This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/yofwMI6LXmuwamQL6_qfTQXuTg0.roa File: yofwMI6LXmuwamQL6_qfTQXuTg0.roa (raw, json) Hash identifier: 80m4B4sHx/+firIgKMOAkH3jnrKvli/+CYdVpDXsZeg= Subject key identifier: CA:87:F0:30:8E:8B:5E:6B:B0:6A:64:0B:EB:FA:9F:4D:05:EE:4E:0D Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B79114373B4367899F0B835CCF2AC8412 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/yofwMI6LXmuwamQL6_qfTQXuTg0.roa Signing time: Thu 01 Jan 2026 10:18:53 +0000 ROA not before: Thu 01 Jan 2026 10:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47690 IP address blocks: 45.43.148.0/24 maxlen: 24 45.43.149.0/24 maxlen: 24 45.43.150.0/24 maxlen: 24 45.43.151.0/24 maxlen: 24 45.43.158.0/24 maxlen: 24 104.222.189.0/24 maxlen: 24 104.233.59.0/24 maxlen: 24 104.238.12.0/24 maxlen: 24 104.238.13.0/24 maxlen: 24 104.239.55.0/24 maxlen: 24 104.239.56.0/24 maxlen: 24 104.249.9.0/24 maxlen: 24 104.249.17.0/24 maxlen: 24 104.249.23.0/24 maxlen: 24 104.249.46.0/24 maxlen: 24 104.249.47.0/24 maxlen: 24 104.249.48.0/24 maxlen: 24 104.249.49.0/24 maxlen: 24 104.249.50.0/24 maxlen: 24 104.249.51.0/24 maxlen: 24 104.249.52.0/24 maxlen: 24 104.249.53.0/24 maxlen: 24 104.249.54.0/24 maxlen: 24 216.173.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:43:73:b4:36:78:99:f0:b8:35:cc:f2:ac:84:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca87f0308e8b5e6bb06a640bebfa9f4d05ee4e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8a:62:e2:53:a0:68:6a:b6:9f:cb:dd:08:e5: f0:35:b2:e1:5e:41:0e:31:99:74:8b:5a:05:20:9e: 4c:64:83:98:da:fb:4f:4d:e9:d2:1c:95:35:04:cd: 57:3a:cc:3b:c1:58:2f:b2:54:43:94:20:37:d7:cc: 3d:2f:29:c1:d9:3a:2a:62:cd:8a:da:c6:b9:82:07: 7f:d8:54:88:7f:ed:dd:88:0a:55:81:57:98:93:31: 3d:2b:6a:fd:3a:f2:26:62:f8:d9:cb:ee:db:4b:95: 9b:66:2d:3c:64:81:a7:da:65:d8:55:bb:5d:5f:29: 22:cb:f8:0c:00:23:b8:67:e1:6a:33:fd:20:4e:4b: 86:43:94:8e:18:b8:4d:9c:31:55:ed:f0:47:86:52: 94:54:17:18:a8:6a:84:ae:f6:4d:ef:6c:8d:2d:d9: fc:77:47:4b:4b:a9:16:c3:5d:cf:76:38:58:e0:ce: 2d:81:49:2f:54:e9:f8:95:62:93:cf:05:91:45:fc: 5e:f7:61:98:d2:34:12:ba:d1:82:d7:c9:61:1a:ff: 1f:7f:14:bf:7b:47:ac:49:2f:d0:3b:19:95:d4:e6: 4b:7e:6c:ec:79:21:75:33:5b:e9:c0:ed:61:86:15: 60:97:48:93:bf:b2:4b:52:05:b8:18:ad:ae:ec:7d: 0a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:87:F0:30:8E:8B:5E:6B:B0:6A:64:0B:EB:FA:9F:4D:05:EE:4E:0D X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/yofwMI6LXmuwamQL6_qfTQXuTg0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.43.148.0/22 45.43.158.0/24 104.222.189.0/24 104.233.59.0/24 104.238.12.0/23 104.239.55.0-104.239.56.255 104.249.9.0/24 104.249.17.0/24 104.249.23.0/24 104.249.46.0-104.249.54.255 216.173.91.0/24 Signature Algorithm: sha256WithRSAEncryption 76:2d:14:40:17:32:04:b5:94:51:8e:b1:4a:c3:0d:b7:6a:d6: 88:b2:c8:24:7d:56:8a:07:8a:03:19:e2:7f:e6:7e:cb:72:10: b5:a3:26:5c:52:69:af:f7:97:3c:69:3b:05:47:45:62:5e:39: 2c:4f:29:8d:c9:65:43:e4:db:e3:ce:c1:b0:28:07:75:bd:5a: 16:75:33:82:9c:7f:51:d9:b4:03:54:43:52:7d:24:d2:70:91: 6e:e1:36:de:ea:0b:e1:a7:e6:89:4a:d8:2a:64:ac:9e:18:9f: 21:48:7e:5e:25:57:23:f8:f0:69:7b:3f:2a:0f:87:5f:df:c4: 04:02:c4:22:a8:e5:43:7c:c8:29:b5:da:5b:0b:e9:c0:9e:60: 7b:cc:1f:ed:e6:2a:86:86:bf:3e:e0:7d:ce:41:da:b7:4e:31: 2d:64:b3:bd:dd:33:ce:a6:f5:e0:dd:5e:d5:49:88:fa:f4:70: aa:c4:da:7b:7d:6c:8e:eb:b0:1b:df:32:17:09:6d:36:ee:4c: f1:bb:65:4e:e1:e0:4d:47:0d:a8:a3:1b:fe:0a:d0:1d:d7:f3: 5f:36:aa:85:dd:05:66:e2:65:ea:a3:17:38:bf:cd:13:ff:38: 76:b5:06:6e:28:87:e8:79:6d:cb:aa:7a:88:f0:68:b9:d8:fd: 4a:d6:36:4f -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgISAZt5EUNztDZ4mfC4NczyrIQSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTg3ZjAzMDhlOGI1ZTZiYjA2YTY0MGJlYmZhOWY0ZDA1ZWU0ZTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIpi4lOgaGq2n8vdCOXwNbLhXkEO MZl0i1oFIJ5MZIOY2vtPTenSHJU1BM1XOsw7wVgvslRDlCA318w9LynB2ToqYs2K 2sa5ggd/2FSIf+3diApVgVeYkzE9K2r9OvImYvjZy+7bS5WbZi08ZIGn2mXYVbtd Xykiy/gMACO4Z+FqM/0gTkuGQ5SOGLhNnDFV7fBHhlKUVBcYqGqErvZN72yNLdn8 d0dLS6kWw13PdjhY4M4tgUkvVOn4lWKTzwWRRfxe92GY0jQSutGC18lhGv8ffxS/ e0esSS/QOxmV1OZLfmzseSF1M1vpwO1hhhVgl0iTv7JLUgW4GK2u7H0K6wIDAQAB o4ICVTCCAlEwHQYDVR0OBBYEFMqH8DCOi15rsGpkC+v6n00F7k4NMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEveW9md01JNkxYbXV3YW1RTDZfcWZUUVh1VGcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSAwQCLSuUAwQA LSueAwQAaN69AwQAaOk7AwQBaO4MMAwDBABo7zcDBABo7zgDBABo+QkDBABo+RED BABo+RcwDAMEAWj5LgMEAGj5NgMEANitWzANBgkqhkiG9w0BAQsFAAOCAQEAdi0U QBcyBLWUUY6xSsMNt2rWiLLIJH1WigeKAxnif+Z+y3IQtaMmXFJpr/eXPGk7BUdF Yl45LE8pjcllQ+Tb487BsCgHdb1aFnUzgpx/Udm0A1RDUn0k0nCRbuE23uoL4afm iUrYKmSsnhifIUh+XiVXI/jwaXs/Kg+HX9/EBALEIqjlQ3zIKbXaWwvpwJ5ge8wf 7eYqhoa/PuB9zkHat04xLWSzvd0zzqb14N1e1UmI+vRwqsTae31sjuuwG98yFwlt Nu5M8btlTuHgTUcNqKMb/grQHdfzXzaqhd0FZuJl6qMXOL/NE/84drUGbiiH6Hlt y6p6iPBoudj9StY2Tw== -----END CERTIFICATE-----Generated at Fri Jan 2 02:42:29 2026 by rpki-client