This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YvRJt_XT4ghQUGXqovUnwLJjU5A.roa File: YvRJt_XT4ghQUGXqovUnwLJjU5A.roa (raw, json) Hash identifier: JD1WixgLEmRyvIqNfJnfjd6HYYkNlJjLDmbRbrbPDfM= Subject key identifier: 62:F4:49:B7:F5:D3:E2:08:50:50:65:EA:A2:F5:27:C0:B2:63:53:90 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B35AF79FD27AE67998493864EE7C5A0C5 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YvRJt_XT4ghQUGXqovUnwLJjU5A.roa Signing time: Fri 19 Dec 2025 08:17:31 +0000 ROA not before: Fri 19 Dec 2025 08:17:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60439 IP address blocks: 151.240.151.0/24 maxlen: 24 151.243.28.0/24 maxlen: 24 151.243.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:af:79:fd:27:ae:67:99:84:93:86:4e:e7:c5:a0:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 19 08:17:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=62f449b7f5d3e208505065eaa2f527c0b2635390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b7:bf:db:2c:ce:94:21:78:dc:2e:ba:a0:72: 04:5c:54:d6:b9:a2:4e:ed:83:79:90:a2:ba:4c:d5: f7:d5:4c:81:0d:3e:da:e6:1c:ea:a2:10:28:6c:a4: b3:6f:a7:6c:e3:94:56:1a:92:96:07:4c:73:9a:3d: b6:ef:28:55:b2:52:60:30:db:99:69:f8:d6:a7:7f: b9:dc:4f:61:d9:b7:b0:ca:f3:e5:3a:0b:a5:96:dd: 3b:c1:74:07:7e:6b:16:a7:12:52:22:53:7b:77:c7: 85:3e:ea:33:91:33:ab:3d:55:5c:76:12:78:58:9a: 21:85:1f:09:a8:5e:bb:08:d2:bc:4b:b2:fe:4a:60: f2:17:a0:e7:6e:71:40:d8:3d:bd:d1:56:0f:53:b9: 57:04:65:24:ad:e6:48:10:79:60:35:09:dd:b9:e8: 1e:11:55:ca:83:29:cd:fe:98:93:b6:43:d2:54:ac: b7:4e:c9:2d:9c:01:75:3d:d4:29:5e:f4:e7:b0:fd: 18:e4:3e:72:57:ec:b7:b8:e1:37:6e:86:78:4d:28: 83:9e:11:e7:9e:e9:37:b8:8b:a7:6d:63:89:e3:c6: 12:0f:63:e5:98:87:ee:c8:41:31:cb:ea:7d:2b:c7: 0a:ec:ae:80:80:0f:c7:03:f9:dc:d1:49:9e:f6:cb: e3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F4:49:B7:F5:D3:E2:08:50:50:65:EA:A2:F5:27:C0:B2:63:53:90 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YvRJt_XT4ghQUGXqovUnwLJjU5A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.151.0/24 151.243.28.0/24 151.243.150.0/24 Signature Algorithm: sha256WithRSAEncryption a4:c1:b3:96:57:17:ee:54:81:cd:ac:a2:11:bb:cc:33:d1:24: 47:fa:b7:03:d3:6a:71:74:f4:df:2f:c5:13:ed:f0:25:fc:cf: c0:78:e8:8a:b3:10:fc:41:4e:e6:90:db:e8:10:e3:90:de:b2: 88:27:9a:94:1c:d4:96:65:08:12:b9:1b:f2:dd:43:e7:5b:d7: 20:9a:36:35:4d:3c:1d:f8:c2:db:26:1b:be:14:dd:fc:87:ad: bb:99:32:2d:37:42:08:87:22:77:c7:5b:da:0e:a2:c2:4d:3f: b0:b2:03:cd:27:49:1c:8b:b9:70:d7:07:6a:8c:79:4e:69:e8: 8f:57:d5:d7:74:e6:08:ac:bb:4a:cd:2a:f9:eb:29:f6:ce:f9: a6:ea:47:f9:c1:84:78:d9:d5:28:51:3d:b6:3f:35:8f:14:cf: a1:2e:ae:d8:ef:e1:93:92:07:ab:a6:f0:e8:28:ee:45:f4:7d: 1f:22:2e:e4:04:b0:73:0c:58:e3:b0:f9:64:6a:d6:04:1f:eb: ab:86:82:c8:e0:49:ea:9c:f9:99:05:99:e4:78:70:d6:6e:6e: 81:d7:dc:66:c4:d0:f1:ba:8e:f0:30:b7:b0:7a:ad:5e:08:24: 2e:c9:f7:8f:ae:40:78:62:cb:64:f7:0a:98:99:4b:31:20:de: c1:9f:55:1a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZs1r3n9J65nmYSThk7nxaDFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjE5MDgxNzMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmY0NDliN2Y1ZDNlMjA4NTA1MDY1ZWFhMmY1MjdjMGIyNjM1MzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7e/2yzOlCF43C66oHIEXFTWuaJO 7YN5kKK6TNX31UyBDT7a5hzqohAobKSzb6ds45RWGpKWB0xzmj227yhVslJgMNuZ afjWp3+53E9h2bewyvPlOgullt07wXQHfmsWpxJSIlN7d8eFPuozkTOrPVVcdhJ4 WJohhR8JqF67CNK8S7L+SmDyF6DnbnFA2D290VYPU7lXBGUkreZIEHlgNQnduege EVXKgynN/piTtkPSVKy3TsktnAF1PdQpXvTnsP0Y5D5yV+y3uOE3boZ4TSiDnhHn nuk3uIunbWOJ48YSD2PlmIfuyEExy+p9K8cK7K6AgA/HA/nc0Ume9svj1QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGL0Sbf10+IIUFBl6qL1J8CyY1OQMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvWXZSSnRfWFQ0Z2hRVUdYcW92VW53TEpqVTVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/CXAwQA l/McAwQAl/OWMA0GCSqGSIb3DQEBCwUAA4IBAQCkwbOWVxfuVIHNrKIRu8wz0SRH +rcD02pxdPTfL8UT7fAl/M/AeOiKsxD8QU7mkNvoEOOQ3rKIJ5qUHNSWZQgSuRvy 3UPnW9cgmjY1TTwd+MLbJhu+FN38h627mTItN0IIhyJ3x1vaDqLCTT+wsgPNJ0kc i7lw1wdqjHlOaeiPV9XXdOYIrLtKzSr56yn2zvmm6kf5wYR42dUoUT22PzWPFM+h Lq7Y7+GTkgerpvDoKO5F9H0fIi7kBLBzDFjjsPlkatYEH+urhoLI4EnqnPmZBZnk eHDWbm6B19xmxNDxuo7wMLeweq1eCCQuyfePrkB4Ystk9wqYmUsxIN7Bn1Ua -----END CERTIFICATE-----Generated at Sat Dec 20 13:52:40 2025 by rpki-client