This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/Cy7Rx4953-jX_LAEsh6knsBwiwI.roa File: Cy7Rx4953-jX_LAEsh6knsBwiwI.roa (raw, json) Hash identifier: RbeQiV/5rjUIyCDMoB3diQP9Z25QG9q9RvXT9QU6AAY= Subject key identifier: 0B:2E:D1:C7:8F:79:DF:E8:D7:FC:B0:04:B2:1E:A4:9E:C0:70:8B:02 Certificate issuer: /CN=57130f799f8a8985502a2ea3356037674085cfca Certificate serial: 019B7C120A4CE49666D0ED05B39F3680D38A Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/Cy7Rx4953-jX_LAEsh6knsBwiwI.roa Signing time: Fri 02 Jan 2026 00:18:35 +0000 ROA not before: Fri 02 Jan 2026 00:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64267 IP address blocks: 45.149.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:0a:4c:e4:96:66:d0:ed:05:b3:9f:36:80:d3:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca Validity Not Before: Jan 2 00:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b2ed1c78f79dfe8d7fcb004b21ea49ec0708b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f3:de:0d:03:6d:7c:e1:e2:cc:a5:9d:54:2f: c8:36:68:3e:2c:19:cd:aa:83:51:5f:36:b5:eb:e7: 86:c5:d1:1f:bf:ff:01:d3:b7:53:96:6e:ff:2a:92: d0:67:59:c1:af:14:08:9e:93:4c:36:b7:c0:be:26: ff:25:82:7f:05:b0:da:07:bb:b4:70:68:81:26:45: 0c:89:fd:7b:fd:8c:6a:16:e1:cd:b5:b3:79:9d:ca: 43:8e:ff:e6:e9:53:54:a5:8c:9b:af:07:34:af:07: 74:b9:78:7c:86:f4:2f:0c:1d:fb:20:2d:31:75:ed: 9c:5d:12:f3:29:59:e0:14:83:59:ad:7d:70:3a:03: e3:a9:99:fa:7d:fb:f0:05:f9:1c:31:c3:39:46:bd: 54:e5:7a:87:b0:d7:35:1d:ae:47:9c:1a:3a:f2:32: 5b:28:e5:e4:bd:af:8b:6a:e8:13:aa:88:43:7b:64: 3b:fb:8b:b9:5d:1d:28:e6:42:7c:2a:8b:94:5c:51: 0b:16:da:1d:7b:65:ee:75:29:cb:fb:c1:56:08:52: a0:30:e5:86:17:95:51:45:05:54:96:b3:15:0a:c0: 1d:2c:3a:c4:b0:39:0f:1c:c7:13:1b:e6:dc:b9:1c: 4a:c1:bf:67:be:55:4f:9b:2b:29:92:73:f9:5c:02: a7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:2E:D1:C7:8F:79:DF:E8:D7:FC:B0:04:B2:1E:A4:9E:C0:70:8B:02 X509v3 Authority Key Identifier: keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/Cy7Rx4953-jX_LAEsh6knsBwiwI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.38.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:f0:69:30:00:74:98:b6:50:14:6b:65:98:63:c9:c1:c8:06: 1e:49:02:66:0c:e6:43:22:08:f1:15:79:d3:4c:b3:bc:65:d4: 25:72:be:1f:2c:08:94:0a:61:53:88:4d:b5:bd:32:5f:12:15: 86:53:51:b5:87:dc:ba:3b:05:16:45:b1:a3:35:5a:ee:f9:e1: d7:60:a4:fa:58:e7:55:78:a5:bd:34:27:1e:74:5d:a1:bb:ca: 57:f9:af:68:0e:2c:59:7d:ee:51:86:af:aa:ca:1f:3d:11:64: 96:d0:03:dd:0c:f0:cf:d1:07:7b:81:d3:d8:82:16:4d:3f:19: 48:1c:5c:dc:fd:88:1c:88:1f:d3:9e:ba:c3:59:9c:1e:33:3f: b4:ef:4e:43:16:83:04:be:fe:ad:0b:db:88:32:ab:0a:5e:32: 03:3b:4f:2e:da:47:2f:18:53:d4:a4:c0:cb:88:64:6d:2d:5c: e4:cd:74:6e:19:ce:fa:9f:a6:66:9b:d8:c5:f8:3f:6e:9e:e1: 60:50:6b:07:b2:7e:34:77:36:92:95:ac:a8:2c:e9:ab:eb:c1: 95:e0:45:5c:ee:d6:67:3d:94:6b:cd:d4:ce:30:6f:2b:37:1e: d4:6c:c1:04:05:24:98:3c:de:7c:cc:37:3f:2e:bc:4f:91:de: 5d:de:35:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EgpM5JZm0O0Fs582gNOKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MTMwZjc5OWY4YTg5ODU1MDJhMmVhMzM1NjAzNzY3NDA4 NWNmY2EwHhcNMjYwMTAyMDAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjJlZDFjNzhmNzlkZmU4ZDdmY2IwMDRiMjFlYTQ5ZWMwNzA4YjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvPeDQNtfOHizKWdVC/INmg+LBnN qoNRXza16+eGxdEfv/8B07dTlm7/KpLQZ1nBrxQInpNMNrfAvib/JYJ/BbDaB7u0 cGiBJkUMif17/YxqFuHNtbN5ncpDjv/m6VNUpYybrwc0rwd0uXh8hvQvDB37IC0x de2cXRLzKVngFINZrX1wOgPjqZn6ffvwBfkcMcM5Rr1U5XqHsNc1Ha5HnBo68jJb KOXkva+LaugTqohDe2Q7+4u5XR0o5kJ8KouUXFELFtode2XudSnL+8FWCFKgMOWG F5VRRQVUlrMVCsAdLDrEsDkPHMcTG+bcuRxKwb9nvlVPmyspknP5XAKnIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAsu0cePed/o1/ywBLIepJ7AcIsCMB8GA1UdIwQY MBaAFFcTD3mfiomFUCouozVgN2dAhc/KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnhNUGVaLUtpWVZRS2k2ak5XQTNaMENGejhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi81MTgxZGUtNDRjZC00NjU0LTk2ZmMt ZDNiOTBhOWI5YjQxLzEvQ3k3Ung0OTUzLWpYX0xBRXNoNmtuc0J3aXdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi81MTgxZGUtNDRjZC00NjU0LTk2ZmMtZDNiOTBhOWI5YjQx LzEvVnhNUGVaLUtpWVZRS2k2ak5XQTNaMENGejhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZUmMA0G CSqGSIb3DQEBCwUAA4IBAQAf8GkwAHSYtlAUa2WYY8nByAYeSQJmDOZDIgjxFXnT TLO8ZdQlcr4fLAiUCmFTiE21vTJfEhWGU1G1h9y6OwUWRbGjNVru+eHXYKT6WOdV eKW9NCcedF2hu8pX+a9oDixZfe5Rhq+qyh89EWSW0APdDPDP0Qd7gdPYghZNPxlI HFzc/YgciB/TnrrDWZweMz+0705DFoMEvv6tC9uIMqsKXjIDO08u2kcvGFPUpMDL iGRtLVzkzXRuGc76n6Zmm9jF+D9unuFgUGsHsn40dzaSlayoLOmr68GV4EVc7tZn PZRrzdTOMG8rNx7UbMEEBSSYPN58zDc/LrxPkd5d3jVa -----END CERTIFICATE-----Generated at Mon Jan 19 10:37:08 2026 by rpki-client