This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JYoU4aqNIkevdrsDFwkyyT-g8To.roa File: JYoU4aqNIkevdrsDFwkyyT-g8To.roa (raw, json) Hash identifier: 1tkCbULp7lyxyVuR59WB7EShSuoM/GUPiM5s7+VwxiY= Subject key identifier: 25:8A:14:E1:AA:8D:22:47:AF:76:BB:03:17:09:32:C9:3F:A0:F1:3A Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AA7C637EA4B023704DEBFDCF4743D3720 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JYoU4aqNIkevdrsDFwkyyT-g8To.roa Signing time: Fri 21 Nov 2025 18:56:16 +0000 ROA not before: Fri 21 Nov 2025 18:56:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58061 IP address blocks: 151.240.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a7:c6:37:ea:4b:02:37:04:de:bf:dc:f4:74:3d:37:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 21 18:56:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=258a14e1aa8d2247af76bb03170932c93fa0f13a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e1:66:a0:32:27:2a:94:f0:0c:54:24:c6:10: 6e:70:c7:21:8b:ff:73:c7:5d:66:06:6f:66:65:a5: c5:d5:00:0c:fc:07:30:61:9f:b1:37:8a:ab:5f:0e: d3:e1:42:f6:12:31:1b:d2:71:3c:9f:24:71:9f:4a: 1f:93:cb:6b:ce:b8:ab:7b:de:46:b8:5f:f4:5f:77: 41:71:e6:e5:bd:c6:54:26:34:67:fb:58:c8:dd:fd: 09:2f:41:b2:7f:b0:85:93:18:82:6d:cb:df:03:f1: 5e:f0:3a:7a:3b:fe:7b:dd:13:1b:8f:f4:3f:2b:92: c7:86:e9:3f:4b:3e:39:52:a8:1c:2d:70:2e:cf:49: d9:67:10:7b:0f:ed:fe:96:7d:9a:a5:2f:f6:88:cc: c4:1b:a1:ec:47:2f:62:9b:a6:46:3a:91:9f:c7:d9: 1f:ab:a6:90:ea:fd:e6:c3:b2:56:56:d9:85:91:de: 03:2b:47:98:c8:f6:02:a3:96:fe:df:0a:75:c7:7d: c1:d3:ef:bc:39:c7:73:a2:bd:b1:c4:1a:27:21:a2: 04:ed:80:c5:9f:ea:a7:14:6c:28:4b:06:37:27:71: 75:2f:c4:6f:83:31:57:73:1c:f2:ce:25:13:b3:01: a9:aa:09:8e:39:9c:c3:70:8c:b3:88:8a:ed:b9:ce: c4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:8A:14:E1:AA:8D:22:47:AF:76:BB:03:17:09:32:C9:3F:A0:F1:3A X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JYoU4aqNIkevdrsDFwkyyT-g8To.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.149.0/24 Signature Algorithm: sha256WithRSAEncryption 20:2b:b4:af:2a:21:7f:70:d9:8d:e1:33:04:92:78:e8:64:47: e5:79:a8:25:b4:38:fd:6e:5a:c3:aa:2e:a1:85:43:d4:af:84: 13:09:3d:33:03:0f:c8:77:a0:30:50:1a:d9:5a:9d:d7:ee:dc: 79:3e:0e:1e:dc:c8:54:6a:ff:09:c1:81:92:13:a8:af:5b:35: 64:01:13:06:af:56:20:58:12:7d:c3:ca:72:65:80:f0:77:b3: c9:38:87:b6:0c:f9:e1:ea:12:c4:00:39:a6:ca:a7:48:33:38: ae:ad:83:ea:0f:dd:b9:4c:6e:c1:c1:f2:3e:fa:70:56:74:e8: 56:69:6a:e5:ee:44:7f:a6:3a:98:43:c4:e7:6f:86:0f:12:26: 38:ee:9f:46:b3:60:0a:66:3b:8b:a7:d4:c1:8f:7e:d1:f7:bc: 17:41:d7:94:fe:39:c7:40:6c:1f:b7:75:a2:01:79:a6:af:63: 34:8b:b9:06:32:c5:2c:69:7b:76:87:91:f6:fb:0a:6c:9b:45: 1d:ce:33:19:50:43:6a:ae:4a:64:0a:61:cb:f4:52:17:43:68: 54:ec:7d:02:d5:92:bc:19:60:ca:2e:2b:cd:81:75:85:9e:3b: 14:3e:a4:35:46:b9:45:3e:2d:0a:40:3d:c5:6e:45:df:94:f2: 94:c3:11:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqnxjfqSwI3BN6/3PR0PTcgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTIxMTg1NjE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNThhMTRlMWFhOGQyMjQ3YWY3NmJiMDMxNzA5MzJjOTNmYTBmMTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuFmoDInKpTwDFQkxhBucMchi/9z x11mBm9mZaXF1QAM/AcwYZ+xN4qrXw7T4UL2EjEb0nE8nyRxn0ofk8trzrire95G uF/0X3dBceblvcZUJjRn+1jI3f0JL0Gyf7CFkxiCbcvfA/Fe8Dp6O/573RMbj/Q/ K5LHhuk/Sz45UqgcLXAuz0nZZxB7D+3+ln2apS/2iMzEG6HsRy9im6ZGOpGfx9kf q6aQ6v3mw7JWVtmFkd4DK0eYyPYCo5b+3wp1x33B0++8Ocdzor2xxBonIaIE7YDF n+qnFGwoSwY3J3F1L8RvgzFXcxzyziUTswGpqgmOOZzDcIyziIrtuc7EPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCWKFOGqjSJHr3a7AxcJMsk/oPE6MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvSllvVTRhcU5Ja2V2ZHJzREZ3a3l5VC1nOFRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/CVMA0G CSqGSIb3DQEBCwUAA4IBAQAgK7SvKiF/cNmN4TMEknjoZEfleagltDj9blrDqi6h hUPUr4QTCT0zAw/Id6AwUBrZWp3X7tx5Pg4e3MhUav8JwYGSE6ivWzVkARMGr1Yg WBJ9w8pyZYDwd7PJOIe2DPnh6hLEADmmyqdIMziurYPqD925TG7BwfI++nBWdOhW aWrl7kR/pjqYQ8Tnb4YPEiY47p9Gs2AKZjuLp9TBj37R97wXQdeU/jnHQGwft3Wi AXmmr2M0i7kGMsUsaXt2h5H2+wpsm0UdzjMZUENqrkpkCmHL9FIXQ2hU7H0C1ZK8 GWDKLivNgXWFnjsUPqQ1RrlFPi0KQD3FbkXflPKUwxHg -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:55 2025 by rpki-client