This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YpT1dI58rpDTkCzKKFoqDwmWBAw.roa File: YpT1dI58rpDTkCzKKFoqDwmWBAw.roa (raw, json) Hash identifier: 2aHp5ekusfFcwOrZiRe34dTyLddF2f3Lkm2SK/OYWrA= Subject key identifier: 62:94:F5:74:8E:7C:AE:90:D3:90:2C:CA:28:5A:2A:0F:09:96:04:0C Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CFDD2B039B0AF64877CB5C276331C Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YpT1dI58rpDTkCzKKFoqDwmWBAw.roa Signing time: Fri 02 Jan 2026 06:20:04 +0000 ROA not before: Fri 02 Jan 2026 06:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204841 IP address blocks: 45.12.252.0/24 maxlen: 24 2a0e:97c0:d30::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:fd:d2:b0:39:b0:af:64:87:7c:b5:c2:76:33:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6294f5748e7cae90d3902cca285a2a0f0996040c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:58:c3:1b:be:b3:07:5f:b3:3a:04:f3:bc:26: 1a:99:3d:db:61:1a:dd:60:d6:46:0c:0d:8e:85:d4: 2e:c7:21:52:96:0a:b6:f7:53:fe:6c:16:53:ef:12: 46:71:af:d1:4d:e4:d0:65:41:03:62:d1:ad:c4:61: 09:b1:51:12:5f:5c:18:15:fa:7b:25:bf:94:bd:a9: d2:8e:42:59:be:3c:41:d0:d9:77:e5:af:95:28:b0: 99:cc:3e:a8:4e:93:ae:79:51:35:94:be:f0:d5:6e: 87:20:6f:01:e3:ee:2e:59:51:51:06:9f:64:ed:b0: c9:aa:d8:c9:e7:54:ee:18:f9:48:81:c1:20:e3:d8: 7a:0e:44:69:b7:cc:58:0d:3b:1c:8e:27:87:23:c4: 0d:77:d5:c1:6e:af:a2:28:41:a4:ad:c5:86:b0:77: 9f:23:86:32:0d:a7:ce:15:2d:7f:57:dc:be:de:ca: 26:6c:e1:47:f7:86:81:ad:30:99:27:8c:5d:48:a3: 1e:db:81:cf:3d:ec:9a:e1:a7:f1:13:5a:6f:c7:8e: a1:f2:73:6e:40:12:d6:84:7f:21:fe:f1:94:dd:6d: 9f:c2:e5:e2:32:69:af:4a:cd:dd:3f:0d:2a:fe:f1: 7a:7c:9d:75:fa:36:b7:83:44:de:8a:e4:8f:73:73: d0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:94:F5:74:8E:7C:AE:90:D3:90:2C:CA:28:5A:2A:0F:09:96:04:0C X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YpT1dI58rpDTkCzKKFoqDwmWBAw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.252.0/24 IPv6: 2a0e:97c0:d30::/44 Signature Algorithm: sha256WithRSAEncryption c7:69:95:24:7e:e4:89:0c:53:0d:b2:14:bf:e9:e4:3c:e7:e7: 3c:8e:dc:0e:cf:20:cb:ae:3c:b7:8d:7d:7d:bc:b1:ec:dc:34: 4b:ef:3e:29:b9:3e:72:8f:94:42:74:00:41:09:4b:1f:98:92: 3c:23:7d:02:bc:16:97:4a:f6:3a:11:ea:73:1d:8e:35:d9:e7: f6:1f:2f:98:fe:b8:f5:5b:54:8d:17:f6:f7:c8:ee:65:9a:25: 11:89:65:e0:bb:db:4f:de:7d:47:25:9c:2e:e1:0f:f8:64:47: 5b:39:a1:21:cf:2d:c7:49:21:97:dc:3c:c9:b8:18:d9:e8:90: 4b:2f:a0:c9:c0:5c:d3:02:37:6b:10:f0:cd:f6:73:b8:7f:89: d6:c3:c6:3e:a1:ac:ae:89:4c:3d:31:f7:a1:15:e0:08:06:37: 5f:9f:89:61:d8:ae:95:a6:30:e8:9c:7f:ec:71:a9:2b:dd:83: cf:ef:cd:88:19:c6:57:b3:57:d1:a9:a9:c4:5c:92:23:0f:3a: 0a:7e:7a:5b:60:56:4d:57:5b:27:8e:6f:cb:ad:87:ff:01:9c: 6e:9e:2d:fa:a8:a6:5f:46:6f:28:6a:bb:f1:02:7c:c3:a7:b9: a3:c8:02:61:93:ed:7e:ec:56:66:ba:d8:67:8e:a1:83:7f:eb: 3a:9a:8b:05 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9XP3SsDmwr2SHfLXCdjMcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Mjk0ZjU3NDhlN2NhZTkwZDM5MDJjY2EyODVhMmEwZjA5OTYwNDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnljDG76zB1+zOgTzvCYamT3bYRrd YNZGDA2OhdQuxyFSlgq291P+bBZT7xJGca/RTeTQZUEDYtGtxGEJsVESX1wYFfp7 Jb+UvanSjkJZvjxB0Nl35a+VKLCZzD6oTpOueVE1lL7w1W6HIG8B4+4uWVFRBp9k 7bDJqtjJ51TuGPlIgcEg49h6DkRpt8xYDTscjieHI8QNd9XBbq+iKEGkrcWGsHef I4YyDafOFS1/V9y+3sombOFH94aBrTCZJ4xdSKMe24HPPeya4afxE1pvx46h8nNu QBLWhH8h/vGU3W2fwuXiMmmvSs3dPw0q/vF6fJ11+ja3g0TeiuSPc3PQ3QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGKU9XSOfK6Q05AsyihaKg8JlgQMMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvWXBUMWRJNThycERUa0N6S0tGb3FEd21XQkF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALQz8MA8E AgACMAkDBwQqDpfADTAwDQYJKoZIhvcNAQELBQADggEBAMdplSR+5IkMUw2yFL/p 5Dzn5zyO3A7PIMuuPLeNfX28sezcNEvvPim5PnKPlEJ0AEEJSx+YkjwjfQK8FpdK 9joR6nMdjjXZ5/YfL5j+uPVbVI0X9vfI7mWaJRGJZeC720/efUclnC7hD/hkR1s5 oSHPLcdJIZfcPMm4GNnokEsvoMnAXNMCN2sQ8M32c7h/idbDxj6hrK6JTD0x96EV 4AgGN1+fiWHYrpWmMOicf+xxqSvdg8/vzYgZxlezV9GpqcRckiMPOgp+eltgVk1X WyeOb8uth/8BnG6eLfqopl9Gbyhqu/ECfMOnuaPIAmGT7X7sVma62GeOoYN/6zqa iwU= -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:23 2026 by rpki-client