This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/yXsRkQTNVDsj9z8xG-aM4CEyin8.roa File: yXsRkQTNVDsj9z8xG-aM4CEyin8.roa (raw, json) Hash identifier: ts64cc9kwijL/HlxdE2LWSMe9OcM5b1Rlyuz3fR2RTQ= Subject key identifier: C9:7B:11:91:04:CD:54:3B:23:F7:3F:31:1B:E6:8C:E0:21:32:8A:7F Certificate issuer: /CN=f4ef5dba100a92b2444f3e512d01a592c01951c2 Certificate serial: 019B7AC7B2B49FDA0A7317408AE12CB74D83 Authority key identifier: F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/yXsRkQTNVDsj9z8xG-aM4CEyin8.roa Signing time: Thu 01 Jan 2026 18:17:46 +0000 ROA not before: Thu 01 Jan 2026 18:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215687 IP address blocks: 45.148.212.0/24 maxlen: 24 45.148.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 15:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:b2:b4:9f:da:0a:73:17:40:8a:e1:2c:b7:4d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4ef5dba100a92b2444f3e512d01a592c01951c2 Validity Not Before: Jan 1 18:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c97b119104cd543b23f73f311be68ce021328a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c8:60:e5:c2:2f:b3:80:25:aa:8d:86:1c:cd: bc:6c:c7:2b:9d:26:2e:e7:18:af:6e:ec:04:4b:91: 08:25:b8:94:8f:7d:23:af:e8:c7:8a:11:c1:eb:a4: bc:cd:97:2c:7b:e9:c0:60:96:01:88:a7:6d:dd:10: 5f:f1:f1:86:6d:9d:fe:18:58:98:9b:f6:94:10:da: 4f:76:71:fc:f7:74:3f:48:f2:8a:c5:b6:85:e2:d4: 5d:0c:a7:12:d5:94:d0:54:c0:cd:78:20:9c:34:3c: 2f:46:ce:a9:b3:03:6e:2f:32:49:f4:e4:8b:b4:ca: 60:ca:cf:1d:ea:b5:fa:19:90:35:a9:4a:95:2d:d9: 6e:c0:11:7d:e4:7e:54:7e:80:46:e0:60:d0:65:e3: bd:f4:ee:c0:e2:df:2f:8f:7c:f9:98:e7:1b:ba:fc: 95:1d:96:c8:bd:11:b9:c8:0b:1e:01:a1:e4:23:56: b8:ec:01:ff:19:8b:32:a6:a2:03:b8:f3:c5:16:d9: 9e:e3:0f:9f:fa:45:4e:69:d8:44:a3:7c:2a:ed:d4: c9:aa:07:83:89:8c:f6:95:c8:bc:04:33:dd:c5:80: 05:51:ae:c3:16:cc:02:ca:be:6f:81:86:5d:a3:a1: 8b:9f:03:a9:64:06:62:b6:8d:24:73:ff:13:63:4e: dc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7B:11:91:04:CD:54:3B:23:F7:3F:31:1B:E6:8C:E0:21:32:8A:7F X509v3 Authority Key Identifier: keyid:F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/yXsRkQTNVDsj9z8xG-aM4CEyin8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.212.0/23 Signature Algorithm: sha256WithRSAEncryption 11:f1:b3:8b:bd:fe:a4:a6:17:48:67:f5:77:bf:97:89:37:92: 28:99:8e:6f:ca:10:65:01:3f:71:8c:9f:90:43:4e:03:94:45: 26:83:3f:15:21:a7:27:a6:47:0b:fa:0d:29:33:46:a5:32:58: 8d:23:05:7a:e7:00:c8:b1:a7:35:07:35:af:23:6c:43:ba:33: a9:a2:ae:48:a2:27:53:86:16:8e:33:11:d0:b2:ee:c4:c9:df: 24:b1:2b:65:a4:27:a5:84:04:83:81:7e:dd:30:8f:3d:64:55: 05:ef:cd:5b:17:2e:88:f9:a3:16:90:94:25:03:df:7f:36:27: a2:97:05:26:79:41:72:d3:ac:d8:f9:6d:a0:3c:90:d7:38:e0: 89:c6:59:4d:21:bd:7c:fb:a7:04:da:1c:ac:98:77:24:0c:61: d8:17:ad:9e:08:75:37:bf:68:59:7d:a9:40:03:e6:45:e5:6f: 89:e0:06:71:ba:30:60:6e:ca:0a:40:ec:c4:59:fd:7e:66:34: 90:83:23:a1:64:f1:75:91:ba:79:b2:c7:0a:6f:52:24:b1:1b: 40:34:82:69:4b:f6:ba:5e:27:cb:10:17:a5:45:18:fa:b0:04: ce:47:87:20:59:7d:aa:26:2b:4c:77:fe:69:46:3d:77:e3:e5: 04:57:0e:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x7K0n9oKcxdAiuEst02DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZWY1ZGJhMTAwYTkyYjI0NDRmM2U1MTJkMDFhNTkyYzAx OTUxYzIwHhcNMjYwMTAxMTgxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTdiMTE5MTA0Y2Q1NDNiMjNmNzNmMzExYmU2OGNlMDIxMzI4YTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8hg5cIvs4Alqo2GHM28bMcrnSYu 5xivbuwES5EIJbiUj30jr+jHihHB66S8zZcse+nAYJYBiKdt3RBf8fGGbZ3+GFiY m/aUENpPdnH893Q/SPKKxbaF4tRdDKcS1ZTQVMDNeCCcNDwvRs6pswNuLzJJ9OSL tMpgys8d6rX6GZA1qUqVLdluwBF95H5UfoBG4GDQZeO99O7A4t8vj3z5mOcbuvyV HZbIvRG5yAseAaHkI1a47AH/GYsypqIDuPPFFtme4w+f+kVOadhEo3wq7dTJqgeD iYz2lci8BDPdxYAFUa7DFswCyr5vgYZdo6GLnwOpZAZito0kc/8TY07cIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMl7EZEEzVQ7I/c/MRvmjOAhMop/MB8GA1UdIwQY MBaAFPTvXboQCpKyRE8+US0BpZLAGVHCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iMzViZTEtNjY3My00ODExLWE3MDct YWQwMjdlOTVjNWM3LzEveVhzUmtRVE5WRHNqOXo4eEctYU00Q0V5aW44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9iMzViZTEtNjY3My00ODExLWE3MDctYWQwMjdlOTVjNWM3 LzEvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZTUMA0G CSqGSIb3DQEBCwUAA4IBAQAR8bOLvf6kphdIZ/V3v5eJN5IomY5vyhBlAT9xjJ+Q Q04DlEUmgz8VIacnpkcL+g0pM0alMliNIwV65wDIsac1BzWvI2xDujOpoq5IoidT hhaOMxHQsu7Eyd8ksStlpCelhASDgX7dMI89ZFUF781bFy6I+aMWkJQlA99/Niei lwUmeUFy06zY+W2gPJDXOOCJxllNIb18+6cE2hysmHckDGHYF62eCHU3v2hZfalA A+ZF5W+J4AZxujBgbsoKQOzEWf1+ZjSQgyOhZPF1kbp5sscKb1IksRtANIJpS/a6 XifLEBelRRj6sATOR4cgWX2qJitMd/5pRj134+UEVw4i -----END CERTIFICATE-----Generated at Mon Jan 12 22:23:37 2026 by rpki-client