This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/1-WY1kC9fXy_QDL3bufe1HT_mbiU.roa File: 1-WY1kC9fXy_QDL3bufe1HT_mbiU.roa (raw, json) Hash identifier: 8/FykE4i6dHxu7nBKXEVKR2YD0Xlflt1HWo8nvsCoic= Subject key identifier: F9:66:35:90:2F:5F:5F:2F:D0:0C:BD:DB:B9:F7:B5:1D:3F:E6:6E:25 Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C8061576287F9FDF96D107B9EDA8732 Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/1-WY1kC9fXy_QDL3bufe1HT_mbiU.roa Signing time: Fri 02 Jan 2026 02:19:06 +0000 ROA not before: Fri 02 Jan 2026 02:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58351 IP address blocks: 45.91.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:61:57:62:87:f9:fd:f9:6d:10:7b:9e:da:87:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f96635902f5f5f2fd00cbddbb9f7b51d3fe66e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5a:b9:19:22:9c:7d:1a:ee:e2:1a:1f:99:38: 37:21:af:bf:66:20:33:0a:b2:5d:14:d0:72:0c:39: 4a:69:0f:78:73:4b:1a:3d:61:2b:79:fe:ec:9e:7b: e8:fe:37:21:78:6a:2b:0c:78:31:18:2b:70:95:17: c0:cc:e2:4d:9a:cb:f8:27:cb:e6:b4:cb:e3:2e:25: 52:79:f4:8c:93:68:47:02:00:80:5b:b7:03:b7:5d: de:94:b7:66:85:d1:03:ce:80:7c:17:0d:7c:7a:8f: 81:32:da:21:ba:eb:02:64:36:2f:b6:07:ef:02:07: ad:88:f2:d6:99:2e:78:53:23:a9:aa:d4:da:5b:d6: 4f:93:1a:62:58:66:9b:ad:60:02:a8:ef:cc:8d:f6: a6:c6:b0:ec:85:52:17:62:d9:04:39:87:ee:c5:f7: ba:00:c2:50:81:ea:82:9f:3c:ca:c3:08:5a:71:2f: ce:d0:16:0b:84:32:c8:87:af:c1:6a:ff:50:68:fc: 1b:aa:7c:1f:dc:dd:5e:a2:29:ff:21:58:0e:08:9a: 2d:aa:c8:2c:6a:ce:d6:e4:b8:34:88:64:c7:4c:50: c7:2e:98:98:13:db:72:5f:3a:fc:e6:c7:69:0e:c9: 18:59:12:d3:b8:73:ed:af:c5:2a:09:60:e4:6d:d0: cd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:66:35:90:2F:5F:5F:2F:D0:0C:BD:DB:B9:F7:B5:1D:3F:E6:6E:25 X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/1-WY1kC9fXy_QDL3bufe1HT_mbiU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.162.0/24 Signature Algorithm: sha256WithRSAEncryption 14:18:1d:65:13:c0:a0:0c:b8:8c:a6:71:6e:74:5e:7a:f2:1f: d7:50:ba:5e:f9:05:8f:11:9b:02:1a:a8:f4:50:f4:30:28:90: 77:03:92:bc:6e:d3:db:67:26:94:43:4b:62:21:5d:36:b9:dc: 62:c9:b5:23:d9:d2:b0:54:71:08:b7:80:bc:af:61:23:35:9e: 96:5f:26:5d:a0:2e:98:8c:64:84:dc:37:51:4f:66:12:2b:a5: 89:f7:53:e1:0e:a0:20:87:16:3d:70:cf:80:07:2f:3b:b6:46: c4:23:de:6a:8f:5c:75:ce:25:4d:e7:4f:0e:52:06:4f:d1:2d: 40:5c:fe:0d:a6:9c:5f:d1:04:89:2b:c4:1b:17:0a:f2:9c:da: 59:42:65:64:ce:00:33:40:95:95:a2:28:a4:e5:2e:bc:55:75: fe:80:b3:1b:53:87:16:45:38:0c:a0:67:0e:dc:f7:f5:7a:2f: 47:8a:ed:82:eb:a6:91:7d:c9:be:ab:8a:cb:a7:3d:da:3f:af: ab:9a:73:b7:af:27:f2:14:9b:d9:01:f1:ed:01:7a:c3:1d:12: 1a:de:12:ee:ed:f7:4f:01:e9:7f:84:b7:93:77:f3:03:9b:3d: 1b:67:e6:b0:22:be:7e:9c:d2:4b:be:5c:c3:e7:f9:00:9c:07: 83:8f:82:0b -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8gGFXYof5/fltEHue2ocyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTY2MzU5MDJmNWY1ZjJmZDAwY2JkZGJiOWY3YjUxZDNmZTY2ZTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1q5GSKcfRru4hofmTg3Ia+/ZiAz CrJdFNByDDlKaQ94c0saPWEref7snnvo/jcheGorDHgxGCtwlRfAzOJNmsv4J8vm tMvjLiVSefSMk2hHAgCAW7cDt13elLdmhdEDzoB8Fw18eo+BMtohuusCZDYvtgfv AgetiPLWmS54UyOpqtTaW9ZPkxpiWGabrWACqO/MjfamxrDshVIXYtkEOYfuxfe6 AMJQgeqCnzzKwwhacS/O0BYLhDLIh6/Bav9QaPwbqnwf3N1eoin/IVgOCJotqsgs as7W5Lg0iGTHTFDHLpiYE9tyXzr85sdpDskYWRLTuHPtr8UqCWDkbdDNNQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPlmNZAvX18v0Ay927n3tR0/5m4lMB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvMS1XWTFrQzlmWHlfUURMM2J1ZmUxSFRfbWJpVS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZTAvNTNjN2I4LTVlNGItNDlmZC04YzkxLWJhOThmMTEyMjEy MS8xL1lZUjQ4WmotVnBBUXc5OWlHUlF2VXd4UFhsWS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1bojAN BgkqhkiG9w0BAQsFAAOCAQEAFBgdZRPAoAy4jKZxbnReevIf11C6XvkFjxGbAhqo 9FD0MCiQdwOSvG7T22cmlENLYiFdNrncYsm1I9nSsFRxCLeAvK9hIzWell8mXaAu mIxkhNw3UU9mEiulifdT4Q6gIIcWPXDPgAcvO7ZGxCPeao9cdc4lTedPDlIGT9Et QFz+DaacX9EEiSvEGxcK8pzaWUJlZM4AM0CVlaIopOUuvFV1/oCzG1OHFkU4DKBn Dtz39XovR4rtguumkX3JvquKy6c92j+vq5pzt68n8hSb2QHx7QF6wx0SGt4S7u33 TwHpf4S3k3fzA5s9G2fmsCK+fpzSS75cw+f5AJwHg4+CCw== -----END CERTIFICATE-----Generated at Sat Jan 10 03:55:20 2026 by rpki-client