This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/pYKDdrS4AMLui4NaG-PyqL9IqPA.roa File: pYKDdrS4AMLui4NaG-PyqL9IqPA.roa (raw, json) Hash identifier: NP8c+mP2a0CN3EBuK1uA951OLPIKHa78OcMc7qJxB7U= Subject key identifier: A5:82:83:76:B4:B8:00:C2:EE:8B:83:5A:1B:E3:F2:A8:BF:48:A8:F0 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C1338AFE4341D6567F145527A170390 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/pYKDdrS4AMLui4NaG-PyqL9IqPA.roa Signing time: Fri 02 Jan 2026 00:19:53 +0000 ROA not before: Fri 02 Jan 2026 00:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 267708 IP address blocks: 45.137.136.0/23 maxlen: 23 45.137.136.0/24 maxlen: 24 45.137.137.0/24 maxlen: 24 185.231.184.0/23 maxlen: 23 185.231.184.0/24 maxlen: 24 185.231.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:38:af:e4:34:1d:65:67:f1:45:52:7a:17:03:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5828376b4b800c2ee8b835a1be3f2a8bf48a8f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:77:3a:c7:9e:b7:b8:7f:d9:95:e6:9e:84:92: 12:c4:55:49:8d:49:a6:1e:a6:75:71:38:2e:2e:0b: e0:e5:4a:d1:2e:6e:52:b2:93:6f:a3:15:42:13:c6: f7:bd:9b:fe:8b:84:a1:fd:b4:3b:ec:00:76:0a:26: 93:b4:52:57:3f:82:45:34:7c:c3:d3:4c:32:03:d5: 91:e2:5c:f0:aa:d8:28:1d:12:03:c0:ef:44:ed:44: 3e:77:42:94:be:58:25:5a:6a:bb:db:dc:1f:59:a5: c3:00:7f:8c:08:51:c6:29:8e:2f:d0:19:0a:a3:a0: 54:41:86:51:49:95:7d:d8:07:11:4d:84:a4:7a:5d: bd:39:9b:d8:f2:ef:5d:ab:33:b3:a5:0d:fd:a8:fe: 1b:60:50:57:33:0b:3d:ab:46:2a:b6:d1:33:6b:f0: df:e4:c2:0a:b6:48:44:eb:52:16:f2:56:b1:a8:01: b6:dd:7d:5e:fc:e4:9a:74:28:22:a2:1f:03:ec:f2: 6a:82:c2:d9:1c:f1:41:44:a2:3f:27:a4:f2:e5:3b: ac:df:c1:8e:52:72:f6:fb:75:33:0a:c5:ad:39:dd: 26:bd:df:3c:da:4b:f0:52:da:1e:1f:c8:3e:ad:1c: 65:bb:72:fa:3b:b4:4c:0f:2f:86:43:f8:9f:5c:ff: f4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:82:83:76:B4:B8:00:C2:EE:8B:83:5A:1B:E3:F2:A8:BF:48:A8:F0 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/pYKDdrS4AMLui4NaG-PyqL9IqPA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.136.0/23 185.231.184.0/23 Signature Algorithm: sha256WithRSAEncryption 50:53:3d:d5:cf:a0:b8:ec:b6:61:aa:93:22:c7:5f:8b:cf:ad: ea:05:16:09:70:67:68:cd:c2:39:1b:a2:5e:72:b8:4a:16:09: 24:ff:b0:be:ff:27:e2:3f:73:65:9a:b3:90:33:d9:32:0d:9e: d1:8f:e0:28:77:3f:0f:5f:e8:03:65:74:9b:7c:fd:78:2e:d8: f1:dc:d7:02:b5:ba:dd:6f:bb:b0:ef:e9:c9:6c:e5:ab:a9:dd: df:6b:22:19:cf:f4:74:5a:b6:47:d8:4e:ea:74:36:2c:33:0a: 35:aa:31:55:f0:46:bf:2e:fe:34:86:c3:1e:58:ca:da:94:cc: 6b:04:6f:ea:47:9c:24:3e:b0:9f:e4:00:58:7b:b7:cb:17:9c: 1b:cb:1f:60:21:f1:76:f5:4e:ba:b0:7e:4b:59:ea:6b:7e:47: 88:17:cd:5a:f8:46:eb:67:67:91:00:05:f1:e0:73:76:71:ae: 4a:62:a6:1a:99:ca:12:df:b0:55:dd:dc:fa:f0:84:2c:10:1d: 0c:2c:6e:e8:dc:b0:35:b8:57:b2:ae:a6:1d:bb:0b:de:dd:10: 5e:52:3d:dc:52:79:09:95:26:59:cd:fa:32:30:a1:ac:d1:95: d6:aa:a6:e9:e7:dc:2c:23:16:03:5f:5f:bb:6e:f9:7e:f6:24: e3:d5:8c:3d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Eziv5DQdZWfxRVJ6FwOQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTgyODM3NmI0YjgwMGMyZWU4YjgzNWExYmUzZjJhOGJmNDhhOGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3c6x563uH/ZleaehJISxFVJjUmm HqZ1cTguLgvg5UrRLm5SspNvoxVCE8b3vZv+i4Sh/bQ77AB2CiaTtFJXP4JFNHzD 00wyA9WR4lzwqtgoHRIDwO9E7UQ+d0KUvlglWmq729wfWaXDAH+MCFHGKY4v0BkK o6BUQYZRSZV92AcRTYSkel29OZvY8u9dqzOzpQ39qP4bYFBXMws9q0YqttEza/Df 5MIKtkhE61IW8laxqAG23X1e/OSadCgioh8D7PJqgsLZHPFBRKI/J6Ty5Tus38GO UnL2+3UzCsWtOd0mvd882kvwUtoeH8g+rRxlu3L6O7RMDy+GQ/ifXP/09QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKWCg3a0uADC7ouDWhvj8qi/SKjwMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvcFlLRGRyUzRBTUx1aTROYUctUHlxTDlJcVBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLYmIAwQB uee4MA0GCSqGSIb3DQEBCwUAA4IBAQBQUz3Vz6C47LZhqpMix1+Lz63qBRYJcGdo zcI5G6JecrhKFgkk/7C+/yfiP3NlmrOQM9kyDZ7Rj+Aodz8PX+gDZXSbfP14Ltjx 3NcCtbrdb7uw7+nJbOWrqd3fayIZz/R0WrZH2E7qdDYsMwo1qjFV8Ea/Lv40hsMe WMralMxrBG/qR5wkPrCf5ABYe7fLF5wbyx9gIfF29U66sH5LWeprfkeIF81a+Ebr Z2eRAAXx4HN2ca5KYqYamcoS37BV3dz68IQsEB0MLG7o3LA1uFeyrqYduwve3RBe Uj3cUnkJlSZZzfoyMKGs0ZXWqqbp59wsIxYDX1+7bvl+9iTj1Yw9 -----END CERTIFICATE-----Generated at Fri Jan 23 21:35:37 2026 by rpki-client