This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/DyFCMXg_KX68gj-z_AnD05X2CoE.roa File: DyFCMXg_KX68gj-z_AnD05X2CoE.roa (raw, json) Hash identifier: +Pq9SO+0vt5lfu/xqNoJb4JQXbgkeEGIHjUJFo/xxmQ= Subject key identifier: 0F:21:42:31:78:3F:29:7E:BC:82:3F:B3:FC:09:C3:D3:95:F6:0A:81 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C13A5CFA194BC0878A6A93EEEE58362 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/DyFCMXg_KX68gj-z_AnD05X2CoE.roa Signing time: Fri 02 Jan 2026 00:20:20 +0000 ROA not before: Fri 02 Jan 2026 00:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 267121 IP address blocks: 45.147.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:a5:cf:a1:94:bc:08:78:a6:a9:3e:ee:e5:83:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f214231783f297ebc823fb3fc09c3d395f60a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:16:71:23:42:81:8d:aa:81:95:34:34:66:57: 49:f5:5c:84:ae:28:32:49:e9:e8:0b:e3:c9:9e:01: f5:0d:db:9d:55:30:21:45:e4:5f:9a:bd:2f:c3:ec: 07:2a:7f:9e:79:22:eb:99:f4:e3:12:19:e2:68:d4: cd:35:57:06:23:0b:15:f9:dd:a6:0e:b6:5c:5e:fa: a2:73:4e:b2:08:e5:29:29:6c:21:ec:79:db:e0:5d: 17:4f:89:51:eb:17:21:f2:b3:a0:a6:3a:10:cf:c6: fb:4d:34:6b:53:4b:03:e4:92:bf:49:ea:d1:85:96: fd:c9:b5:76:37:d2:de:ed:21:57:9c:26:6b:09:d8: 1a:ae:da:ad:56:b6:b2:03:32:b8:2c:36:5a:77:f6: 24:05:d3:06:aa:42:e3:e3:33:69:e0:62:2f:da:4d: 7a:f5:97:7c:34:f3:08:d6:25:a9:40:10:a7:2a:38: da:a0:15:ff:aa:4f:78:e8:10:c3:0c:b5:cc:f3:2c: ea:bd:d5:e0:79:28:bd:e9:73:17:e2:d2:75:50:9c: 37:4f:ee:d3:5f:ce:0c:37:ed:ce:33:59:84:05:40: 63:9b:51:dd:76:2b:b6:88:c5:c9:07:1e:34:ce:9e: 3c:51:50:03:36:b3:4e:76:4b:e6:5a:e3:d2:a0:6a: 65:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:21:42:31:78:3F:29:7E:BC:82:3F:B3:FC:09:C3:D3:95:F6:0A:81 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/DyFCMXg_KX68gj-z_AnD05X2CoE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.226.0/24 Signature Algorithm: sha256WithRSAEncryption 46:c2:64:d2:01:8f:5d:64:42:0d:b7:71:44:af:58:dc:ad:1c: ac:98:82:d4:7b:30:8c:3f:1c:04:ca:7b:81:55:65:35:cb:b0: 34:c4:9b:5d:a7:ef:b3:68:74:a5:6b:3a:8a:3b:bb:45:fe:b2: b7:62:1f:0c:e9:bc:0c:0f:cb:40:71:6f:bb:0f:3a:20:59:55: c6:79:7a:9d:6b:91:31:e2:47:77:d3:85:6e:2d:6f:bc:83:d7: ac:4d:c2:d1:c9:ab:c8:e1:a5:12:d0:e4:15:8f:fd:91:e8:48: f2:16:0a:4d:f1:83:78:0c:cc:ff:78:35:5b:2a:9a:3d:12:76: 63:b0:c5:67:e5:23:7d:d6:ae:3b:38:1e:50:1d:1a:14:02:03: 63:ff:87:11:99:1a:6b:ec:ca:a7:b8:c9:98:71:17:3f:5d:8b: 4f:c5:bc:de:b6:c7:47:9c:15:9d:4f:bc:9f:5e:37:4e:31:81: 44:3b:2c:44:75:2e:21:80:68:3d:cf:62:59:5e:28:3b:41:28: 7f:e7:9e:60:4e:8a:af:f5:79:5f:54:88:67:60:7e:8a:d5:0e: cf:3a:21:c1:b6:f3:97:85:f7:1d:09:ed:95:14:37:47:25:a2: 6b:cd:2e:69:29:a5:8e:8a:4b:88:18:cb:90:ca:ed:06:b5:ed: d7:a0:95:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E6XPoZS8CHimqT7u5YNiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjIxNDIzMTc4M2YyOTdlYmM4MjNmYjNmYzA5YzNkMzk1ZjYwYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxZxI0KBjaqBlTQ0ZldJ9VyErigy SenoC+PJngH1DdudVTAhReRfmr0vw+wHKn+eeSLrmfTjEhniaNTNNVcGIwsV+d2m DrZcXvqic06yCOUpKWwh7Hnb4F0XT4lR6xch8rOgpjoQz8b7TTRrU0sD5JK/SerR hZb9ybV2N9Le7SFXnCZrCdgartqtVrayAzK4LDZad/YkBdMGqkLj4zNp4GIv2k16 9Zd8NPMI1iWpQBCnKjjaoBX/qk946BDDDLXM8yzqvdXgeSi96XMX4tJ1UJw3T+7T X84MN+3OM1mEBUBjm1Hddiu2iMXJBx40zp48UVADNrNOdkvmWuPSoGplvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA8hQjF4Pyl+vII/s/wJw9OV9gqBMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvRHlGQ01YZ19LWDY4Z2otel9BbkQwNVgyQ29FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZPiMA0G CSqGSIb3DQEBCwUAA4IBAQBGwmTSAY9dZEINt3FEr1jcrRysmILUezCMPxwEynuB VWU1y7A0xJtdp++zaHSlazqKO7tF/rK3Yh8M6bwMD8tAcW+7DzogWVXGeXqda5Ex 4kd304VuLW+8g9esTcLRyavI4aUS0OQVj/2R6EjyFgpN8YN4DMz/eDVbKpo9EnZj sMVn5SN91q47OB5QHRoUAgNj/4cRmRpr7MqnuMmYcRc/XYtPxbzetsdHnBWdT7yf XjdOMYFEOyxEdS4hgGg9z2JZXig7QSh/555gToqv9XlfVIhnYH6K1Q7POiHBtvOX hfcdCe2VFDdHJaJrzS5pKaWOikuIGMuQyu0Gte3XoJXt -----END CERTIFICATE-----Generated at Fri Jan 2 23:53:22 2026 by rpki-client