This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/iyrSz_wsF9CBGgcuXGLfggTWLUc.roa File: iyrSz_wsF9CBGgcuXGLfggTWLUc.roa (raw, json) Hash identifier: hTAJ5z1uKngFKR3nayC40cEb7tmnFdoOcWdYxUuDRsQ= Subject key identifier: 8B:2A:D2:CF:FC:2C:17:D0:81:1A:07:2E:5C:62:DF:82:04:D6:2D:47 Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Certificate serial: 019B7B364E8B13138A7E7DD09717B7C82D73 Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/iyrSz_wsF9CBGgcuXGLfggTWLUc.roa Signing time: Thu 01 Jan 2026 20:18:35 +0000 ROA not before: Thu 01 Jan 2026 20:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397373 IP address blocks: 45.150.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:4e:8b:13:13:8a:7e:7d:d0:97:17:b7:c8:2d:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Validity Not Before: Jan 1 20:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b2ad2cffc2c17d0811a072e5c62df8204d62d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:aa:48:72:df:63:94:04:a2:a5:3a:4e:aa:b0: 98:76:3c:5a:ea:8a:63:5a:db:9a:24:4a:9c:7a:84: 00:ed:4a:b4:63:e4:18:a7:73:53:93:6c:48:78:d7: 76:69:e0:e1:09:38:ca:48:ae:0e:20:4a:db:72:35: 16:e6:4f:a4:7a:0e:9d:c4:83:56:e5:10:c5:ed:8a: 01:8a:cd:7d:da:46:52:74:9f:5c:c1:75:53:42:f9: 72:d2:42:e5:06:cb:ac:d3:43:3d:df:2f:97:80:5f: c2:be:9f:7b:73:d9:70:17:eb:bc:bb:81:7b:d2:9c: 72:f3:9a:d1:69:78:38:28:83:ba:d0:61:87:fb:49: e0:c1:5d:de:7c:69:32:3a:d6:0e:aa:86:a8:ec:3d: 97:47:49:4e:be:57:c7:4e:72:bc:1d:f2:cc:89:e3: fc:a6:4c:df:ee:66:9d:b7:a2:86:2f:29:58:10:13: 1d:1a:cb:88:c5:49:15:ba:e3:da:cc:fe:b0:14:d2: 5c:3f:3c:7e:22:4b:e6:ae:7c:6d:0a:dc:d6:8c:f6: a4:8d:dd:31:1a:e6:91:47:eb:a8:db:c3:bd:74:42: d9:ef:c6:1e:36:53:08:fe:dd:19:64:29:d4:06:65: 2c:82:b4:84:28:dc:67:dc:ec:42:18:89:50:d3:8a: 1e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:2A:D2:CF:FC:2C:17:D0:81:1A:07:2E:5C:62:DF:82:04:D6:2D:47 X509v3 Authority Key Identifier: keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/iyrSz_wsF9CBGgcuXGLfggTWLUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.23.0/24 Signature Algorithm: sha256WithRSAEncryption a1:7e:c6:34:5f:c4:75:9c:7d:a2:6a:fc:e6:ff:1d:6c:a8:02: 8f:d5:05:7b:f1:59:80:ab:e8:4c:46:48:cd:9b:41:eb:5c:7d: a0:17:a1:9b:76:bd:50:71:04:c2:21:9c:ed:5e:71:ce:81:25: 11:27:53:9f:71:f4:81:89:13:9f:4a:e8:68:31:f1:75:5b:bb: c6:be:f7:48:89:f9:d3:a9:85:6e:22:8b:2c:e7:f5:b9:28:10: ad:39:6c:b1:82:9c:fd:45:98:6f:e2:48:97:3e:f2:ac:32:ad: 8d:6d:ea:8b:49:9b:1f:59:b0:56:24:fe:ae:58:19:9f:40:3b: c8:f2:1b:a6:9a:3d:77:7b:ae:3c:4c:c7:ab:80:2e:4c:b9:5e: 5e:b5:3f:e1:6b:9b:fa:cd:c0:3a:55:01:b4:19:99:ee:5e:c2: 77:e8:61:3e:e4:17:8c:43:51:78:3b:c6:7f:d9:26:cd:88:8f: 2e:3b:76:a2:59:6c:52:e2:a5:b3:0d:e3:41:24:72:3b:0a:21: 89:34:80:8a:a2:58:66:bd:24:8a:fd:5a:f7:05:ef:45:c7:f9: 66:2f:83:52:df:df:ee:10:ac:e3:f9:6f:b7:7a:e8:67:9b:0d: 6b:db:ec:bb:60:fd:0a:c6:dd:85:8d:8f:d3:70:c9:96:0a:c3: a7:e0:d8:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nk6LExOKfn3Qlxe3yC1zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTY0M2JiMzk5YzZkODdhZGM0YzdjYmE1ZDJiNzJmYmQw MGQwNDYwHhcNMjYwMTAxMjAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjJhZDJjZmZjMmMxN2QwODExYTA3MmU1YzYyZGY4MjA0ZDYyZDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6pIct9jlASipTpOqrCYdjxa6opj WtuaJEqceoQA7Uq0Y+QYp3NTk2xIeNd2aeDhCTjKSK4OIErbcjUW5k+keg6dxINW 5RDF7YoBis192kZSdJ9cwXVTQvly0kLlBsus00M93y+XgF/Cvp97c9lwF+u8u4F7 0pxy85rRaXg4KIO60GGH+0ngwV3efGkyOtYOqoao7D2XR0lOvlfHTnK8HfLMieP8 pkzf7madt6KGLylYEBMdGsuIxUkVuuPazP6wFNJcPzx+IkvmrnxtCtzWjPakjd0x GuaRR+uo28O9dELZ78YeNlMI/t0ZZCnUBmUsgrSEKNxn3OxCGIlQ04oehwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIsq0s/8LBfQgRoHLlxi34IE1i1HMB8GA1UdIwQY MBaAFHymQ7s5nG2HrcTHy6XSty+9ANBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMt NDRlYTY0NzIxYzllLzEvaXlyU3pfd3NGOUNCR2djdVhHTGZnZ1RXTFVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMtNDRlYTY0NzIxYzll LzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZYXMA0G CSqGSIb3DQEBCwUAA4IBAQChfsY0X8R1nH2iavzm/x1sqAKP1QV78VmAq+hMRkjN m0HrXH2gF6Gbdr1QcQTCIZztXnHOgSURJ1OfcfSBiROfSuhoMfF1W7vGvvdIifnT qYVuIoss5/W5KBCtOWyxgpz9RZhv4kiXPvKsMq2NbeqLSZsfWbBWJP6uWBmfQDvI 8hummj13e648TMergC5MuV5etT/ha5v6zcA6VQG0GZnuXsJ36GE+5BeMQ1F4O8Z/ 2SbNiI8uO3aiWWxS4qWzDeNBJHI7CiGJNICKolhmvSSK/Vr3Be9Fx/lmL4NS39/u EKzj+W+3euhnmw1r2+y7YP0Kxt2FjY/TcMmWCsOn4Ng2 -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:01 2026 by rpki-client