This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/f8yn9hbw75bPtwP_3x1I77YrtTw.roa File: f8yn9hbw75bPtwP_3x1I77YrtTw.roa (raw, json) Hash identifier: lbfxwVpBH3kCxRse/jePifr7mqG4EpAtxe5vRU33ODY= Subject key identifier: 7F:CC:A7:F6:16:F0:EF:96:CF:B7:03:FF:DF:1D:48:EF:B6:2B:B5:3C Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823 Certificate serial: 019B7D5B4964493B7E559EC8509E0E02B591 Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/f8yn9hbw75bPtwP_3x1I77YrtTw.roa Signing time: Fri 02 Jan 2026 06:18:13 +0000 ROA not before: Fri 02 Jan 2026 06:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39351 IP address blocks: 158.173.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:49:64:49:3b:7e:55:9e:c8:50:9e:0e:02:b5:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823 Validity Not Before: Jan 2 06:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fcca7f616f0ef96cfb703ffdf1d48efb62bb53c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c6:1e:40:4b:ab:77:54:26:e5:c7:4e:6e:47: f0:1e:d0:94:a3:e8:01:14:bb:a4:b0:e1:e0:c4:20: a0:73:ad:17:0d:e6:56:8b:3d:7e:51:6d:8a:55:6b: 57:7d:c7:c8:42:8f:15:bb:f9:44:aa:d1:f8:25:29: 3c:d6:98:ab:2c:3f:fa:5b:f3:46:96:1f:ce:2e:eb: bc:63:f3:b8:8b:ac:f2:44:e7:9e:3e:cb:ea:2a:c5: 8b:f1:d6:7a:ef:5b:c2:6b:53:2f:d6:61:91:86:43: d4:98:0a:20:32:3e:d7:b2:fb:18:4a:4c:0e:07:6a: 6b:f6:d3:6e:1b:2a:ed:12:bf:08:ef:cd:27:15:99: d9:fd:85:fe:62:38:63:d3:64:81:15:10:d6:77:2d: 51:1d:f7:30:12:5c:2e:3b:45:6c:d5:52:8e:83:2a: e0:9f:9e:5f:27:2b:89:d8:4d:e3:a3:6d:39:0b:03: 78:22:d2:08:55:3f:12:83:e1:85:e6:36:61:fd:76: c2:3c:b5:7d:1d:48:c4:01:f1:e6:f3:bf:f4:59:95: a8:a0:5f:c1:ba:05:4d:b3:79:26:4a:42:8a:65:f7: da:7d:f7:93:f2:3e:01:67:b4:4b:19:ee:3b:07:8d: 34:69:64:1b:f3:b4:92:4a:f4:11:dd:54:ef:7c:af: d8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:CC:A7:F6:16:F0:EF:96:CF:B7:03:FF:DF:1D:48:EF:B6:2B:B5:3C X509v3 Authority Key Identifier: keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/f8yn9hbw75bPtwP_3x1I77YrtTw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.173.41.0/24 Signature Algorithm: sha256WithRSAEncryption 08:ab:24:08:1b:27:04:1f:8d:c8:be:9f:82:59:84:de:6e:69: e5:e8:e8:d7:d6:8a:21:80:87:04:a0:01:b2:f4:c1:53:c6:26: f6:d3:02:9c:c5:09:36:b5:82:94:04:1a:22:d9:1c:bb:da:45: 3e:c5:91:d5:52:4d:22:a7:46:3f:2f:6d:17:70:1b:9b:b2:6e: 97:87:af:6e:b4:f7:b7:2a:31:0d:5a:28:ba:b6:0a:2b:65:5d: f4:c8:c1:c3:8b:dd:d7:80:3c:a0:5b:70:d9:0f:12:c6:58:15: 15:f2:a6:86:5e:90:fd:e5:67:2f:3d:f3:04:2b:d9:af:77:f4: b2:9e:74:20:a4:12:04:ca:71:4c:47:3d:75:88:4d:c5:bb:d3: 72:ef:54:46:13:2d:c2:fd:6d:23:20:8b:b0:d1:27:75:61:c2: a6:19:99:77:7d:48:fa:26:81:e5:90:f7:31:61:40:6d:04:90: 61:eb:1c:ee:33:cb:4d:1a:ae:8c:c9:52:46:d8:6a:31:2c:d8: d2:c9:47:c0:5e:3b:fb:5d:d3:6a:a8:1b:57:95:67:13:d7:bd: 69:3d:16:3a:d2:d1:93:45:a7:00:18:6c:ca:5d:60:ff:86:b0: 5c:e3:bf:e3:ab:da:b3:76:d5:69:98:ba:2d:af:26:fb:c7:e0: 5b:0a:f2:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W0lkSTt+VZ7IUJ4OArWRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNmEyOGI3YzYzZWY2YWIyMTRhNTJjZmE3YzNlNzhkYjlh NDA4MjMwHhcNMjYwMTAyMDYxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmNjYTdmNjE2ZjBlZjk2Y2ZiNzAzZmZkZjFkNDhlZmI2MmJiNTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8YeQEurd1Qm5cdObkfwHtCUo+gB FLuksOHgxCCgc60XDeZWiz1+UW2KVWtXfcfIQo8Vu/lEqtH4JSk81pirLD/6W/NG lh/OLuu8Y/O4i6zyROeePsvqKsWL8dZ671vCa1Mv1mGRhkPUmAogMj7XsvsYSkwO B2pr9tNuGyrtEr8I780nFZnZ/YX+Yjhj02SBFRDWdy1RHfcwElwuO0Vs1VKOgyrg n55fJyuJ2E3jo205CwN4ItIIVT8Sg+GF5jZh/XbCPLV9HUjEAfHm87/0WZWooF/B ugVNs3kmSkKKZffaffeT8j4BZ7RLGe47B400aWQb87SSSvQR3VTvfK/YmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH/Mp/YW8O+Wz7cD/98dSO+2K7U8MB8GA1UdIwQY MBaAFGJqKLfGPvarIUpSz6fD5425pAgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUt ZDJjZDI2YjY5ZGYxLzEvZjh5bjloYnc3NWJQdHdQXzN4MUk3N1lydFR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUtZDJjZDI2YjY5ZGYx LzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnq0pMA0G CSqGSIb3DQEBCwUAA4IBAQAIqyQIGycEH43Ivp+CWYTebmnl6OjX1oohgIcEoAGy 9MFTxib20wKcxQk2tYKUBBoi2Ry72kU+xZHVUk0ip0Y/L20XcBubsm6Xh69utPe3 KjENWii6tgorZV30yMHDi93XgDygW3DZDxLGWBUV8qaGXpD95WcvPfMEK9mvd/Sy nnQgpBIEynFMRz11iE3Fu9Ny71RGEy3C/W0jIIuw0Sd1YcKmGZl3fUj6JoHlkPcx YUBtBJBh6xzuM8tNGq6MyVJG2GoxLNjSyUfAXjv7XdNqqBtXlWcT171pPRY60tGT RacAGGzKXWD/hrBc47/jq9qzdtVpmLotryb7x+BbCvKj -----END CERTIFICATE-----Generated at Fri Jan 23 11:39:01 2026 by rpki-client