This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/TYy0_7J7KDgPFXIQznrWkATWKoo.roa File: TYy0_7J7KDgPFXIQznrWkATWKoo.roa (raw, json) Hash identifier: S3jUpVJhOWtNPETQx6yVyRUSNY9H4HAxcLvNiQwtEuc= Subject key identifier: 4D:8C:B4:FF:B2:7B:28:38:0F:15:72:10:CE:7A:D6:90:04:D6:2A:8A Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f Certificate serial: 019B7EA715B9D44C2D6021D0FE80DC5E76D1 Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/TYy0_7J7KDgPFXIQznrWkATWKoo.roa Signing time: Fri 02 Jan 2026 12:20:37 +0000 ROA not before: Fri 02 Jan 2026 12:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40676 IP address blocks: 45.133.158.0/24 maxlen: 24 45.133.159.0/24 maxlen: 24 141.98.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:15:b9:d4:4c:2d:60:21:d0:fe:80:dc:5e:76:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f Validity Not Before: Jan 2 12:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d8cb4ffb27b28380f157210ce7ad69004d62a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:11:76:79:a7:2d:c3:3f:65:b9:24:93:c1:38: 69:88:55:47:3b:06:51:88:9a:88:5d:e1:af:1e:d6: d5:2c:92:f5:c2:3e:06:e3:e1:d3:94:d5:89:ba:43: f7:c5:d0:a0:73:80:7f:92:0b:ab:c6:fe:73:e4:9c: d3:85:fc:eb:24:96:06:3c:71:9c:eb:81:07:5a:e0: 5a:16:f7:2c:e3:81:4c:3e:ad:d6:d9:b3:77:70:4c: 2c:94:9a:a2:e8:61:0f:cb:40:c7:70:5b:c3:c2:88: 80:b3:13:76:b7:77:1f:07:38:41:3a:70:90:c2:29: 49:53:07:12:3f:bf:b7:9f:30:25:e8:ef:84:ca:86: 12:6f:24:f9:e5:90:dd:ce:24:bb:c5:e6:14:ce:e4: de:0d:1f:27:9e:71:ab:fc:e3:37:72:92:1d:65:44: 6e:c2:9d:9f:17:c6:d1:cd:99:90:1c:07:22:a4:73: ac:b5:5e:1f:cd:22:be:2d:3a:ec:be:9e:1c:21:57: 90:be:41:5c:af:12:41:56:dd:93:a3:8a:68:1b:08: 93:4f:ae:81:de:81:ca:74:f8:21:81:04:b0:9e:e1: 32:24:9d:78:e6:80:ed:25:a7:8b:2f:09:fe:93:33: b0:71:e9:22:67:11:8b:22:d2:28:00:d3:ce:e3:9c: f6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8C:B4:FF:B2:7B:28:38:0F:15:72:10:CE:7A:D6:90:04:D6:2A:8A X509v3 Authority Key Identifier: keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/TYy0_7J7KDgPFXIQznrWkATWKoo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.158.0/23 141.98.47.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:c5:58:b1:3f:6e:3f:01:33:68:e2:03:f6:ff:93:9e:91:46: 9a:93:a6:c4:a4:39:06:25:4f:b6:d8:7e:6c:ca:13:a5:23:da: 89:eb:93:90:a0:ab:5e:f6:ef:44:1e:31:a2:14:e9:12:f4:c9: 29:4b:b5:0a:08:92:f6:5b:bf:6c:a9:7d:05:fa:fd:05:47:1c: ba:62:90:30:7b:6b:ed:04:3a:51:e6:bc:45:e6:0d:aa:a4:dc: 48:e1:2f:53:31:ea:3f:95:01:8f:ec:08:ec:5f:40:aa:a3:bf: 88:e3:88:78:f3:fd:c2:81:fc:75:d2:62:6c:6e:b3:5f:db:30: f2:45:86:b0:d7:49:e6:95:53:c0:e2:6b:68:01:f3:53:b9:dc: 0a:c2:d1:ab:8a:4c:7b:03:b8:ce:6d:52:5e:c2:df:67:66:41: 7c:3f:50:6f:4f:a3:4d:7b:28:8d:7a:17:bc:c1:da:4f:f1:cb: e9:72:f9:c4:a6:49:72:bd:28:e4:9f:71:fe:b6:50:42:34:ea: 6f:ff:94:da:dd:6e:58:d7:de:ff:9d:6d:0d:dc:c9:bd:ba:6d: 6c:84:48:ee:a6:c6:04:9b:d1:a6:67:25:8e:99:03:d2:ad:d4: e5:ef:17:20:81:8e:a9:0a:ca:68:17:fb:62:cb:56:0c:80:b3: 13:05:1b:ed -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pxW51EwtYCHQ/oDcXnbRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm YzAyNWYwHhcNMjYwMTAyMTIyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDhjYjRmZmIyN2IyODM4MGYxNTcyMTBjZTdhZDY5MDA0ZDYyYThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBF2eactwz9luSSTwThpiFVHOwZR iJqIXeGvHtbVLJL1wj4G4+HTlNWJukP3xdCgc4B/kgurxv5z5JzThfzrJJYGPHGc 64EHWuBaFvcs44FMPq3W2bN3cEwslJqi6GEPy0DHcFvDwoiAsxN2t3cfBzhBOnCQ wilJUwcSP7+3nzAl6O+EyoYSbyT55ZDdziS7xeYUzuTeDR8nnnGr/OM3cpIdZURu wp2fF8bRzZmQHAcipHOstV4fzSK+LTrsvp4cIVeQvkFcrxJBVt2To4poGwiTT66B 3oHKdPghgQSwnuEyJJ145oDtJaeLLwn+kzOwcekiZxGLItIoANPO45z2kQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE2MtP+yeyg4DxVyEM561pAE1iqKMB8GA1UdIwQY MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt NzBlODk4YmIzOGRkLzEvVFl5MF83SjdLRGdQRlhJUXpucldrQVRXS29vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLYWeAwQA jWIvMA0GCSqGSIb3DQEBCwUAA4IBAQBaxVixP24/ATNo4gP2/5OekUaak6bEpDkG JU+22H5syhOlI9qJ65OQoKte9u9EHjGiFOkS9MkpS7UKCJL2W79sqX0F+v0FRxy6 YpAwe2vtBDpR5rxF5g2qpNxI4S9TMeo/lQGP7AjsX0Cqo7+I44h48/3Cgfx10mJs brNf2zDyRYaw10nmlVPA4mtoAfNTudwKwtGrikx7A7jObVJewt9nZkF8P1BvT6NN eyiNehe8wdpP8cvpcvnEpklyvSjkn3H+tlBCNOpv/5Ta3W5Y197/nW0N3Mm9um1s hEjupsYEm9GmZyWOmQPSrdTl7xcggY6pCspoF/tiy1YMgLMTBRvt -----END CERTIFICATE-----Generated at Wed Jan 21 12:17:55 2026 by rpki-client