This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/yLdcgrU5vCy_8kpFmnfof5HhrIM.roa File: yLdcgrU5vCy_8kpFmnfof5HhrIM.roa (raw, json) Hash identifier: Mm/JUprpaFlD3gm2ov0b19oP/Je2orYsA8KzhAJGVkg= Subject key identifier: C8:B7:5C:82:B5:39:BC:2C:BF:F2:4A:45:9A:77:E8:7F:91:E1:AC:83 Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c Certificate serial: 019B78A2B5661AFC08345421EA3FC8BF3A35 Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/yLdcgrU5vCy_8kpFmnfof5HhrIM.roa Signing time: Thu 01 Jan 2026 08:18:07 +0000 ROA not before: Thu 01 Jan 2026 08:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 45.152.32.0/24 maxlen: 24 45.152.33.0/24 maxlen: 24 2a10:5a81::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:b5:66:1a:fc:08:34:54:21:ea:3f:c8:bf:3a:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c Validity Not Before: Jan 1 08:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8b75c82b539bc2cbff24a459a77e87f91e1ac83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0d:de:e1:fe:ff:63:49:5c:7c:7c:76:ee:4d: e4:fb:de:0b:7f:8a:66:0b:1e:6a:92:bb:ff:6a:fb: 72:42:cd:f8:fb:f9:ec:fd:65:95:8c:6a:fe:c3:03: e4:03:0b:e6:ae:34:18:0d:a0:df:73:a5:28:ed:48: 32:57:b2:47:5f:69:bd:61:62:e1:39:51:76:1a:90: 76:31:7d:61:63:c4:38:b4:9d:27:cb:e4:b6:4a:d6: de:f1:17:36:71:b4:8b:d5:48:c0:1a:5f:d8:67:d3: 45:e7:64:64:7f:9e:0b:56:08:f0:39:11:83:74:dc: 80:39:eb:6a:4d:07:39:fd:93:31:e7:1f:d2:83:df: 0f:35:ed:25:ec:19:bc:e0:6b:ad:b6:7f:ce:36:9b: 5a:ef:21:59:00:ec:cd:b7:d0:34:f3:40:3c:e6:25: 91:ca:13:5e:d2:a1:c4:91:a1:60:43:d6:e4:5f:ae: 61:e4:74:28:43:61:08:af:6f:8f:fb:b1:ce:f4:d6: a3:f3:6e:67:ac:2e:d1:bd:19:45:45:28:91:1b:e3: 9d:69:4e:6b:63:d2:51:41:14:f0:e1:51:e6:02:9d: 86:b3:ce:16:db:70:61:b3:93:d6:8c:52:28:78:b3: 46:e3:12:c5:6c:1f:07:97:fd:c3:d4:5d:bb:b2:46: 91:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B7:5C:82:B5:39:BC:2C:BF:F2:4A:45:9A:77:E8:7F:91:E1:AC:83 X509v3 Authority Key Identifier: keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/yLdcgrU5vCy_8kpFmnfof5HhrIM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.32.0/23 IPv6: 2a10:5a81::/32 Signature Algorithm: sha256WithRSAEncryption 63:e7:84:ea:e2:5a:cb:d1:ef:7a:4b:60:72:9f:fd:b7:74:21: ad:f5:31:10:4a:cc:ad:c7:f2:3c:fb:64:da:de:c3:8e:c6:c7: 51:f6:ba:57:4d:77:a1:68:d0:90:1a:7c:26:da:26:88:18:91: ef:c9:c6:f1:dc:12:c0:1b:b2:97:d3:c3:81:71:be:a1:a2:d4: 5d:76:fa:41:fb:60:43:d4:7f:3c:f1:2b:74:68:6c:e1:71:03: 64:2f:b5:d0:59:38:0e:c1:7c:82:4b:45:3f:bb:f4:41:78:65: 64:e9:62:ab:f9:8c:e9:ae:67:0f:f8:e6:62:82:7a:b2:36:fa: e9:0e:a2:64:52:12:a8:ee:11:bc:f8:fe:cf:fa:6e:3a:c1:ac: a4:c9:0b:e8:4b:65:61:f5:90:11:a3:9b:62:9b:ca:3e:ab:a0: 24:d7:5c:7e:94:f0:a2:f7:d1:ae:38:14:47:50:dc:70:91:21: a2:a6:79:6a:7d:a6:e5:01:66:61:cd:eb:11:59:fd:61:eb:58: ae:c3:ef:1c:5a:4a:34:3e:7c:66:f1:54:0c:57:36:16:9c:62: 81:f5:c2:57:6a:5f:54:78:96:3c:9e:ff:64:f6:cd:77:4c:95: 3b:9c:a8:6e:62:ca:3c:a9:5f:a1:8f:a7:68:7a:3f:ea:05:6b: 79:50:4d:ac -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4orVmGvwINFQh6j/Ivzo1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz MTk4M2MwHhcNMjYwMTAxMDgxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGI3NWM4MmI1MzliYzJjYmZmMjRhNDU5YTc3ZTg3ZjkxZTFhYzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ3e4f7/Y0lcfHx27k3k+94Lf4pm Cx5qkrv/avtyQs34+/ns/WWVjGr+wwPkAwvmrjQYDaDfc6Uo7UgyV7JHX2m9YWLh OVF2GpB2MX1hY8Q4tJ0ny+S2Stbe8Rc2cbSL1UjAGl/YZ9NF52Rkf54LVgjwORGD dNyAOetqTQc5/ZMx5x/Sg98PNe0l7Bm84Guttn/ONpta7yFZAOzNt9A080A85iWR yhNe0qHEkaFgQ9bkX65h5HQoQ2EIr2+P+7HO9Naj825nrC7RvRlFRSiRG+OdaU5r Y9JRQRTw4VHmAp2Gs84W23Bhs5PWjFIoeLNG4xLFbB8Hl/3D1F27skaRYwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMi3XIK1Obwsv/JKRZp36H+R4ayDMB8GA1UdIwQY MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt NTlhZTA5ZWRiZWI5LzEveUxkY2dyVTV2Q3lfOGtwRm1uZm9mNUhocklNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5 LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBLZggMA0E AgACMAcDBQAqEFqBMA0GCSqGSIb3DQEBCwUAA4IBAQBj54Tq4lrL0e96S2Byn/23 dCGt9TEQSsytx/I8+2Ta3sOOxsdR9rpXTXehaNCQGnwm2iaIGJHvycbx3BLAG7KX 08OBcb6hotRddvpB+2BD1H888St0aGzhcQNkL7XQWTgOwXyCS0U/u/RBeGVk6WKr +YzprmcP+OZignqyNvrpDqJkUhKo7hG8+P7P+m46waykyQvoS2Vh9ZARo5tim8o+ q6Ak11x+lPCi99GuOBRHUNxwkSGipnlqfablAWZhzesRWf1h61iuw+8cWko0Pnxm 8VQMVzYWnGKB9cJXal9UeJY8nv9k9s13TJU7nKhuYso8qV+hj6doej/qBWt5UE2s -----END CERTIFICATE-----Generated at Mon Jan 19 16:50:31 2026 by rpki-client