This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YARFJtS5uiRFCKwX6K8xodWZWh0.roa File: YARFJtS5uiRFCKwX6K8xodWZWh0.roa (raw, json) Hash identifier: RRAh+2vjvUfhHm6MJ71+3Rcnz0FqTbHEfWRXSFpSCFw= Subject key identifier: 60:04:45:26:D4:B9:BA:24:45:08:AC:17:E8:AF:31:A1:D5:99:5A:1D Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A95B9DFF8E4FE95340F94A66E10A9ADC8 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YARFJtS5uiRFCKwX6K8xodWZWh0.roa Signing time: Tue 18 Nov 2025 06:49:38 +0000 ROA not before: Tue 18 Nov 2025 06:49:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 36352 IP address blocks: 151.245.179.0/24 maxlen: 24 151.247.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:95:b9:df:f8:e4:fe:95:34:0f:94:a6:6e:10:a9:ad:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 18 06:49:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=60044526d4b9ba244508ac17e8af31a1d5995a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:74:88:4a:fe:cf:6d:0a:62:2a:9b:13:64:6d: d0:4d:4d:36:ed:39:b8:b0:05:88:65:8b:fd:d0:2b: 23:74:ea:1f:47:1a:3f:2b:45:ba:06:86:01:a8:4f: b8:46:57:a3:6e:80:f6:57:25:37:66:ce:78:32:07: 43:e1:be:6d:51:16:e1:5a:30:56:7b:0e:9c:60:ec: ac:99:a6:43:6e:b4:38:41:14:81:ee:df:24:be:06: cb:26:97:76:60:6c:b9:d3:b5:d7:68:d3:ae:81:3c: f4:27:f6:ce:5d:6b:2b:43:d7:80:75:34:4d:00:cf: a7:8d:46:18:01:02:be:dd:4d:b2:7e:0e:73:0d:e7: c7:db:d7:49:61:f8:60:7c:1e:89:12:db:fa:ed:c3: aa:5b:60:8c:9f:c3:d0:31:f2:97:22:37:06:64:01: ae:68:37:04:6a:4f:8e:30:d8:0d:7e:fd:aa:71:a7: 8b:21:f2:eb:89:48:31:f5:a4:c8:f7:62:d4:3f:16: 49:c2:7a:02:b7:75:ad:df:5f:24:38:26:01:6d:cd: 3a:38:2d:fd:ca:9a:64:78:e5:72:73:3e:85:63:9f: 2a:6d:12:a0:4d:66:f1:52:75:12:9f:71:54:3c:33: 61:e7:e3:db:3c:7c:e1:c2:cc:d1:10:6b:70:2b:5b: 3a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:04:45:26:D4:B9:BA:24:45:08:AC:17:E8:AF:31:A1:D5:99:5A:1D X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YARFJtS5uiRFCKwX6K8xodWZWh0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.245.179.0/24 151.247.172.0/24 Signature Algorithm: sha256WithRSAEncryption a3:75:68:6f:94:79:3e:6e:9d:92:01:0d:6a:94:0f:3c:a9:d1: 17:2b:a6:1d:23:66:dc:5b:68:f5:1a:fe:a2:e8:ee:ad:98:ea: 2a:bb:d8:69:51:f8:07:1f:32:56:ca:b3:17:d9:41:ec:e4:1e: 22:5a:f6:fb:cf:e8:91:80:b0:b9:9c:91:59:02:5e:17:85:96: d8:11:16:79:f9:2c:04:6a:b3:ca:a0:73:64:58:9d:43:c4:e0: 8b:da:69:c1:28:38:3f:b0:96:17:55:36:70:77:4f:89:37:77: 8c:b3:e4:e4:b4:d8:e1:9b:cd:43:b4:2b:6e:a6:57:23:aa:d3: c5:53:bd:e1:41:13:b4:4f:1f:04:e5:ab:bb:84:4a:d7:f5:d9: 57:3a:95:d9:db:b7:cb:69:69:d1:82:af:42:f3:1d:96:4b:92: a4:a6:39:5d:c1:c4:cb:67:8f:d9:77:59:b2:79:d3:11:2a:19: 61:93:1a:c0:6e:1b:e4:4f:bd:33:6d:1c:27:87:18:32:88:5e: 69:4b:c1:58:72:f2:fb:ef:b4:c2:dd:7f:55:69:2a:0f:31:34: 79:e9:21:bd:ca:a3:ac:1c:52:25:39:d8:c7:09:ce:0a:8f:59: 19:cb:33:79:42:c9:4b:dd:15:b7:09:46:c5:b4:1f:bd:ad:37: 58:8d:80:2e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqVud/45P6VNA+Upm4Qqa3IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTE4MDY0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDA0NDUyNmQ0YjliYTI0NDUwOGFjMTdlOGFmMzFhMWQ1OTk1YTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnSISv7PbQpiKpsTZG3QTU027Tm4 sAWIZYv90CsjdOofRxo/K0W6BoYBqE+4RlejboD2VyU3Zs54MgdD4b5tURbhWjBW ew6cYOysmaZDbrQ4QRSB7t8kvgbLJpd2YGy507XXaNOugTz0J/bOXWsrQ9eAdTRN AM+njUYYAQK+3U2yfg5zDefH29dJYfhgfB6JEtv67cOqW2CMn8PQMfKXIjcGZAGu aDcEak+OMNgNfv2qcaeLIfLriUgx9aTI92LUPxZJwnoCt3Wt318kOCYBbc06OC39 yppkeOVycz6FY58qbRKgTWbxUnUSn3FUPDNh5+PbPHzhwszREGtwK1s6owIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGAERSbUubokRQisF+ivMaHVmVodMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvWUFSRkp0UzV1aVJGQ0t3WDZLOHhvZFdaV2gwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/WzAwQA l/esMA0GCSqGSIb3DQEBCwUAA4IBAQCjdWhvlHk+bp2SAQ1qlA88qdEXK6YdI2bc W2j1Gv6i6O6tmOoqu9hpUfgHHzJWyrMX2UHs5B4iWvb7z+iRgLC5nJFZAl4XhZbY ERZ5+SwEarPKoHNkWJ1DxOCL2mnBKDg/sJYXVTZwd0+JN3eMs+TktNjhm81DtCtu plcjqtPFU73hQRO0Tx8E5au7hErX9dlXOpXZ27fLaWnRgq9C8x2WS5KkpjldwcTL Z4/Zd1myedMRKhlhkxrAbhvkT70zbRwnhxgyiF5pS8FYcvL777TC3X9VaSoPMTR5 6SG9yqOsHFIlOdjHCc4Kj1kZyzN5QslL3RW3CUbFtB+9rTdYjYAu -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:06 2025 by rpki-client