This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/k_yt6Ew5vZOiqYJGMvVI2kUV5V0.roa File: k_yt6Ew5vZOiqYJGMvVI2kUV5V0.roa (raw, json) Hash identifier: CUNe6MGDt6axlDbgIXUKB8iPiYMZNW/hw7m/AwCnfis= Subject key identifier: 93:FC:AD:E8:4C:39:BD:93:A2:A9:82:46:32:F5:48:DA:45:15:E5:5D Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Certificate serial: 019B7A5B31295567C4E3D037E3047A388EE1 Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/k_yt6Ew5vZOiqYJGMvVI2kUV5V0.roa Signing time: Thu 01 Jan 2026 16:19:15 +0000 ROA not before: Thu 01 Jan 2026 16:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56309 IP address blocks: 45.150.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:31:29:55:67:c4:e3:d0:37:e3:04:7a:38:8e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Validity Not Before: Jan 1 16:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93fcade84c39bd93a2a9824632f548da4515e55d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:95:83:0b:f8:98:73:8d:55:5e:89:49:1b:68: 45:e0:00:5d:aa:84:e0:b3:5e:1c:4a:3b:6a:a3:1d: 7b:f2:de:04:d5:cd:99:49:c4:cf:28:18:eb:66:e8: 37:a6:28:77:aa:99:2e:74:71:6b:d7:50:80:40:ff: 73:7b:13:2c:e5:09:9d:e5:dd:dd:ce:45:94:cc:9b: 39:1c:9c:3c:a1:91:26:d5:9b:9c:6a:ed:c3:cc:99: 64:e6:af:d6:69:c3:ba:9e:42:7f:66:0f:59:7e:04: c2:b8:24:1c:98:46:88:16:90:ea:da:a9:99:de:89: 80:a4:45:9f:a2:7a:a4:5e:91:92:d4:7b:e8:9a:9c: 32:56:80:55:a1:7a:48:f0:e6:d1:7c:cf:e0:df:72: 05:01:67:45:d7:b4:ab:bd:e9:11:e9:b4:1c:30:1f: b1:0c:77:33:86:c4:01:a2:f1:64:e1:ab:05:ac:02: 9c:75:55:d7:e9:96:6a:51:46:6e:8d:99:2c:90:45: 24:d2:5e:47:fc:95:dc:fe:f1:82:b9:0d:a7:92:f7: a0:e8:2f:c1:e6:ab:cc:b8:69:3c:b2:32:12:3f:34: cc:b1:1d:54:aa:96:f2:57:51:32:b2:60:5f:c9:20: c3:4e:82:a2:93:cf:a2:b2:a5:79:70:a8:95:73:f1: 87:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FC:AD:E8:4C:39:BD:93:A2:A9:82:46:32:F5:48:DA:45:15:E5:5D X509v3 Authority Key Identifier: keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/k_yt6Ew5vZOiqYJGMvVI2kUV5V0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.128.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:de:87:ab:b0:8c:9a:6f:cd:b8:cf:51:8d:8c:ab:42:7c:f8: 66:cd:48:0f:7f:eb:35:17:a2:12:64:0a:88:be:e8:03:a0:61: 48:90:fb:54:1d:0b:a1:87:4e:dc:5c:7e:83:da:e3:4e:35:ae: 96:77:54:fe:36:90:9e:9c:bf:c6:f7:79:0b:f6:3a:85:45:4b: 29:e5:d5:07:64:1b:7d:95:d4:a0:16:37:f6:e3:ce:1e:a3:ed: 80:41:aa:02:13:65:41:70:5d:70:86:6c:f8:6d:2f:87:e3:ad: 27:2c:be:d5:95:d9:71:a3:e0:db:79:ae:37:90:e0:f8:ef:6b: 8c:44:2c:00:86:b2:cb:4e:1e:a3:46:14:af:81:90:79:35:de: a3:5f:d8:2e:5c:1e:f5:d7:93:46:c3:c9:0b:81:38:21:ce:94: b4:8f:ae:e0:4c:4f:c6:ac:30:9a:a6:fa:6f:12:1d:23:c4:18: 42:71:9f:ca:41:7d:32:9f:ff:d6:cf:ad:73:49:3e:fb:c4:80: bf:04:84:15:d1:60:ab:be:6c:00:d4:9a:18:d8:d8:34:59:97: 98:5b:14:70:2c:57:5f:b5:16:f3:f8:b5:6e:42:80:92:12:e5: e2:62:2b:e6:fa:56:a9:00:37:cd:44:11:c1:3e:a5:21:9c:1c: e7:f2:d2:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WzEpVWfE49A34wR6OI7hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl NzM2NjQwHhcNMjYwMTAxMTYxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2ZjYWRlODRjMzliZDkzYTJhOTgyNDYzMmY1NDhkYTQ1MTVlNTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZWDC/iYc41VXolJG2hF4ABdqoTg s14cSjtqox178t4E1c2ZScTPKBjrZug3pih3qpkudHFr11CAQP9zexMs5Qmd5d3d zkWUzJs5HJw8oZEm1Zucau3DzJlk5q/WacO6nkJ/Zg9ZfgTCuCQcmEaIFpDq2qmZ 3omApEWfonqkXpGS1HvompwyVoBVoXpI8ObRfM/g33IFAWdF17SrvekR6bQcMB+x DHczhsQBovFk4asFrAKcdVXX6ZZqUUZujZkskEUk0l5H/JXc/vGCuQ2nkveg6C/B 5qvMuGk8sjISPzTMsR1UqpbyV1EysmBfySDDToKik8+isqV5cKiVc/GHIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJP8rehMOb2ToqmCRjL1SNpFFeVdMB8GA1UdIwQY MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt OGMxNTM5NjViYWM5LzEva195dDZFdzV2Wk9pcVlKR012Vkkya1VWNVYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5 LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZaAMA0G CSqGSIb3DQEBCwUAA4IBAQBf3oersIyab824z1GNjKtCfPhmzUgPf+s1F6ISZAqI vugDoGFIkPtUHQuhh07cXH6D2uNONa6Wd1T+NpCenL/G93kL9jqFRUsp5dUHZBt9 ldSgFjf2484eo+2AQaoCE2VBcF1whmz4bS+H460nLL7Vldlxo+Dbea43kOD472uM RCwAhrLLTh6jRhSvgZB5Nd6jX9guXB7115NGw8kLgTghzpS0j67gTE/GrDCapvpv Eh0jxBhCcZ/KQX0yn//Wz61zST77xIC/BIQV0WCrvmwA1JoY2Ng0WZeYWxRwLFdf tRbz+LVuQoCSEuXiYivm+lapADfNRBHBPqUhnBzn8tKd -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:39 2026 by rpki-client