This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/y_hxSQyl6gs_TXuhyv2XLywmzGM.roa File: y_hxSQyl6gs_TXuhyv2XLywmzGM.roa (raw, json) Hash identifier: tBzK4mmt+8pYWghCizejllZpx7Dt72xviVyxrCPVsYQ= Subject key identifier: CB:F8:71:49:0C:A5:EA:0B:3F:4D:7B:A1:CA:FD:97:2F:2C:26:CC:63 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA41F430DA416F23821166C62959589 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/y_hxSQyl6gs_TXuhyv2XLywmzGM.roa Signing time: Thu 01 Jan 2026 22:18:32 +0000 ROA not before: Thu 01 Jan 2026 22:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213999 IP address blocks: 45.132.252.0/24 maxlen: 24 185.200.188.0/24 maxlen: 24 193.168.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:1f:43:0d:a4:16:f2:38:21:16:6c:62:95:95:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbf871490ca5ea0b3f4d7ba1cafd972f2c26cc63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:07:c7:e4:97:ab:40:94:93:9a:aa:47:96:55: 4b:98:fc:b0:c5:2b:64:5e:86:c4:c3:dd:96:06:6a: 37:a9:1d:ae:db:40:7a:c6:66:c7:d1:3e:3c:90:40: 58:0a:b0:9d:a4:9c:a3:16:15:a1:47:d3:1d:25:12: 35:9f:e6:32:50:d9:bc:e5:ce:25:23:5c:26:64:74: 15:94:cf:0b:04:a9:2f:06:99:4d:f3:54:50:a3:54: 9c:09:d6:82:52:82:eb:eb:5c:6f:dd:d4:f9:14:85: 8d:ae:cf:d8:e8:32:dc:2e:a8:30:e9:ea:e7:19:98: 91:c9:8d:9f:df:17:43:c4:94:6f:63:c0:cb:fe:20: 05:fe:bc:6f:8b:3b:b3:42:06:6d:51:4a:71:b5:19: ec:06:a5:a5:65:ff:55:44:13:36:cc:cc:ca:f3:ab: 5c:51:37:cc:72:41:12:03:8b:1a:03:87:ad:d5:09: 5f:87:22:ca:4e:42:79:e4:1e:fd:32:4b:e9:91:27: e1:0a:96:d6:8a:eb:a6:d6:5d:90:56:fc:ef:55:52: d8:e3:a0:5f:91:fa:d6:42:fe:c8:3e:83:86:ed:63: b5:30:9f:35:2b:57:04:88:69:d4:39:a2:d4:b2:77: 3e:49:25:e0:60:3c:3a:cd:20:b0:7d:6a:7b:03:a8: c0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F8:71:49:0C:A5:EA:0B:3F:4D:7B:A1:CA:FD:97:2F:2C:26:CC:63 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/y_hxSQyl6gs_TXuhyv2XLywmzGM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.252.0/24 185.200.188.0/24 193.168.224.0/24 Signature Algorithm: sha256WithRSAEncryption cb:9f:98:47:49:c1:f4:42:cf:65:02:45:04:38:2b:9d:75:4f: 93:b6:cb:52:73:c2:d6:e6:d9:93:9b:0d:12:85:5a:93:cb:e0: 80:e0:ab:1e:f8:d8:1c:1c:47:fa:a2:60:e2:c8:be:22:92:84: 92:ee:5e:17:a5:04:fe:f8:fb:1b:fe:82:ea:bb:80:38:c1:b4: 9f:a9:22:b0:6c:04:6c:ce:57:bf:66:f5:b9:c3:01:3d:0b:07: b5:fc:f4:42:1b:d1:88:c6:c1:70:52:72:cf:dc:03:ba:59:65: eb:fe:23:ac:fb:63:9e:58:b4:90:5a:b0:b6:4f:19:f2:68:07: 5b:07:74:e4:7d:9b:e6:00:a3:92:4f:db:5c:9a:e4:dd:08:bc: 99:98:d9:55:b4:fa:8a:cc:65:c1:40:17:2f:2c:12:7e:e0:2a: 0a:fa:39:ae:e0:ac:f9:e2:fe:70:92:7c:da:0d:9f:5b:60:a3: 0a:04:0f:25:79:66:0b:b8:cc:50:05:cc:a3:07:f0:90:5d:37: 29:9b:e2:52:57:cd:83:db:e7:b2:c2:b9:3d:83:df:fc:e8:93: 3a:3c:09:f4:96:ed:79:d8:65:3b:9e:93:46:2f:57:fb:83:2a: 7a:98:cf:e1:57:f4:f1:00:bd:ec:bf:bb:19:67:bc:ae:71:57: 97:d8:c6:31 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7pB9DDaQW8jghFmxilZWJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmY4NzE0OTBjYTVlYTBiM2Y0ZDdiYTFjYWZkOTcyZjJjMjZjYzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wfH5JerQJSTmqpHllVLmPywxStk XobEw92WBmo3qR2u20B6xmbH0T48kEBYCrCdpJyjFhWhR9MdJRI1n+YyUNm85c4l I1wmZHQVlM8LBKkvBplN81RQo1ScCdaCUoLr61xv3dT5FIWNrs/Y6DLcLqgw6ern GZiRyY2f3xdDxJRvY8DL/iAF/rxvizuzQgZtUUpxtRnsBqWlZf9VRBM2zMzK86tc UTfMckESA4saA4et1QlfhyLKTkJ55B79MkvpkSfhCpbWiuum1l2QVvzvVVLY46Bf kfrWQv7IPoOG7WO1MJ81K1cEiGnUOaLUsnc+SSXgYDw6zSCwfWp7A6jAbQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMv4cUkMpeoLP017ocr9ly8sJsxjMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEveV9oeFNReWw2Z3NfVFh1aHl2MlhMeXdtekdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALYT8AwQA uci8AwQAwajgMA0GCSqGSIb3DQEBCwUAA4IBAQDLn5hHScH0Qs9lAkUEOCuddU+T tstSc8LW5tmTmw0ShVqTy+CA4Kse+NgcHEf6omDiyL4ikoSS7l4XpQT++Psb/oLq u4A4wbSfqSKwbARszle/ZvW5wwE9Cwe1/PRCG9GIxsFwUnLP3AO6WWXr/iOs+2Oe WLSQWrC2TxnyaAdbB3TkfZvmAKOST9tcmuTdCLyZmNlVtPqKzGXBQBcvLBJ+4CoK +jmu4Kz54v5wknzaDZ9bYKMKBA8leWYLuMxQBcyjB/CQXTcpm+JSV82D2+eywrk9 g9/86JM6PAn0lu152GU7npNGL1f7gyp6mM/hV/TxAL3sv7sZZ7yucVeX2MYx -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:01 2026 by rpki-client