This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/yMmwHig-aW9aKe8GJ1B_bLaro4A.roa File: yMmwHig-aW9aKe8GJ1B_bLaro4A.roa (raw, json) Hash identifier: UhUuy69f206H3E2T1ttVi7af/r7Upfzr8zd32Tx5i7M= Subject key identifier: C8:C9:B0:1E:28:3E:69:6F:5A:29:EF:06:27:50:7F:6C:B6:AB:A3:80 Certificate issuer: /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97 Certificate serial: 019B79ED08B19C37422C9DE65223F931E976 Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/yMmwHig-aW9aKe8GJ1B_bLaro4A.roa Signing time: Thu 01 Jan 2026 14:18:55 +0000 ROA not before: Thu 01 Jan 2026 14:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51847 IP address blocks: 45.87.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 17:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:08:b1:9c:37:42:2c:9d:e6:52:23:f9:31:e9:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97 Validity Not Before: Jan 1 14:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8c9b01e283e696f5a29ef0627507f6cb6aba380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:36:80:4f:41:66:65:56:17:97:15:ce:61:1e: 94:09:9d:5c:6b:a8:cc:d5:47:9d:ed:aa:f6:aa:ea: 36:6e:c9:c5:a6:59:74:f5:95:d3:77:96:eb:f7:cc: 00:31:c3:c9:4f:19:50:ad:d6:9f:fa:d5:00:8a:d0: bb:34:0b:5b:16:ca:a3:3a:35:74:44:1d:8c:f9:8b: b5:b5:4e:32:7d:f1:30:8c:0d:ee:64:6c:73:09:d0: 23:ab:01:e9:c3:1c:51:6a:a3:57:87:39:31:c7:b1: 3f:12:c5:46:5a:0d:61:ee:c2:13:61:2b:1d:5e:85: 26:21:0b:0e:dd:e8:48:2c:78:c5:2e:c6:ff:bb:79: c3:b8:e9:29:4e:0d:16:c7:f8:44:9c:1b:c2:e3:14: ae:a3:eb:b6:ff:67:55:06:50:57:ee:01:9e:1d:bf: 34:49:7f:a1:12:6c:c6:ac:79:ea:50:13:87:58:9a: fa:95:12:b3:23:79:7a:a4:d9:ec:89:49:59:45:a5: ca:72:fd:90:20:f3:c7:58:da:ce:f0:71:be:fa:36: d2:1e:38:97:69:90:ba:1a:c5:5d:64:ee:48:6d:4c: 62:08:df:50:72:35:b3:ec:20:be:d7:5e:03:67:07: a7:20:f4:48:d5:2d:34:56:dc:c6:ef:46:1a:a5:3c: 12:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C9:B0:1E:28:3E:69:6F:5A:29:EF:06:27:50:7F:6C:B6:AB:A3:80 X509v3 Authority Key Identifier: keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/yMmwHig-aW9aKe8GJ1B_bLaro4A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.102.0/23 Signature Algorithm: sha256WithRSAEncryption 86:cd:6d:31:00:99:9d:17:1a:fc:cf:4f:24:ba:8d:ad:49:d3: a6:3e:5c:6b:b8:06:00:75:75:85:12:8a:ea:08:91:54:83:63: 35:f3:04:87:79:53:b4:4d:10:7e:df:80:a7:87:9a:9c:c6:2f: e5:71:6d:ca:ee:50:71:b1:a2:fd:08:e2:64:89:7d:32:03:5b: 11:a4:1d:ab:b9:8b:af:77:0c:77:62:6b:90:26:11:45:56:fe: 81:85:cd:59:87:22:dd:b2:37:91:b0:c0:4a:56:22:90:d0:4b: c2:a1:8d:0a:a3:78:b6:4d:6f:d3:e3:ea:3e:5e:41:ca:dd:64: d5:55:9d:ef:67:84:d8:e5:e5:42:42:20:22:37:54:7b:cf:10: bc:31:7c:66:9c:93:d6:71:7a:3c:f9:33:cb:20:e8:c6:b2:3a: c9:f1:b9:e1:f5:68:93:a4:0d:c3:3c:3c:5f:71:a2:e8:8f:de: b9:e5:fe:07:66:ac:cf:cb:79:aa:a9:40:74:ce:0a:19:d1:3b: 93:b4:0e:cb:33:af:47:3f:94:64:ee:4a:72:e0:3f:ce:06:7c: 60:32:f2:48:17:af:77:ec:f7:95:38:7e:97:bf:5a:7b:53:6a: c3:8f:90:62:c0:e7:f1:4b:96:2d:b0:9f:f3:7b:77:72:86:e6: 0c:ac:f0:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57QixnDdCLJ3mUiP5Mel2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNDFhZGRjOWE0ZWVhMjQ2ZDQyZjk4YzdjNzJiMzBiNjhk NjdhOTcwHhcNMjYwMTAxMTQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGM5YjAxZTI4M2U2OTZmNWEyOWVmMDYyNzUwN2Y2Y2I2YWJhMzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujaAT0FmZVYXlxXOYR6UCZ1ca6jM 1Ued7ar2quo2bsnFpll09ZXTd5br98wAMcPJTxlQrdaf+tUAitC7NAtbFsqjOjV0 RB2M+Yu1tU4yffEwjA3uZGxzCdAjqwHpwxxRaqNXhzkxx7E/EsVGWg1h7sITYSsd XoUmIQsO3ehILHjFLsb/u3nDuOkpTg0Wx/hEnBvC4xSuo+u2/2dVBlBX7gGeHb80 SX+hEmzGrHnqUBOHWJr6lRKzI3l6pNnsiUlZRaXKcv2QIPPHWNrO8HG++jbSHjiX aZC6GsVdZO5IbUxiCN9QcjWz7CC+114DZwenIPRI1S00VtzG70YapTwSqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMjJsB4oPmlvWinvBidQf2y2q6OAMB8GA1UdIwQY MBaAFL9BrdyaTuokbUL5jHxyswto1nqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83MGZjYjMtODMwMi00MWU0LTgzNmEt ZWVhZDUwOGJlNGVlLzEveU1td0hpZy1hVzlhS2U4R0oxQl9iTGFybzRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS83MGZjYjMtODMwMi00MWU0LTgzNmEtZWVhZDUwOGJlNGVl LzEvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVdmMA0G CSqGSIb3DQEBCwUAA4IBAQCGzW0xAJmdFxr8z08kuo2tSdOmPlxruAYAdXWFEorq CJFUg2M18wSHeVO0TRB+34Cnh5qcxi/lcW3K7lBxsaL9COJkiX0yA1sRpB2ruYuv dwx3YmuQJhFFVv6Bhc1ZhyLdsjeRsMBKViKQ0EvCoY0Ko3i2TW/T4+o+XkHK3WTV VZ3vZ4TY5eVCQiAiN1R7zxC8MXxmnJPWcXo8+TPLIOjGsjrJ8bnh9WiTpA3DPDxf caLoj9655f4HZqzPy3mqqUB0zgoZ0TuTtA7LM69HP5Rk7kpy4D/OBnxgMvJIF693 7PeVOH6Xv1p7U2rDj5BiwOfxS5YtsJ/ze3dyhuYMrPAy -----END CERTIFICATE-----Generated at Sun Jan 18 04:08:31 2026 by rpki-client