This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fyWRANpRoqeTmMgwxxTBsFFZnMY.roa File: fyWRANpRoqeTmMgwxxTBsFFZnMY.roa (raw, json) Hash identifier: t4RXiNmmepJT85iqvMqKzSioWGcB44BZ3P+zt4egwH4= Subject key identifier: 7F:25:91:00:DA:51:A2:A7:93:98:C8:30:C7:14:C1:B0:51:59:9C:C6 Certificate issuer: /CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36 Certificate serial: 019B7B3625F31D5F14DFC2BF4CB234D11D03 Authority key identifier: 7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fyWRANpRoqeTmMgwxxTBsFFZnMY.roa Signing time: Thu 01 Jan 2026 20:18:24 +0000 ROA not before: Thu 01 Jan 2026 20:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60587 IP address blocks: 45.82.168.0/22 maxlen: 22 46.151.200.0/24 maxlen: 24 46.151.201.0/24 maxlen: 24 46.151.204.0/24 maxlen: 24 91.227.230.0/24 maxlen: 24 185.29.88.0/24 maxlen: 24 2a00:a6a0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:25:f3:1d:5f:14:df:c2:bf:4c:b2:34:d1:1d:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36 Validity Not Before: Jan 1 20:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f259100da51a2a79398c830c714c1b051599cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:30:6c:00:a6:d8:6c:db:18:58:b6:a0:00:e1: 3f:09:38:a0:0d:73:65:98:88:59:a8:32:f1:f3:5b: 31:c9:41:b4:53:47:7f:39:4e:ba:06:01:45:4f:06: d5:ee:50:ca:a5:44:6f:07:25:3f:3c:8d:f3:a1:49: 39:5a:c4:9f:81:dd:17:4e:92:3b:4c:1e:92:95:d1: ed:03:c6:68:38:a8:c1:b8:59:35:8a:27:a9:49:71: ec:2a:49:de:a2:c4:22:eb:d7:71:a3:1d:51:d4:d4: 8f:7a:e4:32:a7:71:45:ca:8a:a6:4e:f4:dd:4f:bc: 67:82:0f:0a:5c:ed:b4:9e:f7:e6:0f:c4:e0:bb:3b: 06:e5:b1:f3:a6:3d:6f:31:26:37:04:34:7f:31:c8: 83:fa:98:87:3e:18:a2:a1:65:d9:9f:f8:1d:35:10: 95:c2:dc:33:b2:e1:42:51:d2:f6:76:91:56:42:6f: 24:06:54:38:13:ce:70:03:ea:eb:9f:73:9c:a3:ef: ef:28:0e:c0:a1:3c:d3:7e:52:0f:b8:c4:44:77:c1: ef:af:06:e1:b3:18:45:ed:8c:b7:dc:72:61:a0:c6: a5:fc:91:3f:83:f0:4c:0e:91:f0:e3:9f:f0:ad:26: 86:cb:11:b0:ed:dc:05:e8:db:2c:66:3c:5f:e4:b6: fb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:25:91:00:DA:51:A2:A7:93:98:C8:30:C7:14:C1:B0:51:59:9C:C6 X509v3 Authority Key Identifier: keyid:7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fyWRANpRoqeTmMgwxxTBsFFZnMY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.168.0/22 46.151.200.0/23 46.151.204.0/24 91.227.230.0/24 185.29.88.0/24 IPv6: 2a00:a6a0:1::/48 Signature Algorithm: sha256WithRSAEncryption 65:3c:de:a0:66:b9:32:1e:69:f6:3f:a5:f2:58:db:2f:40:99: 63:62:a0:8e:b6:35:81:d6:0f:69:f1:b6:71:7f:ae:a4:15:ec: 87:2b:65:52:2a:e7:1f:15:7b:0c:02:da:ea:18:56:e4:a7:15: 4c:ec:d4:37:28:5e:0e:ae:5f:c2:66:ce:99:80:37:0b:f9:6f: 80:db:b7:d7:12:93:1f:25:98:ab:89:b9:9d:b9:48:93:39:cb: 1f:c9:de:1a:22:fa:6e:a4:4a:76:a3:cf:4e:fd:00:ee:d0:99: fd:3f:2d:f0:50:97:b8:fd:a5:de:c4:31:ee:7b:4a:f8:24:74: 4a:ed:eb:86:b6:d8:74:85:99:2c:22:72:4e:ce:94:e9:80:5e: 18:0e:3a:5d:e4:7d:0a:be:b1:55:7b:0f:97:ab:22:3e:8a:67: 68:af:b2:30:ca:04:52:d1:72:46:dc:c3:6c:1f:f7:f9:36:66: 18:92:32:fb:b1:47:e3:c0:ed:0a:45:c1:f2:32:bd:9e:ae:6d: 67:9c:ac:a2:c8:82:6f:bb:f4:a7:1d:de:b0:3f:8a:e5:55:9d: 6b:71:e6:73:ee:14:22:8e:68:b3:9c:4b:85:77:d7:34:50:6d: 82:64:46:a9:8e:15:95:a7:92:a3:0d:f5:89:f4:42:38:51:9a: 62:b8:76:8d -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt7NiXzHV8U38K/TLI00R0DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDIxM2UzZTdlYmU2MTcwYTM2MDBhOGUzYWU2NGVkOTYy YzBlMzYwHhcNMjYwMTAxMjAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjI1OTEwMGRhNTFhMmE3OTM5OGM4MzBjNzE0YzFiMDUxNTk5Y2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTBsAKbYbNsYWLagAOE/CTigDXNl mIhZqDLx81sxyUG0U0d/OU66BgFFTwbV7lDKpURvByU/PI3zoUk5WsSfgd0XTpI7 TB6SldHtA8ZoOKjBuFk1iiepSXHsKkneosQi69dxox1R1NSPeuQyp3FFyoqmTvTd T7xngg8KXO20nvfmD8TguzsG5bHzpj1vMSY3BDR/MciD+piHPhiioWXZn/gdNRCV wtwzsuFCUdL2dpFWQm8kBlQ4E85wA+rrn3Oco+/vKA7AoTzTflIPuMREd8Hvrwbh sxhF7Yy33HJhoMal/JE/g/BMDpHw45/wrSaGyxGw7dwF6NssZjxf5Lb7AQIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFH8lkQDaUaKnk5jIMMcUwbBRWZzGMB8GA1UdIwQY MBaAFH0CE+Pn6+YXCjYAqOOuZO2WLA42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFJVDQtZnI1aGNLTmdDbzQ2NWs3WllzRGpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84MjFkYzItNjc2Ni00OTg4LWI3Nzct MDM1MzIxNDBlZjUyLzEvZnlXUkFOcFJvcWVUbU1nd3h4VEJzRkZabk1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy84MjFkYzItNjc2Ni00OTg4LWI3NzctMDM1MzIxNDBlZjUy LzEvZlFJVDQtZnI1aGNLTmdDbzQ2NWs3WllzRGpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAkBAIAATAeAwQCLVKoAwQB LpfIAwQALpfMAwQAW+PmAwQAuR1YMA8EAgACMAkDBwAqAKagAAEwDQYJKoZIhvcN AQELBQADggEBAGU83qBmuTIeafY/pfJY2y9AmWNioI62NYHWD2nxtnF/rqQV7Icr ZVIq5x8VewwC2uoYVuSnFUzs1DcoXg6uX8JmzpmANwv5b4Dbt9cSkx8lmKuJuZ25 SJM5yx/J3hoi+m6kSnajz079AO7Qmf0/LfBQl7j9pd7EMe57SvgkdErt64a22HSF mSwick7OlOmAXhgOOl3kfQq+sVV7D5erIj6KZ2ivsjDKBFLRckbcw2wf9/k2ZhiS MvuxR+PA7QpFwfIyvZ6ubWecrKLIgm+79Kcd3rA/iuVVnWtx5nPuFCKOaLOcS4V3 1zRQbYJkRqmOFZWnkqMN9Yn0QjhRmmK4do0= -----END CERTIFICATE-----Generated at Tue Feb 10 07:32:35 2026 by rpki-client