This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/3ykdawGbXdv1VUx53F5vzi0t47E.roa File: 3ykdawGbXdv1VUx53F5vzi0t47E.roa (raw, json) Hash identifier: D0u3bfjPIhs7LczLSrByjPLKZ+H+Lj2DpTwtpQA0nac= Subject key identifier: DF:29:1D:6B:01:9B:5D:DB:F5:55:4C:79:DC:5E:6F:CE:2D:2D:E3:B1 Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B791143F69D3D88D56084F45E4EB86292 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/3ykdawGbXdv1VUx53F5vzi0t47E.roa Signing time: Thu 01 Jan 2026 10:18:53 +0000 ROA not before: Thu 01 Jan 2026 10:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49791 IP address blocks: 45.43.137.0/24 maxlen: 24 45.43.159.0/24 maxlen: 24 64.137.9.0/24 maxlen: 24 104.222.177.0/24 maxlen: 24 104.238.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:43:f6:9d:3d:88:d5:60:84:f4:5e:4e:b8:62:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df291d6b019b5ddbf5554c79dc5e6fce2d2de3b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cd:10:b8:6e:6b:5e:b9:aa:2b:1b:5d:72:b1: d6:16:fc:37:08:ca:ec:9b:df:32:3c:09:c6:08:b2: 4a:71:f7:f1:63:7e:c4:aa:23:e9:46:6a:09:b5:14: 7b:de:60:e7:e7:3d:e3:94:f8:31:69:eb:2e:3d:06: 7a:40:f0:34:26:dd:bf:b2:29:24:51:80:42:b3:23: bd:37:bd:87:32:7d:46:18:44:a0:9d:f5:a3:f8:44: a0:50:66:67:1c:a6:03:d9:2a:5e:f8:76:98:b8:f1: 36:e2:eb:d4:d4:8b:cd:0b:2e:50:bc:a6:e9:d6:c0: 6a:12:fe:bc:a5:65:63:0e:4d:7d:d8:2c:c8:e8:fd: 5b:75:43:f5:c0:1f:c0:bb:38:50:03:77:b9:08:ba: e8:19:ce:21:a8:e2:fe:c7:1e:70:40:21:14:df:ca: d8:bc:43:63:2c:ac:92:4b:f1:59:a4:11:0f:f0:ed: 31:20:6d:a9:e1:24:72:37:f7:17:6f:13:0e:9b:8a: 93:88:14:64:d5:2f:07:da:d1:3c:36:5d:1f:f2:f6: 67:4e:c3:ea:66:8a:7e:4b:a4:4e:a9:70:ef:87:d6: 5b:49:1f:c9:2f:07:a3:b6:3b:c5:76:00:91:8f:9b: e3:c1:86:f7:d1:2d:ec:19:b6:46:92:e7:e9:5d:61: 0e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:29:1D:6B:01:9B:5D:DB:F5:55:4C:79:DC:5E:6F:CE:2D:2D:E3:B1 X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/3ykdawGbXdv1VUx53F5vzi0t47E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.43.137.0/24 45.43.159.0/24 64.137.9.0/24 104.222.177.0/24 104.238.24.0/24 Signature Algorithm: sha256WithRSAEncryption 25:ba:fa:e6:c3:e0:d6:dd:7b:b8:d4:90:48:db:ef:53:92:3a: 85:38:52:18:f8:f8:9c:24:b6:fb:7b:35:26:a1:9f:c1:31:02: 26:39:e9:10:30:21:aa:26:b1:00:fd:0e:fe:48:8a:28:5e:4c: 11:1a:f0:e7:45:7b:c4:65:5e:91:fa:d5:05:0b:f4:5b:9e:13: 3a:d1:cc:96:87:0a:aa:bf:78:14:1e:35:44:40:77:d8:68:b1: 16:c4:d4:c8:40:d8:77:d8:07:b1:cb:8f:27:17:ee:e1:cb:19: 6c:1d:97:2f:33:fe:5f:a5:bc:a7:0a:60:90:cb:01:04:6b:28: 2c:b1:7f:46:53:7a:23:09:91:1e:81:44:39:00:8d:78:43:8c: a8:98:ef:35:41:95:52:12:b6:11:73:e8:b0:4d:75:73:64:78: 41:7d:18:85:2a:be:04:b5:44:d7:f7:80:c5:ba:8b:fa:65:d3: 68:18:d9:fe:dc:64:08:7e:6e:0a:63:9f:1c:cc:55:0a:6a:a7: 60:dc:0f:8d:87:b9:5f:a0:51:40:0d:0d:74:29:bb:a3:7b:ea: ef:41:cc:0a:49:fd:00:a3:77:37:f1:19:9d:9f:1a:d8:c3:6c: 40:c0:f5:12:02:dc:df:90:a5:14:33:09:c4:5f:d6:d9:db:00: 50:92:1a:f7 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt5EUP2nT2I1WCE9F5OuGKSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjI5MWQ2YjAxOWI1ZGRiZjU1NTRjNzlkYzVlNmZjZTJkMmRlM2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis0QuG5rXrmqKxtdcrHWFvw3CMrs m98yPAnGCLJKcffxY37EqiPpRmoJtRR73mDn5z3jlPgxaesuPQZ6QPA0Jt2/sikk UYBCsyO9N72HMn1GGESgnfWj+ESgUGZnHKYD2Spe+HaYuPE24uvU1IvNCy5QvKbp 1sBqEv68pWVjDk192CzI6P1bdUP1wB/AuzhQA3e5CLroGc4hqOL+xx5wQCEU38rY vENjLKySS/FZpBEP8O0xIG2p4SRyN/cXbxMOm4qTiBRk1S8H2tE8Nl0f8vZnTsPq Zop+S6ROqXDvh9ZbSR/JLwejtjvFdgCRj5vjwYb30S3sGbZGkufpXWEOBwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFN8pHWsBm13b9VVMedxeb84tLeOxMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvM3lrZGF3R2JYZHYxVlV4NTNGNXZ6aTB0NDdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALSuJAwQA LSufAwQAQIkJAwQAaN6xAwQAaO4YMA0GCSqGSIb3DQEBCwUAA4IBAQAluvrmw+DW 3Xu41JBI2+9TkjqFOFIY+PicJLb7ezUmoZ/BMQImOekQMCGqJrEA/Q7+SIooXkwR GvDnRXvEZV6R+tUFC/RbnhM60cyWhwqqv3gUHjVEQHfYaLEWxNTIQNh32Aexy48n F+7hyxlsHZcvM/5fpbynCmCQywEEaygssX9GU3ojCZEegUQ5AI14Q4yomO81QZVS ErYRc+iwTXVzZHhBfRiFKr4EtUTX94DFuov6ZdNoGNn+3GQIfm4KY58czFUKaqdg 3A+Nh7lfoFFADQ10Kbuje+rvQcwKSf0Ao3c38RmdnxrYw2xAwPUSAtzfkKUUMwnE X9bZ2wBQkhr3 -----END CERTIFICATE-----Generated at Fri Jan 2 02:42:28 2026 by rpki-client