This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/yx4UeEJJehLGQNrl-6Cz6WXZEuc.roa File: yx4UeEJJehLGQNrl-6Cz6WXZEuc.roa (raw, json) Hash identifier: cKTgQmRRI7fV8spNs49a7RCxPTAZrMP6AMPoszGiJzU= Subject key identifier: CB:1E:14:78:42:49:7A:12:C6:40:DA:E5:FB:A0:B3:E9:65:D9:12:E7 Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823 Certificate serial: 019AC1583A57977A2D2C63D16EA9B1C2FD24 Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/yx4UeEJJehLGQNrl-6Cz6WXZEuc.roa Signing time: Wed 26 Nov 2025 18:06:15 +0000 ROA not before: Wed 26 Nov 2025 18:06:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 400696 IP address blocks: 158.173.35.0/24 maxlen: 24 158.173.38.0/24 maxlen: 24 158.173.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c1:58:3a:57:97:7a:2d:2c:63:d1:6e:a9:b1:c2:fd:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823 Validity Not Before: Nov 26 18:06:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cb1e147842497a12c640dae5fba0b3e965d912e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6f:9b:67:e4:47:b3:0b:3e:9f:39:76:aa:aa: f2:35:8d:59:78:06:22:ad:a4:65:90:04:35:8c:88: b9:1f:a2:b6:e0:58:60:d6:78:fa:5f:6b:12:10:c8: 3f:fc:b0:92:72:ca:14:a2:3f:49:0d:3d:34:1c:13: 12:24:a9:3b:df:b6:b1:25:86:26:5d:50:fc:6e:27: fb:a1:7c:8a:21:a1:c0:8c:3a:4b:d8:79:16:a5:00: 4e:9a:1a:25:b1:59:76:f8:c4:fd:76:f2:4f:06:b2: 18:5d:06:3a:ea:5e:1b:95:bb:2f:e5:57:80:c2:65: 32:25:f5:f8:0a:6c:a5:72:ee:d4:7c:65:39:6f:3d: 27:01:1a:84:a5:40:30:5c:3f:9a:10:77:d9:fc:68: da:71:17:4f:1e:76:a0:76:70:ca:35:eb:49:ff:32: 04:ad:b0:97:16:9b:e1:d1:d9:f7:dd:94:84:e3:44: b8:6a:fa:67:43:c0:a2:09:2e:66:27:8e:9d:9a:5a: a2:0b:ea:f4:5d:a2:ed:d4:7c:f0:47:cf:67:d8:b8: b2:a9:6b:f6:82:b0:d5:0e:91:94:39:18:32:82:bd: 5b:0c:35:e8:0f:db:a6:03:45:2a:6c:9c:55:e9:33: 56:bc:37:62:95:96:db:37:dc:aa:5a:c0:1e:66:cd: d9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1E:14:78:42:49:7A:12:C6:40:DA:E5:FB:A0:B3:E9:65:D9:12:E7 X509v3 Authority Key Identifier: keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/yx4UeEJJehLGQNrl-6Cz6WXZEuc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.173.35.0/24 158.173.38.0/23 Signature Algorithm: sha256WithRSAEncryption 74:97:51:aa:e4:9b:3d:71:b0:13:49:80:5b:95:1d:61:ed:aa: 3d:d4:82:23:77:65:73:b5:5a:f1:da:65:45:8f:b9:5b:44:02: d4:37:31:5d:13:f6:12:80:ad:bb:53:99:81:52:b4:b0:67:21: ed:b4:1b:ae:09:4d:53:af:97:64:1b:f5:67:2b:dd:1f:b1:57: 36:c6:6a:e6:cb:3b:84:e2:1f:86:0a:be:34:a5:46:0f:56:3c: b9:ce:04:c3:30:48:52:d5:cf:b4:ef:30:49:5c:46:39:fe:f4: 37:fd:69:68:d2:42:9a:e8:b0:12:52:b8:0a:cd:44:68:84:72: 09:7b:97:52:1c:6c:4d:1d:10:94:c8:21:c0:d0:75:93:f2:e6: 97:3c:41:c4:bd:c0:6e:23:05:63:71:28:4a:24:b9:2c:3f:a4: 33:c2:bd:0d:92:41:4a:c7:60:59:d3:58:94:b0:bd:75:8b:64: 2b:4f:2a:85:6e:72:5d:52:bc:61:47:8f:a7:c5:2e:ef:fb:ba: 54:1c:d5:da:bc:da:66:fe:ad:09:6e:b1:f6:ea:b2:cc:7a:a9: 1b:3d:cf:96:40:59:4a:65:e9:ab:50:55:f6:2c:c1:6d:54:d4: ee:8e:01:fa:c5:73:7d:ca:32:1a:de:55:4f:22:4c:79:96:1d: ed:13:d6:ae -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrBWDpXl3otLGPRbqmxwv0kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNmEyOGI3YzYzZWY2YWIyMTRhNTJjZmE3YzNlNzhkYjlh NDA4MjMwHhcNMjUxMTI2MTgwNjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjFlMTQ3ODQyNDk3YTEyYzY0MGRhZTVmYmEwYjNlOTY1ZDkxMmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm+bZ+RHsws+nzl2qqryNY1ZeAYi raRlkAQ1jIi5H6K24Fhg1nj6X2sSEMg//LCScsoUoj9JDT00HBMSJKk737axJYYm XVD8bif7oXyKIaHAjDpL2HkWpQBOmholsVl2+MT9dvJPBrIYXQY66l4blbsv5VeA wmUyJfX4Cmylcu7UfGU5bz0nARqEpUAwXD+aEHfZ/GjacRdPHnagdnDKNetJ/zIE rbCXFpvh0dn33ZSE40S4avpnQ8CiCS5mJ46dmlqiC+r0XaLt1HzwR89n2LiyqWv2 grDVDpGUORgygr1bDDXoD9umA0UqbJxV6TNWvDdilZbbN9yqWsAeZs3Z4QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMseFHhCSXoSxkDa5fugs+ll2RLnMB8GA1UdIwQY MBaAFGJqKLfGPvarIUpSz6fD5425pAgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUt ZDJjZDI2YjY5ZGYxLzEveXg0VWVFSkplaExHUU5ybC02Q3o2V1haRXVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUtZDJjZDI2YjY5ZGYx LzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnq0jAwQB nq0mMA0GCSqGSIb3DQEBCwUAA4IBAQB0l1Gq5Js9cbATSYBblR1h7ao91IIjd2Vz tVrx2mVFj7lbRALUNzFdE/YSgK27U5mBUrSwZyHttBuuCU1Tr5dkG/VnK90fsVc2 xmrmyzuE4h+GCr40pUYPVjy5zgTDMEhS1c+07zBJXEY5/vQ3/Wlo0kKa6LASUrgK zURohHIJe5dSHGxNHRCUyCHA0HWT8uaXPEHEvcBuIwVjcShKJLksP6Qzwr0NkkFK x2BZ01iUsL11i2QrTyqFbnJdUrxhR4+nxS7v+7pUHNXavNpm/q0JbrH26rLMeqkb Pc+WQFlKZemrUFX2LMFtVNTujgH6xXN9yjIa3lVPIkx5lh3tE9au -----END CERTIFICATE-----Generated at Sat Dec 6 13:46:33 2025 by rpki-client