This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Yk38b6eeY3QHHKxSfqTehFtDRX0.roa File: Yk38b6eeY3QHHKxSfqTehFtDRX0.roa (raw, json) Hash identifier: 3VUNR4A+UrVmRNvy+nrRjkWczKr1oMX/CkP1vPV2gw8= Subject key identifier: 62:4D:FC:6F:A7:9E:63:74:07:1C:AC:52:7E:A4:DE:84:5B:43:45:7D Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019C256202761A9650DCF792A5DEA7DE6A1C Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Yk38b6eeY3QHHKxSfqTehFtDRX0.roa Signing time: Tue 03 Feb 2026 21:21:46 +0000 ROA not before: Tue 03 Feb 2026 21:21:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214311 IP address blocks: 45.90.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:25:62:02:76:1a:96:50:dc:f7:92:a5:de:a7:de:6a:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Feb 3 21:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=624dfc6fa79e6374071cac527ea4de845b43457d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2f:77:e2:8c:70:a4:6d:88:18:06:33:04:57: 30:39:63:26:fc:b6:37:0d:56:a6:04:48:e8:12:bd: ce:51:d8:ce:4b:b7:e8:a0:02:d0:06:6a:ca:fc:ae: f2:33:84:c8:9f:d0:67:a3:ed:0a:49:b6:8d:1b:ee: 06:6c:cd:e1:8e:7f:b3:a4:42:08:72:b8:95:ea:4e: 70:5f:19:d1:46:94:81:f6:e2:2b:a2:bb:fa:bf:ce: 2c:31:c8:8f:1f:02:d7:14:08:b5:48:14:6d:02:eb: 91:2d:59:aa:68:54:f9:b3:1a:58:c5:b0:da:c4:71: e5:a6:a6:d2:73:0f:3f:18:d9:29:c6:ce:f1:2d:87: 48:24:fc:42:ff:2b:44:61:21:18:f1:cd:27:a3:ed: b3:54:33:65:ff:d3:4f:06:77:26:26:8c:61:54:d6: e1:55:9a:e0:86:01:a3:8f:ac:0e:7a:60:1f:9a:76: b3:da:14:79:f4:e0:33:c0:03:86:33:b6:ce:45:12: fc:72:f8:fa:2f:15:53:34:b6:3e:c1:64:e5:aa:63: 37:10:a4:60:ac:55:b2:74:73:03:b1:77:83:10:c0: 5d:8a:2d:b1:1c:0c:98:1f:5f:22:e1:93:36:04:3f: 72:e6:24:69:15:75:fb:7e:ec:10:cf:5d:a7:30:d3: 17:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:4D:FC:6F:A7:9E:63:74:07:1C:AC:52:7E:A4:DE:84:5B:43:45:7D X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Yk38b6eeY3QHHKxSfqTehFtDRX0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.16.0/24 Signature Algorithm: sha256WithRSAEncryption 48:75:c1:4e:6c:5f:df:86:54:fe:61:4b:2e:c2:7d:f1:4b:bb: df:b4:de:06:9c:65:75:24:48:ed:76:00:10:c6:be:e8:09:ae: 95:89:71:5d:39:14:0e:d8:db:10:0f:dc:90:e3:6d:28:31:15: 1a:cb:b5:01:15:d5:7a:e7:c3:a8:94:6a:11:14:b4:95:19:b2: 3a:a0:c0:ee:8d:8a:a8:75:f1:1d:5e:6f:df:0a:aa:1e:6f:27: 88:71:aa:0b:3d:ef:8f:50:13:88:9a:38:10:05:89:1d:86:7a: ff:dc:66:a9:eb:fe:e4:f9:a9:0c:20:79:fc:11:f3:6a:c0:d9: 14:5e:7a:89:0b:52:79:89:ae:01:99:88:95:56:81:0b:e8:d5: e5:66:81:1e:1a:60:3b:ae:0c:34:bf:18:bb:2b:a1:bf:fc:70: 40:a3:f0:82:5b:c9:a4:b9:ef:87:0e:50:9c:e7:68:d2:08:7d: b3:8f:58:70:7a:6e:61:35:e3:de:10:92:61:50:ee:66:33:1d: b0:58:52:63:48:a5:55:f3:f4:36:b5:57:bb:fc:29:36:20:26: e6:00:87:8b:f5:2b:93:5c:e0:0d:92:8a:ab:66:8a:c7:f3:84: 93:61:72:a0:b0:42:48:fa:3d:af:de:b0:24:8e:da:58:70:e9: 40:4f:e6:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwlYgJ2GpZQ3PeSpd6n3mocMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMjAzMjEyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjRkZmM2ZmE3OWU2Mzc0MDcxY2FjNTI3ZWE0ZGU4NDViNDM0NTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC934oxwpG2IGAYzBFcwOWMm/LY3 DVamBEjoEr3OUdjOS7fooALQBmrK/K7yM4TIn9Bno+0KSbaNG+4GbM3hjn+zpEII criV6k5wXxnRRpSB9uIrorv6v84sMciPHwLXFAi1SBRtAuuRLVmqaFT5sxpYxbDa xHHlpqbScw8/GNkpxs7xLYdIJPxC/ytEYSEY8c0no+2zVDNl/9NPBncmJoxhVNbh VZrghgGjj6wOemAfmnaz2hR59OAzwAOGM7bORRL8cvj6LxVTNLY+wWTlqmM3EKRg rFWydHMDsXeDEMBdii2xHAyYH18i4ZM2BD9y5iRpFXX7fuwQz12nMNMXtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGJN/G+nnmN0BxysUn6k3oRbQ0V9MB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvWWszOGI2ZWVZM1FISEt4U2ZxVGVoRnREUlgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVoQMA0G CSqGSIb3DQEBCwUAA4IBAQBIdcFObF/fhlT+YUsuwn3xS7vftN4GnGV1JEjtdgAQ xr7oCa6ViXFdORQO2NsQD9yQ420oMRUay7UBFdV658OolGoRFLSVGbI6oMDujYqo dfEdXm/fCqoebyeIcaoLPe+PUBOImjgQBYkdhnr/3Gap6/7k+akMIHn8EfNqwNkU XnqJC1J5ia4BmYiVVoEL6NXlZoEeGmA7rgw0vxi7K6G//HBAo/CCW8mkue+HDlCc 52jSCH2zj1hwem5hNePeEJJhUO5mMx2wWFJjSKVV8/Q2tVe7/Ck2ICbmAIeL9SuT XOANkoqrZorH84STYXKgsEJI+j2v3rAkjtpYcOlAT+Za -----END CERTIFICATE-----Generated at Thu Feb 5 02:34:12 2026 by rpki-client