This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/yc62V3uIeA0-wy5Fq3O35pcJbHU.roa File: yc62V3uIeA0-wy5Fq3O35pcJbHU.roa (raw, json) Hash identifier: 7ByXG9IeLzWoaYBiJRWc0wUwLkE/yLcff/PMKmyqASg= Subject key identifier: C9:CE:B6:57:7B:88:78:0D:3E:C3:2E:45:AB:73:B7:E6:97:09:6C:75 Certificate issuer: /CN=9f284111700492ab0be110e821a1bce73f80a565 Certificate serial: 019B7F85261CBCC1F86947F8AFB9205A6741 Authority key identifier: 9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/yc62V3uIeA0-wy5Fq3O35pcJbHU.roa Signing time: Fri 02 Jan 2026 16:23:11 +0000 ROA not before: Fri 02 Jan 2026 16:23:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212327 IP address blocks: 45.9.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:26:1c:bc:c1:f8:69:47:f8:af:b9:20:5a:67:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f284111700492ab0be110e821a1bce73f80a565 Validity Not Before: Jan 2 16:23:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9ceb6577b88780d3ec32e45ab73b7e697096c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e9:d8:dc:8f:34:26:f7:a7:a9:44:76:a5:b7: c4:92:18:3e:02:47:50:fd:08:52:d9:a9:ed:4c:a6: 32:68:e7:5a:79:d7:07:99:86:d0:fb:ba:f6:3c:6f: 9a:68:ae:06:2b:1e:a0:73:51:9f:f6:b2:0d:f1:37: 8c:e8:06:6c:67:91:b8:49:00:2d:02:f6:8a:e3:60: 44:38:85:63:47:8a:86:51:a8:36:86:80:ca:7b:60: e8:96:da:33:ea:c3:af:f0:55:0c:c5:df:d9:a0:26: b6:8e:89:0a:56:4c:88:8d:c5:f2:bb:db:d2:c1:f9: 4b:25:22:ea:61:c8:e1:f4:2b:b1:83:95:12:41:23: 15:e4:bc:bd:f9:c9:6b:a0:fe:9b:df:dc:70:1b:ba: 38:06:25:93:5b:24:ae:02:21:9b:4e:c2:0f:a9:27: 48:8f:bb:dc:a2:df:01:4d:b0:aa:25:16:30:8c:fb: c6:b5:98:0d:46:b9:ac:1e:62:14:b2:3b:2d:d1:d8: 60:d8:0a:bd:f4:6f:9e:7b:fa:ba:05:5a:71:b9:01: 30:b3:26:08:82:7c:99:9f:40:da:ba:c3:70:a7:a1: 1c:4e:29:f9:f0:2a:db:15:7b:9e:e3:a9:43:f2:c6: e7:40:3a:8e:42:3c:24:76:b9:27:65:7e:5c:f1:8b: 08:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:CE:B6:57:7B:88:78:0D:3E:C3:2E:45:AB:73:B7:E6:97:09:6C:75 X509v3 Authority Key Identifier: keyid:9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/yc62V3uIeA0-wy5Fq3O35pcJbHU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.136.0/22 Signature Algorithm: sha256WithRSAEncryption 29:01:61:f1:d4:4d:2f:f7:fc:fe:c7:14:c0:cb:a8:ab:c7:eb: 9c:06:19:03:c8:ac:54:12:ab:23:a7:f0:0e:29:e7:fd:fe:ef: 16:af:be:cb:c1:f3:7c:69:fb:c9:9c:d0:5e:7c:4e:36:98:80: cf:16:a2:14:c0:51:48:94:c1:fb:1e:8b:80:30:50:fb:cb:61: 14:d8:b8:a4:fe:d1:a4:c7:b6:0e:77:ae:3b:13:a5:84:f3:02: 2e:1b:01:b9:fe:54:40:12:30:6f:a9:ad:d7:9e:16:d2:89:29: 36:19:9a:fc:2d:7e:29:91:b1:7f:df:c7:68:97:ef:34:98:1f: 09:68:65:51:cc:63:3d:11:ad:60:82:2d:01:e2:eb:1a:2c:95: 24:fa:55:f5:36:a3:34:b8:46:fa:1b:6d:98:34:0e:c1:49:7d: ba:c7:b9:99:03:78:4f:19:d3:f4:d4:4f:95:0a:f1:64:0c:8a: 49:3f:78:16:f6:b7:64:25:bc:de:83:9c:27:86:93:63:6e:9a: 10:c5:28:22:d2:ed:e4:a0:a9:12:21:fb:cf:3e:d1:a4:2e:0b: f0:69:71:cb:ad:0c:40:02:01:9b:88:2a:4b:2b:9b:f3:f9:3e: c5:92:d6:12:95:5c:70:64:5a:d7:f3:cd:c7:a5:80:3c:d8:7d: 70:2a:c3:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hSYcvMH4aUf4r7kgWmdBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMjg0MTExNzAwNDkyYWIwYmUxMTBlODIxYTFiY2U3M2Y4 MGE1NjUwHhcNMjYwMTAyMTYyMzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWNlYjY1NzdiODg3ODBkM2VjMzJlNDVhYjczYjdlNjk3MDk2Yzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+nY3I80JvenqUR2pbfEkhg+AkdQ /QhS2antTKYyaOdaedcHmYbQ+7r2PG+aaK4GKx6gc1Gf9rIN8TeM6AZsZ5G4SQAt AvaK42BEOIVjR4qGUag2hoDKe2Doltoz6sOv8FUMxd/ZoCa2jokKVkyIjcXyu9vS wflLJSLqYcjh9Cuxg5USQSMV5Ly9+clroP6b39xwG7o4BiWTWySuAiGbTsIPqSdI j7vcot8BTbCqJRYwjPvGtZgNRrmsHmIUsjst0dhg2Aq99G+ee/q6BVpxuQEwsyYI gnyZn0DausNwp6EcTin58CrbFXue46lD8sbnQDqOQjwkdrknZX5c8YsIVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMnOtld7iHgNPsMuRatzt+aXCWx1MB8GA1UdIwQY MBaAFJ8oQRFwBJKrC+EQ6CGhvOc/gKVlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnloQkVYQUVrcXNMNFJEb0lhRzg1ei1BcFdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yZDBlOGYtY2Q4YS00ZDM4LWFjNTEt NmY1MjNmOTYwMDczLzEveWM2MlYzdUllQTAtd3k1RnEzTzM1cGNKYkhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8yZDBlOGYtY2Q4YS00ZDM4LWFjNTEtNmY1MjNmOTYwMDcz LzEvbnloQkVYQUVrcXNMNFJEb0lhRzg1ei1BcFdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQmIMA0G CSqGSIb3DQEBCwUAA4IBAQApAWHx1E0v9/z+xxTAy6irx+ucBhkDyKxUEqsjp/AO Kef9/u8Wr77LwfN8afvJnNBefE42mIDPFqIUwFFIlMH7HouAMFD7y2EU2Lik/tGk x7YOd647E6WE8wIuGwG5/lRAEjBvqa3XnhbSiSk2GZr8LX4pkbF/38dol+80mB8J aGVRzGM9Ea1ggi0B4usaLJUk+lX1NqM0uEb6G22YNA7BSX26x7mZA3hPGdP01E+V CvFkDIpJP3gW9rdkJbzeg5wnhpNjbpoQxSgi0u3koKkSIfvPPtGkLgvwaXHLrQxA AgGbiCpLK5vz+T7FktYSlVxwZFrX883HpYA82H1wKsOY -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:23 2026 by rpki-client