This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/YiTZyM0LJDlibzSScA19n-r_1NA.roa File: YiTZyM0LJDlibzSScA19n-r_1NA.roa (raw, json) Hash identifier: xUwCbyrQAmjQ9KEmQXtJqtnkqDlVNHnF+1vzDoqaWUE= Subject key identifier: 62:24:D9:C8:CD:0B:24:39:62:6F:34:92:70:0D:7D:9F:EA:FF:D4:D0 Certificate issuer: /CN=509df728d1b46634054972d2945fda58073b5762 Certificate serial: 019BC6393EFF3B1FCFF9426886B601A884E2 Authority key identifier: 50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/YiTZyM0LJDlibzSScA19n-r_1NA.roa Signing time: Fri 16 Jan 2026 09:53:18 +0000 ROA not before: Fri 16 Jan 2026 09:53:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208972 IP address blocks: 45.12.54.0/24 maxlen: 24 45.12.55.0/24 maxlen: 24 178.210.162.0/24 maxlen: 24 2a0a:4940::/29 maxlen: 48 2a0a:4944::/30 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:39:3e:ff:3b:1f:cf:f9:42:68:86:b6:01:a8:84:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509df728d1b46634054972d2945fda58073b5762 Validity Not Before: Jan 16 09:53:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6224d9c8cd0b2439626f3492700d7d9feaffd4d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0e:f6:c6:bb:6e:e3:f0:b2:9c:d6:6b:c7:6a: 7e:7a:79:14:60:23:e1:69:3e:9f:18:e4:ff:20:09: 9c:6b:6e:86:dc:cc:42:88:0c:cd:53:c0:c7:5b:59: bd:0b:27:97:0c:8c:b4:09:51:aa:ec:6f:b8:c4:40: 9a:2d:02:82:f4:30:94:2a:66:07:6c:52:86:a0:fe: 53:84:2b:c1:5b:91:ae:e2:0a:2f:0f:ae:15:df:ef: 9e:10:7c:87:d5:96:a5:71:a2:dc:98:b3:97:ab:bf: b9:ec:ee:61:a8:46:4d:45:1e:17:17:78:4c:ec:ad: 90:ef:90:95:e6:d9:d8:77:51:b2:17:66:b0:1d:fc: 5b:cb:b0:41:ca:40:39:de:5a:d4:48:1f:2e:64:fb: 92:df:90:84:66:a0:a4:b1:5d:fc:c2:4b:74:22:c6: d8:72:1f:b6:c6:4d:83:ec:5d:6d:4f:26:64:8c:3c: c6:50:90:4a:7c:30:b2:f6:f5:41:86:61:d2:ab:44: 67:7c:78:40:86:5e:69:d8:be:c5:08:65:b5:97:97: 07:00:95:a0:61:e9:af:e1:30:4d:2e:39:c4:0a:5c: b6:38:ae:92:ea:d9:3b:26:c3:bb:82:a2:b8:4a:1b: 37:22:06:39:36:6c:3f:b6:ce:22:e3:83:f1:35:47: 90:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:24:D9:C8:CD:0B:24:39:62:6F:34:92:70:0D:7D:9F:EA:FF:D4:D0 X509v3 Authority Key Identifier: keyid:50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/YiTZyM0LJDlibzSScA19n-r_1NA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.54.0/23 178.210.162.0/24 IPv6: 2a0a:4940::/29 Signature Algorithm: sha256WithRSAEncryption 34:29:59:85:16:e5:73:83:2b:7b:90:cc:d6:c9:7e:e4:de:32: ff:52:17:de:f4:8a:ec:bd:7f:19:09:b4:6d:eb:5b:c4:cf:f0: 97:17:be:93:04:56:8a:8c:5e:3f:05:d2:7b:e8:45:f6:4e:b7: c7:8d:18:41:d9:69:11:c0:10:23:5b:4b:92:29:02:3a:28:ea: 55:a1:63:7b:47:0d:b2:1c:cf:03:90:de:3e:08:36:0d:98:90: da:2d:77:2e:3a:79:af:d1:64:56:42:3f:4f:c4:c5:b5:db:2d: 4f:44:bf:17:d2:e3:13:c9:35:44:55:4c:8e:e1:6d:9e:8a:d0: bb:3e:ca:9f:07:ca:56:c3:4c:96:18:c9:17:e2:f2:72:36:c2: 35:d4:3b:82:7a:3a:83:90:ed:fe:91:ac:2a:7e:84:4b:4e:df: 68:09:3b:2a:34:ce:b9:fc:b5:f5:ee:cb:33:0d:8a:0c:a5:af: 64:05:27:7c:33:1d:f7:ee:4c:8b:ef:37:65:ba:cc:76:be:a4: f0:d5:2a:26:43:c2:ea:88:00:36:c9:45:f1:49:8d:cd:ff:47: 3e:63:70:9f:ae:0d:32:98:7a:3b:14:cb:34:be:8d:d5:34:e6: 15:c9:05:c1:ae:b5:a3:55:51:5c:f1:0d:48:51:da:7f:e2:ae: 8b:17:19:77 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZvGOT7/Ox/P+UJohrYBqITiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOWRmNzI4ZDFiNDY2MzQwNTQ5NzJkMjk0NWZkYTU4MDcz YjU3NjIwHhcNMjYwMTE2MDk1MzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjI0ZDljOGNkMGIyNDM5NjI2ZjM0OTI3MDBkN2Q5ZmVhZmZkNGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg72xrtu4/CynNZrx2p+enkUYCPh aT6fGOT/IAmca26G3MxCiAzNU8DHW1m9CyeXDIy0CVGq7G+4xECaLQKC9DCUKmYH bFKGoP5ThCvBW5Gu4govD64V3++eEHyH1ZalcaLcmLOXq7+57O5hqEZNRR4XF3hM 7K2Q75CV5tnYd1GyF2awHfxby7BBykA53lrUSB8uZPuS35CEZqCksV38wkt0IsbY ch+2xk2D7F1tTyZkjDzGUJBKfDCy9vVBhmHSq0RnfHhAhl5p2L7FCGW1l5cHAJWg Yemv4TBNLjnECly2OK6S6tk7JsO7gqK4Shs3IgY5Nmw/ts4i44PxNUeQ1QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGIk2cjNCyQ5Ym80knANfZ/q/9TQMB8GA1UdIwQY MBaAFFCd9yjRtGY0BUly0pRf2lgHO1diMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hY2ZjYjYtZDc4YS00NDhhLWE3NjEt ZGQzYjRmODM4MWM0LzEvWWlUWnlNMExKRGxpYnpTU2NBMTluLXJfMU5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9hY2ZjYjYtZDc4YS00NDhhLWE3NjEtZGQzYjRmODM4MWM0 LzEvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBLQw2AwQA stKiMA0EAgACMAcDBQMqCklAMA0GCSqGSIb3DQEBCwUAA4IBAQA0KVmFFuVzgyt7 kMzWyX7k3jL/Uhfe9IrsvX8ZCbRt61vEz/CXF76TBFaKjF4/BdJ76EX2TrfHjRhB 2WkRwBAjW0uSKQI6KOpVoWN7Rw2yHM8DkN4+CDYNmJDaLXcuOnmv0WRWQj9PxMW1 2y1PRL8X0uMTyTVEVUyO4W2eitC7PsqfB8pWw0yWGMkX4vJyNsI11DuCejqDkO3+ kawqfoRLTt9oCTsqNM65/LX17sszDYoMpa9kBSd8Mx337kyL7zdlusx2vqTw1Som Q8LqiAA2yUXxSY3N/0c+Y3Cfrg0ymHo7FMs0vo3VNOYVyQXBrrWjVVFc8Q1IUdp/ 4q6LFxl3 -----END CERTIFICATE-----Generated at Mon Jan 26 16:22:25 2026 by rpki-client