This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/C4YLfveDNiaL-lcFUvdtQySLbH8.roa File: C4YLfveDNiaL-lcFUvdtQySLbH8.roa (raw, json) Hash identifier: fAR/05xQFee/ID1Zs1RfCaALZWL5X+NyjX5h5YcPkkA= Subject key identifier: 0B:86:0B:7E:F7:83:36:26:8B:FA:57:05:52:F7:6D:43:24:8B:6C:7F Certificate issuer: /CN=73ef4bbafdc73e53c099d4d52e9c9effa8379b4f Certificate serial: 019B7CEDD5ACB22792A73FEAAE7B7D7BB3D2 Authority key identifier: 73:EF:4B:BA:FD:C7:3E:53:C0:99:D4:D5:2E:9C:9E:FF:A8:37:9B:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-9Luv3HPlPAmdTVLpye_6g3m08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/C4YLfveDNiaL-lcFUvdtQySLbH8.roa Signing time: Fri 02 Jan 2026 04:18:40 +0000 ROA not before: Fri 02 Jan 2026 04:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44486 IP address blocks: 45.67.68.0/24 maxlen: 24 45.67.69.0/24 maxlen: 24 45.67.70.0/24 maxlen: 24 45.67.71.0/24 maxlen: 24 2a09:71c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.mft rsync://rpki.ripe.net/repository/DEFAULT/c-9Luv3HPlPAmdTVLpye_6g3m08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:d5:ac:b2:27:92:a7:3f:ea:ae:7b:7d:7b:b3:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73ef4bbafdc73e53c099d4d52e9c9effa8379b4f Validity Not Before: Jan 2 04:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b860b7ef78336268bfa570552f76d43248b6c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:92:6b:f1:c1:b4:24:5d:dc:98:ef:b5:87:32: 31:2f:62:79:5e:fc:12:fc:2e:ba:f9:81:b4:98:89: 69:88:fa:fd:db:a1:5b:20:8b:cf:a6:54:e8:21:a8: f5:90:65:85:92:43:84:c2:e9:9f:11:be:9b:21:09: 87:48:63:9c:ae:fb:b1:03:25:88:3a:27:c5:57:c3: 2a:fc:7c:d3:07:8c:c1:78:38:c5:e3:f8:cf:6c:84: 0c:67:19:94:fc:4c:f5:8d:df:f6:ff:a2:05:42:33: 24:fd:7a:c6:94:dc:a0:69:72:d5:01:e7:2f:a7:ec: 7c:a1:34:b4:1e:88:ab:a0:c3:b0:9c:8a:62:28:88: b1:58:35:50:f9:77:84:0f:88:76:44:1c:a4:69:ce: af:0a:28:28:96:3f:56:33:0a:56:66:84:57:9c:af: ec:89:81:25:79:63:be:24:b5:06:19:c7:cf:d0:ca: 18:d0:0f:39:36:38:d3:fa:25:98:66:dc:dd:77:97: f4:66:7d:88:dc:fc:11:f7:dc:22:26:98:b8:21:ba: 6c:4d:8c:e5:3c:94:3e:5f:3f:fd:e5:d4:d4:0c:90: d5:b0:66:3a:2a:44:ec:bf:a0:a5:15:18:d9:55:1c: 52:aa:76:d7:34:49:ec:cf:bd:56:65:6c:71:33:64: 57:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:86:0B:7E:F7:83:36:26:8B:FA:57:05:52:F7:6D:43:24:8B:6C:7F X509v3 Authority Key Identifier: keyid:73:EF:4B:BA:FD:C7:3E:53:C0:99:D4:D5:2E:9C:9E:FF:A8:37:9B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-9Luv3HPlPAmdTVLpye_6g3m08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/C4YLfveDNiaL-lcFUvdtQySLbH8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.68.0/22 IPv6: 2a09:71c0::/29 Signature Algorithm: sha256WithRSAEncryption 48:9d:54:0e:d8:96:36:13:66:57:67:bf:ad:c1:0e:a5:86:6a: f3:05:3a:8f:5a:c8:d2:41:d5:c0:9a:dc:22:db:13:7f:ca:48: f2:9b:de:da:5e:b8:d3:47:b2:81:f6:b2:3c:e8:02:6c:55:43: 91:0d:ce:75:41:09:90:a4:c6:2f:f4:94:d7:23:50:24:99:78: 7f:3e:84:ad:78:4c:ef:cf:99:1d:4a:1c:1a:66:2c:c8:68:ee: 22:37:ff:ac:30:cd:05:cb:1d:bf:27:d6:c1:0d:3d:48:b7:a7: 42:7e:f5:d4:9e:0f:eb:15:23:9c:b0:91:18:81:5e:c0:38:ef: c8:f5:eb:2a:17:ab:2a:91:b3:38:3b:56:07:40:d0:29:9e:ef: 64:7e:b9:4c:b7:a4:08:26:c0:92:b6:55:7b:35:17:9d:2d:32: 0b:c5:e4:cb:33:4f:1d:8b:58:31:9d:5b:63:f3:08:92:32:1b: 98:f4:3e:22:61:f1:e0:cd:64:79:5e:f6:82:91:b3:77:dc:14: 21:a1:de:00:d6:da:71:b2:f2:b5:3b:e8:88:dc:04:76:21:17: f2:33:4f:6e:9d:43:fe:af:bc:a3:e7:27:f2:92:df:f1:51:72: af:02:b9:5e:f8:7a:50:79:7c:c6:41:3d:61:2e:d9:9c:b1:99: 31:cc:93:98 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87dWssieSpz/qrnt9e7PSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZWY0YmJhZmRjNzNlNTNjMDk5ZDRkNTJlOWM5ZWZmYTgz NzliNGYwHhcNMjYwMTAyMDQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjg2MGI3ZWY3ODMzNjI2OGJmYTU3MDU1MmY3NmQ0MzI0OGI2YzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05Jr8cG0JF3cmO+1hzIxL2J5XvwS /C66+YG0mIlpiPr926FbIIvPplToIaj1kGWFkkOEwumfEb6bIQmHSGOcrvuxAyWI OifFV8Mq/HzTB4zBeDjF4/jPbIQMZxmU/Ez1jd/2/6IFQjMk/XrGlNygaXLVAecv p+x8oTS0HoiroMOwnIpiKIixWDVQ+XeED4h2RBykac6vCigolj9WMwpWZoRXnK/s iYEleWO+JLUGGcfP0MoY0A85NjjT+iWYZtzdd5f0Zn2I3PwR99wiJpi4IbpsTYzl PJQ+Xz/95dTUDJDVsGY6KkTsv6ClFRjZVRxSqnbXNEnsz71WZWxxM2RXqwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAuGC373gzYmi/pXBVL3bUMki2x/MB8GA1UdIwQY MBaAFHPvS7r9xz5TwJnU1S6cnv+oN5tPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYy05THV2M0hQbFBBbWRUVkxweWVfNmczbTA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8zNjJhNGQtOWFlNi00MDEyLWI1Yjgt MmNjNzUzZTUzOTU1LzEvQzRZTGZ2ZUROaWFMLWxjRlV2ZHRReVNMYkg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8zNjJhNGQtOWFlNi00MDEyLWI1YjgtMmNjNzUzZTUzOTU1 LzEvYy05THV2M0hQbFBBbWRUVkxweWVfNmczbTA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLUNEMA0E AgACMAcDBQMqCXHAMA0GCSqGSIb3DQEBCwUAA4IBAQBInVQO2JY2E2ZXZ7+twQ6l hmrzBTqPWsjSQdXAmtwi2xN/ykjym97aXrjTR7KB9rI86AJsVUORDc51QQmQpMYv 9JTXI1AkmXh/PoSteEzvz5kdShwaZizIaO4iN/+sMM0Fyx2/J9bBDT1It6dCfvXU ng/rFSOcsJEYgV7AOO/I9esqF6sqkbM4O1YHQNApnu9kfrlMt6QIJsCStlV7NRed LTILxeTLM08di1gxnVtj8wiSMhuY9D4iYfHgzWR5XvaCkbN33BQhod4A1tpxsvK1 O+iI3AR2IRfyM09unUP+r7yj5yfykt/xUXKvArle+HpQeXzGQT1hLtmcsZkxzJOY -----END CERTIFICATE-----Generated at Sun Jan 18 08:33:19 2026 by rpki-client