This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/ybZOnwo7V3lT7eoweeCyhTkuEvY.roa File: ybZOnwo7V3lT7eoweeCyhTkuEvY.roa (raw, json) Hash identifier: bG74HvJ2Sidz7r+t/B4ZKKXFrK/QgK4Ti3F+AcXvYpU= Subject key identifier: C9:B6:4E:9F:0A:3B:57:79:53:ED:EA:30:79:E0:B2:85:39:2E:12:F6 Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823 Certificate serial: 019ABED75AA4877F9FF13D83000113F1C7D8 Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/ybZOnwo7V3lT7eoweeCyhTkuEvY.roa Signing time: Wed 26 Nov 2025 06:26:15 +0000 ROA not before: Wed 26 Nov 2025 06:26:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60798 IP address blocks: 158.173.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:be:d7:5a:a4:87:7f:9f:f1:3d:83:00:01:13:f1:c7:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823 Validity Not Before: Nov 26 06:26:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c9b64e9f0a3b577953edea3079e0b285392e12f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:71:42:2c:1d:33:4e:f6:d5:fb:a8:53:44:70: d8:f3:26:65:bc:32:cc:dc:87:d4:51:cd:5c:b8:e2: b2:68:45:d1:b9:ee:10:65:d5:16:8e:ae:4b:79:10: 02:5e:02:b6:53:3c:60:9a:28:d1:c7:0f:89:5a:3b: 4b:a7:29:b7:eb:40:07:21:53:85:90:04:f1:3d:bb: 86:c1:5c:a7:1d:e2:2f:43:ae:c9:0d:f1:35:20:0f: ea:f5:df:1f:d7:a9:23:4d:88:84:47:7d:7d:1b:59: bd:cc:92:ca:dd:c2:6a:80:11:48:66:20:1d:89:7d: 41:e9:f4:10:38:b8:32:24:69:28:ca:1a:57:2c:00: 51:4d:91:39:84:e4:5e:6a:79:80:3d:af:dd:96:86: b6:c5:c7:d9:46:fa:23:22:cb:8f:ea:9b:d8:60:59: ac:66:4b:0c:b1:dd:07:b2:a4:79:fa:54:4f:c1:25: 94:7e:0b:13:f3:0d:bc:d1:0f:88:97:e2:af:11:60: e8:18:60:41:4e:7d:27:f7:e4:b5:66:1a:9e:0a:d1: fe:13:c1:2d:a6:85:f9:31:2c:f1:5d:f3:87:80:a0: a4:d2:3d:be:1f:f6:a1:9d:d3:f0:ee:4b:28:18:cd: d9:37:e3:2c:d7:f4:31:1e:9c:bb:cc:b2:41:a2:19: 65:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B6:4E:9F:0A:3B:57:79:53:ED:EA:30:79:E0:B2:85:39:2E:12:F6 X509v3 Authority Key Identifier: keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/ybZOnwo7V3lT7eoweeCyhTkuEvY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.173.40.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:3c:2a:f3:f2:23:be:42:c1:0a:2d:3d:44:67:78:2e:a7:e6: 79:bd:19:a2:38:65:ee:07:20:f1:1f:86:ff:2d:ff:8c:b3:e7: 3f:e2:b0:25:d5:9e:85:85:49:b5:af:3b:1c:ea:7e:49:81:17: 1c:ff:f5:e7:3d:5c:24:67:41:c3:70:6b:0e:e8:e3:58:2f:41: cc:8a:5e:b0:c0:40:e0:c0:58:38:cd:5d:cf:0b:79:71:41:e2: a5:dc:a0:53:e1:a8:02:3a:fb:eb:fd:a4:2a:74:a6:cc:d3:46: 4a:43:b0:26:d1:d5:a6:b3:3e:8c:6b:1e:81:0d:ca:ff:4a:43: b1:d4:bc:05:5e:64:30:97:e2:44:5d:cb:93:13:dc:56:07:07: ea:bb:bb:5e:42:fd:97:98:06:f5:ce:75:a9:a6:ff:29:96:04: bf:e6:de:f9:68:f0:b1:b6:02:af:ad:11:b2:53:11:db:55:4e: d8:e5:1c:d1:3d:aa:7c:98:90:95:10:8f:90:33:4f:82:9f:84: 31:19:2a:be:0b:c3:c2:be:d9:59:25:22:71:e0:0b:3b:6b:7e: 23:04:ba:cd:ba:6b:1f:37:89:38:31:9b:5b:6b:68:61:57:ce: df:55:19:53:42:5a:5a:90:6a:e1:3e:93:24:81:04:c6:95:ff: 12:7e:2d:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq+11qkh3+f8T2DAAET8cfYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNmEyOGI3YzYzZWY2YWIyMTRhNTJjZmE3YzNlNzhkYjlh NDA4MjMwHhcNMjUxMTI2MDYyNjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWI2NGU5ZjBhM2I1Nzc5NTNlZGVhMzA3OWUwYjI4NTM5MmUxMmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXFCLB0zTvbV+6hTRHDY8yZlvDLM 3IfUUc1cuOKyaEXRue4QZdUWjq5LeRACXgK2UzxgmijRxw+JWjtLpym360AHIVOF kATxPbuGwVynHeIvQ67JDfE1IA/q9d8f16kjTYiER319G1m9zJLK3cJqgBFIZiAd iX1B6fQQOLgyJGkoyhpXLABRTZE5hOReanmAPa/dloa2xcfZRvojIsuP6pvYYFms ZksMsd0HsqR5+lRPwSWUfgsT8w280Q+Il+KvEWDoGGBBTn0n9+S1ZhqeCtH+E8Et poX5MSzxXfOHgKCk0j2+H/ahndPw7ksoGM3ZN+Ms1/QxHpy7zLJBohllMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMm2Tp8KO1d5U+3qMHngsoU5LhL2MB8GA1UdIwQY MBaAFGJqKLfGPvarIUpSz6fD5425pAgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUt ZDJjZDI2YjY5ZGYxLzEveWJaT253bzdWM2xUN2Vvd2VlQ3loVGt1RXZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUtZDJjZDI2YjY5ZGYx LzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnq0oMA0G CSqGSIb3DQEBCwUAA4IBAQB6PCrz8iO+QsEKLT1EZ3gup+Z5vRmiOGXuByDxH4b/ Lf+Ms+c/4rAl1Z6FhUm1rzsc6n5JgRcc//XnPVwkZ0HDcGsO6ONYL0HMil6wwEDg wFg4zV3PC3lxQeKl3KBT4agCOvvr/aQqdKbM00ZKQ7Am0dWmsz6Max6BDcr/SkOx 1LwFXmQwl+JEXcuTE9xWBwfqu7teQv2XmAb1znWppv8plgS/5t75aPCxtgKvrRGy UxHbVU7Y5RzRPap8mJCVEI+QM0+Cn4QxGSq+C8PCvtlZJSJx4As7a34jBLrNumsf N4k4MZtba2hhV87fVRlTQlpakGrhPpMkgQTGlf8Sfi1u -----END CERTIFICATE-----Generated at Sat Dec 6 12:45:05 2025 by rpki-client