This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/yW6lZji2AHmoUjTII6xnqb3cJik.roa File: yW6lZji2AHmoUjTII6xnqb3cJik.roa (raw, json) Hash identifier: EL72fd/wtY/P61GadCM72VcumBUghLbEXZoZVKezOQk= Subject key identifier: C9:6E:A5:66:38:B6:00:79:A8:52:34:C8:23:AC:67:A9:BD:DC:26:29 Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 019B8B486BE76FF23E87A1D0C1D89A09031F Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/yW6lZji2AHmoUjTII6xnqb3cJik.roa Signing time: Sun 04 Jan 2026 23:12:17 +0000 ROA not before: Sun 04 Jan 2026 23:12:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396073 IP address blocks: 45.13.214.0/24 maxlen: 24 45.142.194.0/24 maxlen: 24 193.32.163.0/24 maxlen: 24 2a0c:9f00:a001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8b:48:6b:e7:6f:f2:3e:87:a1:d0:c1:d8:9a:09:03:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Jan 4 23:12:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c96ea56638b60079a85234c823ac67a9bddc2629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:79:c5:17:99:90:75:bc:df:74:ea:e8:44:a7: 0d:1d:b7:5c:7f:9b:69:0b:2b:56:f0:d1:f7:c2:58: c8:22:2f:83:a8:27:6d:27:1b:47:77:bc:11:99:ad: 6a:30:5f:a5:84:23:4b:33:fc:2e:bf:fa:3a:8b:84: e0:88:0b:d9:d7:b8:e1:aa:92:85:b4:93:d8:09:68: 17:b9:f8:44:69:6e:4f:e4:d2:40:29:49:cb:b6:c0: a8:cb:1d:19:2d:44:ad:a4:0a:a0:fd:03:6e:e0:51: 2b:14:3b:52:15:9d:4b:f1:fc:25:bb:25:25:d4:3b: 08:10:d9:34:9f:a8:f4:6a:19:6f:7f:27:4a:40:53: 2f:00:e4:df:06:e6:f9:ca:dc:2b:00:8a:4d:4e:98: db:eb:67:3d:2f:c0:9e:1b:99:18:50:73:f0:3d:50: 6b:1e:5d:44:64:82:8f:b1:72:f7:79:74:ea:b8:23: a1:39:81:7e:d4:5e:70:6e:43:d6:e4:44:ee:46:63: 04:cd:b9:a9:1e:4a:7d:f1:76:c3:7d:1c:ad:b5:21: 35:26:a5:93:d6:2e:92:e7:5d:45:b2:37:8b:58:03: 8d:ef:45:34:80:fb:42:23:24:a6:21:27:20:68:1d: 63:58:4c:06:58:7a:2f:bb:ee:7a:e8:e9:3d:01:f2: f7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6E:A5:66:38:B6:00:79:A8:52:34:C8:23:AC:67:A9:BD:DC:26:29 X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/yW6lZji2AHmoUjTII6xnqb3cJik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.214.0/24 45.142.194.0/24 193.32.163.0/24 IPv6: 2a0c:9f00:a001::/48 Signature Algorithm: sha256WithRSAEncryption 70:75:38:a7:ac:fe:4b:1f:d1:63:ed:d1:42:ac:eb:cd:05:fb: 22:d6:1d:9b:b3:5b:3c:88:03:70:64:56:b9:00:04:31:76:4e: ee:26:f0:e4:5a:15:45:48:92:54:8d:7a:fd:a5:be:aa:68:34: 1c:c0:81:4d:ac:24:fa:d4:9b:02:4f:cf:3a:f5:37:69:48:7b: dc:fa:e3:ea:41:f6:10:da:5d:36:26:78:e6:16:9e:a8:ac:fa: 2f:9c:65:65:5d:79:38:79:83:18:dd:29:05:26:ce:b5:e0:21: 60:a8:38:a6:c0:ea:d7:15:d8:b6:e8:cf:26:a8:4e:7b:e4:eb: 08:c9:56:71:88:fe:24:1c:e9:0b:a3:f6:64:c3:82:e4:d3:e9: eb:1e:5b:d9:b8:59:71:61:dd:dc:96:9f:24:37:97:f9:43:21: b3:50:2e:53:bb:6f:61:67:86:d9:27:d9:35:a5:42:55:15:8b: dc:2e:8a:aa:b3:50:d2:c6:9b:be:67:f3:c8:ad:92:b7:ab:98: 29:19:b4:64:13:99:ed:32:4d:50:97:8d:a7:ab:bf:dd:a4:a9: 09:fb:a3:e4:9f:c5:72:a0:d5:57:90:23:f1:73:89:e5:56:26: a2:2a:ac:dd:25:29:fe:9d:34:f6:0e:6e:5e:15:91:f4:fe:62: 50:83:dc:d4 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZuLSGvnb/I+h6HQwdiaCQMfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjYwMTA0MjMxMjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTZlYTU2NjM4YjYwMDc5YTg1MjM0YzgyM2FjNjdhOWJkZGMyNjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHnFF5mQdbzfdOroRKcNHbdcf5tp CytW8NH3wljIIi+DqCdtJxtHd7wRma1qMF+lhCNLM/wuv/o6i4TgiAvZ17jhqpKF tJPYCWgXufhEaW5P5NJAKUnLtsCoyx0ZLUStpAqg/QNu4FErFDtSFZ1L8fwluyUl 1DsIENk0n6j0ahlvfydKQFMvAOTfBub5ytwrAIpNTpjb62c9L8CeG5kYUHPwPVBr Hl1EZIKPsXL3eXTquCOhOYF+1F5wbkPW5ETuRmMEzbmpHkp98XbDfRyttSE1JqWT 1i6S511FsjeLWAON70U0gPtCIySmIScgaB1jWEwGWHovu+566Ok9AfL3+wIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFMlupWY4tgB5qFI0yCOsZ6m93CYpMB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEveVc2bFpqaTJBSG1vVWpUSUk2eG5xYjNjSmlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQALQ3WAwQA LY7CAwQAwSCjMA8EAgACMAkDBwAqDJ8AoAEwDQYJKoZIhvcNAQELBQADggEBAHB1 OKes/ksf0WPt0UKs680F+yLWHZuzWzyIA3BkVrkABDF2Tu4m8ORaFUVIklSNev2l vqpoNBzAgU2sJPrUmwJPzzr1N2lIe9z64+pB9hDaXTYmeOYWnqis+i+cZWVdeTh5 gxjdKQUmzrXgIWCoOKbA6tcV2LbozyaoTnvk6wjJVnGI/iQc6Quj9mTDguTT6ese W9m4WXFh3dyWnyQ3l/lDIbNQLlO7b2Fnhtkn2TWlQlUVi9wuiqqzUNLGm75n88it krermCkZtGQTme0yTVCXjaerv92kqQn7o+SfxXKg1VeQI/FzieVWJqIqrN0lKf6d NPYObl4VkfT+YlCD3NQ= -----END CERTIFICATE-----Generated at Tue Jan 20 00:10:57 2026 by rpki-client