This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/yTO6Jwvw36npSz7oJblWV5GQNus.roa File: yTO6Jwvw36npSz7oJblWV5GQNus.roa (raw, json) Hash identifier: IrwJGNopbLxG8f7JmqaHNzzVNRb/z27hqBXiTiEjJBU= Subject key identifier: C9:33:BA:27:0B:F0:DF:A9:E9:4B:3E:E8:25:B9:56:57:91:90:36:EB Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA55E3106D6CAC2550A5876FB93B110 Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/yTO6Jwvw36npSz7oJblWV5GQNus.roa Signing time: Thu 01 Jan 2026 22:19:53 +0000 ROA not before: Thu 01 Jan 2026 22:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209014 IP address blocks: 45.149.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:5e:31:06:d6:ca:c2:55:0a:58:76:fb:93:b1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c933ba270bf0dfa9e94b3ee825b95657919036eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:27:7e:a8:9c:d9:ca:70:37:13:5b:2d:ef:e1: 8e:7a:d2:7a:ff:ae:75:48:c0:27:67:50:ee:65:f3: bb:48:d6:b1:0d:14:8e:a1:3a:89:6d:da:85:5d:ec: 17:b2:1a:e2:3e:43:ab:93:79:09:d2:34:e4:9e:7b: 39:ff:5d:34:dc:61:f5:85:30:66:b7:cc:89:93:95: 25:83:b8:a9:da:98:1c:1b:f7:7e:75:3f:df:f5:3f: 1c:47:32:1d:f1:5a:1e:30:da:3c:95:46:72:b7:5c: ce:b9:d9:e4:d5:bd:8e:fd:4a:39:19:f3:f0:e8:52: 6d:5d:13:85:43:ab:d9:e2:4b:53:dc:a8:26:04:17: 75:c2:c3:35:12:b3:10:67:3a:ca:6c:8a:34:a5:bb: 90:9a:2b:60:e9:9d:99:93:ba:0e:69:2b:4c:68:b1: 65:26:71:38:20:b4:ac:1a:6f:de:a1:5a:24:24:8f: 39:17:96:86:ee:7d:09:7f:d5:f0:56:8e:87:03:ce: b0:5f:f4:96:ca:2b:77:da:f1:e3:18:b9:c4:28:59: 1d:2d:12:62:f3:79:6d:10:61:53:ee:9c:ee:43:77: 7d:4b:41:e0:78:a5:31:6b:68:01:11:d9:96:5f:b7: 66:51:27:9a:d3:b8:b3:08:ed:0a:d1:84:e2:7c:48: 74:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:33:BA:27:0B:F0:DF:A9:E9:4B:3E:E8:25:B9:56:57:91:90:36:EB X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/yTO6Jwvw36npSz7oJblWV5GQNus.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.2.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:85:d0:bd:e2:de:e4:96:6e:90:c6:db:46:25:a5:9e:9d:a7: b3:a9:f5:b4:95:37:c5:75:03:9f:fc:a1:cd:ed:bf:d1:fa:cd: 97:1e:37:fe:dd:e6:c3:4d:0d:8e:fe:9c:be:8c:dd:1f:f7:a4: 69:12:f4:52:4e:7e:84:cb:b9:4f:ea:32:14:1d:79:48:81:72: 47:6e:5d:32:c1:4f:6a:d6:9b:16:2d:60:17:62:35:d9:47:50: a9:55:91:0c:b5:2a:ff:dc:01:a0:fe:2f:d2:4b:ff:1f:e8:fb: 2c:38:c0:51:c1:51:53:fa:7b:c1:0f:95:e2:71:0d:0e:c7:6a: a9:ca:ca:0e:56:08:3e:c2:4a:2a:6c:fc:5a:67:fd:70:3c:d3: 7a:1d:7b:76:97:6c:72:93:c4:76:89:d1:e6:d9:f0:21:b2:be: cd:66:65:1f:75:70:0d:4d:85:b3:38:b7:de:51:cc:11:ec:86: 48:4e:f2:f3:2f:ab:bc:7b:5f:12:44:96:45:78:3e:29:67:65: 44:f1:eb:b7:28:5c:9a:46:1d:ea:4f:c1:90:0c:f6:54:41:73: 64:a2:a9:d4:0e:c4:de:3f:35:d6:dc:80:34:c0:09:d1:41:dc: 7c:2d:f7:8a:9b:8c:d2:e9:50:76:3e:88:12:ee:d5:bd:78:3e: 25:ca:81:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pV4xBtbKwlUKWHb7k7EQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTMzYmEyNzBiZjBkZmE5ZTk0YjNlZTgyNWI5NTY1NzkxOTAzNmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSd+qJzZynA3E1st7+GOetJ6/651 SMAnZ1DuZfO7SNaxDRSOoTqJbdqFXewXshriPkOrk3kJ0jTknns5/1003GH1hTBm t8yJk5Ulg7ip2pgcG/d+dT/f9T8cRzId8VoeMNo8lUZyt1zOudnk1b2O/Uo5GfPw 6FJtXROFQ6vZ4ktT3KgmBBd1wsM1ErMQZzrKbIo0pbuQmitg6Z2Zk7oOaStMaLFl JnE4ILSsGm/eoVokJI85F5aG7n0Jf9XwVo6HA86wX/SWyit32vHjGLnEKFkdLRJi 83ltEGFT7pzuQ3d9S0HgeKUxa2gBEdmWX7dmUSea07izCO0K0YTifEh0XQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMkzuicL8N+p6Us+6CW5VleRkDbrMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEveVRPNkp3dnczNm5wU3o3b0pibFdWNUdRTnVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZUCMA0G CSqGSIb3DQEBCwUAA4IBAQCfhdC94t7klm6QxttGJaWenaezqfW0lTfFdQOf/KHN 7b/R+s2XHjf+3ebDTQ2O/py+jN0f96RpEvRSTn6Ey7lP6jIUHXlIgXJHbl0ywU9q 1psWLWAXYjXZR1CpVZEMtSr/3AGg/i/SS/8f6PssOMBRwVFT+nvBD5XicQ0Ox2qp ysoOVgg+wkoqbPxaZ/1wPNN6HXt2l2xyk8R2idHm2fAhsr7NZmUfdXANTYWzOLfe UcwR7IZITvLzL6u8e18SRJZFeD4pZ2VE8eu3KFyaRh3qT8GQDPZUQXNkoqnUDsTe PzXW3IA0wAnRQdx8LfeKm4zS6VB2PogS7tW9eD4lyoFQ -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:01 2026 by rpki-client