This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/Yw4-PtKyeDh-ymIr_sDr7zP5g6A.roa File: Yw4-PtKyeDh-ymIr_sDr7zP5g6A.roa (raw, json) Hash identifier: JGM16ISa/46csgGvHClDjZZZszeySN0POEu+d9nm5EA= Subject key identifier: 63:0E:3E:3E:D2:B2:78:38:7E:CA:62:2B:FE:C0:EB:EF:33:F9:83:A0 Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e Certificate serial: 019B7FF2AC3C6E44F6DCBE4D2F7794E9BC7B Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/Yw4-PtKyeDh-ymIr_sDr7zP5g6A.roa Signing time: Fri 02 Jan 2026 18:22:48 +0000 ROA not before: Fri 02 Jan 2026 18:22:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29066 IP address blocks: 146.19.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:ac:3c:6e:44:f6:dc:be:4d:2f:77:94:e9:bc:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e Validity Not Before: Jan 2 18:22:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=630e3e3ed2b278387eca622bfec0ebef33f983a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:59:28:0a:73:4b:6f:07:9f:6b:6f:88:e2:6c: 46:66:f4:e7:ea:2d:6c:52:59:8a:95:e8:81:ec:40: 27:8f:62:91:99:f2:db:86:46:62:12:05:70:06:79: 57:0b:37:f5:2b:1f:01:ce:08:51:9b:05:45:bc:ab: 1c:47:27:a5:5e:0c:d3:ed:88:16:de:92:6b:22:cf: 2c:0a:bb:bf:5b:9f:05:70:ae:3d:25:1a:91:d4:26: 99:f1:7b:76:a8:21:7d:23:ab:29:4a:a0:da:9e:d9: 96:17:64:6a:d1:a1:31:fd:54:10:15:91:97:cf:9d: 2f:3a:ae:79:bf:b4:7d:5e:a2:fb:c9:4b:d5:6b:60: 71:a1:b4:09:07:b7:a3:86:f6:4c:0c:9a:ad:f2:0b: f0:27:32:24:33:c1:66:d9:1c:a1:ac:d0:21:81:c2: a2:f5:86:0d:f4:05:81:11:07:50:c0:de:b8:07:b3: e9:6a:f7:02:60:a4:80:12:0e:8e:00:1f:c7:90:9e: ce:07:f4:b5:5c:6c:c5:be:a8:66:c0:d1:1b:4f:42: c2:e9:94:4f:81:7e:e3:cd:09:b2:9a:b9:2d:59:c5: 1a:4d:03:1d:68:99:df:68:1d:ae:4a:5f:7b:bc:74: 43:71:cf:f5:3a:99:55:97:36:3a:dc:10:69:7c:ca: 52:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0E:3E:3E:D2:B2:78:38:7E:CA:62:2B:FE:C0:EB:EF:33:F9:83:A0 X509v3 Authority Key Identifier: keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/Yw4-PtKyeDh-ymIr_sDr7zP5g6A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.245.0/24 Signature Algorithm: sha256WithRSAEncryption 60:68:08:d2:13:f4:9c:5a:4b:3b:84:19:3c:51:ce:38:5d:1a: 4c:35:00:64:11:e6:52:85:59:58:ff:4f:b8:c5:7c:36:ee:9a: a3:aa:97:78:66:32:3d:46:ec:50:34:81:37:da:24:5c:86:26: 31:4a:1a:87:00:ab:4a:da:81:90:6e:91:68:9d:f0:bd:66:dd: 34:50:cb:c8:72:a9:07:2d:33:fd:7e:f4:c2:39:03:00:66:23: 22:9a:42:dd:d2:b6:87:df:e4:7f:8c:b7:bd:52:ad:37:05:9c: da:5e:fa:5f:82:82:1e:8c:4f:ed:ff:08:26:bd:80:5e:bd:3e: a0:71:7e:9c:3a:e2:fe:b0:0e:db:90:32:72:b5:20:68:61:0a: 16:c6:48:77:05:78:ea:bd:8d:89:46:d5:45:c5:b2:ef:35:08: ee:9e:ef:a1:7e:cd:a1:c2:bc:da:73:eb:14:93:7b:32:53:fe: 6e:d2:6d:52:5c:6a:10:fa:2e:9f:c5:52:fb:ac:69:08:83:a8: bc:4f:89:52:40:86:9d:97:90:78:15:5c:9e:a0:47:84:92:6c: 62:27:33:05:2d:ce:df:35:5f:52:d0:e0:b4:fb:2a:60:4c:f1: 30:98:53:45:d2:10:73:09:95:b8:2e:4e:e5:5d:9f:df:f2:19: 1d:bc:ee:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8qw8bkT23L5NL3eU6bx7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0 MWJlOWUwHhcNMjYwMTAyMTgyMjQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzBlM2UzZWQyYjI3ODM4N2VjYTYyMmJmZWMwZWJlZjMzZjk4M2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1koCnNLbwefa2+I4mxGZvTn6i1s UlmKleiB7EAnj2KRmfLbhkZiEgVwBnlXCzf1Kx8BzghRmwVFvKscRyelXgzT7YgW 3pJrIs8sCru/W58FcK49JRqR1CaZ8Xt2qCF9I6spSqDantmWF2Rq0aEx/VQQFZGX z50vOq55v7R9XqL7yUvVa2BxobQJB7ejhvZMDJqt8gvwJzIkM8Fm2RyhrNAhgcKi 9YYN9AWBEQdQwN64B7PpavcCYKSAEg6OAB/HkJ7OB/S1XGzFvqhmwNEbT0LC6ZRP gX7jzQmymrktWcUaTQMdaJnfaB2uSl97vHRDcc/1OplVlzY63BBpfMpSZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGMOPj7Ssng4fspiK/7A6+8z+YOgMB8GA1UdIwQY MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct MTFiM2NmM2ZkNGUxLzEvWXc0LVB0S3llRGgteW1Jcl9zRHI3elA1ZzZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhP1MA0G CSqGSIb3DQEBCwUAA4IBAQBgaAjSE/ScWks7hBk8Uc44XRpMNQBkEeZShVlY/0+4 xXw27pqjqpd4ZjI9RuxQNIE32iRchiYxShqHAKtK2oGQbpFonfC9Zt00UMvIcqkH LTP9fvTCOQMAZiMimkLd0raH3+R/jLe9Uq03BZzaXvpfgoIejE/t/wgmvYBevT6g cX6cOuL+sA7bkDJytSBoYQoWxkh3BXjqvY2JRtVFxbLvNQjunu+hfs2hwrzac+sU k3syU/5u0m1SXGoQ+i6fxVL7rGkIg6i8T4lSQIadl5B4FVyeoEeEkmxiJzMFLc7f NV9S0OC0+ypgTPEwmFNF0hBzCZW4Lk7lXZ/f8hkdvO4X -----END CERTIFICATE-----Generated at Mon Jan 19 17:31:39 2026 by rpki-client