This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/YffuXjhVQjavHnYAkO1SBFOknv0.roa File: YffuXjhVQjavHnYAkO1SBFOknv0.roa (raw, json) Hash identifier: r0Yqg3OZ8ifF1zMpVGTo+94M47rPgX/zR8wnUc9/nTM= Subject key identifier: 61:F7:EE:5E:38:55:42:36:AF:1E:76:00:90:ED:52:04:53:A4:9E:FD Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Certificate serial: 019B7D5D0B461C4EB7EB60735E15A84290BA Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/YffuXjhVQjavHnYAkO1SBFOknv0.roa Signing time: Fri 02 Jan 2026 06:20:08 +0000 ROA not before: Fri 02 Jan 2026 06:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203689 IP address blocks: 157.25.130.0/23 maxlen: 23 157.25.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:0b:46:1c:4e:b7:eb:60:73:5e:15:a8:42:90:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Validity Not Before: Jan 2 06:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61f7ee5e38554236af1e760090ed520453a49efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9f:bf:25:22:74:50:eb:6e:86:11:5c:14:4f: 46:cc:09:7d:79:79:07:38:7c:95:5c:da:6c:af:aa: c3:83:3f:6e:56:14:28:3e:de:85:1b:1e:49:43:19: 65:22:5c:1e:b2:47:20:09:36:75:bf:5c:3c:8c:0b: 6f:7d:f0:d2:03:74:c6:22:68:88:09:8b:e9:ac:db: 65:12:71:8a:58:d7:98:ff:12:ab:1e:f7:e4:c3:38: 19:93:45:f7:2e:c7:fa:86:fb:31:83:c0:75:96:26: fd:d2:54:4e:5a:f8:09:2f:fe:dd:05:91:1a:64:8f: 57:54:cb:2c:06:25:85:83:11:d0:e6:2d:a8:12:64: 4f:22:34:00:97:d2:19:2c:cf:17:cf:c8:ff:51:f4: f8:cd:ab:7d:0d:9c:fb:71:f3:62:94:4e:b8:75:34: 16:ef:43:ae:0d:2f:74:f6:46:96:a6:26:46:50:64: d6:14:cd:4f:be:11:97:ea:fc:17:af:03:b2:3b:97: 64:b6:5c:5c:cf:28:5b:02:85:07:bc:5e:2f:1a:44: 7c:86:4c:de:b3:1f:19:69:6e:4c:bd:89:7f:6d:71: e0:5e:c5:4e:55:42:40:c5:60:26:67:88:e0:95:29: a1:b9:5f:a7:1b:75:c7:5c:5b:09:da:9b:2a:ee:46: ec:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F7:EE:5E:38:55:42:36:AF:1E:76:00:90:ED:52:04:53:A4:9E:FD X509v3 Authority Key Identifier: keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/YffuXjhVQjavHnYAkO1SBFOknv0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.25.130.0/23 157.25.174.0/23 Signature Algorithm: sha256WithRSAEncryption 23:39:77:07:3e:a5:33:62:46:b9:f4:40:5c:1b:11:96:c7:8d: f0:44:e9:2b:ba:d2:a9:e7:9f:68:a6:26:c5:cc:ec:8a:9f:fe: 50:ef:f8:ff:9f:ec:11:dc:14:60:a9:7b:66:e0:bd:20:ef:85: 9f:9d:e1:ff:83:de:76:f3:86:7f:e2:52:2a:a0:54:ae:42:92: 46:19:e9:d3:53:fb:3c:a4:20:6a:28:f5:48:31:eb:a3:9d:84: 25:c2:d6:83:ae:e5:84:c2:2e:7e:76:5b:23:de:8d:c6:1b:9c: 82:d6:ed:e6:cf:57:0a:fe:18:5b:21:5f:a3:7a:33:fc:f2:6b: 87:2b:ea:4d:a9:94:31:04:6c:cc:8e:dd:6c:8b:32:f0:9b:02: 82:d1:93:91:d2:b5:c8:7a:e9:d0:ea:20:5d:10:11:b3:15:34: 38:2c:75:71:62:39:3b:7c:c3:d8:26:29:9a:2d:53:d2:8c:4d: 53:37:e9:e0:3b:29:9a:43:9f:f8:b9:c5:7a:35:da:ce:01:b4: fd:83:ff:c2:f3:82:ef:93:1d:c5:80:80:8d:b6:45:48:47:ae: 68:ec:d9:2f:e7:66:2b:b8:ed:b0:bb:6c:f7:b7:5d:c3:2c:64: 85:b7:f4:db:f2:49:af:b2:1f:07:2e:5a:7d:dd:ec:0a:98:7c: cf:b1:c4:cf -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XQtGHE6362BzXhWoQpC6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj ZWY5MzMwHhcNMjYwMTAyMDYyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWY3ZWU1ZTM4NTU0MjM2YWYxZTc2MDA5MGVkNTIwNDUzYTQ5ZWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15+/JSJ0UOtuhhFcFE9GzAl9eXkH OHyVXNpsr6rDgz9uVhQoPt6FGx5JQxllIlweskcgCTZ1v1w8jAtvffDSA3TGImiI CYvprNtlEnGKWNeY/xKrHvfkwzgZk0X3Lsf6hvsxg8B1lib90lROWvgJL/7dBZEa ZI9XVMssBiWFgxHQ5i2oEmRPIjQAl9IZLM8Xz8j/UfT4zat9DZz7cfNilE64dTQW 70OuDS909kaWpiZGUGTWFM1PvhGX6vwXrwOyO5dktlxczyhbAoUHvF4vGkR8hkze sx8ZaW5MvYl/bXHgXsVOVUJAxWAmZ4jglSmhuV+nG3XHXFsJ2psq7kbsbQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGH37l44VUI2rx52AJDtUgRTpJ79MB8GA1UdIwQY MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt OTFlMzE4NGJiMGFiLzEvWWZmdVhqaFZRamF2SG5ZQWtPMVNCRk9rbnYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBnRmCAwQB nRmuMA0GCSqGSIb3DQEBCwUAA4IBAQAjOXcHPqUzYka59EBcGxGWx43wROkrutKp 559opibFzOyKn/5Q7/j/n+wR3BRgqXtm4L0g74WfneH/g95284Z/4lIqoFSuQpJG GenTU/s8pCBqKPVIMeujnYQlwtaDruWEwi5+dlsj3o3GG5yC1u3mz1cK/hhbIV+j ejP88muHK+pNqZQxBGzMjt1sizLwmwKC0ZOR0rXIeunQ6iBdEBGzFTQ4LHVxYjk7 fMPYJimaLVPSjE1TN+ngOymaQ5/4ucV6NdrOAbT9g//C84Lvkx3FgICNtkVIR65o 7Nkv52YruO2wu2z3t13DLGSFt/Tb8kmvsh8HLlp93ewKmHzPscTP -----END CERTIFICATE-----Generated at Mon Jan 26 02:24:36 2026 by rpki-client