This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/lYIGWxahC9CzsRBvxZBnwHSuRHY.roa File: lYIGWxahC9CzsRBvxZBnwHSuRHY.roa (raw, json) Hash identifier: LM/M+iniRNNYq1B9jGGGKzwUclI+ea0S63i/EWNDP7c= Subject key identifier: 95:82:06:5B:16:A1:0B:D0:B3:B1:10:6F:C5:90:67:C0:74:AE:44:76 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B35FCEEC4C39BD75DB34A737F63B304 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/lYIGWxahC9CzsRBvxZBnwHSuRHY.roa Signing time: Thu 01 Jan 2026 20:18:14 +0000 ROA not before: Thu 01 Jan 2026 20:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43350 IP address blocks: 31.222.239.0/24 maxlen: 24 45.67.120.0/22 maxlen: 22 45.148.152.0/22 maxlen: 22 217.114.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:fc:ee:c4:c3:9b:d7:5d:b3:4a:73:7f:63:b3:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9582065b16a10bd0b3b1106fc59067c074ae4476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c7:47:bc:e4:c0:94:ba:04:c7:5d:0b:18:e2: 34:ff:12:ff:72:37:bf:74:c3:50:0f:f6:53:74:c5: c5:32:4b:c1:37:0c:2a:82:83:9d:06:cc:6b:b2:a4: 1e:40:ab:2b:6d:0f:2c:7b:14:49:cd:88:ec:5c:34: 41:86:6b:fe:ed:d7:60:b7:e7:4c:fd:d6:5f:80:05: 9f:d0:30:01:13:6a:a0:45:f1:4c:53:b1:d0:3e:a7: 16:0e:84:bb:a9:67:fe:fc:63:4e:88:ca:b0:5f:68: ff:c1:b7:76:19:e8:6d:e3:a0:83:a1:b1:ee:ec:eb: 9e:14:32:df:fd:c0:72:25:d9:cc:0d:79:82:05:11: 3d:6a:81:ba:dd:53:89:96:a0:2b:9a:ba:6e:5f:7c: 6b:6a:67:29:cb:97:38:9d:83:c6:96:c3:5d:63:07: a3:c5:e3:32:13:83:4b:37:f0:dc:06:40:57:bd:6c: 2f:fb:8d:46:19:ea:bc:6a:68:4a:6d:6d:b5:fe:65: 95:67:48:7c:10:f4:4b:01:bd:6e:4d:ad:a0:c6:17: 65:96:7f:5b:25:c9:cc:79:5e:5f:01:64:0e:c2:06: eb:d3:a4:eb:ca:93:19:fe:4b:73:3d:ef:db:b6:cc: 70:7d:9f:a8:42:0b:e8:b1:45:e0:d6:ed:bf:b0:24: 5c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:82:06:5B:16:A1:0B:D0:B3:B1:10:6F:C5:90:67:C0:74:AE:44:76 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/lYIGWxahC9CzsRBvxZBnwHSuRHY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.222.239.0/24 45.67.120.0/22 45.148.152.0/22 217.114.41.0/24 Signature Algorithm: sha256WithRSAEncryption a2:45:61:37:54:a2:d5:61:80:48:b8:9e:98:c5:4b:97:b3:e6: 45:a0:e8:a5:5c:4e:7e:50:28:c7:b2:bd:c8:1a:f3:77:7d:b4: 00:2b:e1:7e:ef:31:ad:03:dc:b2:79:97:34:75:0a:9b:25:29: e0:1d:48:05:89:06:59:e2:b9:70:78:6c:ac:9c:8b:6b:35:23: ed:e2:57:64:37:a9:6e:62:93:bb:39:82:12:f0:81:30:2d:d6: a1:47:83:35:51:25:3c:d7:06:dc:e5:6a:f9:50:1f:b0:1f:cb: 14:bf:4d:2a:c9:30:23:c7:a8:16:cb:c0:1f:9e:d4:41:6b:80: b1:4f:16:15:db:dd:9b:e5:7f:c2:ef:f6:47:b9:25:52:1e:87: 93:11:2c:62:df:83:a7:b2:21:45:e2:2f:42:22:3d:35:db:19: 5f:d2:80:2f:9d:a8:9e:fb:f7:9f:2a:c5:e3:16:af:10:70:9e: 88:25:6d:16:da:99:99:fc:1f:5c:81:67:ba:3f:b1:e5:a6:6b: b0:00:99:16:0e:ee:b6:99:b9:37:c6:27:8b:ac:7d:e8:4a:c2: 7b:8d:91:11:26:2c:fb:e8:d5:b3:5f:04:3c:06:91:27:1c:93: ca:f7:8e:27:2a:fd:f2:1e:de:5b:9f:69:ad:7a:3a:2b:26:8c: 7a:a6:17:2c -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7NfzuxMOb112zSnN/Y7MEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTgyMDY1YjE2YTEwYmQwYjNiMTEwNmZjNTkwNjdjMDc0YWU0NDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysdHvOTAlLoEx10LGOI0/xL/cje/ dMNQD/ZTdMXFMkvBNwwqgoOdBsxrsqQeQKsrbQ8sexRJzYjsXDRBhmv+7ddgt+dM /dZfgAWf0DABE2qgRfFMU7HQPqcWDoS7qWf+/GNOiMqwX2j/wbd2Geht46CDobHu 7OueFDLf/cByJdnMDXmCBRE9aoG63VOJlqArmrpuX3xramcpy5c4nYPGlsNdYwej xeMyE4NLN/DcBkBXvWwv+41GGeq8amhKbW21/mWVZ0h8EPRLAb1uTa2gxhdlln9b JcnMeV5fAWQOwgbr06TrypMZ/ktzPe/btsxwfZ+oQgvosUXg1u2/sCRcKQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJWCBlsWoQvQs7EQb8WQZ8B0rkR2MB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvbFlJR1d4YWhDOUN6c1JCdnhaQm53SFN1UkhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAH97vAwQC LUN4AwQCLZSYAwQA2XIpMA0GCSqGSIb3DQEBCwUAA4IBAQCiRWE3VKLVYYBIuJ6Y xUuXs+ZFoOilXE5+UCjHsr3IGvN3fbQAK+F+7zGtA9yyeZc0dQqbJSngHUgFiQZZ 4rlweGysnItrNSPt4ldkN6luYpO7OYIS8IEwLdahR4M1USU81wbc5Wr5UB+wH8sU v00qyTAjx6gWy8AfntRBa4CxTxYV292b5X/C7/ZHuSVSHoeTESxi34OnsiFF4i9C Ij012xlf0oAvnaie+/efKsXjFq8QcJ6IJW0W2pmZ/B9cgWe6P7HlpmuwAJkWDu62 mbk3xieLrH3oSsJ7jZERJiz76NWzXwQ8BpEnHJPK944nKv3yHt5bn2mtejorJox6 phcs -----END CERTIFICATE-----Generated at Sat Jan 3 03:24:47 2026 by rpki-client