This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/eY-jbaTO9qAMmUNm2U_mUvD9oXw.roa File: eY-jbaTO9qAMmUNm2U_mUvD9oXw.roa (raw, json) Hash identifier: DE4ibWon9YTdJq0az/Rzpdn4yRH/8+IxBFpWlTJrvso= Subject key identifier: 79:8F:A3:6D:A4:CE:F6:A0:0C:99:43:66:D9:4F:E6:52:F0:FD:A1:7C Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019B7F8391D17413030A51035B2A97969AF0 Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/eY-jbaTO9qAMmUNm2U_mUvD9oXw.roa Signing time: Fri 02 Jan 2026 16:21:27 +0000 ROA not before: Fri 02 Jan 2026 16:21:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400909 IP address blocks: 45.154.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:91:d1:74:13:03:0a:51:03:5b:2a:97:96:9a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Jan 2 16:21:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=798fa36da4cef6a00c994366d94fe652f0fda17c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c7:5d:8a:45:ab:d4:c0:7b:bc:0c:db:2d:3b: 1f:d3:b7:30:1c:93:6f:1b:15:73:04:e4:bb:5a:8a: c4:31:42:70:55:b4:fc:68:e8:f5:60:4f:0f:6e:c6: d2:f6:32:b6:c2:31:a5:91:11:4f:c6:f8:57:a9:d7: e8:a9:15:13:da:e0:b7:9b:24:2d:12:68:2e:e3:ac: bf:5e:2c:93:69:7e:19:2a:3a:9d:20:1b:92:9c:1b: cf:a0:7a:dd:97:f7:c6:cf:d8:0c:22:6f:dd:ca:a9: bd:e9:69:08:6b:c6:38:04:1f:f3:2a:0c:6b:6e:6f: 46:3a:2d:5b:29:e9:1c:14:a2:b4:69:69:c9:43:b2: 36:5b:cc:7e:2d:ab:b7:a6:13:f4:4e:cf:70:6f:e4: 98:a9:6d:ea:27:19:a1:e2:5c:68:58:3c:d1:c1:4c: ac:91:52:d9:5d:79:09:b6:f4:dd:23:06:89:de:e9: 41:48:0e:2d:26:db:92:57:d0:42:13:1c:4b:f8:da: 42:f1:a2:7b:bc:f4:ec:39:ad:22:0b:56:de:dd:d7: f2:7d:f1:47:2e:ad:31:4f:99:b7:c3:a1:51:b2:e3: 9e:73:a4:94:00:d6:a4:10:14:43:3f:e9:a5:7d:0f: a1:25:24:4b:fd:08:28:7b:e4:32:e9:af:b3:b1:05: 8c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8F:A3:6D:A4:CE:F6:A0:0C:99:43:66:D9:4F:E6:52:F0:FD:A1:7C X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/eY-jbaTO9qAMmUNm2U_mUvD9oXw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.156.0/24 Signature Algorithm: sha256WithRSAEncryption 97:be:19:19:e5:79:63:29:2b:45:43:55:3d:40:68:fc:4c:d8: 20:49:14:83:58:c8:40:ed:d5:70:df:ab:4d:87:86:d9:e1:92: b0:cb:7e:60:14:41:10:2d:6b:3c:a2:e7:69:36:89:27:68:58: 5b:27:7c:27:4a:51:1a:96:97:31:11:3f:e1:6e:c0:83:44:bd: b0:62:33:3d:99:73:80:29:3a:de:1a:0e:67:f1:46:54:1c:7a: 8c:df:98:4c:ab:80:c9:22:b1:6e:e7:fb:f7:2d:96:bb:a9:33: 9f:cd:af:ce:f4:16:9e:e3:66:62:2d:66:7d:0f:e0:52:26:a6: 43:9b:d0:4f:ff:cf:be:27:f2:89:61:2a:0c:59:a4:72:6f:ed: 72:e2:e1:e3:8f:d3:a6:f5:54:b6:fa:14:c0:e9:f0:46:36:4a: 41:a5:6d:a8:3c:0e:46:3c:55:7d:09:55:cc:de:c7:b9:21:9c: 87:c3:c5:8a:65:cb:db:31:b8:cc:e6:bc:05:08:cb:c4:b0:ff: 98:f3:3d:03:f2:a7:58:9c:ba:8c:e6:1b:ee:2d:f5:9f:cd:36: 47:87:1e:81:4e:27:43:54:6b:59:86:b7:b9:1e:d2:31:df:ec: e7:7a:b8:51:e7:fe:a6:e3:da:27:bf:a8:4a:53:9b:43:0f:76: 6f:d0:05:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g5HRdBMDClEDWyqXlprwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjYwMTAyMTYyMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OThmYTM2ZGE0Y2VmNmEwMGM5OTQzNjZkOTRmZTY1MmYwZmRhMTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMddikWr1MB7vAzbLTsf07cwHJNv GxVzBOS7WorEMUJwVbT8aOj1YE8PbsbS9jK2wjGlkRFPxvhXqdfoqRUT2uC3myQt Emgu46y/XiyTaX4ZKjqdIBuSnBvPoHrdl/fGz9gMIm/dyqm96WkIa8Y4BB/zKgxr bm9GOi1bKekcFKK0aWnJQ7I2W8x+Lau3phP0Ts9wb+SYqW3qJxmh4lxoWDzRwUys kVLZXXkJtvTdIwaJ3ulBSA4tJtuSV9BCExxL+NpC8aJ7vPTsOa0iC1be3dfyffFH Lq0xT5m3w6FRsuOec6SUANakEBRDP+mlfQ+hJSRL/Qgoe+Qy6a+zsQWMSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHmPo22kzvagDJlDZtlP5lLw/aF8MB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvZVktamJhVE85cUFNbVVObTJVX21VdkQ5b1h3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZqcMA0G CSqGSIb3DQEBCwUAA4IBAQCXvhkZ5XljKStFQ1U9QGj8TNggSRSDWMhA7dVw36tN h4bZ4ZKwy35gFEEQLWs8oudpNoknaFhbJ3wnSlEalpcxET/hbsCDRL2wYjM9mXOA KTreGg5n8UZUHHqM35hMq4DJIrFu5/v3LZa7qTOfza/O9Bae42ZiLWZ9D+BSJqZD m9BP/8++J/KJYSoMWaRyb+1y4uHjj9Om9VS2+hTA6fBGNkpBpW2oPA5GPFV9CVXM 3se5IZyHw8WKZcvbMbjM5rwFCMvEsP+Y8z0D8qdYnLqM5hvuLfWfzTZHhx6BTidD VGtZhre5HtIx3+znerhR5/6m49onv6hKU5tDD3Zv0AVu -----END CERTIFICATE-----Generated at Mon Jan 19 23:36:32 2026 by rpki-client