This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/sdmYYHBWBm6UFAQB-DGqzWowKoQ.roa File: sdmYYHBWBm6UFAQB-DGqzWowKoQ.roa (raw, json) Hash identifier: xw4WGl5O3WNIHQDPpwsYOM5J9KOYaAj+suIdfVKR7XU= Subject key identifier: B1:D9:98:60:70:56:06:6E:94:14:04:01:F8:31:AA:CD:6A:30:2A:84 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C138528334535706764A51001C76130 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/sdmYYHBWBm6UFAQB-DGqzWowKoQ.roa Signing time: Fri 02 Jan 2026 00:20:12 +0000 ROA not before: Fri 02 Jan 2026 00:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202513 IP address blocks: 45.90.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:85:28:33:45:35:70:67:64:a5:10:01:c7:61:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1d998607056066e94140401f831aacd6a302a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0d:6d:21:a1:5c:b1:a2:80:34:78:2f:02:86: a8:60:bb:a6:07:70:01:3c:65:2d:44:b9:95:94:12: d6:c2:74:84:a8:a4:73:19:f1:56:17:0f:62:93:64: 50:3c:df:d6:9a:db:81:ba:21:2f:ad:1e:09:5b:55: 2a:0b:c4:3d:59:50:b8:2c:2e:00:1f:63:91:29:6e: 81:e4:11:db:32:e5:e0:3f:ea:f1:93:32:e1:ed:c5: ec:6f:42:54:66:73:ba:ab:ff:f8:5c:a0:26:a1:0c: d4:10:a1:60:ae:7a:94:e5:41:5b:ef:9a:19:9a:97: 61:fd:14:52:a9:b9:2c:6e:6e:75:14:3c:c5:c9:8b: 6c:e1:74:23:63:0c:41:56:31:f0:c2:b7:d8:f2:c1: 8d:37:4e:36:0b:bf:66:3b:f6:3b:6f:f7:78:33:0d: b9:23:22:ea:f2:bd:b7:11:22:ac:86:b9:47:d4:6a: 9e:4e:5c:e2:0d:21:81:8b:33:4d:13:8f:7c:fc:04: 70:ad:9b:9e:07:2b:bc:a9:2f:d9:63:39:95:33:40: 2e:15:1c:21:31:36:e7:5d:e6:16:6b:f9:c0:d6:62: 4e:3b:50:4b:3f:cd:f9:37:b6:e5:a8:1d:24:a6:e4: 5d:43:b1:3d:31:73:f7:db:bc:32:3e:8b:14:d1:b0: cf:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D9:98:60:70:56:06:6E:94:14:04:01:F8:31:AA:CD:6A:30:2A:84 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/sdmYYHBWBm6UFAQB-DGqzWowKoQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.237.0/24 Signature Algorithm: sha256WithRSAEncryption 15:77:fc:fa:fb:c2:eb:f9:43:c7:54:a9:04:a2:fa:b0:64:58: 12:3a:de:23:dc:8b:15:f2:bb:23:5d:b2:e8:30:84:cb:93:5c: 85:98:89:de:dc:ca:5c:91:dc:24:2a:7f:95:45:19:b1:5a:a8: a3:a7:50:fb:bb:08:ad:1f:e1:c4:d2:22:c8:0f:c5:58:07:d9: c5:42:6f:96:57:cd:b2:a1:9d:24:9b:b7:ea:70:35:e4:2b:b2: a2:22:47:d0:43:b9:66:95:c3:b4:57:d9:e9:57:ae:ec:30:54: 9f:29:4a:cf:eb:0d:eb:28:72:5f:b9:d1:62:17:5c:0c:4a:40: 3f:f1:b6:61:09:5c:45:04:2e:c7:77:6d:5a:ea:8e:6c:6b:40: c3:e1:c9:d6:35:80:dd:95:fe:bb:ab:b2:a6:c3:6e:e5:e1:75: 1c:ec:27:26:cd:7f:6f:2c:0a:12:4f:82:21:b2:b3:85:9b:24: 45:5e:dd:19:41:8d:14:1a:30:80:b2:72:f0:a2:31:3e:e1:4f: ad:06:e1:bc:b2:10:5b:d6:67:b9:46:2c:e1:7c:26:fb:29:99: 6b:37:db:3a:b7:09:ff:e4:c9:05:de:2f:65:4d:70:21:26:23: 25:ce:65:59:27:5a:b3:73:ca:42:52:0f:17:26:6e:12:27:1a: d2:ef:7e:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E4UoM0U1cGdkpRABx2EwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWQ5OTg2MDcwNTYwNjZlOTQxNDA0MDFmODMxYWFjZDZhMzAyYTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ1tIaFcsaKANHgvAoaoYLumB3AB PGUtRLmVlBLWwnSEqKRzGfFWFw9ik2RQPN/WmtuBuiEvrR4JW1UqC8Q9WVC4LC4A H2ORKW6B5BHbMuXgP+rxkzLh7cXsb0JUZnO6q//4XKAmoQzUEKFgrnqU5UFb75oZ mpdh/RRSqbksbm51FDzFyYts4XQjYwxBVjHwwrfY8sGNN042C79mO/Y7b/d4Mw25 IyLq8r23ESKshrlH1GqeTlziDSGBizNNE498/ARwrZueByu8qS/ZYzmVM0AuFRwh MTbnXeYWa/nA1mJOO1BLP835N7blqB0kpuRdQ7E9MXP327wyPosU0bDPFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLHZmGBwVgZulBQEAfgxqs1qMCqEMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvc2RtWVlIQldCbTZVRkFRQi1ER3F6V293S29RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVrtMA0G CSqGSIb3DQEBCwUAA4IBAQAVd/z6+8Lr+UPHVKkEovqwZFgSOt4j3IsV8rsjXbLo MITLk1yFmIne3MpckdwkKn+VRRmxWqijp1D7uwitH+HE0iLID8VYB9nFQm+WV82y oZ0km7fqcDXkK7KiIkfQQ7lmlcO0V9npV67sMFSfKUrP6w3rKHJfudFiF1wMSkA/ 8bZhCVxFBC7Hd21a6o5sa0DD4cnWNYDdlf67q7Kmw27l4XUc7CcmzX9vLAoST4Ih srOFmyRFXt0ZQY0UGjCAsnLwojE+4U+tBuG8shBb1me5RizhfCb7KZlrN9s6twn/ 5MkF3i9lTXAhJiMlzmVZJ1qzc8pCUg8XJm4SJxrS736N -----END CERTIFICATE-----Generated at Fri Jan 2 23:48:16 2026 by rpki-client