This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/Y8cmMZQvMnJkziqHhszvZV_UjeQ.roa File: Y8cmMZQvMnJkziqHhszvZV_UjeQ.roa (raw, json) Hash identifier: cYgGX/s9jr31rZGmmaEtyXpNrfjq8EGIHIKPU1pqwxk= Subject key identifier: 63:C7:26:31:94:2F:32:72:64:CE:2A:87:86:CC:EF:65:5F:D4:8D:E4 Certificate issuer: /CN=c21e32d047c5d1b9e26770c3840304cf6971de1c Certificate serial: 019B7C1248FBEEF72198CA8CB1BFEDA56DEC Authority key identifier: C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/Y8cmMZQvMnJkziqHhszvZV_UjeQ.roa Signing time: Fri 02 Jan 2026 00:18:51 +0000 ROA not before: Fri 02 Jan 2026 00:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 45.82.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:48:fb:ee:f7:21:98:ca:8c:b1:bf:ed:a5:6d:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c21e32d047c5d1b9e26770c3840304cf6971de1c Validity Not Before: Jan 2 00:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63c72631942f327264ce2a8786ccef655fd48de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:16:76:dc:23:88:4b:fe:54:e5:9d:65:0a:0a: b2:2c:d4:2a:8c:a0:fe:da:87:52:3a:d7:d1:37:30: 81:6b:92:ec:43:8e:b4:86:fb:20:ad:4a:45:c8:71: 2e:19:d5:85:09:0d:3a:c1:e4:bd:63:90:d1:b0:37: 9a:9d:b4:6c:92:55:75:f9:5e:2a:d3:9a:7c:d9:f4: 73:0e:07:5c:c3:94:87:b9:d5:df:36:e4:ce:12:7e: 8f:5e:c9:db:b9:e8:4a:77:81:4a:0b:50:c9:cb:4b: 72:de:9a:03:e8:35:ce:5e:42:c7:14:1c:ee:21:d6: 68:91:49:5e:0b:57:3f:61:01:aa:9b:b5:36:cb:ea: c2:2e:8e:be:53:e5:91:ee:a5:39:e9:6d:e3:d5:61: 78:7a:57:33:bd:93:9b:c5:c6:a6:fa:8a:ad:42:28: 82:0e:ca:12:a6:71:0c:51:e9:50:7a:2c:47:53:28: 16:6a:9a:a9:90:99:1f:86:f5:e7:c8:b8:7d:7c:13: 01:75:7b:3c:85:21:d2:76:bb:cb:4c:4a:36:a3:f4: 6d:0a:64:9b:5a:97:41:8f:69:74:68:c8:8f:9a:16: fa:c5:06:31:7a:ac:fc:a2:73:bf:ef:aa:1c:54:04: 4a:ca:d1:be:9e:b2:be:e5:70:aa:69:3e:9d:c5:0b: c0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C7:26:31:94:2F:32:72:64:CE:2A:87:86:CC:EF:65:5F:D4:8D:E4 X509v3 Authority Key Identifier: keyid:C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/Y8cmMZQvMnJkziqHhszvZV_UjeQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.119.0/24 Signature Algorithm: sha256WithRSAEncryption b7:e9:03:34:a0:3b:5f:77:7f:45:19:a1:ff:84:07:c2:e7:d6: 10:9b:16:18:5f:b7:88:66:ef:6d:c9:e3:6c:c2:13:89:7b:02: e3:76:98:a1:bf:38:7b:bb:70:da:f0:cb:b1:4f:cd:9e:55:39: b7:d3:1d:14:32:13:9b:d2:35:99:89:2d:ce:58:93:da:83:a2: bb:ba:7a:a6:41:a6:c2:ae:a6:9b:02:aa:cf:78:00:2e:d9:e2: 43:65:81:fe:e7:5a:01:32:e2:35:c5:ac:95:fc:6c:c5:f2:fa: f9:fd:a0:2f:11:ab:57:28:df:cf:d2:88:be:b6:45:0c:3e:9b: df:6a:b8:64:a7:c6:35:76:ef:67:30:7d:f5:95:63:31:c3:6d: 33:34:68:62:46:f0:dc:d6:35:b5:8f:1e:9d:35:a4:dc:f8:e0: b0:47:8f:97:0b:66:83:3e:9e:7f:58:36:89:da:37:a5:5e:b9: ef:51:a2:af:14:c1:f1:ea:6a:e1:7c:c5:49:bf:d0:bf:c6:c3: 06:0e:77:43:1c:2f:5e:bc:b2:46:c0:c1:58:93:20:25:d3:e8: 43:f2:8b:bc:cb:8a:3d:8f:74:2d:cb:ed:8e:0f:79:2f:0c:9d: 91:1b:90:a4:0a:e3:4e:ad:05:13:36:4c:5b:b1:db:1d:ba:75: ab:77:1d:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ekj77vchmMqMsb/tpW3sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMWUzMmQwNDdjNWQxYjllMjY3NzBjMzg0MDMwNGNmNjk3 MWRlMWMwHhcNMjYwMTAyMDAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2M3MjYzMTk0MmYzMjcyNjRjZTJhODc4NmNjZWY2NTVmZDQ4ZGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBZ23COIS/5U5Z1lCgqyLNQqjKD+ 2odSOtfRNzCBa5LsQ460hvsgrUpFyHEuGdWFCQ06weS9Y5DRsDeanbRsklV1+V4q 05p82fRzDgdcw5SHudXfNuTOEn6PXsnbuehKd4FKC1DJy0ty3poD6DXOXkLHFBzu IdZokUleC1c/YQGqm7U2y+rCLo6+U+WR7qU56W3j1WF4elczvZObxcam+oqtQiiC DsoSpnEMUelQeixHUygWapqpkJkfhvXnyLh9fBMBdXs8hSHSdrvLTEo2o/RtCmSb WpdBj2l0aMiPmhb6xQYxeqz8onO/76ocVARKytG+nrK+5XCqaT6dxQvATQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGPHJjGULzJyZM4qh4bM72Vf1I3kMB8GA1UdIwQY MBaAFMIeMtBHxdG54mdww4QDBM9pcd4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2g0eTBFZkYwYm5pWjNERGhBTUV6Mmx4M2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8zMDBiZDQtMDM1Ni00YzQ0LTgzY2Yt MzhlZmNmZGM0MTdiLzEvWThjbU1aUXZNbkpremlxSGhzenZaVl9VamVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8zMDBiZDQtMDM1Ni00YzQ0LTgzY2YtMzhlZmNmZGM0MTdi LzEvd2g0eTBFZkYwYm5pWjNERGhBTUV6Mmx4M2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVJ3MA0G CSqGSIb3DQEBCwUAA4IBAQC36QM0oDtfd39FGaH/hAfC59YQmxYYX7eIZu9tyeNs whOJewLjdpihvzh7u3Da8MuxT82eVTm30x0UMhOb0jWZiS3OWJPag6K7unqmQabC rqabAqrPeAAu2eJDZYH+51oBMuI1xayV/GzF8vr5/aAvEatXKN/P0oi+tkUMPpvf arhkp8Y1du9nMH31lWMxw20zNGhiRvDc1jW1jx6dNaTc+OCwR4+XC2aDPp5/WDaJ 2jelXrnvUaKvFMHx6mrhfMVJv9C/xsMGDndDHC9evLJGwMFYkyAl0+hD8ou8y4o9 j3Qty+2OD3kvDJ2RG5CkCuNOrQUTNkxbsdsdunWrdx05 -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:21 2026 by rpki-client