This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Y0XwExXoreS2uJA4eqK6ObW9BUk.roa File: Y0XwExXoreS2uJA4eqK6ObW9BUk.roa (raw, json) Hash identifier: BylpihDT8erZ8MLb8JYzH7MLvoVG6LI2yvDFGHDl1YU= Subject key identifier: 63:45:F0:13:15:E8:AD:E4:B6:B8:90:38:7A:A2:BA:39:B5:BD:05:49 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B35AF7A5ADBDD9F3EC2F62E05825C307E Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Y0XwExXoreS2uJA4eqK6ObW9BUk.roa Signing time: Fri 19 Dec 2025 08:17:31 +0000 ROA not before: Fri 19 Dec 2025 08:17:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 61112 IP address blocks: 151.242.125.0/24 maxlen: 24 151.242.164.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:af:7a:5a:db:dd:9f:3e:c2:f6:2e:05:82:5c:30:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 19 08:17:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6345f01315e8ade4b6b890387aa2ba39b5bd0549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c9:ac:94:e7:ec:36:6c:c3:63:54:b7:e1:9f: 9f:0a:16:fa:f0:c8:9c:97:78:47:c0:d7:b2:ee:bc: 50:8a:c5:81:f3:82:31:be:1a:2d:d0:05:d1:b3:a1: 94:ec:54:6d:da:0f:27:3d:10:a2:75:2e:c2:ce:e3: c7:48:d2:92:ec:a8:04:fc:21:a5:6a:02:9f:ef:d9: 69:32:e1:2b:c4:53:ea:84:c4:33:37:33:1a:b7:df: 26:45:62:a4:6f:93:46:42:ae:2b:48:d5:ce:aa:6d: 23:ab:8e:f5:0c:f2:d5:26:50:32:c3:ef:46:8b:8b: cc:df:78:56:21:2c:c7:02:24:a2:5a:23:12:5a:21: 13:35:35:b4:05:a2:5e:92:31:cf:7c:be:6c:e1:65: 52:f9:2e:df:28:7e:05:5a:dd:e3:da:3d:ec:32:ab: 4e:a6:20:bb:f5:3f:f8:0a:9d:83:80:8b:fb:8a:43: 52:2d:3a:ff:8a:19:28:03:31:c5:b6:05:a5:16:f5: 7b:23:41:41:a2:e5:58:8e:13:56:18:ec:e3:21:d2: 65:9f:c4:55:ac:91:9b:8c:30:2c:af:75:2b:e8:e6: a8:55:ee:9b:7d:7a:74:f8:5e:6e:1e:52:86:d6:c8: a9:00:07:77:85:3c:37:e4:f5:7d:f5:d2:95:66:bf: a3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:45:F0:13:15:E8:AD:E4:B6:B8:90:38:7A:A2:BA:39:B5:BD:05:49 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Y0XwExXoreS2uJA4eqK6ObW9BUk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.125.0/24 151.242.164.0/23 Signature Algorithm: sha256WithRSAEncryption 97:a5:46:7d:c3:ab:7d:cd:ff:f5:ca:ff:23:ff:6e:27:c8:93: f5:fb:8f:bf:aa:c8:52:a9:b9:54:df:9d:07:f3:a5:5b:e8:4e: 9c:31:30:64:ea:50:ff:8a:5d:25:09:01:5d:6c:9b:a7:be:31: 7b:3c:2c:cc:bb:ed:b7:4f:b3:62:6b:59:cc:2c:7a:a1:a3:f0: 2d:6f:a5:1d:83:c6:a7:f7:0a:68:98:bc:26:cf:f5:e5:df:3e: 3d:49:6d:c2:2b:cd:7f:2d:26:b7:1a:7f:84:0b:5e:83:dd:02: 6f:75:34:1d:50:77:67:d1:df:c1:bf:7c:b1:a7:a7:73:97:2f: 3f:f5:3e:b8:13:a9:aa:e2:3c:09:2e:5d:52:6c:38:77:41:23: e3:cc:23:60:2a:0d:ea:de:f1:ed:d1:a5:4a:96:03:aa:2d:64: 15:d7:92:9e:a3:87:88:c9:2a:ca:4b:a1:4a:83:68:8f:ae:2e: 5f:c1:5e:2d:cc:5e:c8:02:31:0a:f1:41:e7:13:49:52:12:f2: da:36:8f:82:e8:a0:3a:d4:8a:73:5a:78:87:04:92:ed:93:30: b5:65:12:ac:41:f5:2f:65:07:ac:8b:f2:d3:34:e5:f2:f9:64: 67:5e:aa:0d:a3:12:4b:ec:21:24:b2:ee:aa:60:32:f3:91:21: 4f:df:47:57 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZs1r3pa292fPsL2LgWCXDB+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjE5MDgxNzMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzQ1ZjAxMzE1ZThhZGU0YjZiODkwMzg3YWEyYmEzOWI1YmQwNTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8mslOfsNmzDY1S34Z+fChb68Mic l3hHwNey7rxQisWB84Ixvhot0AXRs6GU7FRt2g8nPRCidS7CzuPHSNKS7KgE/CGl agKf79lpMuErxFPqhMQzNzMat98mRWKkb5NGQq4rSNXOqm0jq471DPLVJlAyw+9G i4vM33hWISzHAiSiWiMSWiETNTW0BaJekjHPfL5s4WVS+S7fKH4FWt3j2j3sMqtO piC79T/4Cp2DgIv7ikNSLTr/ihkoAzHFtgWlFvV7I0FBouVYjhNWGOzjIdJln8RV rJGbjDAsr3Ur6OaoVe6bfXp0+F5uHlKG1sipAAd3hTw35PV99dKVZr+jUwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGNF8BMV6K3ktriQOHqiujm1vQVJMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvWTBYd0V4WG9yZVMydUpBNGVxSzZPYlc5QlVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/J9AwQB l/KkMA0GCSqGSIb3DQEBCwUAA4IBAQCXpUZ9w6t9zf/1yv8j/24nyJP1+4+/qshS qblU350H86Vb6E6cMTBk6lD/il0lCQFdbJunvjF7PCzMu+23T7Nia1nMLHqho/At b6Udg8an9wpomLwmz/Xl3z49SW3CK81/LSa3Gn+EC16D3QJvdTQdUHdn0d/Bv3yx p6dzly8/9T64E6mq4jwJLl1SbDh3QSPjzCNgKg3q3vHt0aVKlgOqLWQV15Keo4eI ySrKS6FKg2iPri5fwV4tzF7IAjEK8UHnE0lSEvLaNo+C6KA61IpzWniHBJLtkzC1 ZRKsQfUvZQesi/LTNOXy+WRnXqoNoxJL7CEksu6qYDLzkSFP30dX -----END CERTIFICATE-----Generated at Fri Dec 19 20:48:44 2025 by rpki-client