This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/y2mTo6HHgH1hIKjXLEt22HvPvrw.roa File: y2mTo6HHgH1hIKjXLEt22HvPvrw.roa (raw, json) Hash identifier: YRXm/TWE2LnDq+SOmryX5rTG96P5ANXEnONR2xUrL80= Subject key identifier: CB:69:93:A3:A1:C7:80:7D:61:20:A8:D7:2C:4B:76:D8:7B:CF:BE:BC Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc Certificate serial: 019B7BA3C749F2E37EBCBAFA5705FDFA9F63 Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/y2mTo6HHgH1hIKjXLEt22HvPvrw.roa Signing time: Thu 01 Jan 2026 22:18:09 +0000 ROA not before: Thu 01 Jan 2026 22:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208867 IP address blocks: 45.80.96.0/22 maxlen: 22 45.85.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:c7:49:f2:e3:7e:bc:ba:fa:57:05:fd:fa:9f:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc Validity Not Before: Jan 1 22:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb6993a3a1c7807d6120a8d72c4b76d87bcfbebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2a:e5:64:08:d1:4c:76:4f:55:11:15:d7:f3: 9b:29:ee:19:18:76:40:bc:36:67:6c:e3:b1:4c:1f: 36:09:17:bb:d4:08:14:a1:9a:31:21:99:5e:5e:71: ba:60:e4:63:b5:8d:f6:e7:ba:29:c9:51:21:1c:53: 94:da:45:b0:79:ef:90:e8:d8:9e:fd:eb:71:61:56: 88:af:08:1a:a6:6a:ea:c3:f3:6f:c4:07:f0:69:8e: 25:8a:de:c7:7a:80:68:53:96:b7:5b:fe:82:3e:4c: 68:7e:ae:f9:3e:22:19:e6:b7:f8:dc:e6:d9:86:ff: a3:e9:8d:7d:4a:fa:b1:51:02:05:49:ff:33:6e:bc: 09:40:56:c7:89:f0:28:89:3a:f3:27:38:14:8d:4f: 9c:6b:2a:fc:60:8d:b3:a9:97:a1:eb:16:6f:4c:35: f7:da:34:9e:36:4d:a5:92:02:19:02:91:7e:09:b3: 5d:b4:f6:32:33:31:04:e9:a9:bc:c3:a0:06:79:16: 07:cd:11:72:22:7d:25:af:a0:ad:2d:03:e8:45:ed: 08:51:02:f9:df:d2:ec:a0:a1:7c:b8:60:67:05:2e: a7:ed:6f:c9:92:2c:89:44:b4:01:7d:50:ba:4b:11: dd:ef:31:df:8d:d0:5f:48:a1:55:1a:0f:ed:32:39: 76:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:69:93:A3:A1:C7:80:7D:61:20:A8:D7:2C:4B:76:D8:7B:CF:BE:BC X509v3 Authority Key Identifier: keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/y2mTo6HHgH1hIKjXLEt22HvPvrw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.96.0/22 45.85.128.0/23 Signature Algorithm: sha256WithRSAEncryption aa:11:83:61:37:2a:13:45:f6:89:5f:a7:33:e0:3c:38:c1:bf: 26:36:a3:6b:b9:34:15:c9:20:3f:1b:1f:fb:42:e3:56:98:d2: a0:b8:95:51:f6:d8:73:c0:20:18:32:e4:51:64:65:03:c1:38: e5:5c:63:a0:b6:6a:34:3e:f7:16:f7:4a:92:52:e8:10:1f:c8: ea:6e:6a:8b:8a:e9:b0:c7:bd:14:c9:f7:48:71:4e:2b:64:36: fe:7d:e4:76:f9:0a:b8:a1:cd:61:40:96:de:51:85:f1:32:a9: 12:ea:c1:a8:c7:6b:b2:e3:fb:b4:3c:b4:48:45:22:82:c3:39: 0d:23:fc:14:6b:3e:f4:d1:55:54:ce:a3:98:65:0c:81:cf:24: e9:80:25:69:39:b1:6b:7d:bf:8a:ea:4a:4e:35:f2:f3:5e:9f: fa:81:cd:4d:97:f9:40:2b:73:9b:50:74:d7:9d:57:c6:8a:23: 47:c9:c3:bb:ec:09:f1:de:9b:fb:7e:01:b2:61:fa:06:86:67: 8a:25:fc:30:6b:fa:10:85:cb:1c:50:b8:68:d8:32:3c:21:e5: 47:b6:97:05:04:cf:c3:4d:21:1d:92:5f:44:54:6f:b0:3e:25: 0f:1a:d6:c2:62:f6:e6:41:96:7b:a5:7f:b2:4c:5c:a2:79:93: f9:24:5e:1c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7o8dJ8uN+vLr6VwX9+p9jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzNlZjQ2MTE2ZmQ5ZDIxYmZiNTMzZTQ0YmRlNTE3ODkw YzI0ZGMwHhcNMjYwMTAxMjIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjY5OTNhM2ExYzc4MDdkNjEyMGE4ZDcyYzRiNzZkODdiY2ZiZWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yrlZAjRTHZPVREV1/ObKe4ZGHZA vDZnbOOxTB82CRe71AgUoZoxIZleXnG6YORjtY3257opyVEhHFOU2kWwee+Q6Nie /etxYVaIrwgapmrqw/NvxAfwaY4lit7HeoBoU5a3W/6CPkxofq75PiIZ5rf43ObZ hv+j6Y19SvqxUQIFSf8zbrwJQFbHifAoiTrzJzgUjU+cayr8YI2zqZeh6xZvTDX3 2jSeNk2lkgIZApF+CbNdtPYyMzEE6am8w6AGeRYHzRFyIn0lr6CtLQPoRe0IUQL5 39LsoKF8uGBnBS6n7W/JkiyJRLQBfVC6SxHd7zHfjdBfSKFVGg/tMjl2qwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMtpk6Ohx4B9YSCo1yxLdth7z768MB8GA1UdIwQY MBaAFIUz70YRb9nSG/tTPkS95ReJDCTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAt NzM5MjNkYWVmMTE0LzEveTJtVG82SEhnSDFoSUtqWExFdDIySHZQdnJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAtNzM5MjNkYWVmMTE0 LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVBgAwQB LVWAMA0GCSqGSIb3DQEBCwUAA4IBAQCqEYNhNyoTRfaJX6cz4Dw4wb8mNqNruTQV ySA/Gx/7QuNWmNKguJVR9thzwCAYMuRRZGUDwTjlXGOgtmo0PvcW90qSUugQH8jq bmqLiumwx70UyfdIcU4rZDb+feR2+Qq4oc1hQJbeUYXxMqkS6sGox2uy4/u0PLRI RSKCwzkNI/wUaz700VVUzqOYZQyBzyTpgCVpObFrfb+K6kpONfLzXp/6gc1Nl/lA K3ObUHTXnVfGiiNHycO77Anx3pv7fgGyYfoGhmeKJfwwa/oQhcscULho2DI8IeVH tpcFBM/DTSEdkl9EVG+wPiUPGtbCYvbmQZZ7pX+yTFyieZP5JF4c -----END CERTIFICATE-----Generated at Wed Jan 21 04:05:28 2026 by rpki-client