This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/yrcwQWgITyuZa3PF3E7NOt0FtzM.roa File: yrcwQWgITyuZa3PF3E7NOt0FtzM.roa (raw, json) Hash identifier: vlnzwiPLZ8EVvycu6XwiYljHy0QdtjMgK15X3uS0rZ0= Subject key identifier: CA:B7:30:41:68:08:4F:2B:99:6B:73:C5:DC:4E:CD:3A:DD:05:B7:33 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B360F240AA9DF9B0A0288E36E2AA7D9 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/yrcwQWgITyuZa3PF3E7NOt0FtzM.roa Signing time: Thu 01 Jan 2026 20:18:18 +0000 ROA not before: Thu 01 Jan 2026 20:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62563 IP address blocks: 45.135.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:0f:24:0a:a9:df:9b:0a:02:88:e3:6e:2a:a7:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cab7304168084f2b996b73c5dc4ecd3add05b733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6d:84:d3:07:3d:26:a4:2a:d7:1e:fa:77:f1: b1:b6:31:40:5a:60:90:be:dd:52:3a:cb:e9:f5:26: 77:58:2d:c2:9c:d7:bd:27:f4:27:0b:f1:ae:ed:3d: f2:a2:69:0b:f1:de:5a:bd:a9:97:4b:8c:74:da:e7: 65:c3:ef:be:ef:c0:64:8a:14:b8:55:fd:d2:d0:6d: 99:ca:f7:7c:fc:62:4c:8c:64:6e:e9:24:13:9f:fe: 41:01:b9:0b:60:b2:4a:c7:e1:16:dd:b9:95:0b:f1: fe:c0:a0:e7:c1:7d:b4:60:1e:38:af:25:49:cc:77: b9:e8:aa:1d:00:6a:7a:7d:1e:f1:78:32:d9:e9:6a: 24:c3:5e:87:31:33:e2:90:04:35:a7:14:5f:33:c5: 78:47:ec:89:ac:14:61:78:86:ca:87:66:14:29:53: f3:05:38:91:bf:23:3a:ac:af:b5:54:11:d7:3c:01: 83:37:29:22:49:d8:b7:90:2f:0f:fb:c8:88:48:78: 1e:00:9c:d5:9c:be:4d:4f:0d:d5:40:3e:d7:d4:f5: 64:e8:57:c6:f2:06:54:c3:f0:58:79:98:4b:2e:c4: 6a:d8:05:56:a2:cf:f2:b7:bf:b8:5c:8c:97:19:9d: d2:f1:31:0c:0d:52:c7:d4:75:8d:88:ff:22:2b:6e: d6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B7:30:41:68:08:4F:2B:99:6B:73:C5:DC:4E:CD:3A:DD:05:B7:33 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/yrcwQWgITyuZa3PF3E7NOt0FtzM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.12.0/22 Signature Algorithm: sha256WithRSAEncryption 43:0e:08:6b:9f:6c:73:56:76:47:08:ed:41:3b:a1:76:9e:94: 3a:c2:4f:23:38:c4:d0:61:8a:89:48:1b:31:29:2a:8f:72:b5: fa:42:23:94:23:88:48:8f:d6:6e:23:91:6e:c7:8b:26:9a:13: 3a:54:e7:c4:3a:25:b5:d1:9a:38:7d:22:02:c1:66:59:43:55: be:bc:3f:3e:f5:cc:0c:62:21:15:8a:88:6d:51:74:29:af:ab: 6c:10:30:e8:1d:6e:02:a7:b7:5c:8c:b4:76:01:33:76:04:fc: 06:56:aa:4e:3d:c8:66:9b:c3:66:6b:a1:ff:aa:aa:11:c8:89: 2e:c6:01:cf:f8:0d:3a:dc:8e:2b:da:b7:5d:26:d8:a4:a6:57: f6:55:64:85:c1:52:3e:14:ef:ba:2d:b7:c1:8f:44:be:18:c4: ba:b3:bf:6c:b1:40:fb:e1:fe:ac:e7:13:85:82:dc:be:36:91: 5f:21:7e:8c:b7:6f:64:dd:66:59:33:d2:57:03:7d:e6:9b:64: 7c:58:b6:7d:cf:25:1a:d1:3c:b2:1d:ea:c3:f7:7c:03:c5:45: 4c:be:5f:b5:e7:d1:e6:c8:c1:24:a5:db:27:c2:14:89:d6:f7: 00:0e:9c:db:e2:0a:1e:f9:d4:33:38:57:d3:95:a5:0f:c3:c5: f1:9a:bd:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Ng8kCqnfmwoCiONuKqfZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWI3MzA0MTY4MDg0ZjJiOTk2YjczYzVkYzRlY2QzYWRkMDViNzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn22E0wc9JqQq1x76d/GxtjFAWmCQ vt1SOsvp9SZ3WC3CnNe9J/QnC/Gu7T3yomkL8d5avamXS4x02udlw+++78BkihS4 Vf3S0G2Zyvd8/GJMjGRu6SQTn/5BAbkLYLJKx+EW3bmVC/H+wKDnwX20YB44ryVJ zHe56KodAGp6fR7xeDLZ6Wokw16HMTPikAQ1pxRfM8V4R+yJrBRheIbKh2YUKVPz BTiRvyM6rK+1VBHXPAGDNykiSdi3kC8P+8iISHgeAJzVnL5NTw3VQD7X1PVk6FfG 8gZUw/BYeZhLLsRq2AVWos/yt7+4XIyXGZ3S8TEMDVLH1HWNiP8iK27W/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMq3MEFoCE8rmWtzxdxOzTrdBbczMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEveXJjd1FXZ0lUeXVaYTNQRjNFN05PdDBGdHpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYcMMA0G CSqGSIb3DQEBCwUAA4IBAQBDDghrn2xzVnZHCO1BO6F2npQ6wk8jOMTQYYqJSBsx KSqPcrX6QiOUI4hIj9ZuI5Fux4smmhM6VOfEOiW10Zo4fSICwWZZQ1W+vD8+9cwM YiEViohtUXQpr6tsEDDoHW4Cp7dcjLR2ATN2BPwGVqpOPchmm8Nma6H/qqoRyIku xgHP+A063I4r2rddJtikplf2VWSFwVI+FO+6LbfBj0S+GMS6s79ssUD74f6s5xOF gty+NpFfIX6Mt29k3WZZM9JXA33mm2R8WLZ9zyUa0TyyHerD93wDxUVMvl+159Hm yMEkpdsnwhSJ1vcADpzb4goe+dQzOFfTlaUPw8Xxmr20 -----END CERTIFICATE-----Generated at Thu Jan 15 13:17:31 2026 by rpki-client