This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/9YC1GQJz6SSHljrp3FZeTZ3rhas.roa File: 9YC1GQJz6SSHljrp3FZeTZ3rhas.roa (raw, json) Hash identifier: fghtvcVlErFCr5VAPk70z2SRbv9sLRMsCYDkFviRnrc= Subject key identifier: F5:80:B5:19:02:73:E9:24:87:96:3A:E9:DC:56:5E:4D:9D:EB:85:AB Certificate issuer: /CN=e7d0aaaec0016a926beedcfdf758358155b71bef Certificate serial: 019B7EA45B6B7C3250AC0CCF33D460DE4622 Authority key identifier: E7:D0:AA:AE:C0:01:6A:92:6B:EE:DC:FD:F7:58:35:81:55:B7:1B:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/9YC1GQJz6SSHljrp3FZeTZ3rhas.roa Signing time: Fri 02 Jan 2026 12:17:39 +0000 ROA not before: Fri 02 Jan 2026 12:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208532 IP address blocks: 45.130.88.0/22 maxlen: 22 45.130.88.0/24 maxlen: 24 45.130.89.0/24 maxlen: 24 45.130.90.0/24 maxlen: 24 45.130.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.mft rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:5b:6b:7c:32:50:ac:0c:cf:33:d4:60:de:46:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7d0aaaec0016a926beedcfdf758358155b71bef Validity Not Before: Jan 2 12:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f580b5190273e92487963ae9dc565e4d9deb85ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:16:2e:98:43:53:d0:c7:55:9f:79:74:0b:11: fb:2a:a2:d0:c2:6f:b1:18:1e:a1:17:52:68:2f:ef: 1b:c4:85:20:9c:65:1b:2b:4d:0b:85:9b:54:91:2c: 36:78:38:da:6c:f3:43:df:d7:55:b5:44:2c:55:88: d3:e7:a5:70:41:1a:62:29:6d:84:d5:3f:a5:83:c6: c5:7b:21:9b:94:16:f5:9b:c6:4a:f7:e7:df:46:e6: 07:ed:44:97:9f:20:40:19:21:43:a0:79:cf:eb:7c: 9a:c5:14:dd:06:e0:37:4b:25:24:67:05:b6:90:90: a0:aa:6c:ef:7b:90:7c:ec:c8:fb:6c:c7:4d:c8:60: 0e:f8:82:bc:6e:e0:6f:80:5d:f5:17:bc:37:f1:cd: 1f:82:e4:1b:0e:0d:fa:84:3d:0f:85:5b:a8:c8:31: 16:71:9e:e2:53:89:44:e1:5e:45:88:eb:e4:27:b6: c7:ed:38:4a:f4:82:01:19:33:20:f3:50:e9:e1:0d: 09:70:9c:13:b7:0d:f0:d4:22:e0:93:d7:8b:61:18: 52:f1:25:9e:fc:b2:ca:8f:fd:7d:09:e3:03:77:32: 47:58:13:7a:23:5a:97:a7:35:e1:a7:0e:b5:75:b1: 1e:f4:02:6e:75:8d:40:5d:ff:2b:33:d8:3f:25:5a: 2a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:80:B5:19:02:73:E9:24:87:96:3A:E9:DC:56:5E:4D:9D:EB:85:AB X509v3 Authority Key Identifier: keyid:E7:D0:AA:AE:C0:01:6A:92:6B:EE:DC:FD:F7:58:35:81:55:B7:1B:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/9YC1GQJz6SSHljrp3FZeTZ3rhas.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.88.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:e1:07:5f:a6:45:40:1d:04:ab:a6:b7:53:d1:d7:20:3e:f2: 47:bb:6c:1e:31:cb:33:2e:ad:a8:a7:32:b7:8d:08:2b:ce:7b: b3:fb:1a:bd:f9:0e:16:eb:00:68:c7:c6:6d:f7:ac:16:51:73: 60:35:54:7f:9b:10:3e:47:ed:6a:a6:91:18:86:eb:9e:33:15: cc:82:27:92:e7:00:03:dd:ea:3a:5f:a7:14:b0:ee:1c:7f:4a: b0:00:92:0e:ec:b9:f1:77:9f:5a:61:f8:7b:f5:3f:1f:ee:5d: bb:37:f7:f8:3e:d8:a9:88:d3:02:c9:83:36:1f:1b:b5:c3:e5: 40:2f:47:ea:e0:98:2e:40:86:c6:a9:3b:b1:78:a2:bc:b8:ab: ea:c5:a2:3a:c1:aa:dc:a4:65:7d:86:c9:b6:bc:fd:2a:8b:e3: 17:35:6d:cf:e5:0a:ce:dd:aa:a2:27:88:6f:1e:0c:63:2d:e9: 79:95:c4:b2:11:39:a0:92:4d:eb:27:fc:f8:c2:66:bd:2c:7e: 39:5f:55:c2:1b:5d:fe:3b:6b:7a:f0:70:9c:77:cd:f3:3f:96: 3e:04:3c:dd:3d:7c:dc:1e:bb:56:40:33:76:2f:61:52:e9:3f: aa:19:f1:82:34:48:4b:26:e1:e0:bd:90:33:5c:cf:77:29:83: 5b:b2:12:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pFtrfDJQrAzPM9Rg3kYiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZDBhYWFlYzAwMTZhOTI2YmVlZGNmZGY3NTgzNTgxNTVi NzFiZWYwHhcNMjYwMTAyMTIxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTgwYjUxOTAyNzNlOTI0ODc5NjNhZTlkYzU2NWU0ZDlkZWI4NWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRYumENT0MdVn3l0CxH7KqLQwm+x GB6hF1JoL+8bxIUgnGUbK00LhZtUkSw2eDjabPND39dVtUQsVYjT56VwQRpiKW2E 1T+lg8bFeyGblBb1m8ZK9+ffRuYH7USXnyBAGSFDoHnP63yaxRTdBuA3SyUkZwW2 kJCgqmzve5B87Mj7bMdNyGAO+IK8buBvgF31F7w38c0fguQbDg36hD0PhVuoyDEW cZ7iU4lE4V5FiOvkJ7bH7ThK9IIBGTMg81Dp4Q0JcJwTtw3w1CLgk9eLYRhS8SWe /LLKj/19CeMDdzJHWBN6I1qXpzXhpw61dbEe9AJudY1AXf8rM9g/JVoqxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPWAtRkCc+kkh5Y66dxWXk2d64WrMB8GA1UdIwQY MBaAFOfQqq7AAWqSa+7c/fdYNYFVtxvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTlDcXJzQUJhcEpyN3R6OTkxZzFnVlczRy04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy83NGNjMzQtMDdjNC00ZDBiLThkMWIt N2RjMjZkNTZkMDVkLzEvOVlDMUdRSno2U1NIbGpycDNGWmVUWjNyaGFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy83NGNjMzQtMDdjNC00ZDBiLThkMWItN2RjMjZkNTZkMDVk LzEvNTlDcXJzQUJhcEpyN3R6OTkxZzFnVlczRy04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYJYMA0G CSqGSIb3DQEBCwUAA4IBAQAu4QdfpkVAHQSrprdT0dcgPvJHu2weMcszLq2opzK3 jQgrznuz+xq9+Q4W6wBox8Zt96wWUXNgNVR/mxA+R+1qppEYhuueMxXMgieS5wAD 3eo6X6cUsO4cf0qwAJIO7Lnxd59aYfh79T8f7l27N/f4PtipiNMCyYM2Hxu1w+VA L0fq4JguQIbGqTuxeKK8uKvqxaI6warcpGV9hsm2vP0qi+MXNW3P5QrO3aqiJ4hv HgxjLel5lcSyETmgkk3rJ/z4wma9LH45X1XCG13+O2t68HCcd83zP5Y+BDzdPXzc HrtWQDN2L2FS6T+qGfGCNEhLJuHgvZAzXM93KYNbshIh -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:19 2026 by rpki-client