This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/yjSw7EGM3wf6F5BYX5IX39SdB9g.roa File: yjSw7EGM3wf6F5BYX5IX39SdB9g.roa (raw, json) Hash identifier: W5I+pZbCjC+Wm9EnLWz0YxI4s3U4AfirO0LVljkjaHs= Subject key identifier: CA:34:B0:EC:41:8C:DF:07:FA:17:90:58:5F:92:17:DF:D4:9D:07:D8 Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Certificate serial: 019B7F8345E19ED75C483CB7A2A0A2AEAF74 Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/yjSw7EGM3wf6F5BYX5IX39SdB9g.roa Signing time: Fri 02 Jan 2026 16:21:08 +0000 ROA not before: Fri 02 Jan 2026 16:21:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215250 IP address blocks: 45.91.12.0/24 maxlen: 24 2a06:d1c3::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:45:e1:9e:d7:5c:48:3c:b7:a2:a0:a2:ae:af:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Validity Not Before: Jan 2 16:21:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca34b0ec418cdf07fa1790585f9217dfd49d07d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:12:ab:2b:3f:cc:7a:43:52:e7:15:d4:42:33: 91:85:a3:d8:c7:9c:d4:e5:95:56:6c:bc:c0:a0:f0: 90:9d:80:fa:1a:82:de:c9:cd:02:23:ef:ee:d5:1c: 27:da:af:7a:ff:9d:a4:f1:2a:71:64:8d:82:5a:52: 3d:1e:69:d4:d3:5b:ad:dc:58:3d:0d:ae:dd:d1:91: 3a:83:e2:ab:8b:c5:ce:e8:85:53:1a:65:fa:56:63: b6:86:77:da:0f:5a:b8:f0:8d:49:53:35:04:9d:12: 19:d1:f4:41:55:08:33:73:43:92:d8:80:2e:8b:c6: 2b:af:f6:f6:83:0c:5e:22:92:c9:bc:95:5b:8e:df: d0:c8:f0:d2:ce:fd:e5:5c:01:89:9e:bc:7c:54:2a: c9:c1:6c:3c:95:f6:83:c1:97:81:11:8a:a5:87:14: d6:b7:60:21:b0:a0:70:95:4e:e1:74:3d:a6:a4:d1: 5d:82:96:65:e2:c3:a5:8d:41:fe:73:70:82:89:ed: 94:92:89:ca:87:60:fe:03:b1:39:55:9f:32:c1:ea: d3:fe:37:a1:a7:b2:be:b6:ed:4d:ab:58:99:40:4c: fb:3b:7e:2d:04:5f:60:51:b7:5a:f8:fd:39:8f:65: f8:ef:2c:79:3d:18:a1:05:ae:5a:bb:e1:34:67:f8: 09:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:34:B0:EC:41:8C:DF:07:FA:17:90:58:5F:92:17:DF:D4:9D:07:D8 X509v3 Authority Key Identifier: keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/yjSw7EGM3wf6F5BYX5IX39SdB9g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.12.0/24 IPv6: 2a06:d1c3::/32 Signature Algorithm: sha256WithRSAEncryption 54:a5:e9:14:2e:9c:a4:7c:ba:6d:71:c0:c5:a3:3a:40:e2:1b: fc:f9:60:26:ab:17:77:48:c3:1b:6b:49:d8:e8:a8:bd:16:73: b6:68:35:63:8f:28:fa:c6:df:f1:8f:40:7b:6b:4b:e0:37:67: 2c:cb:5c:b0:24:26:86:b5:84:5f:c7:78:1a:77:4a:b7:45:36: 21:cd:70:04:ab:0e:6a:75:16:68:2a:cc:7c:92:bb:d7:07:9f: db:c4:66:b8:9a:ec:09:54:ee:11:f7:07:84:50:1a:85:fb:3a: 02:6c:77:9e:28:2f:99:ef:31:c9:c4:16:1b:a0:44:d6:8c:73: 5d:3c:a6:ed:2c:2b:0a:c1:0a:63:29:43:a6:fd:83:12:f1:7d: 6b:90:cc:85:39:ef:8d:42:98:97:53:95:66:83:17:52:d8:58: 77:f4:2d:be:61:b2:24:44:a5:22:0d:69:16:76:87:6a:f8:39: ee:1f:ab:25:ed:c7:d1:bf:87:d1:d3:cd:f4:d0:cb:91:0b:d6: e6:86:5f:63:21:5e:83:2c:e5:e9:33:11:6d:c8:e6:5f:02:6c: 96:fe:2f:b8:3e:e6:4b:47:e4:82:da:b5:6c:c8:6c:d7:d8:75: 5b:8c:cd:f0:36:5b:38:64:18:10:6b:33:2d:f2:e1:93:2c:85: e4:7f:27:54 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/g0XhntdcSDy3oqCirq90MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NGZhMGFkODk4NzE0OWYwNTUzNDcyNGI0NWEyZjRkNWVi ZjQ3NWQwHhcNMjYwMTAyMTYyMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTM0YjBlYzQxOGNkZjA3ZmExNzkwNTg1ZjkyMTdkZmQ0OWQwN2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xKrKz/MekNS5xXUQjORhaPYx5zU 5ZVWbLzAoPCQnYD6GoLeyc0CI+/u1Rwn2q96/52k8SpxZI2CWlI9HmnU01ut3Fg9 Da7d0ZE6g+Kri8XO6IVTGmX6VmO2hnfaD1q48I1JUzUEnRIZ0fRBVQgzc0OS2IAu i8Yrr/b2gwxeIpLJvJVbjt/QyPDSzv3lXAGJnrx8VCrJwWw8lfaDwZeBEYqlhxTW t2AhsKBwlU7hdD2mpNFdgpZl4sOljUH+c3CCie2UkonKh2D+A7E5VZ8ywerT/jeh p7K+tu1Nq1iZQEz7O34tBF9gUbda+P05j2X47yx5PRihBa5au+E0Z/gJkQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMo0sOxBjN8H+heQWF+SF9/UnQfYMB8GA1UdIwQY MBaAFMZPoK2JhxSfBVNHJLRaL01ev0ddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEt YmNmNzcwMjY5MzlkLzEveWpTdzdFR00zd2Y2RjVCWVg1SVgzOVNkQjlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEtYmNmNzcwMjY5Mzlk LzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALVsMMA0E AgACMAcDBQAqBtHDMA0GCSqGSIb3DQEBCwUAA4IBAQBUpekULpykfLptccDFozpA 4hv8+WAmqxd3SMMba0nY6Ki9FnO2aDVjjyj6xt/xj0B7a0vgN2csy1ywJCaGtYRf x3gad0q3RTYhzXAEqw5qdRZoKsx8krvXB5/bxGa4muwJVO4R9weEUBqF+zoCbHee KC+Z7zHJxBYboETWjHNdPKbtLCsKwQpjKUOm/YMS8X1rkMyFOe+NQpiXU5VmgxdS 2Fh39C2+YbIkRKUiDWkWdodq+DnuH6sl7cfRv4fR08300MuRC9bmhl9jIV6DLOXp MxFtyOZfAmyW/i+4PuZLR+SC2rVsyGzX2HVbjM3wNls4ZBgQazMt8uGTLIXkfydU -----END CERTIFICATE-----Generated at Mon Feb 2 08:04:06 2026 by rpki-client