This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/0_yxb4oA5Qs-ZEh5rRS_zkXsASQ.roa File: 0_yxb4oA5Qs-ZEh5rRS_zkXsASQ.roa (raw, json) Hash identifier: 6QAThh9Df6kXu7nNhqJfERiUtZ4umexbpptr0sQdbu8= Subject key identifier: D3:FC:B1:6F:8A:00:E5:0B:3E:64:48:79:AD:14:BF:CE:45:EC:01:24 Certificate issuer: /CN=b62fccda29be666deef8ec62d6bc1e6cd067c35f Certificate serial: 019B7F84661A94E047441A956FC158B3AB27 Authority key identifier: B6:2F:CC:DA:29:BE:66:6D:EE:F8:EC:62:D6:BC:1E:6C:D0:67:C3:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti_M2im-Zm3u-Oxi1rwebNBnw18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/0_yxb4oA5Qs-ZEh5rRS_zkXsASQ.roa Signing time: Fri 02 Jan 2026 16:22:21 +0000 ROA not before: Fri 02 Jan 2026 16:22:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208343 IP address blocks: 45.144.32.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.crl rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.mft rsync://rpki.ripe.net/repository/DEFAULT/ti_M2im-Zm3u-Oxi1rwebNBnw18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:66:1a:94:e0:47:44:1a:95:6f:c1:58:b3:ab:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b62fccda29be666deef8ec62d6bc1e6cd067c35f Validity Not Before: Jan 2 16:22:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3fcb16f8a00e50b3e644879ad14bfce45ec0124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ec:dc:24:f5:38:b4:65:46:a5:e7:ba:76:87: 37:8c:6f:b8:a2:b5:e5:a9:86:b9:b3:ed:4b:26:3b: ee:5b:fc:b4:6c:1b:06:30:d8:60:54:26:ed:f1:cc: 04:c9:0a:0b:20:a7:6f:67:a4:86:4f:3d:e6:5e:4b: f0:da:0b:0b:6b:bf:ff:34:f8:33:08:7b:1d:9f:06: 89:a1:26:a1:bc:59:de:66:c5:f2:36:bb:05:20:57: 77:65:b0:69:14:d8:da:4e:78:f6:4e:0f:45:40:8f: c0:8e:cd:79:c2:ef:de:3f:e0:80:29:56:68:b2:2c: a1:fa:30:16:1c:cb:02:14:75:32:91:06:f1:7d:2e: 62:f3:92:ea:64:33:b6:36:13:da:91:de:55:16:de: 2f:cc:41:9d:2b:12:d9:5f:c7:43:4b:05:8d:4e:ed: 0b:a6:6d:b8:d9:29:73:06:a3:71:f7:24:bb:a4:c8: 65:32:93:ba:57:41:85:72:2d:b1:3d:0c:9f:fd:69: c1:66:3f:fa:fa:4b:16:d6:1d:61:44:de:2b:45:7a: 87:8a:08:36:76:b4:b4:34:03:e0:9f:05:d2:b9:f6: 96:38:ac:1d:0a:a0:4b:68:76:c6:f6:66:b5:32:f1: 18:96:37:2d:03:45:50:87:c7:be:3a:d3:34:99:32: 94:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FC:B1:6F:8A:00:E5:0B:3E:64:48:79:AD:14:BF:CE:45:EC:01:24 X509v3 Authority Key Identifier: keyid:B6:2F:CC:DA:29:BE:66:6D:EE:F8:EC:62:D6:BC:1E:6C:D0:67:C3:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti_M2im-Zm3u-Oxi1rwebNBnw18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/0_yxb4oA5Qs-ZEh5rRS_zkXsASQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.32.0/22 Signature Algorithm: sha256WithRSAEncryption 09:54:ec:a5:f6:b2:2b:b8:f2:cb:55:d2:ea:8d:3e:e2:3e:a3: 88:10:76:87:2a:e3:08:0d:30:5e:75:3a:4f:ae:08:a9:3f:ba: 84:72:83:28:ec:84:c2:6c:c7:cc:a5:91:5c:3e:47:83:83:8f: 7f:c7:8f:b3:cb:a7:3c:69:e2:c1:f2:5d:1c:74:eb:7f:88:5a: 34:d8:b1:87:76:d7:92:6c:67:52:18:97:94:13:67:1b:73:3f: 37:de:6d:0a:9d:59:8d:eb:86:ff:08:d6:d3:3c:a7:a5:4c:a7: b3:d0:6f:a1:50:5e:16:ed:3a:87:b7:e1:fe:1c:98:f4:3c:00: 41:91:b5:4d:58:95:b7:65:ef:2c:38:e9:f3:78:b5:fc:80:4e: cb:b8:3a:b5:57:d7:05:ed:9e:34:63:a0:fc:f3:6d:ff:78:c5: b0:1d:c7:b5:38:c4:df:7e:92:ff:bf:d9:9c:76:b0:2f:75:c6: 06:53:75:0c:e0:11:53:4c:1c:ae:c5:3b:af:8c:a9:d1:42:02: 34:74:aa:7c:c4:cf:4b:aa:45:d6:cb:0e:25:5c:61:88:20:fa: c8:e4:8d:89:7e:4f:a4:55:09:d7:dc:04:bc:55:f8:1b:33:18: 95:70:dd:1a:ec:36:b9:46:50:6c:9f:ba:59:c2:9a:00:c6:6d: e5:a8:e2:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hGYalOBHRBqVb8FYs6snMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MmZjY2RhMjliZTY2NmRlZWY4ZWM2MmQ2YmMxZTZjZDA2 N2MzNWYwHhcNMjYwMTAyMTYyMjIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2ZjYjE2ZjhhMDBlNTBiM2U2NDQ4NzlhZDE0YmZjZTQ1ZWMwMTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ezcJPU4tGVGpee6doc3jG+4orXl qYa5s+1LJjvuW/y0bBsGMNhgVCbt8cwEyQoLIKdvZ6SGTz3mXkvw2gsLa7//NPgz CHsdnwaJoSahvFneZsXyNrsFIFd3ZbBpFNjaTnj2Tg9FQI/Ajs15wu/eP+CAKVZo siyh+jAWHMsCFHUykQbxfS5i85LqZDO2NhPakd5VFt4vzEGdKxLZX8dDSwWNTu0L pm242SlzBqNx9yS7pMhlMpO6V0GFci2xPQyf/WnBZj/6+ksW1h1hRN4rRXqHigg2 drS0NAPgnwXSufaWOKwdCqBLaHbG9ma1MvEYljctA0VQh8e+OtM0mTKUFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNP8sW+KAOULPmRIea0Uv85F7AEkMB8GA1UdIwQY MBaAFLYvzNopvmZt7vjsYta8HmzQZ8NfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGlfTTJpbS1abTN1LU94aTFyd2ViTkJudzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85ZmY2NDUtZTBmMS00YjE4LTk4MGYt ZWRhNTliYzljYTJjLzEvMF95eGI0b0E1UXMtWkVoNXJSU196a1hzQVNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85ZmY2NDUtZTBmMS00YjE4LTk4MGYtZWRhNTliYzljYTJj LzEvdGlfTTJpbS1abTN1LU94aTFyd2ViTkJudzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZAgMA0G CSqGSIb3DQEBCwUAA4IBAQAJVOyl9rIruPLLVdLqjT7iPqOIEHaHKuMIDTBedTpP rgipP7qEcoMo7ITCbMfMpZFcPkeDg49/x4+zy6c8aeLB8l0cdOt/iFo02LGHdteS bGdSGJeUE2cbcz833m0KnVmN64b/CNbTPKelTKez0G+hUF4W7TqHt+H+HJj0PABB kbVNWJW3Ze8sOOnzeLX8gE7LuDq1V9cF7Z40Y6D8823/eMWwHce1OMTffpL/v9mc drAvdcYGU3UM4BFTTByuxTuvjKnRQgI0dKp8xM9LqkXWyw4lXGGIIPrI5I2Jfk+k VQnX3AS8VfgbMxiVcN0a7Da5RlBsn7pZwpoAxm3lqOLD -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:22 2026 by rpki-client