This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/Y86-7VoZ9wBef5cWLikD9_Ljr8k.roa File: Y86-7VoZ9wBef5cWLikD9_Ljr8k.roa (raw, json) Hash identifier: z3nMVwgxO8XPuogFL8nI49fcwAsx7sg67DXBALxMAF0= Subject key identifier: 63:CE:BE:ED:5A:19:F7:00:5E:7F:97:16:2E:29:03:F7:F2:E3:AF:C9 Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad Certificate serial: 019B79ED42361AA3C878347BE3E95722CFAF Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/Y86-7VoZ9wBef5cWLikD9_Ljr8k.roa Signing time: Thu 01 Jan 2026 14:19:10 +0000 ROA not before: Thu 01 Jan 2026 14:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212384 IP address blocks: 45.12.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:42:36:1a:a3:c8:78:34:7b:e3:e9:57:22:cf:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad Validity Not Before: Jan 1 14:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63cebeed5a19f7005e7f97162e2903f7f2e3afc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2a:d5:90:13:07:c0:c8:e0:7c:97:22:06:ad: 0d:b3:d1:52:e2:c0:e1:f2:30:5e:72:42:81:2f:85: d9:9a:9d:94:13:8f:e5:a0:d0:9e:73:5c:b2:10:77: 91:11:31:bc:0e:d5:57:f3:13:a2:d4:b5:ad:c5:af: 98:84:f9:f3:e7:93:0b:89:89:f4:ed:9e:d9:a4:eb: 62:d0:ad:d6:13:8c:90:88:2f:b1:3d:80:5a:1a:86: 29:2a:8f:2a:24:6f:39:dd:08:6c:e2:9d:1e:72:b3: 4e:cc:3d:e8:0d:4c:1a:80:8a:83:20:9f:f9:88:28: 5a:94:d7:ff:f3:ed:f7:c1:5b:4e:63:73:5c:62:35: f7:20:ce:58:85:4c:96:28:48:d8:b3:18:9e:96:48: 96:0c:05:d3:fb:4b:64:25:51:a2:70:fd:23:65:d0: 20:9a:9f:60:7b:b7:b4:06:ff:ba:a0:65:25:cb:f1: 3d:6d:9a:46:82:ec:60:40:64:1a:93:9a:c7:3a:6a: 0b:45:cc:af:cd:a0:a0:d0:06:4b:49:82:ca:36:39: f8:30:87:8b:d5:f3:93:44:e8:7f:14:91:b5:ff:97: 5a:48:7e:44:b7:53:14:f5:a4:ed:df:e5:e2:1b:25: 9a:7a:98:9e:32:c3:f3:f4:8b:d0:f8:04:aa:dd:38: 16:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CE:BE:ED:5A:19:F7:00:5E:7F:97:16:2E:29:03:F7:F2:E3:AF:C9 X509v3 Authority Key Identifier: keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/Y86-7VoZ9wBef5cWLikD9_Ljr8k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.104.0/22 Signature Algorithm: sha256WithRSAEncryption 62:d8:34:8f:a9:b9:ed:e2:b2:3c:99:25:e6:24:83:3a:a0:27: 38:96:32:51:26:a2:50:9b:4e:25:cf:16:75:65:36:ac:d6:fe: a3:8b:0b:44:08:c1:ee:c4:a8:34:fb:ee:4f:54:21:40:7d:c1: 89:67:f3:f1:a0:21:8d:42:e6:d5:91:f9:bc:76:ee:38:13:e2: f9:97:52:0f:e1:06:37:01:09:45:be:df:cd:95:77:38:6e:51: 88:28:49:1a:b9:c5:77:1c:c1:fa:33:42:04:e6:bc:3a:2b:2a: 61:24:80:73:76:fc:32:f2:9f:39:00:46:93:25:bb:b0:9e:58: e9:4e:b9:75:be:fa:a7:2d:21:5c:08:45:5d:e3:d1:af:f8:f1: 8d:06:5e:a7:63:48:cd:bd:83:0e:9f:d1:5a:98:a6:df:18:81: dd:cd:9d:62:e9:cb:66:d4:da:68:44:e4:26:e7:a6:32:ed:f2: 9e:22:4d:5b:89:01:f3:79:b0:9f:67:bb:22:43:65:4e:84:f6: fb:57:e3:ef:c6:bd:9d:73:38:64:41:fc:b0:37:d6:eb:a0:b8: 0d:8b:96:4a:1d:59:76:06:3f:57:df:89:36:21:26:a0:18:ff: b1:17:38:0d:e0:c3:d8:bf:0e:5e:18:50:80:24:30:f4:8b:aa: 6d:40:01:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57UI2GqPIeDR74+lXIs+vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0 NjExYWQwHhcNMjYwMTAxMTQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2NlYmVlZDVhMTlmNzAwNWU3Zjk3MTYyZTI5MDNmN2YyZTNhZmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvirVkBMHwMjgfJciBq0Ns9FS4sDh 8jBeckKBL4XZmp2UE4/loNCec1yyEHeRETG8DtVX8xOi1LWtxa+YhPnz55MLiYn0 7Z7ZpOti0K3WE4yQiC+xPYBaGoYpKo8qJG853Qhs4p0ecrNOzD3oDUwagIqDIJ/5 iChalNf/8+33wVtOY3NcYjX3IM5YhUyWKEjYsxielkiWDAXT+0tkJVGicP0jZdAg mp9ge7e0Bv+6oGUly/E9bZpGguxgQGQak5rHOmoLRcyvzaCg0AZLSYLKNjn4MIeL 1fOTROh/FJG1/5daSH5Et1MU9aTt3+XiGyWaepieMsPz9IvQ+ASq3TgW8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGPOvu1aGfcAXn+XFi4pA/fy46/JMB8GA1UdIwQY MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct YzVkODk1MDgxOGVjLzEvWTg2LTdWb1o5d0JlZjVjV0xpa0Q5X0xqcjhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQxoMA0G CSqGSIb3DQEBCwUAA4IBAQBi2DSPqbnt4rI8mSXmJIM6oCc4ljJRJqJQm04lzxZ1 ZTas1v6jiwtECMHuxKg0++5PVCFAfcGJZ/PxoCGNQubVkfm8du44E+L5l1IP4QY3 AQlFvt/NlXc4blGIKEkaucV3HMH6M0IE5rw6KyphJIBzdvwy8p85AEaTJbuwnljp Trl1vvqnLSFcCEVd49Gv+PGNBl6nY0jNvYMOn9FamKbfGIHdzZ1i6ctm1NpoROQm 56Yy7fKeIk1biQHzebCfZ7siQ2VOhPb7V+Pvxr2dczhkQfywN9broLgNi5ZKHVl2 Bj9X34k2ISagGP+xFzgN4MPYvw5eGFCAJDD0i6ptQAHP -----END CERTIFICATE-----Generated at Fri Jan 2 14:42:29 2026 by rpki-client