This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1GyXqNMka5ZId2a-xasLiEREdrY.roa File: 1GyXqNMka5ZId2a-xasLiEREdrY.roa (raw, json) Hash identifier: vt6Aw5HM0zjEeXDiyD9nZdcRzcKnFsTa7Lcu4U0sGYU= Subject key identifier: D4:6C:97:A8:D3:24:6B:96:48:77:66:BE:C5:AB:0B:88:44:44:76:B6 Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019C3725DC250C13EDEB4CED49FC74F95DA2 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1GyXqNMka5ZId2a-xasLiEREdrY.roa Signing time: Sat 07 Feb 2026 08:09:13 +0000 ROA not before: Sat 07 Feb 2026 08:09:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214854 IP address blocks: 45.43.152.0/24 maxlen: 24 45.43.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Feb 2026 10:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:37:25:dc:25:0c:13:ed:eb:4c:ed:49:fc:74:f9:5d:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Feb 7 08:09:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d46c97a8d3246b96487766bec5ab0b88444476b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c7:14:83:d3:70:8a:09:e7:3f:8c:5c:55:05: c5:1e:f4:da:3a:58:6f:65:1a:80:6e:9b:7b:b7:16: 01:90:b6:85:af:91:f4:02:54:14:77:c7:1d:fa:58: 71:f6:23:1f:e2:fb:57:f5:4b:92:a2:36:35:dd:78: 6d:16:f1:6c:5d:3c:e2:08:56:54:be:09:ca:bd:79: bf:68:86:4e:d5:8a:71:ae:92:a5:31:42:57:f8:59: 4e:94:b6:e0:24:ec:81:34:db:ff:82:71:c7:54:59: 05:d4:31:e2:2e:61:aa:cb:89:0b:ec:3d:01:9e:ae: 20:22:af:e9:2e:7a:91:98:bd:52:fc:e1:68:25:74: f5:5a:02:3d:94:51:3c:50:1c:a5:7e:eb:59:64:f7: fa:91:4a:61:64:8c:a0:38:12:b3:92:74:fd:86:43: 44:f5:58:8d:96:da:48:5f:4c:a3:2a:56:3e:cd:d1: 01:66:74:30:ef:93:09:42:1e:24:0b:a8:f4:99:32: d4:32:00:30:54:e1:63:71:d9:5e:be:2b:5a:f0:28: 42:4f:14:a5:cd:ec:20:75:1f:18:bf:82:c5:f5:9d: 2b:17:0b:86:ed:84:d8:79:48:01:29:5e:0c:58:80: 77:a9:7b:c2:67:5d:cf:d2:93:db:70:08:13:f0:da: 7b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6C:97:A8:D3:24:6B:96:48:77:66:BE:C5:AB:0B:88:44:44:76:B6 X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1GyXqNMka5ZId2a-xasLiEREdrY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.43.152.0/24 45.43.154.0/24 Signature Algorithm: sha256WithRSAEncryption 89:97:92:d8:f5:f8:7e:f1:e7:51:fe:18:47:10:8d:cf:e0:48: 0e:1e:06:a7:70:e0:9b:b9:12:e4:34:95:5c:d1:d6:3f:9c:dc: 4c:36:a2:81:a5:31:3d:ab:9a:3f:95:e2:82:06:8e:aa:5b:e8: d9:34:e7:f2:3d:60:77:e4:83:06:fd:e8:41:07:88:94:e8:7e: 31:40:da:e2:d7:82:52:e3:12:34:6e:cf:a9:40:22:af:95:4a: c1:0d:73:67:df:1c:18:82:e0:bb:b7:71:ab:dd:31:e1:63:08: 02:70:8f:6a:64:c1:80:c6:9a:5e:3f:8f:a4:e9:a2:8d:37:24: 51:a5:0f:19:9b:fa:ba:bf:5a:31:1b:c0:70:c0:cb:3e:ea:53: 93:09:17:42:d9:c5:cf:24:21:ef:f1:c0:10:ab:75:7d:e3:bf: d3:85:a8:9a:eb:4f:cc:42:eb:47:00:ab:45:7f:26:ff:83:6e: 07:07:74:d9:89:b1:ca:26:1c:25:c3:23:3a:ff:72:ba:ac:49: ec:1e:11:4b:f5:bf:e0:1c:3a:51:08:e6:0c:50:63:1c:c6:86: 3c:c3:ca:5a:db:e5:2c:ca:94:bb:54:3a:f1:bc:7f:39:fd:d5: 69:d8:b4:bc:46:59:e2:8f:0f:9f:8c:35:1e:c7:46:4f:0d:80: 6d:3d:c7:1b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZw3JdwlDBPt60ztSfx0+V2iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMjA3MDgwOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDZjOTdhOGQzMjQ2Yjk2NDg3NzY2YmVjNWFiMGI4ODQ0NDQ3NmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMcUg9NwignnP4xcVQXFHvTaOlhv ZRqAbpt7txYBkLaFr5H0AlQUd8cd+lhx9iMf4vtX9UuSojY13XhtFvFsXTziCFZU vgnKvXm/aIZO1YpxrpKlMUJX+FlOlLbgJOyBNNv/gnHHVFkF1DHiLmGqy4kL7D0B nq4gIq/pLnqRmL1S/OFoJXT1WgI9lFE8UBylfutZZPf6kUphZIygOBKzknT9hkNE 9ViNltpIX0yjKlY+zdEBZnQw75MJQh4kC6j0mTLUMgAwVOFjcdlevita8ChCTxSl zewgdR8Yv4LF9Z0rFwuG7YTYeUgBKV4MWIB3qXvCZ13P0pPbcAgT8Np7kwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNRsl6jTJGuWSHdmvsWrC4hERHa2MB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvMUd5WHFOTWthNVpJZDJhLXhhc0xpRVJFZHJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALSuYAwQA LSuaMA0GCSqGSIb3DQEBCwUAA4IBAQCJl5LY9fh+8edR/hhHEI3P4EgOHgancOCb uRLkNJVc0dY/nNxMNqKBpTE9q5o/leKCBo6qW+jZNOfyPWB35IMG/ehBB4iU6H4x QNri14JS4xI0bs+pQCKvlUrBDXNn3xwYguC7t3Gr3THhYwgCcI9qZMGAxppeP4+k 6aKNNyRRpQ8Zm/q6v1oxG8BwwMs+6lOTCRdC2cXPJCHv8cAQq3V947/Thaia60/M QutHAKtFfyb/g24HB3TZibHKJhwlwyM6/3K6rEnsHhFL9b/gHDpRCOYMUGMcxoY8 w8pa2+UsypS7VDrxvH85/dVp2LS8Rlnijw+fjDUex0ZPDYBtPccb -----END CERTIFICATE-----Generated at Thu Feb 12 16:50:58 2026 by rpki-client