This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/yH8t87LFPmOPj__NCmZp3TJvibo.roa File: yH8t87LFPmOPj__NCmZp3TJvibo.roa (raw, json) Hash identifier: GSwDtK+YWPwVtXQtfbzO5nUr8l4c2iMCBRCOgc2rX6k= Subject key identifier: C8:7F:2D:F3:B2:C5:3E:63:8F:8F:FF:CD:0A:66:69:DD:32:6F:89:BA Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA4A96246D443217C652D14C4B70CD2 Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/yH8t87LFPmOPj__NCmZp3TJvibo.roa Signing time: Thu 01 Jan 2026 22:19:07 +0000 ROA not before: Thu 01 Jan 2026 22:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215314 IP address blocks: 45.153.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:a9:62:46:d4:43:21:7c:65:2d:14:c4:b7:0c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c87f2df3b2c53e638f8fffcd0a6669dd326f89ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d0:d5:bd:1e:3e:8d:c6:45:a4:ed:a0:44:48: 98:27:a2:de:f9:3d:51:39:c6:7b:45:82:fa:88:af: 92:6f:d6:29:72:ac:b8:48:23:db:a3:3b:70:95:00: bd:ad:2a:fc:fe:d8:73:82:5c:71:75:22:00:83:75: 12:f5:1f:23:40:fe:e9:3a:90:a1:39:4b:ee:05:79: 7b:a7:28:ac:ff:df:99:ee:cc:30:f7:5b:42:c2:5f: 7d:51:67:b3:a4:ca:f9:90:d6:7e:66:60:ab:67:93: bb:d3:54:52:1a:a8:0d:8e:f9:6e:78:76:ac:d6:dc: 7b:d5:2b:ba:a6:2b:8d:c3:af:c7:37:3f:41:4c:28: e1:b0:8b:da:ff:2d:19:08:4e:8c:e6:63:bb:05:d5: c3:35:f6:e4:9c:47:d9:fe:b0:e9:0e:52:01:cb:cf: dc:2e:00:d6:80:02:50:71:8d:96:23:b5:83:fc:bb: 8f:51:de:c9:6a:3e:e4:00:97:8b:dc:6b:88:39:48: 1c:8f:42:8d:7e:18:6f:48:7d:1c:a2:c3:eb:2a:91: 87:aa:02:75:fd:19:14:12:0c:bf:d0:54:fb:ef:f0: f5:cc:48:e0:8d:68:52:de:5b:91:73:49:cf:80:68: c8:d8:5d:97:72:e1:78:59:fe:e5:2b:a7:b0:dd:6d: a2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7F:2D:F3:B2:C5:3E:63:8F:8F:FF:CD:0A:66:69:DD:32:6F:89:BA X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/yH8t87LFPmOPj__NCmZp3TJvibo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.49.0/24 Signature Algorithm: sha256WithRSAEncryption 30:ec:ff:60:16:e6:4f:9e:9d:ca:34:71:2d:44:ce:3b:1c:c9: 17:63:00:4d:16:b4:86:1f:91:74:8a:b1:af:6e:7a:37:3b:7a: 3b:80:6f:b2:5a:a7:0a:9b:7e:38:59:16:77:14:4f:ad:a2:d4: 5e:76:c9:0a:e5:0a:e4:b2:7b:7e:47:c6:d2:c5:04:62:aa:52: d0:95:aa:33:2c:e5:3e:1c:e8:0f:37:5f:63:fb:f7:cf:72:e6: 46:b2:3d:c0:67:0e:71:18:88:3b:7f:5e:74:12:57:3e:a3:c7: 23:2a:c3:c7:61:87:2d:d6:f1:31:c0:0e:07:96:3b:8d:e3:d0: fb:57:7a:8f:ea:b9:fa:de:f2:07:88:c8:c2:9b:f1:66:4a:cd: 21:8b:92:e6:df:fc:0d:45:aa:72:cc:a7:40:ef:39:73:0b:f5: b2:c9:49:15:4b:c7:90:16:80:d7:89:4f:01:b5:9c:cb:26:cc: a8:e8:2d:d1:42:6c:d1:2d:e6:35:d2:74:49:04:91:c0:96:24: ef:02:85:27:96:45:bb:d3:5e:b5:3b:38:a6:f4:9c:e4:e5:cf: 72:1f:b1:b6:e9:7b:de:08:0c:64:5c:fe:b7:74:c2:5f:37:da: fa:38:5b:2d:ba:aa:15:ac:41:e4:c5:38:ef:de:3f:b1:b9:c0: 69:e3:15:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pKliRtRDIXxlLRTEtwzSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODdmMmRmM2IyYzUzZTYzOGY4ZmZmY2QwYTY2NjlkZDMyNmY4OWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9DVvR4+jcZFpO2gREiYJ6Le+T1R OcZ7RYL6iK+Sb9Ypcqy4SCPboztwlQC9rSr8/thzglxxdSIAg3US9R8jQP7pOpCh OUvuBXl7pyis/9+Z7sww91tCwl99UWezpMr5kNZ+ZmCrZ5O701RSGqgNjvlueHas 1tx71Su6piuNw6/HNz9BTCjhsIva/y0ZCE6M5mO7BdXDNfbknEfZ/rDpDlIBy8/c LgDWgAJQcY2WI7WD/LuPUd7Jaj7kAJeL3GuIOUgcj0KNfhhvSH0cosPrKpGHqgJ1 /RkUEgy/0FT77/D1zEjgjWhS3luRc0nPgGjI2F2XcuF4Wf7lK6ew3W2isQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMh/LfOyxT5jj4//zQpmad0yb4m6MB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEveUg4dDg3TEZQbU9Qal9fTkNtWnAzVEp2aWJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZkxMA0G CSqGSIb3DQEBCwUAA4IBAQAw7P9gFuZPnp3KNHEtRM47HMkXYwBNFrSGH5F0irGv bno3O3o7gG+yWqcKm344WRZ3FE+totRedskK5Qrksnt+R8bSxQRiqlLQlaozLOU+ HOgPN19j+/fPcuZGsj3AZw5xGIg7f150Elc+o8cjKsPHYYct1vExwA4HljuN49D7 V3qP6rn63vIHiMjCm/FmSs0hi5Lm3/wNRapyzKdA7zlzC/WyyUkVS8eQFoDXiU8B tZzLJsyo6C3RQmzRLeY10nRJBJHAliTvAoUnlkW70161Ozim9Jzk5c9yH7G26Xve CAxkXP63dMJfN9r6OFstuqoVrEHkxTjv3j+xucBp4xWz -----END CERTIFICATE-----Generated at Tue Jan 20 00:00:00 2026 by rpki-client