This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yoZJy8HeekQIeo__k7DF1nniq18.roa File: yoZJy8HeekQIeo__k7DF1nniq18.roa (raw, json) Hash identifier: djr/6SQHeGCWfFthotTqTrVa3wURvbeowrAauZErBbw= Subject key identifier: CA:86:49:CB:C1:DE:7A:44:08:7A:8F:FF:93:B0:C5:D6:79:E2:AB:5F Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A95B9E1A3830EF47919657C93F69BDEB3 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yoZJy8HeekQIeo__k7DF1nniq18.roa Signing time: Tue 18 Nov 2025 06:49:38 +0000 ROA not before: Tue 18 Nov 2025 06:49:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 396356 IP address blocks: 151.242.141.0/24 maxlen: 24 151.247.189.0/24 maxlen: 24 151.247.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:95:b9:e1:a3:83:0e:f4:79:19:65:7c:93:f6:9b:de:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 18 06:49:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ca8649cbc1de7a44087a8fff93b0c5d679e2ab5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:29:bc:c9:f3:45:20:51:31:00:e8:9f:48:99: d6:4a:9a:bb:6d:e8:c5:be:40:05:44:ca:c5:c0:18: f0:bf:98:2b:62:43:ae:3a:fb:d0:47:df:57:db:cf: 8a:4d:1a:0e:1c:10:d6:10:28:68:f9:ed:25:a9:8e: fd:dc:7c:66:2f:e3:1d:8a:0e:6b:9a:d3:34:c2:88: 8a:95:29:d1:fa:44:65:f0:ee:ec:5b:8c:17:2e:36: c4:9b:2b:6d:d7:50:9a:e4:12:dd:1a:47:75:b6:ca: 20:82:1c:fe:ae:2b:d7:f0:b1:50:48:94:66:8c:15: 72:59:2b:47:76:df:63:59:26:05:c9:89:e0:c2:a6: b2:67:dc:36:8f:f3:9e:75:17:a5:b1:61:96:de:b0: a6:dc:61:f0:a8:4e:2f:3b:5f:67:58:ae:2c:84:b4: 33:93:ca:ab:3e:69:af:48:ed:bf:64:64:02:67:53: 6b:c6:5b:ee:7a:17:db:1f:3c:90:74:ed:f1:54:0a: b0:0b:2d:86:03:41:e6:d7:36:41:80:52:9e:1a:d5: a7:8d:d4:d1:05:92:04:fa:ef:43:ea:7e:65:00:30: a7:80:8d:ec:bc:1f:a5:f1:28:b9:c0:e2:31:4a:06: 53:ff:39:3e:a5:8b:63:18:45:c9:49:c5:a5:2a:c4: 0c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:86:49:CB:C1:DE:7A:44:08:7A:8F:FF:93:B0:C5:D6:79:E2:AB:5F X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yoZJy8HeekQIeo__k7DF1nniq18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.141.0/24 151.247.189.0-151.247.190.255 Signature Algorithm: sha256WithRSAEncryption 6c:dc:84:a8:f0:01:fb:c3:ba:a1:44:51:d3:83:af:1c:d1:42: b0:5e:e7:7a:2c:36:0d:46:dd:dc:c2:f7:4a:f7:a9:ae:14:9f: e0:95:3c:01:19:05:69:19:b6:39:ad:65:11:fc:6a:3e:70:d7: 63:de:72:53:2c:cc:4e:56:d9:73:05:0f:41:b4:b6:43:f6:00: 7b:18:a7:12:f0:e9:b0:e0:23:99:e2:b8:24:20:44:af:b4:40: 17:d3:6b:a1:f5:d4:3e:12:81:d4:df:22:00:6d:1b:be:ab:ab: fa:ad:8e:c3:e8:a2:cc:df:ca:49:ee:0d:a6:a0:b6:e7:24:6d: c4:ee:d0:ae:38:fb:fe:a3:58:58:98:cd:02:30:d5:3c:db:68: 71:50:80:a9:76:64:de:65:9f:fe:10:2e:fd:ee:dd:74:94:b0: c4:f4:25:62:69:e8:00:3a:bf:eb:b7:75:a8:f4:d1:23:f1:58: 9e:d3:53:47:c0:4f:70:b9:b6:f0:5e:c4:40:fb:64:13:f4:aa: c7:33:35:c4:23:75:72:19:bb:b8:7d:30:6d:57:18:9a:bc:3c: b2:55:53:fa:16:ec:2e:c7:71:38:64:3e:2a:08:9b:10:b5:2d: b2:e5:85:2b:17:c1:7f:cf:55:24:85:53:2a:56:5e:fd:81:bd: 9b:bf:f1:7a -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZqVueGjgw70eRllfJP2m96zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTE4MDY0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTg2NDljYmMxZGU3YTQ0MDg3YThmZmY5M2IwYzVkNjc5ZTJhYjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCm8yfNFIFExAOifSJnWSpq7bejF vkAFRMrFwBjwv5grYkOuOvvQR99X28+KTRoOHBDWECho+e0lqY793HxmL+Mdig5r mtM0woiKlSnR+kRl8O7sW4wXLjbEmytt11Ca5BLdGkd1tsogghz+rivX8LFQSJRm jBVyWStHdt9jWSYFyYngwqayZ9w2j/OedRelsWGW3rCm3GHwqE4vO19nWK4shLQz k8qrPmmvSO2/ZGQCZ1NrxlvuehfbHzyQdO3xVAqwCy2GA0Hm1zZBgFKeGtWnjdTR BZIE+u9D6n5lADCngI3svB+l8Si5wOIxSgZT/zk+pYtjGEXJScWlKsQMywIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFMqGScvB3npECHqP/5OwxdZ54qtfMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEveW9aSnk4SGVla1FJZW9fX2s3REYxbm5pcTE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAl/KNMAwD BACX970DBACX974wDQYJKoZIhvcNAQELBQADggEBAGzchKjwAfvDuqFEUdODrxzR QrBe53osNg1G3dzC90r3qa4Un+CVPAEZBWkZtjmtZRH8aj5w12PeclMszE5W2XMF D0G0tkP2AHsYpxLw6bDgI5niuCQgRK+0QBfTa6H11D4SgdTfIgBtG76rq/qtjsPo oszfyknuDaagtuckbcTu0K44+/6jWFiYzQIw1TzbaHFQgKl2ZN5ln/4QLv3u3XSU sMT0JWJp6AA6v+u3daj00SPxWJ7TU0fAT3C5tvBexED7ZBP0qsczNcQjdXIZu7h9 MG1XGJq8PLJVU/oW7C7HcThkPioImxC1LbLlhSsXwX/PVSSFUypWXv2BvZu/8Xo= -----END CERTIFICATE-----Generated at Wed Dec 3 09:42:31 2025 by rpki-client