This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/2JYyKobRsJ9i_-P6LFdPSFORMUg.roa File: 2JYyKobRsJ9i_-P6LFdPSFORMUg.roa (raw, json) Hash identifier: MH3f4WqKOCNXr+uBeP4okQoJyHrMzA0pdOPtYfBGm64= Subject key identifier: D8:96:32:2A:86:D1:B0:9F:62:FF:E3:FA:2C:57:4F:48:53:91:31:48 Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C806C80958AE7D5E98C0F1C93E795FF Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/2JYyKobRsJ9i_-P6LFdPSFORMUg.roa Signing time: Fri 02 Jan 2026 02:19:09 +0000 ROA not before: Fri 02 Jan 2026 02:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210135 IP address blocks: 45.135.166.0/24 maxlen: 24 92.63.188.0/24 maxlen: 24 193.32.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:6c:80:95:8a:e7:d5:e9:8c:0f:1c:93:e7:95:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d896322a86d1b09f62ffe3fa2c574f4853913148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:46:08:06:a4:df:8f:c5:ed:99:50:65:8b:4f: e2:b3:cd:4e:25:64:05:88:65:2e:fd:c8:a1:fe:91: 6a:7f:10:81:70:98:ad:ce:03:80:dc:4d:ec:ad:6e: 0d:92:0b:33:76:37:79:c5:b9:d3:f0:d5:c9:a6:cf: 7c:3e:24:fa:0d:2d:95:ae:15:26:8e:d7:f9:5d:44: cf:ec:dd:8c:2b:0c:fa:c1:15:50:fb:5c:51:cb:bf: 29:81:2f:72:19:87:aa:f1:39:49:6d:1e:2f:a7:f8: 57:d4:3c:84:72:57:04:bd:89:55:0b:76:66:ee:95: 2a:7a:d8:93:ab:2b:d2:e8:7c:b6:db:e9:38:7e:51: dc:62:2b:0c:3b:f8:79:c3:32:23:d0:a0:9c:d9:bc: fa:93:9a:7a:c6:ce:0c:6b:d9:db:c5:23:ef:1b:88: bd:aa:8c:e6:6f:eb:a3:90:00:16:a5:eb:8f:13:30: 4c:96:aa:c4:0d:3d:5f:36:82:8a:cf:69:bf:88:21: 83:05:b3:2f:4e:30:0c:d5:67:69:08:4f:63:ee:4c: c2:8b:fc:99:d6:66:d7:a2:18:ce:d7:61:07:c1:39: b2:7f:ce:64:2b:51:75:9e:33:61:41:89:d3:de:4c: 7a:fd:f7:c2:7f:c9:35:e5:1f:b8:eb:6f:af:06:8b: b8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:96:32:2A:86:D1:B0:9F:62:FF:E3:FA:2C:57:4F:48:53:91:31:48 X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/2JYyKobRsJ9i_-P6LFdPSFORMUg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.166.0/24 92.63.188.0/24 193.32.189.0/24 Signature Algorithm: sha256WithRSAEncryption 94:b8:07:3c:7d:e4:e2:b9:f9:f1:e2:45:54:7b:2a:4c:bd:07: 27:7b:c4:8e:94:66:08:0d:4e:87:6b:80:25:d9:81:75:37:31: bb:a4:a9:54:9d:83:66:7a:2f:37:9a:ac:a2:a0:b5:05:3f:bb: 2d:f5:4f:a1:42:51:23:ad:bc:b5:23:5f:c0:d6:de:64:63:cb: e7:5c:09:9f:52:3b:12:b4:a9:19:77:9d:21:92:00:9b:d7:a2: c9:c5:fd:31:b1:05:a6:c9:3a:dc:12:56:79:2c:35:50:03:a7: 96:b9:93:4f:01:27:51:31:4f:4f:93:f8:d4:e7:5a:7d:5d:6f: 7f:ae:6c:be:65:f1:e2:b6:e2:9b:af:9d:c6:19:95:d4:8a:e6: 81:3c:5c:c1:bf:d9:f3:7b:32:b5:20:18:b0:21:eb:aa:e3:4d: 57:69:81:79:ae:ad:94:8e:b9:b2:27:b4:8d:bc:66:9d:8b:21: 18:11:93:97:dd:ab:8d:74:86:af:a9:09:c9:d0:86:cb:52:e6: dc:af:bb:5b:a8:31:72:54:91:53:22:96:3a:49:b8:12:ce:b3: e3:19:f9:39:85:29:98:58:12:e7:72:57:03:ec:69:72:51:22: d8:ef:9e:6b:de:d9:49:2f:20:9e:d3:dd:33:88:65:f4:f8:8c: b3:9d:ce:22 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gGyAlYrn1emMDxyT55X/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODk2MzIyYTg2ZDFiMDlmNjJmZmUzZmEyYzU3NGY0ODUzOTEzMTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00YIBqTfj8XtmVBli0/is81OJWQF iGUu/cih/pFqfxCBcJitzgOA3E3srW4Nkgszdjd5xbnT8NXJps98PiT6DS2VrhUm jtf5XUTP7N2MKwz6wRVQ+1xRy78pgS9yGYeq8TlJbR4vp/hX1DyEclcEvYlVC3Zm 7pUqetiTqyvS6Hy22+k4flHcYisMO/h5wzIj0KCc2bz6k5p6xs4Ma9nbxSPvG4i9 qozmb+ujkAAWpeuPEzBMlqrEDT1fNoKKz2m/iCGDBbMvTjAM1WdpCE9j7kzCi/yZ 1mbXohjO12EHwTmyf85kK1F1njNhQYnT3kx6/ffCf8k15R+462+vBou4lQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNiWMiqG0bCfYv/j+ixXT0hTkTFIMB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvMkpZeUtvYlJzSjlpXy1QNkxGZFBTRk9STVVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALYemAwQA XD+8AwQAwSC9MA0GCSqGSIb3DQEBCwUAA4IBAQCUuAc8feTiufnx4kVUeypMvQcn e8SOlGYIDU6Ha4Al2YF1NzG7pKlUnYNmei83mqyioLUFP7st9U+hQlEjrby1I1/A 1t5kY8vnXAmfUjsStKkZd50hkgCb16LJxf0xsQWmyTrcElZ5LDVQA6eWuZNPASdR MU9Pk/jU51p9XW9/rmy+ZfHituKbr53GGZXUiuaBPFzBv9nzezK1IBiwIeuq401X aYF5rq2UjrmyJ7SNvGadiyEYEZOX3auNdIavqQnJ0IbLUubcr7tbqDFyVJFTIpY6 SbgSzrPjGfk5hSmYWBLnclcD7GlyUSLY755r3tlJLyCe090ziGX0+Iyznc4i -----END CERTIFICATE-----Generated at Sat Jan 10 03:55:21 2026 by rpki-client