This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/vY6AI4G6R6EgSBrZ0wAFePAcVJU.roa File: vY6AI4G6R6EgSBrZ0wAFePAcVJU.roa (raw, json) Hash identifier: Ub/kp3HtizCfln0T4QuI8qsMqpOkbyLUvq1+tN0UJTk= Subject key identifier: BD:8E:80:23:81:BA:47:A1:20:48:1A:D9:D3:00:05:78:F0:1C:54:95 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D23A988AB7222996FB8889DDABFAE Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/vY6AI4G6R6EgSBrZ0wAFePAcVJU.roa Signing time: Fri 02 Jan 2026 06:20:14 +0000 ROA not before: Fri 02 Jan 2026 06:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 45.80.156.0/24 maxlen: 24 62.106.89.0/24 maxlen: 24 91.190.106.0/24 maxlen: 24 2a10:7403::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 08:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:23:a9:88:ab:72:22:99:6f:b8:88:9d:da:bf:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd8e802381ba47a120481ad9d3000578f01c5495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:67:76:52:af:e3:e4:a7:cc:96:ad:52:f3:5b: 83:25:36:54:5b:db:ec:3b:5f:dd:16:f1:2a:e4:64: ea:3f:c5:b8:fe:d3:bf:66:aa:a6:5d:dc:c1:d0:4b: 1f:0d:b9:ed:17:3b:e6:a1:49:cc:08:d5:06:10:c3: 9b:c9:46:8f:43:a7:4a:83:88:8b:77:8d:69:c4:00: bc:57:46:2d:a8:c6:37:31:11:57:42:b7:8c:2c:bc: 49:1a:b1:da:f5:9f:49:3b:3d:43:8b:19:2c:a9:34: 49:e5:b9:4c:ed:38:3f:0b:f7:6d:7b:e1:41:2e:5b: 6e:e1:f6:fd:2d:66:e9:03:51:9d:86:c4:2a:f0:46: e1:c7:b9:4b:2b:71:bf:f8:fb:76:96:5a:86:2f:42: e0:0c:18:f5:60:91:67:36:3c:9c:4d:1d:ca:f9:d8: 8b:54:a9:61:a6:ab:20:0b:d7:0f:4b:e7:78:ab:3e: 4e:66:0e:a7:02:ff:6e:34:7d:a7:cb:48:64:2f:27: 8c:c8:0b:7e:4b:5c:dc:1a:12:0c:b9:f0:01:d5:ec: d5:27:b2:35:a7:75:97:4f:51:69:0b:1f:34:4e:01: 01:a4:04:76:74:78:ca:73:17:c7:55:a1:7f:01:3a: 9b:e3:61:69:c6:09:ef:78:6f:c7:e8:50:c0:3f:5e: a1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:8E:80:23:81:BA:47:A1:20:48:1A:D9:D3:00:05:78:F0:1C:54:95 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/vY6AI4G6R6EgSBrZ0wAFePAcVJU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.156.0/24 62.106.89.0/24 91.190.106.0/24 IPv6: 2a10:7403::/32 Signature Algorithm: sha256WithRSAEncryption 4a:fe:ec:e7:77:db:84:03:ce:49:cf:65:ca:05:c8:e1:c6:79: 7e:e0:0b:66:02:36:64:4d:96:c9:77:b4:06:ad:9a:3c:d5:96: 31:07:e2:b2:60:1b:85:3b:5d:66:79:46:96:56:73:16:4c:b8: 8a:46:12:64:52:7c:05:db:92:04:92:b1:df:92:15:c0:91:fe: 60:5a:8c:fc:da:29:15:f1:f8:5b:e2:b4:10:fb:b0:9d:b0:75: 04:58:e0:76:e4:09:ff:b1:a3:a2:f5:13:73:6d:26:be:89:90: 54:71:d8:0b:de:12:db:e2:5c:ed:b7:65:eb:b3:25:ce:1a:83: e9:42:6a:d8:a7:4a:b8:2f:71:e2:4f:17:0e:e3:72:bf:2c:0e: 6b:26:03:9e:ad:fa:40:5f:1e:09:f5:ab:26:9d:bd:f1:50:47: ec:64:1a:cd:e6:c9:a8:33:03:ab:62:10:9b:e9:ea:4f:cb:10: c8:e8:53:9a:6c:60:bc:69:01:f2:c9:7a:16:33:8c:19:5b:1e: a8:2e:ad:ca:f7:80:3c:4a:40:ef:4d:27:2f:18:b8:35:29:e8: 88:60:64:37:f0:e3:6f:50:64:57:05:38:3d:96:45:af:20:6a: 8f:31:47:14:2c:3a:99:3d:95:a4:6e:8f:08:ac:94:a7:61:93: 5b:9c:3d:06 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9XSOpiKtyIplvuIid2r+uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDhlODAyMzgxYmE0N2ExMjA0ODFhZDlkMzAwMDU3OGYwMWM1NDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2d2Uq/j5KfMlq1S81uDJTZUW9vs O1/dFvEq5GTqP8W4/tO/ZqqmXdzB0EsfDbntFzvmoUnMCNUGEMObyUaPQ6dKg4iL d41pxAC8V0YtqMY3MRFXQreMLLxJGrHa9Z9JOz1DixksqTRJ5blM7Tg/C/dte+FB Lltu4fb9LWbpA1GdhsQq8Ebhx7lLK3G/+Pt2llqGL0LgDBj1YJFnNjycTR3K+diL VKlhpqsgC9cPS+d4qz5OZg6nAv9uNH2ny0hkLyeMyAt+S1zcGhIMufAB1ezVJ7I1 p3WXT1FpCx80TgEBpAR2dHjKcxfHVaF/ATqb42FpxgnveG/H6FDAP16hAwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFL2OgCOBukehIEga2dMABXjwHFSVMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvdlk2QUk0RzZSNkVnU0JyWjB3QUZlUEFjVkpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQALVCcAwQA PmpZAwQAW75qMA0EAgACMAcDBQAqEHQDMA0GCSqGSIb3DQEBCwUAA4IBAQBK/uzn d9uEA85Jz2XKBcjhxnl+4AtmAjZkTZbJd7QGrZo81ZYxB+KyYBuFO11meUaWVnMW TLiKRhJkUnwF25IEkrHfkhXAkf5gWoz82ikV8fhb4rQQ+7CdsHUEWOB25An/saOi 9RNzbSa+iZBUcdgL3hLb4lztt2XrsyXOGoPpQmrYp0q4L3HiTxcO43K/LA5rJgOe rfpAXx4J9asmnb3xUEfsZBrN5smoMwOrYhCb6epPyxDI6FOabGC8aQHyyXoWM4wZ Wx6oLq3K94A8SkDvTScvGLg1KeiIYGQ38ONvUGRXBTg9lkWvIGqPMUcULDqZPZWk bo8IrJSnYZNbnD0G -----END CERTIFICATE-----Generated at Fri Jan 9 17:04:38 2026 by rpki-client