This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_yOmItzYMDWFbjpuxvrne458MCI.roa File: _yOmItzYMDWFbjpuxvrne458MCI.roa (raw, json) Hash identifier: SUXRA+qm3Rdb9WPx8ZUFUpE1vbTG/VdOPiEn+YwWPOw= Subject key identifier: FF:23:A6:22:DC:D8:30:35:85:6E:3A:6E:C6:FA:E7:7B:8E:7C:30:22 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAC891A9DE1D925C96FBA9A9DC9AAA Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_yOmItzYMDWFbjpuxvrne458MCI.roa Signing time: Thu 01 Jan 2026 00:17:36 +0000 ROA not before: Thu 01 Jan 2026 00:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152672 IP address blocks: 45.86.73.0/24 maxlen: 24 45.89.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c8:91:a9:de:1d:92:5c:96:fb:a9:a9:dc:9a:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff23a622dcd83035856e3a6ec6fae77b8e7c3022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5c:2b:38:02:f7:0f:e3:1d:1a:2f:5c:47:f8: 48:cf:f7:5e:6b:81:53:39:89:12:9c:f8:79:30:2a: 3d:54:49:5c:fd:29:bc:15:ad:71:26:89:d6:3b:8b: 1a:79:6c:39:29:bc:67:22:12:c4:53:4c:77:f4:1a: c1:a3:9c:c1:91:9e:6e:eb:d0:e6:d1:17:ac:92:2b: 83:1b:e0:b8:67:55:fd:c6:da:06:71:e5:06:bf:e7: f7:8d:cc:2a:fc:e3:35:87:6a:5c:52:0a:49:d0:75: 6c:2f:18:70:c5:14:d5:19:05:df:40:71:25:27:e6: 5f:79:3a:61:36:82:00:9b:35:5f:04:7e:67:28:ad: df:1a:d0:92:13:1d:89:8b:87:81:b4:42:ac:6a:41: 3c:c5:7f:c7:92:6c:af:0a:ad:45:ed:b0:66:85:5a: 84:b1:65:94:3d:59:9a:01:81:83:c4:b9:9d:ae:3e: fe:ee:55:34:d0:b0:79:c0:a4:33:c7:b5:45:a5:d8: 4a:3d:58:68:58:0e:e0:81:f7:d7:cf:7b:dd:ce:37: 84:2a:44:92:49:5a:87:74:d0:37:f0:60:70:e2:c1: 4b:51:71:70:11:21:fa:06:af:fa:12:a7:0b:61:0e: 22:ff:7b:73:aa:07:3f:c9:48:e1:2e:33:20:49:52: 80:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:23:A6:22:DC:D8:30:35:85:6E:3A:6E:C6:FA:E7:7B:8E:7C:30:22 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_yOmItzYMDWFbjpuxvrne458MCI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.73.0/24 45.89.104.0/24 Signature Algorithm: sha256WithRSAEncryption d4:43:90:4b:42:0a:3b:7f:5b:2a:bd:19:26:ce:0e:2a:6b:9f: 98:fa:1d:06:56:c8:4f:40:ae:e5:e6:f6:ab:f0:1d:9e:37:f8: 7a:01:48:1f:47:2d:82:84:78:4b:53:69:b3:6c:79:9d:d2:c0: 12:3a:e4:1d:37:78:09:90:5d:1e:d0:34:07:7b:c3:11:b7:e5: b9:83:f8:54:01:d0:c1:ad:15:27:1d:c3:b2:8d:d9:17:ab:72: 65:da:65:78:2b:c2:2b:1c:57:ae:d7:44:26:f2:e5:e8:38:07: b7:1a:e7:eb:cb:8e:f3:2a:9d:c5:a3:f1:85:08:44:68:03:83: 8c:78:13:74:d8:1d:43:e1:cf:ef:6b:c0:52:fb:70:b0:3c:5d: d0:7e:19:4e:12:b3:f3:a9:26:9c:d8:46:36:ef:77:21:cc:b3: 3b:d0:a1:a0:85:cc:32:de:44:9f:a5:5a:eb:cb:ef:04:25:81: fc:68:6c:b1:e2:65:78:98:fd:d1:d0:59:8a:11:9e:4f:68:00: 74:84:8d:0c:6e:ae:e5:78:04:9e:7c:f8:cc:d0:c0:2e:dc:89: 1a:05:57:59:ae:ea:30:6d:fd:ac:b0:61:ab:5e:8a:13:ce:7f: c3:3c:46:01:d8:28:1f:d1:c3:06:b1:3d:31:13:a5:81:be:f3: db:11:5a:2d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26siRqd4dklyW+6mp3JqqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjIzYTYyMmRjZDgzMDM1ODU2ZTNhNmVjNmZhZTc3YjhlN2MzMDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FwrOAL3D+MdGi9cR/hIz/dea4FT OYkSnPh5MCo9VElc/Sm8Fa1xJonWO4saeWw5KbxnIhLEU0x39BrBo5zBkZ5u69Dm 0ReskiuDG+C4Z1X9xtoGceUGv+f3jcwq/OM1h2pcUgpJ0HVsLxhwxRTVGQXfQHEl J+ZfeTphNoIAmzVfBH5nKK3fGtCSEx2Ji4eBtEKsakE8xX/HkmyvCq1F7bBmhVqE sWWUPVmaAYGDxLmdrj7+7lU00LB5wKQzx7VFpdhKPVhoWA7ggffXz3vdzjeEKkSS SVqHdNA38GBw4sFLUXFwESH6Bq/6EqcLYQ4i/3tzqgc/yUjhLjMgSVKAbwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP8jpiLc2DA1hW46bsb653uOfDAiMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvX3lPbUl0ellNRFdGYmpwdXh2cm5lNDU4TUNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVZJAwQA LVloMA0GCSqGSIb3DQEBCwUAA4IBAQDUQ5BLQgo7f1sqvRkmzg4qa5+Y+h0GVshP QK7l5var8B2eN/h6AUgfRy2ChHhLU2mzbHmd0sASOuQdN3gJkF0e0DQHe8MRt+W5 g/hUAdDBrRUnHcOyjdkXq3Jl2mV4K8IrHFeu10Qm8uXoOAe3Gufry47zKp3Fo/GF CERoA4OMeBN02B1D4c/va8BS+3CwPF3QfhlOErPzqSac2EY273chzLM70KGghcwy 3kSfpVrry+8EJYH8aGyx4mV4mP3R0FmKEZ5PaAB0hI0Mbq7leASefPjM0MAu3Ika BVdZruowbf2ssGGrXooTzn/DPEYB2Cgf0cMGsT0xE6WBvvPbEVot -----END CERTIFICATE-----Generated at Sat Jan 10 12:49:06 2026 by rpki-client