2:71:ee:98:44:46: ad:8d:b2:f3:68:91:f0:7c:cd:f5:f9:42:fe:d2:94: 09:7a:78:36:04:71:f2:b9:0f:a5:26:d0:f6:dc:2e: 0c:50:23:98:7b:e5:71:ac:fd:29:f1:92:74:f4:30: 15:65:f0:71:67:a1:58:fa:47:86:0b:73:28:b2:04: 51:18:9f:94:5a:81:6d:0b:dd:f3:b1:66:22:54:ec: e8:1d:9b:54:ed:79:d2:0c:35:ef:0d:04:cd:44:fc: e4:99:d5:f3:1b:d4:18:61:47:e5:54:4b:1d:f2:2d: bd:03:de:5d:ac:52:65:dd:21:e0:6c:82:c5:3e:c5: 45:76:ab:15:b0:1a:54:4f:d0:7a:57:dc:98:3b:1a: 46:f5:e3:14:f5:4d:d4:d7:7f:f4:7c:ff:b7:ad:1d: 43:e9:00:ec:0a:42:b5:13:6b:6c:51:a9:3d:ce:c9: f9:35:76:32:d9:7c:d6:f1:79:a8:f6:53:91:d4:62: 90:44:35:65:1d:fd:d7:e0:b3:80:cd:72:cc:33:06: 11:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:12:14:DF:50:5A:BB:82:07:96:B6:1C:0D:A9:D1:EF:F0:42:8A:EC X509v3 Authority Key Identifier: keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/YBIU31Bau4IHlrYcDanR7_BCiuw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.37.0/24 Signature Algorithm: sha256WithRSAEncryption 82:cf:11:54:44:33:9f:d1:ba:d8:fb:fc:de:4d:35:3c:59:37: 0f:24:d4:6b:e2:55:74:e8:60:7a:36:7a:89:19:e3:87:7c:22: d6:d8:24:32:78:46:6e:bf:2a:25:31:de:0f:c7:f8:23:31:91: 77:e0:1f:f7:fb:2a:f1:c1:fc:c1:5a:3a:d5:29:0d:a1:dd:30: 2e:6e:56:25:ff:6b:9f:4b:98:dd:1b:a6:36:af:32:29:a0:02: c0:12:a3:0d:73:05:4c:f7:fc:30:61:23:8e:39:32:b3:d3:16: 3f:17:ee:12:e6:56:43:0a:49:ef:80:1a:16:50:a5:2e:d1:4f: 11:3e:05:0c:5f:51:7f:cc:77:71:9c:34:db:fa:92:98:ce:6b: 9a:67:24:c3:0a:02:84:7b:dc:7f:91:61:5e:3b:5f:c8:94:42: 49:70:18:a6:c9:ae:c7:6d:73:02:e7:b5:dd:25:c5:31:2e:72: e0:30:bb:a9:df:4e:cc:97:fe:17:1c:1d:fe:6e:a4:d1:55:32: 85:6f:69:8d:c3:31:e3:2b:e8:8b:f6:cc:f9:88:09:43:fe:64: bb:76:5e:bb:0d:6f:8d:ec:cf:1b:43:9a:ea:57:80:e0:03:84: 5d:0c:b6:7d:56:3c:ec:56:a6:9a:70:ce:e2:b7:34:e9:c1:f4: 19:07:32:5c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr9yTASBXkKZQV8KScNGSJOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNWYyYTkzZGIxMGYyZGQ1ZjZhNTViYjJhNDQwZjY3NDg2 Y2QxYTMwHhcNMjUxMjA4MTE0NjUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDEyMTRkZjUwNWFiYjgyMDc5NmI2MWMwZGE5ZDFlZmYwNDI4YWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWA7zbq5CnRDD/UE9FFGiwAjNBlo QljA1EF79021p95/TT2K/ZPNzasHFRqtTofvB2hCGU7Sce6YREatjbLzaJHwfM31 +UL+0pQJeng2BHHyuQ+lJtD23C4MUCOYe+VxrP0p8ZJ09DAVZfBxZ6FY+keGC3Mo sgRRGJ+UWoFtC93zsWYiVOzoHZtU7XnSDDXvDQTNRPzkmdXzG9QYYUflVEsd8i29 A95drFJl3SHgbILFPsVFdqsVsBpUT9B6V9yYOxpG9eMU9U3U13/0fP+3rR1D6QDs CkK1E2tsUak9zsn5NXYy2XzW8Xmo9lOR1GKQRDVlHf3X4LOAzXLMMwYR7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGASFN9QWruCB5a2HA2p0e/wQorsMB8GA1UdIwQY MBaAFAJfKpPbEPLdX2pVuypED2dIbNGjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWw4cWs5c1E4dDFmYWxXN0trUVBaMGhzMGFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yMDVkMjQtMDA5Zi00ODZhLTk3NmYt MmVjZGExMWRlMTUzLzEvWUJJVTMxQmF1NElIbHJZY0RhblI3X0JDaXV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8yMDVkMjQtMDA5Zi00ODZhLTk3NmYtMmVjZGExMWRlMTUz LzEvQWw4cWs5c1E4dDFmYWxXN0trUVBaMGhzMGFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVAlMA0G CSqGSIb3DQEBCwUAA4IBAQCCzxFURDOf0brY+/zeTTU8WTcPJNRr4lV06GB6NnqJ GeOHfCLW2CQyeEZuvyolMd4Px/gjMZF34B/3+yrxwfzBWjrVKQ2h3TAublYl/2uf S5jdG6Y2rzIpoALAEqMNcwVM9/wwYSOOOTKz0xY/F+4S5lZDCknvgBoWUKUu0U8R PgUMX1F/zHdxnDTb+pKYzmuaZyTDCgKEe9x/kWFeO1/IlEJJcBimya7HbXMC57Xd JcUxLnLgMLup307Ml/4XHB3+bqTRVTKFb2mNwzHjK+iL9sz5iAlD/mS7dl67DW+N 7M8bQ5rqV4DgA4RdDLZ9VjzsVqaacM7itzTpwfQZBzJc -----END CERTIFICATE-----Generated at Sun Dec 14 11:44:31 2025 by rpki-client