This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/ypJgOuH7W-FyXWw0c0Zc6e-grW8.roa File: ypJgOuH7W-FyXWw0c0Zc6e-grW8.roa (raw, json) Hash identifier: cjBzQ3Go7dMM9GIym1DrYrdEM1q+0X25n691G4Et0Z0= Subject key identifier: CA:92:60:3A:E1:FB:5B:E1:72:5D:6C:34:73:46:5C:E9:EF:A0:AD:6F Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Certificate serial: 019B78A2E3F6C45B6DD259D88EFDDE26DE18 Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/ypJgOuH7W-FyXWw0c0Zc6e-grW8.roa Signing time: Thu 01 Jan 2026 08:18:19 +0000 ROA not before: Thu 01 Jan 2026 08:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212477 IP address blocks: 45.15.208.0/24 maxlen: 24 45.84.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:e3:f6:c4:5b:6d:d2:59:d8:8e:fd:de:26:de:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Validity Not Before: Jan 1 08:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca92603ae1fb5be1725d6c3473465ce9efa0ad6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:39:e0:db:93:36:26:70:b4:13:66:40:74:a0: e9:eb:1f:4e:74:8f:36:a0:0b:00:32:95:84:6e:29: c8:a7:7f:e6:aa:a5:c6:76:cf:36:db:58:09:7c:82: cc:e8:8a:26:5b:6f:9e:60:ba:65:8d:78:39:d0:ae: a3:83:93:20:5f:81:bd:81:12:d2:e4:37:96:9e:18: 9b:e0:2d:ba:26:10:1e:ac:93:10:97:8b:b7:06:c8: 94:22:41:54:af:44:1a:16:4b:48:dd:9b:4a:f1:2c: b8:d9:12:81:00:73:f7:e5:19:e2:96:07:0f:d5:88: ed:bd:54:57:0f:33:3e:b7:25:0c:c8:81:09:fa:67: 99:18:69:f4:ea:6f:a9:e5:05:fa:da:80:89:7f:31: 50:d1:30:d8:ca:f2:e6:d8:6b:df:5f:03:23:38:da: 26:34:1f:9f:b9:25:a2:92:38:6c:81:26:95:c7:9d: 56:63:c6:90:15:3b:0a:42:1e:04:07:9e:05:48:f8: be:38:dd:19:4d:de:ec:ef:f7:00:ed:b1:db:46:cf: 42:96:96:46:2b:c4:c5:33:9d:a2:85:e3:b4:96:c8: 6e:c2:f0:5f:b5:f6:de:cb:26:3d:80:58:87:00:9d: ad:d0:30:0b:8e:77:72:a1:3f:50:be:da:02:bb:32: a5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:92:60:3A:E1:FB:5B:E1:72:5D:6C:34:73:46:5C:E9:EF:A0:AD:6F X509v3 Authority Key Identifier: keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/ypJgOuH7W-FyXWw0c0Zc6e-grW8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.208.0/24 45.84.59.0/24 Signature Algorithm: sha256WithRSAEncryption 05:4b:c0:d9:78:8d:b5:de:7f:6e:26:cb:50:ac:04:da:7e:7c: ad:8f:30:95:39:da:db:92:27:bd:59:67:b8:00:1f:7e:1d:6a: e7:05:8f:f4:76:39:1e:1d:80:ed:34:51:aa:0a:be:31:0f:98: 8c:05:c5:d0:cf:dd:6d:57:ff:36:e6:58:a0:29:ba:0c:37:c6: 30:ee:f2:fd:c2:f3:11:91:97:24:9e:e7:bc:21:c9:e9:fc:da: 5a:d2:08:86:a7:43:7d:91:89:a1:9e:6d:76:8c:6a:40:11:9d: 15:ff:b7:22:e4:43:40:fa:bb:a5:de:9c:ee:0e:a8:24:09:ba: 1e:45:b5:7c:2a:cf:03:e6:60:bc:66:9e:9d:d0:ff:3f:9d:9c: 9e:d9:92:0d:7e:63:a7:f3:73:0d:b4:2f:58:44:00:d3:3b:68: 4b:3f:8f:26:35:84:3a:66:be:a2:58:9e:c6:ad:cd:e9:c8:49: 50:58:01:1d:60:ba:20:0a:41:c9:77:3f:df:6e:76:3f:e6:7b: 43:68:0c:ca:f4:a1:23:b8:2d:c9:0e:d1:fd:76:c8:92:2e:b1: e8:8b:55:98:ba:e1:d2:41:a6:73:7d:1b:58:30:03:d1:3d:31: 39:03:44:d6:6c:d1:d9:43:d3:07:bf:ad:19:4e:cb:90:29:a9: 8f:b2:83:82 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ouP2xFtt0lnYjv3eJt4YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl MTdjMjcwHhcNMjYwMTAxMDgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTkyNjAzYWUxZmI1YmUxNzI1ZDZjMzQ3MzQ2NWNlOWVmYTBhZDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTng25M2JnC0E2ZAdKDp6x9OdI82 oAsAMpWEbinIp3/mqqXGds8221gJfILM6IomW2+eYLpljXg50K6jg5MgX4G9gRLS 5DeWnhib4C26JhAerJMQl4u3BsiUIkFUr0QaFktI3ZtK8Sy42RKBAHP35RnilgcP 1YjtvVRXDzM+tyUMyIEJ+meZGGn06m+p5QX62oCJfzFQ0TDYyvLm2GvfXwMjONom NB+fuSWikjhsgSaVx51WY8aQFTsKQh4EB54FSPi+ON0ZTd7s7/cA7bHbRs9ClpZG K8TFM52iheO0lshuwvBftfbeyyY9gFiHAJ2t0DALjndyoT9QvtoCuzKlhwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMqSYDrh+1vhcl1sNHNGXOnvoK1vMB8GA1UdIwQY MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It ZDc4ZDU2MzFkN2Y2LzEveXBKZ091SDdXLUZ5WFd3MGMwWmM2ZS1nclc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2 LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQ/QAwQA LVQ7MA0GCSqGSIb3DQEBCwUAA4IBAQAFS8DZeI213n9uJstQrATafnytjzCVOdrb kie9WWe4AB9+HWrnBY/0djkeHYDtNFGqCr4xD5iMBcXQz91tV/825ligKboMN8Yw 7vL9wvMRkZcknue8Icnp/Npa0giGp0N9kYmhnm12jGpAEZ0V/7ci5ENA+rul3pzu DqgkCboeRbV8Ks8D5mC8Zp6d0P8/nZye2ZINfmOn83MNtC9YRADTO2hLP48mNYQ6 Zr6iWJ7Grc3pyElQWAEdYLogCkHJdz/fbnY/5ntDaAzK9KEjuC3JDtH9dsiSLrHo i1WYuuHSQaZzfRtYMAPRPTE5A0TWbNHZQ9MHv60ZTsuQKamPsoOC -----END CERTIFICATE-----Generated at Sun Jan 11 15:07:46 2026 by rpki-client