This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/rMY1tobUWregzPyHDdje_KIySAo.roa File: rMY1tobUWregzPyHDdje_KIySAo.roa (raw, json) Hash identifier: 8W6FYCVQ1MlNBIqhK+Dq06xCvhS1Jzezb2OJYShj/KQ= Subject key identifier: AC:C6:35:B6:86:D4:5A:B7:A0:CC:FC:87:0D:D8:DE:FC:A2:32:48:0A Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B91F7DFD262565A047D2F29425BF42CAC Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/rMY1tobUWregzPyHDdje_KIySAo.roa Signing time: Tue 06 Jan 2026 06:21:39 +0000 ROA not before: Tue 06 Jan 2026 06:21:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206150 IP address blocks: 45.130.82.0/24 maxlen: 24 185.192.68.0/24 maxlen: 24 2a0b:64c6::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:91:f7:df:d2:62:56:5a:04:7d:2f:29:42:5b:f4:2c:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 6 06:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acc635b686d45ab7a0ccfc870dd8defca232480a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6a:a1:2a:73:4b:32:6c:bf:29:94:2d:1e:24: 7b:ab:3e:f2:e4:57:fa:09:29:c9:6d:6e:3b:14:40: 16:91:62:b1:3f:49:2c:e9:75:91:5e:b2:29:68:c6: 83:4c:0a:de:fe:23:75:1f:6b:65:7b:7d:9c:9b:26: 53:cb:32:e4:94:f5:29:29:f1:16:ef:78:88:03:22: 83:5a:b5:dd:60:1c:63:ad:6d:ea:25:c6:3c:ee:a7: ef:b1:81:ea:05:27:f5:59:44:04:a8:d0:19:2e:48: be:b6:fa:7f:26:6a:77:da:04:78:9d:8a:1c:0b:a1: b0:fd:66:d4:45:b8:28:e4:2c:c9:c6:e7:54:dd:40: 1e:a2:ec:32:ee:12:5b:d4:8f:c7:26:55:09:08:e0: 8e:33:be:e0:51:50:c5:ce:17:d4:ad:01:6f:9c:0c: ea:aa:df:f5:7b:50:6e:d0:53:f7:08:f1:22:ee:c2: 3f:0c:d9:91:b0:28:94:38:62:7a:28:30:2f:a6:19: 2b:b9:e1:92:d6:19:ac:1a:0c:39:44:3e:c2:b6:80: 05:68:01:84:d5:b5:35:6b:b2:b2:73:c7:d3:5a:7e: 1a:cc:26:3f:df:93:db:54:50:82:0e:1b:34:9c:76: 70:fc:dd:c5:4e:f2:47:78:13:2f:6a:bc:af:f7:06: f2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C6:35:B6:86:D4:5A:B7:A0:CC:FC:87:0D:D8:DE:FC:A2:32:48:0A X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/rMY1tobUWregzPyHDdje_KIySAo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.82.0/24 185.192.68.0/24 IPv6: 2a0b:64c6::/32 Signature Algorithm: sha256WithRSAEncryption 22:9a:57:d7:21:69:3f:46:75:86:04:57:18:c0:81:8b:62:dd: 5c:59:08:15:56:d9:72:e1:35:18:81:b8:3f:6a:a6:97:bd:38: 4b:a6:17:b5:6e:4a:d0:52:8d:d9:aa:df:ac:87:95:c3:a4:f0: 97:a1:db:a8:76:8e:51:67:bd:41:79:b8:6d:ef:f7:39:03:b5: 75:89:cc:67:8d:3d:92:dc:46:72:39:89:72:66:03:32:33:7a: 11:e0:98:f9:41:f1:27:19:f8:f1:38:d1:eb:db:a3:d7:75:be: 42:2d:03:68:81:1b:7a:83:78:ce:af:7c:79:28:ec:24:80:05: 8e:ac:4f:20:57:99:79:0b:29:87:82:7f:b5:83:59:e6:64:12: ef:79:8e:7f:10:98:5a:f3:87:68:ca:96:5f:de:f0:3c:26:66: 3a:bf:24:c3:ff:e3:f8:62:d4:aa:32:41:d4:86:5b:30:39:c7: 45:27:2c:81:da:99:1a:e1:68:d5:31:94:d8:a0:a3:62:5b:a3: 5c:f7:61:f3:66:64:02:0c:b1:21:83:17:2a:86:05:2b:4b:1c: 5f:f6:09:ca:81:42:b3:f7:70:1f:05:b4:48:2c:92:5c:dc:91: 90:04:92:46:1c:ff:94:51:10:68:f9:8a:d7:fe:92:db:11:cf: 65:d2:96:77 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZuR99/SYlZaBH0vKUJb9CysMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTA2MDYyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2M2MzViNjg2ZDQ1YWI3YTBjY2ZjODcwZGQ4ZGVmY2EyMzI0ODBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWqhKnNLMmy/KZQtHiR7qz7y5Ff6 CSnJbW47FEAWkWKxP0ks6XWRXrIpaMaDTAre/iN1H2tle32cmyZTyzLklPUpKfEW 73iIAyKDWrXdYBxjrW3qJcY87qfvsYHqBSf1WUQEqNAZLki+tvp/Jmp32gR4nYoc C6Gw/WbURbgo5CzJxudU3UAeouwy7hJb1I/HJlUJCOCOM77gUVDFzhfUrQFvnAzq qt/1e1Bu0FP3CPEi7sI/DNmRsCiUOGJ6KDAvphkrueGS1hmsGgw5RD7CtoAFaAGE 1bU1a7Kyc8fTWn4azCY/35PbVFCCDhs0nHZw/N3FTvJHeBMvaryv9wbydwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKzGNbaG1Fq3oMz8hw3Y3vyiMkgKMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvck1ZMXRvYlVXcmVnelB5SERkamVfS0l5U0FvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALYJSAwQA ucBEMA0EAgACMAcDBQAqC2TGMA0GCSqGSIb3DQEBCwUAA4IBAQAimlfXIWk/RnWG BFcYwIGLYt1cWQgVVtly4TUYgbg/aqaXvThLphe1bkrQUo3Zqt+sh5XDpPCXoduo do5RZ71Bebht7/c5A7V1icxnjT2S3EZyOYlyZgMyM3oR4Jj5QfEnGfjxONHr26PX db5CLQNogRt6g3jOr3x5KOwkgAWOrE8gV5l5CymHgn+1g1nmZBLveY5/EJha84do ypZf3vA8JmY6vyTD/+P4YtSqMkHUhlswOcdFJyyB2pka4WjVMZTYoKNiW6Nc92Hz ZmQCDLEhgxcqhgUrSxxf9gnKgUKz93AfBbRILJJc3JGQBJJGHP+UURBo+YrX/pLb Ec9l0pZ3 -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:41 2026 by rpki-client