This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/YL8r29m0lxZv2At--gyvp8nO264.roa File: YL8r29m0lxZv2At--gyvp8nO264.roa (raw, json) Hash identifier: XcDcQu5a+CRcI/t9p6ZRHylM2Ys4aznmGpvA+v+lJM0= Subject key identifier: 60:BF:2B:DB:D9:B4:97:16:6F:D8:0B:7E:FA:0C:AF:A7:C9:CE:DB:AE Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C8015D1B96B0D074E272BF2ABCA68BF Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/YL8r29m0lxZv2At--gyvp8nO264.roa Signing time: Fri 02 Jan 2026 02:18:47 +0000 ROA not before: Fri 02 Jan 2026 02:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33185 IP address blocks: 45.135.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:15:d1:b9:6b:0d:07:4e:27:2b:f2:ab:ca:68:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60bf2bdbd9b497166fd80b7efa0cafa7c9cedbae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ea:b5:d1:ac:34:8f:67:cd:41:e9:0e:41:a5: 28:44:82:b4:51:b9:6b:9e:57:af:39:10:07:1b:a8: 79:a8:2e:be:7d:4c:1b:5f:e2:3f:40:78:07:04:03: 83:61:07:7c:b7:52:75:3c:8f:71:1a:14:10:c5:7c: bf:5d:6e:ff:f4:d9:0f:47:3b:30:5c:da:86:99:c8: 62:21:60:05:a6:49:64:15:d2:39:ba:2c:3a:28:40: 2f:47:34:75:8c:17:53:8e:64:b7:c3:8d:e4:c9:c3: 8e:84:e1:30:93:a1:bb:1c:d4:52:5d:1d:20:29:32: 26:17:6f:80:6e:f8:40:33:17:80:fb:84:ea:e6:05: 80:ca:ca:63:d4:59:15:3c:08:2f:39:44:05:7e:62: 68:07:e7:89:e8:18:42:73:d1:46:f4:87:9b:a8:25: 17:89:db:ad:d7:d7:72:89:4b:38:52:9a:f9:e8:99: 26:af:3f:d1:17:3a:69:02:be:28:a5:3c:82:20:80: 94:89:86:a9:01:aa:a9:ed:3e:4a:f1:35:aa:53:df: 5b:70:dd:e4:41:19:d9:d9:82:54:f0:80:fb:7c:da: 86:e0:6f:29:d2:61:27:44:cf:bd:f0:e3:bf:c5:30: 5c:5c:12:45:f1:55:05:f0:b2:4c:2b:af:8d:c4:02: 99:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:BF:2B:DB:D9:B4:97:16:6F:D8:0B:7E:FA:0C:AF:A7:C9:CE:DB:AE X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/YL8r29m0lxZv2At--gyvp8nO264.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.148.0/24 Signature Algorithm: sha256WithRSAEncryption 52:be:1c:73:cd:5f:1d:0b:a5:1f:b8:7f:1f:57:13:65:41:a1: e3:61:bb:fe:39:37:2d:3c:30:50:11:c7:67:3d:ba:cf:6a:ee: 19:e3:04:94:d7:1a:cf:05:05:7f:6e:22:92:1c:dc:2b:70:2f: 9b:d8:54:f9:c0:7e:31:03:79:d8:da:13:8e:5f:1c:b7:34:b0: ed:8c:c3:c1:7c:ba:3d:4f:58:d8:05:32:99:ab:79:9c:44:1a: 41:77:4d:aa:be:95:9d:92:df:18:18:52:e1:e2:39:91:ff:67: 0a:e0:59:eb:05:7a:64:c0:56:c6:00:cc:d5:1a:a6:a0:ad:a3: 07:26:6f:a1:51:cb:5d:ba:3b:4d:04:4e:71:07:46:96:8c:b9: 39:24:19:81:c6:ab:09:4c:f0:d8:69:b3:1a:77:a3:a8:b0:be: 93:06:81:6d:7e:60:1c:f4:33:33:cc:ab:24:36:eb:1b:d7:0e: d0:7e:1e:79:70:ef:3a:4b:01:08:4d:26:c9:e4:07:82:77:e5: cd:68:47:7e:e1:a2:7a:e1:05:80:9f:f7:9a:7a:7d:63:67:ab: 06:ea:5a:c9:a9:f4:8b:5c:ff:2e:0a:34:c4:5e:2f:a1:28:ef: df:b2:f6:b6:3c:b0:c0:b5:cd:32:8e:c6:25:ee:e7:cd:8a:a3: 73:7f:f1:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gBXRuWsNB04nK/Krymi/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGJmMmJkYmQ5YjQ5NzE2NmZkODBiN2VmYTBjYWZhN2M5Y2VkYmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+q10aw0j2fNQekOQaUoRIK0Ublr nlevORAHG6h5qC6+fUwbX+I/QHgHBAODYQd8t1J1PI9xGhQQxXy/XW7/9NkPRzsw XNqGmchiIWAFpklkFdI5uiw6KEAvRzR1jBdTjmS3w43kycOOhOEwk6G7HNRSXR0g KTImF2+AbvhAMxeA+4Tq5gWAyspj1FkVPAgvOUQFfmJoB+eJ6BhCc9FG9IebqCUX idut19dyiUs4Upr56Jkmrz/RFzppAr4opTyCIICUiYapAaqp7T5K8TWqU99bcN3k QRnZ2YJU8ID7fNqG4G8p0mEnRM+98OO/xTBcXBJF8VUF8LJMK6+NxAKZewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGC/K9vZtJcWb9gLfvoMr6fJztuuMB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvWUw4cjI5bTBseFp2MkF0LS1neXZwOG5PMjY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYeUMA0G CSqGSIb3DQEBCwUAA4IBAQBSvhxzzV8dC6UfuH8fVxNlQaHjYbv+OTctPDBQEcdn PbrPau4Z4wSU1xrPBQV/biKSHNwrcC+b2FT5wH4xA3nY2hOOXxy3NLDtjMPBfLo9 T1jYBTKZq3mcRBpBd02qvpWdkt8YGFLh4jmR/2cK4FnrBXpkwFbGAMzVGqagraMH Jm+hUctdujtNBE5xB0aWjLk5JBmBxqsJTPDYabMad6OosL6TBoFtfmAc9DMzzKsk Nusb1w7Qfh55cO86SwEITSbJ5AeCd+XNaEd+4aJ64QWAn/eaen1jZ6sG6lrJqfSL XP8uCjTEXi+hKO/fsva2PLDAtc0yjsYl7ufNiqNzf/EJ -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:42 2026 by rpki-client