This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/YASHHhVdIkN4neMHuFamS3yuAUc.roa File: YASHHhVdIkN4neMHuFamS3yuAUc.roa (raw, json) Hash identifier: S1iGddEvlw+wRojrklSWL7s8nzR3Q8VGgYslXWevRa8= Subject key identifier: 60:04:87:1E:15:5D:22:43:78:9D:E3:07:B8:56:A6:4B:7C:AE:01:47 Certificate issuer: /CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d Certificate serial: 019B77C71B91C0599C794D7588E9E73AFA13 Authority key identifier: DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/YASHHhVdIkN4neMHuFamS3yuAUc.roa Signing time: Thu 01 Jan 2026 04:18:15 +0000 ROA not before: Thu 01 Jan 2026 04:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30758 IP address blocks: 185.48.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:1b:91:c0:59:9c:79:4d:75:88:e9:e7:3a:fa:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d Validity Not Before: Jan 1 04:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6004871e155d2243789de307b856a64b7cae0147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6f:01:cc:17:a5:71:9d:25:fa:56:78:79:3a: 2b:f8:40:8a:8f:59:e3:5f:e9:77:af:82:9a:ec:5e: 25:59:46:93:55:13:81:e1:34:0a:39:43:17:0e:df: 22:a0:21:34:08:a5:b6:1e:2c:bf:19:ca:a8:c3:1c: 2f:ba:be:6a:a4:ee:ba:3e:a7:67:b0:86:7a:26:bf: 84:da:9c:0e:a0:64:ba:89:b7:c3:3e:6a:32:6c:02: a9:bc:96:ae:fb:bc:e7:13:1f:ea:8e:a1:14:e5:24: 78:06:97:5c:da:8d:86:42:e6:1a:b0:99:6c:3f:80: 01:5c:a7:48:83:ed:de:11:59:7d:0d:1a:89:c9:52: 9a:51:fa:8e:94:44:9b:66:71:93:6a:4e:98:b3:44: 26:4f:e6:21:06:a8:66:57:77:eb:d6:af:28:0e:03: 36:0b:36:fc:48:92:d1:08:e5:8c:1f:f8:22:13:fc: 24:98:0d:d9:6a:12:32:5f:43:b7:a5:16:90:0d:3c: 55:af:ab:db:15:ac:71:2a:b6:20:50:83:66:cf:aa: bd:e9:7a:1a:7d:53:f0:25:d5:6c:d4:12:2b:46:3e: d9:31:a0:aa:aa:e1:e5:2f:74:e9:f7:d8:c7:7c:a1: 11:46:6c:46:59:66:7e:8f:49:18:2a:5e:04:70:b7: 72:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:04:87:1E:15:5D:22:43:78:9D:E3:07:B8:56:A6:4B:7C:AE:01:47 X509v3 Authority Key Identifier: keyid:DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/YASHHhVdIkN4neMHuFamS3yuAUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.48.25.0/24 Signature Algorithm: sha256WithRSAEncryption 75:ed:fe:29:12:ff:fb:11:d7:4b:e1:8e:56:37:4a:8d:94:3e: 4a:b1:3f:83:0a:a8:f5:06:b6:e1:85:b6:e7:9f:80:e9:79:9a: 7d:ff:83:16:8b:98:fa:25:b4:f0:f5:af:d7:b7:1d:29:96:fa: 8c:63:91:d4:d3:3e:37:3b:eb:6f:bf:c1:17:15:95:fc:b1:ae: c1:83:40:a8:2d:0d:f7:9b:f6:d0:84:b4:26:70:11:f0:fe:7e: 24:8f:52:22:38:66:c4:83:d1:62:fd:a8:dc:d1:13:c9:1f:46: 21:45:17:3e:74:32:30:a8:08:c3:ad:9c:da:90:21:d2:67:81: 19:d6:5d:98:8f:f6:e7:61:42:5e:15:d9:fe:39:e1:ca:5a:d5: c0:d7:cd:6e:bd:66:df:2c:1f:c4:88:ed:dc:cd:6f:e8:f9:b1: 1a:dd:26:cf:5e:4d:0e:8b:a9:ab:97:d3:e8:33:6e:2d:9e:fe: 03:c6:8d:0b:5d:53:48:ed:2d:15:4b:99:ff:57:d5:91:f0:56: 9c:b4:c5:08:57:bb:07:aa:a3:8f:33:8b:69:32:79:85:c9:68: bd:7a:10:14:b8:47:94:26:64:38:79:f3:5d:e2:46:9a:33:ec: 4f:d0:55:e4:4f:c0:82:2b:c0:bd:b2:db:cc:83:25:b7:26:5c: 78:05:03:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xxuRwFmceU11iOnnOvoTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNmVkMDU3OWMzZmQyNTM1OTdlYzgyZjA5MzkxMTFiYTlk OGM4OGQwHhcNMjYwMTAxMDQxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDA0ODcxZTE1NWQyMjQzNzg5ZGUzMDdiODU2YTY0YjdjYWUwMTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW8BzBelcZ0l+lZ4eTor+ECKj1nj X+l3r4Ka7F4lWUaTVROB4TQKOUMXDt8ioCE0CKW2Hiy/Gcqowxwvur5qpO66Pqdn sIZ6Jr+E2pwOoGS6ibfDPmoybAKpvJau+7znEx/qjqEU5SR4Bpdc2o2GQuYasJls P4ABXKdIg+3eEVl9DRqJyVKaUfqOlESbZnGTak6Ys0QmT+YhBqhmV3fr1q8oDgM2 Czb8SJLRCOWMH/giE/wkmA3ZahIyX0O3pRaQDTxVr6vbFaxxKrYgUINmz6q96Xoa fVPwJdVs1BIrRj7ZMaCqquHlL3Tp99jHfKERRmxGWWZ+j0kYKl4EcLdyUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGAEhx4VXSJDeJ3jB7hWpkt8rgFHMB8GA1UdIwQY MBaAFN5u0FecP9JTWX7ILwk5ERup2MiNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM203UVY1d18wbE5aZnNndkNUa1JHNm5ZeUkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9mMTNmOTgtNGU3YS00MzVkLWIxYjAt ODM4NmU3MGJkYzU4LzEvWUFTSEhoVmRJa040bmVNSHVGYW1TM3l1QVVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9mMTNmOTgtNGU3YS00MzVkLWIxYjAtODM4NmU3MGJkYzU4 LzEvM203UVY1d18wbE5aZnNndkNUa1JHNm5ZeUkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTAZMA0G CSqGSIb3DQEBCwUAA4IBAQB17f4pEv/7EddL4Y5WN0qNlD5KsT+DCqj1Brbhhbbn n4DpeZp9/4MWi5j6JbTw9a/Xtx0plvqMY5HU0z43O+tvv8EXFZX8sa7Bg0CoLQ33 m/bQhLQmcBHw/n4kj1IiOGbEg9Fi/ajc0RPJH0YhRRc+dDIwqAjDrZzakCHSZ4EZ 1l2Yj/bnYUJeFdn+OeHKWtXA181uvWbfLB/EiO3czW/o+bEa3SbPXk0Oi6mrl9Po M24tnv4Dxo0LXVNI7S0VS5n/V9WR8FactMUIV7sHqqOPM4tpMnmFyWi9ehAUuEeU JmQ4efNd4kaaM+xP0FXkT8CCK8C9stvMgyW3Jlx4BQOr -----END CERTIFICATE-----Generated at Mon Jan 26 11:43:51 2026 by rpki-client