This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/yssogANIknAnyTe9sA9LERuires.roa File: yssogANIknAnyTe9sA9LERuires.roa (raw, json) Hash identifier: JqsNnZHV+p4+5egMp0o4jtASOk/NcwBkk/PcUWXzj7M= Subject key identifier: CA:CB:28:80:03:48:92:70:27:C9:37:BD:B0:0F:4B:11:1B:A2:AD:EB Certificate issuer: /CN=c5721737651598f56cf7195120777d7b5316f552 Certificate serial: 019B7EA70E2F860DF4760BA922F3B539412C Authority key identifier: C5:72:17:37:65:15:98:F5:6C:F7:19:51:20:77:7D:7B:53:16:F5:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/yssogANIknAnyTe9sA9LERuires.roa Signing time: Fri 02 Jan 2026 12:20:35 +0000 ROA not before: Fri 02 Jan 2026 12:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208766 IP address blocks: 45.85.228.0/22 maxlen: 22 2a0e:cc80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft rsync://rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:0e:2f:86:0d:f4:76:0b:a9:22:f3:b5:39:41:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5721737651598f56cf7195120777d7b5316f552 Validity Not Before: Jan 2 12:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cacb28800348927027c937bdb00f4b111ba2adeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d4:52:c3:f9:14:de:7a:60:69:85:a9:0d:c1: 27:b9:90:19:ce:8e:ca:cb:36:4c:f1:8f:32:08:99: 23:ae:1c:97:22:95:74:2f:71:d3:31:03:f6:f5:2b: 1c:76:36:e2:3c:52:48:7e:be:54:97:a7:6b:a0:8a: a2:dd:1a:70:cd:d6:5d:22:2b:61:ea:03:70:de:d3: db:73:60:c2:0b:45:bc:ad:33:43:c0:25:a2:61:63: 01:76:27:bd:d4:16:35:62:6b:da:33:cb:77:2d:6e: 35:70:39:b9:ae:45:cc:68:f0:8c:c6:23:a1:3f:56: de:c4:86:1c:47:fb:36:e0:e1:76:f9:38:f1:a8:e2: 41:c4:3d:bc:10:66:2c:a4:2b:8d:3c:a4:4b:47:a5: 02:a8:5b:c2:e6:b4:33:05:43:89:a1:0b:97:e8:00: 73:1d:02:d5:5e:88:fd:1b:3a:c7:8c:1f:6d:9d:f2: ba:92:b2:34:f5:59:65:03:ec:6f:50:ec:ba:b2:64: 65:74:30:a8:8a:c2:00:61:42:67:c1:86:cc:89:9a: bc:8e:42:03:c5:ee:42:ab:17:99:03:e4:bd:4a:5e: 66:71:2d:e3:bb:f4:0f:cc:88:69:ba:fb:de:95:56: a3:f7:6e:cf:4e:1a:f9:4f:fb:de:c5:f2:42:b7:83: c3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CB:28:80:03:48:92:70:27:C9:37:BD:B0:0F:4B:11:1B:A2:AD:EB X509v3 Authority Key Identifier: keyid:C5:72:17:37:65:15:98:F5:6C:F7:19:51:20:77:7D:7B:53:16:F5:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/yssogANIknAnyTe9sA9LERuires.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.228.0/22 IPv6: 2a0e:cc80::/29 Signature Algorithm: sha256WithRSAEncryption 1c:e2:0d:d1:f0:e0:11:9a:6f:3e:c7:8a:90:10:74:47:8f:e0: d7:ff:f4:1d:89:33:eb:d9:55:a8:0e:e6:f1:63:81:e4:1f:24: 63:8f:bf:d9:74:14:e2:bb:a9:e5:23:04:07:3b:c5:5b:b4:d3: 36:53:7e:02:e6:9d:f0:37:9d:18:ef:12:83:4b:a7:6e:6e:47: 7c:ac:fe:b2:cc:13:86:79:6d:d7:b8:58:19:37:f0:ad:c4:18: 35:20:a5:93:5c:31:e2:b9:69:53:78:06:4e:1f:a1:9e:45:5e: 90:b4:f0:ce:eb:58:9d:4b:28:3d:b5:d7:13:0b:c1:82:2d:70: 0f:7c:fa:70:b5:65:9c:11:27:23:2a:71:33:e5:fe:19:f3:79: cc:a4:17:e2:9f:86:e4:86:39:90:82:1b:71:f7:e5:7c:cd:f0: 06:48:94:3e:75:32:f5:aa:42:d6:6c:87:34:27:5e:a1:56:a8: 98:2f:2e:56:55:9d:32:90:27:a5:34:10:a4:b3:50:7b:30:e4: e9:4c:5d:6d:fb:c9:b4:27:56:a9:ac:d1:cf:18:e1:c1:af:bd: 80:ec:af:b8:24:5d:a9:c3:81:59:91:2b:56:c3:de:8f:46:0d: c9:e5:b7:72:f1:71:97:15:9c:37:59:07:dc:50:3d:ea:a2:3a: 8b:ad:9e:86 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pw4vhg30dgupIvO1OUEsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NzIxNzM3NjUxNTk4ZjU2Y2Y3MTk1MTIwNzc3ZDdiNTMx NmY1NTIwHhcNMjYwMTAyMTIyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWNiMjg4MDAzNDg5MjcwMjdjOTM3YmRiMDBmNGIxMTFiYTJhZGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdRSw/kU3npgaYWpDcEnuZAZzo7K yzZM8Y8yCJkjrhyXIpV0L3HTMQP29SscdjbiPFJIfr5Ul6droIqi3RpwzdZdIith 6gNw3tPbc2DCC0W8rTNDwCWiYWMBdie91BY1YmvaM8t3LW41cDm5rkXMaPCMxiOh P1bexIYcR/s24OF2+TjxqOJBxD28EGYspCuNPKRLR6UCqFvC5rQzBUOJoQuX6ABz HQLVXoj9GzrHjB9tnfK6krI09VllA+xvUOy6smRldDCoisIAYUJnwYbMiZq8jkID xe5CqxeZA+S9Sl5mcS3ju/QPzIhpuvvelVaj927PThr5T/vexfJCt4PD3wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMrLKIADSJJwJ8k3vbAPSxEboq3rMB8GA1UdIwQY MBaAFMVyFzdlFZj1bPcZUSB3fXtTFvVSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFhJWE4yVVZtUFZzOXhsUklIZDllMU1XOVZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC81YjQzYmEtOGViNS00NGQzLTliODct ZTAwMGUzZmZmOTNlLzEveXNzb2dBTklrbkFueVRlOXNBOUxFUnVpcmVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC81YjQzYmEtOGViNS00NGQzLTliODctZTAwMGUzZmZmOTNl LzEveFhJWE4yVVZtUFZzOXhsUklIZDllMU1XOVZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLVXkMA0E AgACMAcDBQMqDsyAMA0GCSqGSIb3DQEBCwUAA4IBAQAc4g3R8OARmm8+x4qQEHRH j+DX//QdiTPr2VWoDubxY4HkHyRjj7/ZdBTiu6nlIwQHO8VbtNM2U34C5p3wN50Y 7xKDS6dubkd8rP6yzBOGeW3XuFgZN/CtxBg1IKWTXDHiuWlTeAZOH6GeRV6QtPDO 61idSyg9tdcTC8GCLXAPfPpwtWWcEScjKnEz5f4Z83nMpBfin4bkhjmQghtx9+V8 zfAGSJQ+dTL1qkLWbIc0J16hVqiYLy5WVZ0ykCelNBCks1B7MOTpTF1t+8m0J1ap rNHPGOHBr72A7K+4JF2pw4FZkStWw96PRg3J5bdy8XGXFZw3WQfcUD3qojqLrZ6G -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:23 2026 by rpki-client