This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/dY6eqUD4ykA92I5VKqHmYTX3q88.roa File: dY6eqUD4ykA92I5VKqHmYTX3q88.roa (raw, json) Hash identifier: uvlx5CXBvfA8EWdxrFvclZnKJJH1HmhxtH5z6Fa+fBo= Subject key identifier: 75:8E:9E:A9:40:F8:CA:40:3D:D8:8E:55:2A:A1:E6:61:35:F7:AB:CF Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Certificate serial: 019B7F15205B5014F8C271C9E1EA3ED4503D Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/dY6eqUD4ykA92I5VKqHmYTX3q88.roa Signing time: Fri 02 Jan 2026 14:20:49 +0000 ROA not before: Fri 02 Jan 2026 14:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 45.141.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:20:5b:50:14:f8:c2:71:c9:e1:ea:3e:d4:50:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Validity Not Before: Jan 2 14:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=758e9ea940f8ca403dd88e552aa1e66135f7abcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7e:42:87:01:cc:dd:71:39:65:48:dd:46:55: 22:78:19:7a:e0:d9:c3:0c:1b:f7:39:43:10:eb:91: ac:b6:03:86:4c:00:c0:a8:8e:ab:1e:47:69:8a:46: c4:0d:61:20:7a:12:13:20:9f:f8:59:e2:b0:5e:35: 38:b4:d7:0c:c8:1d:6c:8c:3e:32:6b:68:b1:01:96: c6:59:d0:eb:46:4c:46:72:e4:bd:1f:9a:14:89:77: 96:f4:51:99:cc:a8:b8:42:10:a4:32:70:37:52:6f: 53:c0:0c:34:66:8a:79:58:8b:99:01:9d:b5:f6:15: 1b:60:b2:99:85:e4:f4:2a:80:33:29:aa:25:34:46: 00:95:0e:40:14:7e:e9:ec:79:ba:21:0a:04:6a:08: 7f:75:5a:e3:90:59:4b:71:3f:23:95:cd:cd:73:ca: 94:78:0d:cc:3b:bf:74:1a:e5:9f:f6:39:6e:5e:b9: 3b:16:85:7c:7b:72:62:01:f9:35:60:66:be:52:8c: fc:5d:2a:b4:71:23:58:f0:4f:ff:9b:0b:fe:d3:7e: 4f:42:65:6f:81:c8:d3:21:54:33:18:5a:40:d5:49: 2c:01:13:03:59:42:9d:c4:ed:0a:38:c2:39:68:ef: 49:88:75:12:c8:80:5c:73:4c:a7:31:5f:ba:13:49: 92:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:8E:9E:A9:40:F8:CA:40:3D:D8:8E:55:2A:A1:E6:61:35:F7:AB:CF X509v3 Authority Key Identifier: keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/dY6eqUD4ykA92I5VKqHmYTX3q88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.54.0/24 Signature Algorithm: sha256WithRSAEncryption bf:2c:ac:18:27:6c:e4:45:c8:99:24:1b:e3:86:de:5a:f7:c8: 08:6a:ee:ea:14:95:70:b6:b0:16:f0:c6:a0:dc:64:7f:80:ae: 72:3a:10:d2:91:e1:93:70:83:3f:9d:61:6c:88:12:f0:4d:6d: 91:a7:58:5e:48:f8:81:8b:e0:1e:bc:d9:19:17:a0:24:9c:ba: 0e:6c:57:06:38:2c:da:22:03:cf:dc:49:1c:17:1e:e5:ff:79: 91:5b:72:0a:b4:a0:54:eb:ef:98:a6:74:21:a2:f8:e1:50:54: 48:04:b5:7a:ad:fe:77:73:16:b3:82:9e:fd:19:14:db:48:45: 58:27:8a:09:41:c1:c0:e0:d3:41:3f:79:bd:e2:e9:0c:ee:6d: 95:59:a0:81:9d:97:eb:0d:ba:99:23:a7:aa:b1:09:f8:c5:fb: c5:23:35:1d:b1:02:80:a6:50:d5:63:5c:fb:14:25:14:fc:77: a0:91:7f:7c:25:09:29:37:9e:9f:75:30:77:83:cd:d2:d7:f2: 14:54:8f:02:19:61:e9:4d:15:ab:7b:17:8e:89:63:ef:48:29: 25:30:8f:34:e2:1c:6a:00:ef:43:50:92:f1:da:4b:de:1b:44: 17:4d:cc:82:73:18:36:62:e8:c5:bb:6b:83:5a:ed:fa:2d:fe: 19:a3:03:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FSBbUBT4wnHJ4eo+1FA9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDc0YWM3Y2E4NWUwOWMyZDQ4YjMzZTdiZjY2ZjhlZDc2 NGRlMGYwHhcNMjYwMTAyMTQyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NThlOWVhOTQwZjhjYTQwM2RkODhlNTUyYWExZTY2MTM1ZjdhYmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH5ChwHM3XE5ZUjdRlUieBl64NnD DBv3OUMQ65GstgOGTADAqI6rHkdpikbEDWEgehITIJ/4WeKwXjU4tNcMyB1sjD4y a2ixAZbGWdDrRkxGcuS9H5oUiXeW9FGZzKi4QhCkMnA3Um9TwAw0Zop5WIuZAZ21 9hUbYLKZheT0KoAzKaolNEYAlQ5AFH7p7Hm6IQoEagh/dVrjkFlLcT8jlc3Nc8qU eA3MO790GuWf9jluXrk7FoV8e3JiAfk1YGa+Uoz8XSq0cSNY8E//mwv+035PQmVv gcjTIVQzGFpA1UksARMDWUKdxO0KOMI5aO9JiHUSyIBcc0ynMV+6E0mShwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHWOnqlA+MpAPdiOVSqh5mE196vPMB8GA1UdIwQY MBaAFDJHSsfKheCcLUizPnv2b47XZN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzkt MTJlYzIyYzljNWEyLzEvZFk2ZXFVRDR5a0E5Mkk1VktxSG1ZVFgzcTg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzktMTJlYzIyYzljNWEy LzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY02MA0G CSqGSIb3DQEBCwUAA4IBAQC/LKwYJ2zkRciZJBvjht5a98gIau7qFJVwtrAW8Mag 3GR/gK5yOhDSkeGTcIM/nWFsiBLwTW2Rp1heSPiBi+AevNkZF6AknLoObFcGOCza IgPP3EkcFx7l/3mRW3IKtKBU6++YpnQhovjhUFRIBLV6rf53cxazgp79GRTbSEVY J4oJQcHA4NNBP3m94ukM7m2VWaCBnZfrDbqZI6eqsQn4xfvFIzUdsQKAplDVY1z7 FCUU/HegkX98JQkpN56fdTB3g83S1/IUVI8CGWHpTRWrexeOiWPvSCklMI804hxq AO9DUJLx2kveG0QXTcyCcxg2YujFu2uDWu36Lf4ZowPx -----END CERTIFICATE-----Generated at Sat Feb 14 17:23:48 2026 by rpki-client