This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/y45CtbkuFYszyghIczcGg41wSrA.roa File: y45CtbkuFYszyghIczcGg41wSrA.roa (raw, json) Hash identifier: rw1h91pKsHcgnDxmhcvpQbzVrU3hp50uqnxika/xZZ0= Subject key identifier: CB:8E:42:B5:B9:2E:15:8B:33:CA:08:48:73:37:06:83:8D:70:4A:B0 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D57CADFDF4333A2BA02A3EEB038C5 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/y45CtbkuFYszyghIczcGg41wSrA.roa Signing time: Fri 02 Jan 2026 06:20:27 +0000 ROA not before: Fri 02 Jan 2026 06:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208711 IP address blocks: 193.218.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:57:ca:df:df:43:33:a2:ba:02:a3:ee:b0:38:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb8e42b5b92e158b33ca0848733706838d704ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:57:c6:b7:44:65:7d:01:c9:ce:89:15:63:c2: 5b:b7:dc:bf:02:ff:11:e2:5c:34:56:37:18:6d:8a: 47:cb:db:4f:1b:d6:0c:d6:12:e8:53:95:26:5a:cf: 48:cf:1a:05:32:79:49:86:61:3a:82:9f:99:d0:91: 5f:0c:d4:08:01:81:0d:1c:ea:25:ee:0b:55:02:20: cc:02:96:8e:bd:f9:59:86:17:5c:3c:4f:2c:66:a6: 1f:e3:78:dd:34:ac:c1:42:3c:59:6e:5f:59:bc:24: 45:52:44:1a:91:8a:02:d5:ae:01:fe:c2:e4:92:ab: 67:18:57:09:e4:c9:b9:48:77:40:d4:ec:f8:7e:18: 24:01:88:e1:89:08:96:13:98:76:47:79:86:45:1d: 72:cd:8b:9f:62:37:24:28:80:d7:77:2a:67:9e:ba: 86:5e:ba:b9:f9:e3:f4:7d:48:54:09:ed:0e:0f:de: 72:bd:d2:50:a4:db:bf:64:21:c8:c1:08:b5:0b:55: 77:a4:68:98:f7:87:2a:af:59:df:29:00:5a:49:a3: dc:26:e7:a5:9b:cf:8d:73:17:9b:94:89:cc:6a:26: f7:83:d9:d9:e5:64:75:64:ae:69:87:04:eb:85:50: b4:86:84:68:35:41:f1:51:ce:a6:5e:79:6a:0b:98: 57:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8E:42:B5:B9:2E:15:8B:33:CA:08:48:73:37:06:83:8D:70:4A:B0 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/y45CtbkuFYszyghIczcGg41wSrA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.218.34.0/24 Signature Algorithm: sha256WithRSAEncryption 37:b3:12:29:fc:ab:be:aa:57:fe:7a:3e:12:f5:c3:a8:5e:64: a4:c0:38:ed:1b:f8:d4:dd:f2:3b:c3:85:19:25:cf:e2:43:28: 51:c6:bf:14:17:34:bb:d7:bc:17:8d:f0:ba:26:23:fe:d5:42: 67:59:69:b3:14:e8:96:4c:46:6e:94:14:50:8a:53:19:bb:d1: ee:bd:54:8b:8a:6c:b5:11:91:2d:6d:ee:5b:36:ee:47:36:76: 7c:d3:3d:ce:56:1d:de:b1:2c:a6:72:82:f6:aa:9b:db:f2:25: 6a:1c:ea:22:0a:3a:68:07:a8:cf:78:6d:8b:1a:66:9c:02:d1: 10:0b:5d:d3:17:40:3a:65:3f:ae:83:1d:9d:73:86:a4:82:be: 6a:4c:a6:e1:fd:cb:4b:cd:83:2f:32:ea:6e:6e:1c:9d:d7:5d: fd:94:5e:08:b8:3f:44:3d:ad:5c:b3:57:dd:62:8e:30:d1:96: e5:17:84:fd:a3:61:0e:ce:22:ce:48:b2:63:d2:c8:72:fe:e8: ac:a3:6e:d2:be:b3:44:37:e8:1c:dc:6b:2b:34:14:b1:1e:b4: 20:8c:3e:f9:42:16:7d:a8:68:b1:8c:43:ec:36:03:58:91:5d: 6f:1b:4b:ce:01:f5:c0:cc:ea:0d:05:34:ea:e7:d4:46:0c:ba: e3:33:ca:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XVfK399DM6K6AqPusDjFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjhlNDJiNWI5MmUxNThiMzNjYTA4NDg3MzM3MDY4MzhkNzA0YWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFfGt0RlfQHJzokVY8Jbt9y/Av8R 4lw0VjcYbYpHy9tPG9YM1hLoU5UmWs9IzxoFMnlJhmE6gp+Z0JFfDNQIAYENHOol 7gtVAiDMApaOvflZhhdcPE8sZqYf43jdNKzBQjxZbl9ZvCRFUkQakYoC1a4B/sLk kqtnGFcJ5Mm5SHdA1Oz4fhgkAYjhiQiWE5h2R3mGRR1yzYufYjckKIDXdypnnrqG Xrq5+eP0fUhUCe0OD95yvdJQpNu/ZCHIwQi1C1V3pGiY94cqr1nfKQBaSaPcJuel m8+NcxeblInMaib3g9nZ5WR1ZK5phwTrhVC0hoRoNUHxUc6mXnlqC5hXBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMuOQrW5LhWLM8oISHM3BoONcEqwMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEveTQ1Q3Ria3VGWXN6eWdoSWN6Y0dnNDF3U3JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwdoiMA0G CSqGSIb3DQEBCwUAA4IBAQA3sxIp/Ku+qlf+ej4S9cOoXmSkwDjtG/jU3fI7w4UZ Jc/iQyhRxr8UFzS717wXjfC6JiP+1UJnWWmzFOiWTEZulBRQilMZu9HuvVSLimy1 EZEtbe5bNu5HNnZ80z3OVh3esSymcoL2qpvb8iVqHOoiCjpoB6jPeG2LGmacAtEQ C13TF0A6ZT+ugx2dc4akgr5qTKbh/ctLzYMvMupubhyd1139lF4IuD9EPa1cs1fd Yo4w0ZblF4T9o2EOziLOSLJj0shy/uiso27SvrNEN+gc3GsrNBSxHrQgjD75QhZ9 qGixjEPsNgNYkV1vG0vOAfXAzOoNBTTq59RGDLrjM8of -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:29 2026 by rpki-client