This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/RbY8FDal-FE2yM6oyYa984cT46g.roa File: RbY8FDal-FE2yM6oyYa984cT46g.roa (raw, json) Hash identifier: SFpVukrAqsxRKO5dtnYGwwZOVAcgRBx7AnWE+OdMZmk= Subject key identifier: 45:B6:3C:14:36:A5:F8:51:36:C8:CE:A8:C9:86:BD:F3:87:13:E3:A8 Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019B7AC7A4E3B047596FE7718E85D92A3A2D Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/RbY8FDal-FE2yM6oyYa984cT46g.roa Signing time: Thu 01 Jan 2026 18:17:42 +0000 ROA not before: Thu 01 Jan 2026 18:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215314 IP address blocks: 45.140.170.0/24 maxlen: 24 194.147.86.0/24 maxlen: 24 194.147.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:a4:e3:b0:47:59:6f:e7:71:8e:85:d9:2a:3a:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Jan 1 18:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45b63c1436a5f85136c8cea8c986bdf38713e3a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:dd:72:57:74:98:2c:5e:09:86:34:ce:3e:9a: 33:20:86:90:c7:61:69:72:6f:86:5f:9e:51:1b:a7: d1:9a:21:02:26:da:20:b1:a8:ee:e2:45:e7:70:de: f3:13:d4:65:70:23:3d:82:82:75:f5:7c:35:f6:59: 64:01:68:52:b1:ec:fd:02:06:5c:dd:a4:fe:11:04: d7:b3:19:2c:ca:94:15:3c:df:2c:31:5e:1f:86:cb: 02:d6:61:11:81:50:8c:48:8c:09:16:76:20:8f:32: f9:4d:51:21:6d:ae:bc:b7:2c:25:e3:ba:cf:56:f4: 83:6d:e6:a6:2f:ec:a2:14:33:f6:36:f1:b7:1f:fa: ec:64:34:ef:eb:74:65:d9:ea:ee:5d:83:b3:91:0d: e4:ca:a1:26:6c:4b:c1:b9:cf:ed:40:23:49:f7:68: 2a:46:d3:2f:12:71:fd:bc:6d:68:ac:e4:b5:0f:96: 9c:38:3c:d7:ef:45:90:9c:bd:b9:4d:ca:79:c3:40: 4b:f8:32:df:29:3e:6c:59:82:0f:5a:49:7f:99:5a: 37:6f:e4:41:83:23:30:db:4c:31:c8:ff:a4:e7:39: 77:84:f5:93:96:fb:52:a9:1b:15:11:ef:49:59:c3: d5:d9:32:e7:f6:58:e6:79:a0:18:e5:4f:5c:9e:02: ff:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B6:3C:14:36:A5:F8:51:36:C8:CE:A8:C9:86:BD:F3:87:13:E3:A8 X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/RbY8FDal-FE2yM6oyYa984cT46g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.170.0/24 194.147.86.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:63:61:e4:d6:cd:01:12:db:8d:09:87:15:b9:52:40:7f:f6: 54:13:ba:0f:09:46:02:17:3e:64:12:60:7c:1a:1e:14:74:54: 0b:b1:e5:ee:e2:fd:88:eb:36:e1:34:e1:9b:b0:9a:d7:73:a2: c2:a1:d3:99:da:e1:fe:e3:7d:3f:f0:26:aa:04:ef:57:3a:6c: d4:9d:e0:f5:8e:0b:7a:d2:94:a5:9f:7f:69:41:2f:12:ed:aa: 15:4f:55:3d:13:44:1a:94:51:b8:5d:db:a6:76:90:b2:1b:74: 08:3d:84:3f:ed:84:cf:fc:9e:54:f0:6e:ab:da:a0:f3:b6:4c: fd:ec:27:93:e6:ef:0e:0f:33:31:5c:56:73:dc:a1:15:d9:a9: 7e:71:e3:d4:98:81:68:7a:18:43:d6:ed:f9:d2:ac:7f:71:93: 30:9f:4b:7a:a9:d8:a6:a7:bb:03:d9:82:8b:0c:fc:36:bc:61: c6:c9:aa:11:33:de:4f:0b:e2:35:3b:f5:3d:25:89:da:d5:c0: d7:8b:18:4e:1e:8d:1d:29:d7:7a:65:4a:c9:f8:4c:63:ec:38: 21:d9:c0:b3:fb:15:75:4f:33:21:21:f6:83:6d:15:7b:73:51: 1d:11:df:1d:52:1f:1b:5c:78:41:57:73:99:58:6c:e6:bf:e2: f3:fa:0b:0a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6x6TjsEdZb+dxjoXZKjotMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjYwMTAxMTgxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWI2M2MxNDM2YTVmODUxMzZjOGNlYThjOTg2YmRmMzg3MTNlM2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd1yV3SYLF4JhjTOPpozIIaQx2Fp cm+GX55RG6fRmiECJtogsaju4kXncN7zE9RlcCM9goJ19Xw19llkAWhSsez9AgZc 3aT+EQTXsxksypQVPN8sMV4fhssC1mERgVCMSIwJFnYgjzL5TVEhba68tywl47rP VvSDbeamL+yiFDP2NvG3H/rsZDTv63Rl2eruXYOzkQ3kyqEmbEvBuc/tQCNJ92gq RtMvEnH9vG1orOS1D5acODzX70WQnL25Tcp5w0BL+DLfKT5sWYIPWkl/mVo3b+RB gyMw20wxyP+k5zl3hPWTlvtSqRsVEe9JWcPV2TLn9ljmeaAY5U9cngL/TQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEW2PBQ2pfhRNsjOqMmGvfOHE+OoMB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvUmJZOEZEYWwtRkUyeU02b3lZYTk4NGNUNDZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYyqAwQB wpNWMA0GCSqGSIb3DQEBCwUAA4IBAQBuY2Hk1s0BEtuNCYcVuVJAf/ZUE7oPCUYC Fz5kEmB8Gh4UdFQLseXu4v2I6zbhNOGbsJrXc6LCodOZ2uH+430/8CaqBO9XOmzU neD1jgt60pSln39pQS8S7aoVT1U9E0QalFG4XdumdpCyG3QIPYQ/7YTP/J5U8G6r 2qDztkz97CeT5u8ODzMxXFZz3KEV2al+cePUmIFoehhD1u350qx/cZMwn0t6qdim p7sD2YKLDPw2vGHGyaoRM95PC+I1O/U9JYna1cDXixhOHo0dKdd6ZUrJ+Exj7Dgh 2cCz+xV1TzMhIfaDbRV7c1EdEd8dUh8bXHhBV3OZWGzmv+Lz+gsK -----END CERTIFICATE-----Generated at Mon Jan 19 20:36:07 2026 by rpki-client