This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ysW3gVpNgP9N5l_YpjjDHd5Kp_8.roa File: ysW3gVpNgP9N5l_YpjjDHd5Kp_8.roa (raw, json) Hash identifier: MNm7Ng0DHYfWtV1/Gk+w9IPx7dThbfPPOPFpOFHVanI= Subject key identifier: CA:C5:B7:81:5A:4D:80:FF:4D:E6:5F:D8:A6:38:C3:1D:DE:4A:A7:FF Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1C17DE6E301CE0EF679C8513E5F7C Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ysW3gVpNgP9N5l_YpjjDHd5Kp_8.roa Signing time: Fri 02 Jan 2026 18:21:48 +0000 ROA not before: Fri 02 Jan 2026 18:21:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200195 IP address blocks: 45.149.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:c1:7d:e6:e3:01:ce:0e:f6:79:c8:51:3e:5f:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cac5b7815a4d80ff4de65fd8a638c31dde4aa7ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:89:d6:07:b3:5f:b3:c5:8a:90:f3:dd:ac:ba: 1c:b9:89:6a:4b:d4:89:8e:f6:8e:95:e5:be:9d:f5: 5b:ea:00:b4:36:2b:20:2d:b2:d9:d7:94:3d:98:29: 7b:d9:e7:84:a7:ce:0a:76:55:8e:79:c8:e5:2d:47: 82:37:08:6c:5c:fe:ec:ac:79:2f:9b:db:29:8b:bc: ca:27:6b:7d:c2:16:50:f7:0d:42:1e:d8:a6:09:78: 4d:c8:12:47:d9:a3:8a:4c:70:e3:28:5a:38:6f:69: 77:1d:25:73:c5:86:07:c1:5f:ed:ac:82:de:46:4c: 07:68:8b:7c:fd:00:21:3f:a1:06:66:bd:80:5c:bf: 51:ef:3f:6b:6c:e1:77:ab:70:30:b5:4a:99:1b:ba: f5:99:30:ee:c1:97:3a:78:8b:00:3f:78:2d:c8:a6: ee:32:c7:30:b8:93:53:3d:ce:0d:c6:3b:a0:da:1e: ad:6f:7c:2b:73:be:00:22:5a:fa:17:30:48:60:5a: 8a:23:57:bb:a8:c6:fe:63:11:4c:b7:42:ca:b8:9a: b9:f3:f5:ac:82:3c:37:b2:31:36:52:f9:17:cb:d5: 56:46:cf:16:27:12:19:cc:91:0e:39:f6:67:83:25: b9:17:6f:81:40:f6:ad:7c:d4:e3:26:a6:79:5d:42: c9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C5:B7:81:5A:4D:80:FF:4D:E6:5F:D8:A6:38:C3:1D:DE:4A:A7:FF X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ysW3gVpNgP9N5l_YpjjDHd5Kp_8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.145.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:be:6f:41:8b:da:0d:48:cd:cf:e0:31:2f:15:17:4d:72:bf: 15:e4:28:b8:05:85:4d:67:68:67:12:c6:8a:8f:49:93:ff:a5: a4:08:1a:32:14:c6:d5:ee:55:50:d6:4d:e9:10:5c:69:6a:2b: 0f:31:ec:2e:8e:47:cc:09:61:20:f6:f9:85:9a:c1:85:24:61: 14:7d:c0:cb:4e:9b:0d:20:90:fe:5f:8e:e0:67:96:66:96:e4: ec:61:1d:da:34:18:07:a1:1e:4b:5a:74:c9:68:37:87:62:bc: d6:7c:51:ee:21:fe:4c:2c:b9:7b:73:82:51:d5:aa:75:75:39: c1:3a:4d:a7:b7:a6:30:50:4d:1d:7f:3b:23:25:eb:8b:9c:c0: 07:d7:98:63:2d:7a:97:76:0b:13:20:5b:10:b6:f0:2f:cf:fe: 8a:3c:66:a0:c5:56:47:79:db:70:b9:39:bb:a2:bd:de:36:70: 70:8b:af:4c:05:eb:07:90:14:c8:23:0d:c0:4a:2f:76:18:bf: 50:95:dc:14:6f:3d:3f:b8:42:6a:97:03:45:86:a1:59:9f:b6: 4f:8a:c7:5f:e3:8e:b1:4e:b2:d7:47:33:68:9b:62:e9:c7:b4: 3a:44:84:f2:93:b5:db:bb:b5:dc:d9:39:77:98:d6:28:b6:0f: 96:6d:af:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8cF95uMBzg72echRPl98MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWM1Yjc4MTVhNGQ4MGZmNGRlNjVmZDhhNjM4YzMxZGRlNGFhN2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYnWB7Nfs8WKkPPdrLocuYlqS9SJ jvaOleW+nfVb6gC0NisgLbLZ15Q9mCl72eeEp84KdlWOecjlLUeCNwhsXP7srHkv m9spi7zKJ2t9whZQ9w1CHtimCXhNyBJH2aOKTHDjKFo4b2l3HSVzxYYHwV/trILe RkwHaIt8/QAhP6EGZr2AXL9R7z9rbOF3q3AwtUqZG7r1mTDuwZc6eIsAP3gtyKbu MscwuJNTPc4Nxjug2h6tb3wrc74AIlr6FzBIYFqKI1e7qMb+YxFMt0LKuJq58/Ws gjw3sjE2UvkXy9VWRs8WJxIZzJEOOfZngyW5F2+BQPatfNTjJqZ5XULJNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMrFt4FaTYD/TeZf2KY4wx3eSqf/MB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEveXNXM2dWcE5nUDlONWxfWXBqakRIZDVLcF84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZWRMA0G CSqGSIb3DQEBCwUAA4IBAQB+vm9Bi9oNSM3P4DEvFRdNcr8V5Ci4BYVNZ2hnEsaK j0mT/6WkCBoyFMbV7lVQ1k3pEFxpaisPMewujkfMCWEg9vmFmsGFJGEUfcDLTpsN IJD+X47gZ5ZmluTsYR3aNBgHoR5LWnTJaDeHYrzWfFHuIf5MLLl7c4JR1ap1dTnB Ok2nt6YwUE0dfzsjJeuLnMAH15hjLXqXdgsTIFsQtvAvz/6KPGagxVZHedtwuTm7 or3eNnBwi69MBesHkBTIIw3ASi92GL9QldwUbz0/uEJqlwNFhqFZn7ZPisdf446x TrLXRzNom2Lpx7Q6RITyk7Xbu7Xc2Tl3mNYotg+Wba+s -----END CERTIFICATE-----Generated at Tue Jan 20 09:07:39 2026 by rpki-client