This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YCObM0q5lFbg9YaJA02VO_X4w0w.roa File: YCObM0q5lFbg9YaJA02VO_X4w0w.roa (raw, json) Hash identifier: A5tgHJHa/AI2YclbV7dYVRjvJ/OBLbDWtT8U9zTFeN0= Subject key identifier: 60:23:9B:33:4A:B9:94:56:E0:F5:86:89:03:4D:95:3B:F5:F8:C3:4C Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019B7AC78D745D52DA5322F2DB280483AA37 Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YCObM0q5lFbg9YaJA02VO_X4w0w.roa Signing time: Thu 01 Jan 2026 18:17:36 +0000 ROA not before: Thu 01 Jan 2026 18:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43297 IP address blocks: 45.145.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:8d:74:5d:52:da:53:22:f2:db:28:04:83:aa:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Jan 1 18:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60239b334ab99456e0f58689034d953bf5f8c34c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:43:b5:4d:28:a0:dc:6f:2e:ec:a8:16:48:5c: ba:84:c2:52:46:8e:d0:17:90:10:7e:27:29:af:f2: ed:22:49:ce:73:87:6a:2c:29:91:be:2c:c5:ca:18: 04:78:63:ae:13:83:c2:9e:65:bb:87:41:8c:90:41: 8a:b9:4d:1e:99:63:81:ff:31:91:f1:16:a3:44:ae: 70:29:d4:39:9e:74:80:d0:10:58:eb:d4:70:42:cf: 23:f2:45:3a:9b:01:d6:75:cf:03:8d:8e:d4:c3:29: b6:c2:14:57:40:9c:5b:24:c7:d7:77:c0:d2:d2:d2: eb:fe:ea:4d:eb:a2:ff:a1:bf:bf:a4:97:f7:27:76: 6c:14:fc:4b:83:20:6b:f6:27:44:e4:fc:33:5d:75: be:7c:0c:8b:dd:4b:73:0b:61:55:21:2d:0a:a4:68: 66:86:f6:b5:f1:19:a7:1d:66:cf:24:bc:aa:1c:21: 92:ec:e7:31:a6:e3:d2:fc:9b:65:ae:12:02:88:41: a4:f6:dc:02:43:c8:56:1f:18:c4:c2:ef:d8:3d:5a: 8c:46:ae:c4:ba:80:f2:ae:c2:f4:07:98:f4:24:55: 4d:1e:61:32:b4:52:37:2d:dd:76:f8:04:61:b5:e5: 48:90:74:ef:69:61:69:8a:c1:c6:33:eb:0c:9c:ad: d4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:23:9B:33:4A:B9:94:56:E0:F5:86:89:03:4D:95:3B:F5:F8:C3:4C X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YCObM0q5lFbg9YaJA02VO_X4w0w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.1.0/24 Signature Algorithm: sha256WithRSAEncryption 56:d9:5e:33:c9:12:81:9b:de:bb:0c:f0:d1:ac:f7:24:37:b0: 55:40:5b:cc:c6:29:a9:7d:fd:da:a3:31:0c:ca:71:fd:79:8e: 3f:0c:7d:2a:e1:3a:4f:0a:3d:02:90:69:d9:d3:1b:77:f9:37: 48:29:ee:a1:24:de:7f:93:51:87:2c:f5:8c:4d:2f:7a:52:e8: e3:f5:e7:e3:e1:e0:94:32:44:a6:b3:7d:18:00:df:8b:64:8a: e4:09:cf:f4:e9:92:b7:55:5d:dd:67:46:90:f2:15:6a:bb:57: 85:90:ee:ca:b0:26:0d:50:30:d8:55:f5:00:b0:ca:77:95:7c: d4:a1:1d:29:8b:21:83:3e:f1:49:86:20:95:48:4b:55:b8:ff: 8e:57:6c:ff:fc:b0:8a:ce:01:30:0f:ae:c1:c4:d5:8b:c6:32: f7:df:fc:1f:8b:cf:29:de:12:95:49:5b:ae:b6:db:25:b5:0c: 94:3d:ff:53:a7:31:1d:e5:ab:f6:1f:91:a0:d2:b8:12:05:45: 6c:29:10:31:2e:95:ae:1b:80:e3:d5:1f:4c:9a:8c:40:ea:58: 4f:a5:a3:26:b4:26:d5:7a:0e:b9:14:79:d8:43:07:d3:9e:47: 97:24:74:d9:f1:f6:8d:cf:aa:e7:a2:34:f3:38:26:76:42:3e: 08:db:f0:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x410XVLaUyLy2ygEg6o3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjYwMTAxMTgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDIzOWIzMzRhYjk5NDU2ZTBmNTg2ODkwMzRkOTUzYmY1ZjhjMzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUO1TSig3G8u7KgWSFy6hMJSRo7Q F5AQficpr/LtIknOc4dqLCmRvizFyhgEeGOuE4PCnmW7h0GMkEGKuU0emWOB/zGR 8RajRK5wKdQ5nnSA0BBY69RwQs8j8kU6mwHWdc8DjY7Uwym2whRXQJxbJMfXd8DS 0tLr/upN66L/ob+/pJf3J3ZsFPxLgyBr9idE5PwzXXW+fAyL3UtzC2FVIS0KpGhm hva18RmnHWbPJLyqHCGS7OcxpuPS/JtlrhICiEGk9twCQ8hWHxjEwu/YPVqMRq7E uoDyrsL0B5j0JFVNHmEytFI3Ld12+ARhteVIkHTvaWFpisHGM+sMnK3UTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGAjmzNKuZRW4PWGiQNNlTv1+MNMMB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvWUNPYk0wcTVsRmJnOVlhSkEwMlZPX1g0dzB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZEBMA0G CSqGSIb3DQEBCwUAA4IBAQBW2V4zyRKBm967DPDRrPckN7BVQFvMximpff3aozEM ynH9eY4/DH0q4TpPCj0CkGnZ0xt3+TdIKe6hJN5/k1GHLPWMTS96Uujj9efj4eCU MkSms30YAN+LZIrkCc/06ZK3VV3dZ0aQ8hVqu1eFkO7KsCYNUDDYVfUAsMp3lXzU oR0piyGDPvFJhiCVSEtVuP+OV2z//LCKzgEwD67BxNWLxjL33/wfi88p3hKVSVuu ttsltQyUPf9TpzEd5av2H5Gg0rgSBUVsKRAxLpWuG4Dj1R9MmoxA6lhPpaMmtCbV eg65FHnYQwfTnkeXJHTZ8faNz6rnojTzOCZ2Qj4I2/Ae -----END CERTIFICATE-----Generated at Mon Jan 19 20:37:18 2026 by rpki-client