This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/ywNEo0c6G_3EtU_rhMpvOTWsLBk.roa File: ywNEo0c6G_3EtU_rhMpvOTWsLBk.roa (raw, json) Hash identifier: DK9+AlzaJPs7Bge4vOR9auQX8qnNw3cNCE94Ti0BdaM= Subject key identifier: CB:03:44:A3:47:3A:1B:FD:C4:B5:4F:EB:84:CA:6F:39:35:AC:2C:19 Certificate issuer: /CN=bea649ef6030fc80848fdfe21d4321ac8011fd10 Certificate serial: 019B7F832D6BFA1805BF3AB6EBA0005A2A81 Authority key identifier: BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/ywNEo0c6G_3EtU_rhMpvOTWsLBk.roa Signing time: Fri 02 Jan 2026 16:21:01 +0000 ROA not before: Fri 02 Jan 2026 16:21:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205690 IP address blocks: 45.91.124.0/24 maxlen: 24 2a0e:f43:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:2d:6b:fa:18:05:bf:3a:b6:eb:a0:00:5a:2a:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bea649ef6030fc80848fdfe21d4321ac8011fd10 Validity Not Before: Jan 2 16:21:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb0344a3473a1bfdc4b54feb84ca6f3935ac2c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8a:26:d4:a1:a3:3e:22:5b:e6:cb:31:e5:bc: a7:6b:9b:f2:d4:8b:88:cc:b3:a2:62:98:bd:86:b3: c6:06:e4:f5:a9:c1:ff:77:5b:2a:60:bd:b5:cf:9c: ec:20:1e:d0:46:d5:6b:d9:fe:07:dc:74:fb:1e:4b: 79:06:c1:dc:4d:b9:86:2a:9f:e8:70:22:24:c2:a0: 07:aa:92:a7:27:3f:a3:b0:d5:e5:f0:e2:1c:e6:71: e4:38:a5:56:9b:f8:55:54:d0:ee:99:d6:70:2e:c0: b1:8f:47:40:2d:5f:44:0b:2d:51:0f:0b:3d:05:3e: a7:72:9d:d9:b2:15:2e:ba:99:15:b7:bd:4f:b9:68: 04:d1:b8:4d:6b:d1:e4:bb:e2:ef:e2:dd:00:d2:5f: a6:a4:09:4d:db:ad:ba:21:a3:86:e7:ba:17:41:e5: 87:d4:d6:a1:7e:da:a0:15:40:40:85:1e:82:45:61: 7a:c0:70:af:78:95:0d:77:fb:1e:11:89:04:55:78: 50:5f:ed:95:ba:60:da:53:3d:8a:6c:0e:43:98:fc: 43:24:e2:d2:ac:6c:d9:65:d2:e9:1a:30:e6:4d:3d: 76:67:8f:2b:f0:ca:1e:57:a2:ec:0f:59:d3:85:91: 9d:ac:4a:b7:51:2c:a8:15:7d:2f:de:a5:85:65:52: 58:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:03:44:A3:47:3A:1B:FD:C4:B5:4F:EB:84:CA:6F:39:35:AC:2C:19 X509v3 Authority Key Identifier: keyid:BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/ywNEo0c6G_3EtU_rhMpvOTWsLBk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.124.0/24 IPv6: 2a0e:f43:1::/48 Signature Algorithm: sha256WithRSAEncryption 9e:c5:36:3a:b7:bb:42:e4:a9:b0:8a:d6:6c:2d:b6:70:de:7b: a0:e7:b3:6e:48:eb:d1:68:43:6d:5d:03:a0:ef:bc:2a:1e:5d: 06:3f:83:f5:d6:d8:2c:0d:21:77:37:c7:d8:08:02:36:e7:61: 35:53:55:f4:16:a2:c4:7c:d3:ac:52:07:f9:db:f3:e0:73:25: e0:16:a8:2d:a9:2d:24:9f:86:3c:07:f6:18:78:ea:f0:61:7b: 9b:37:52:b6:da:7b:87:19:5b:7e:6b:d9:4e:55:5e:78:84:60: 2a:3c:95:af:67:1f:2f:9a:f4:7f:99:f6:16:27:8a:54:34:06: fb:0c:33:83:c3:5f:b6:d7:92:36:91:e4:8f:6b:aa:85:78:db: 1f:fb:21:4e:b6:63:a5:42:8c:dc:dd:90:73:fb:d5:19:59:77: c5:c2:5a:23:a0:c3:cc:72:20:0f:a1:ed:38:d5:94:06:ff:4a: 7a:a6:10:2a:67:39:67:41:3f:46:1f:dc:73:66:16:8d:b2:30: c8:d5:d3:cc:72:68:25:dc:9f:61:aa:d1:5f:7a:40:29:c9:b2: 08:aa:5d:ba:ae:2a:fd:dc:92:bb:3f:4e:30:43:80:88:86:38: cc:3f:9b:c2:9a:77:75:2a:cd:3d:0b:c3:37:4b:f2:06:12:f3: 58:e5:48:9e -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/gy1r+hgFvzq266AAWiqBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYTY0OWVmNjAzMGZjODA4NDhmZGZlMjFkNDMyMWFjODAx MWZkMTAwHhcNMjYwMTAyMTYyMTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjAzNDRhMzQ3M2ExYmZkYzRiNTRmZWI4NGNhNmYzOTM1YWMyYzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4om1KGjPiJb5ssx5byna5vy1IuI zLOiYpi9hrPGBuT1qcH/d1sqYL21z5zsIB7QRtVr2f4H3HT7Hkt5BsHcTbmGKp/o cCIkwqAHqpKnJz+jsNXl8OIc5nHkOKVWm/hVVNDumdZwLsCxj0dALV9ECy1RDws9 BT6ncp3ZshUuupkVt71PuWgE0bhNa9Hku+Lv4t0A0l+mpAlN2626IaOG57oXQeWH 1NahftqgFUBAhR6CRWF6wHCveJUNd/seEYkEVXhQX+2VumDaUz2KbA5DmPxDJOLS rGzZZdLpGjDmTT12Z48r8MoeV6LsD1nThZGdrEq3USyoFX0v3qWFZVJYxQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMsDRKNHOhv9xLVP64TKbzk1rCwZMB8GA1UdIwQY MBaAFL6mSe9gMPyAhI/f4h1DIayAEf0QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnFaSjcyQXdfSUNFajlfaUhVTWhySUFSX1JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xOTQ1NWItZDJjZi00ZTVmLWJmNTgt MjFkZjU1YmE5ZWJmLzEveXdORW8wYzZHXzNFdFVfcmhNcHZPVFdzTEJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xOTQ1NWItZDJjZi00ZTVmLWJmNTgtMjFkZjU1YmE5ZWJm LzEvdnFaSjcyQXdfSUNFajlfaUhVTWhySUFSX1JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALVt8MA8E AgACMAkDBwAqDg9DAAEwDQYJKoZIhvcNAQELBQADggEBAJ7FNjq3u0LkqbCK1mwt tnDee6Dns25I69FoQ21dA6DvvCoeXQY/g/XW2CwNIXc3x9gIAjbnYTVTVfQWosR8 06xSB/nb8+BzJeAWqC2pLSSfhjwH9hh46vBhe5s3Urbae4cZW35r2U5VXniEYCo8 la9nHy+a9H+Z9hYnilQ0BvsMM4PDX7bXkjaR5I9rqoV42x/7IU62Y6VCjNzdkHP7 1RlZd8XCWiOgw8xyIA+h7TjVlAb/SnqmECpnOWdBP0Yf3HNmFo2yMMjV08xyaCXc n2Gq0V96QCnJsgiqXbquKv3ckrs/TjBDgIiGOMw/m8Kad3UqzT0LwzdL8gYS81jl SJ4= -----END CERTIFICATE-----Generated at Wed Jan 21 10:34:28 2026 by rpki-client