This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/p__i-U7pcEQLEBgB5wPBhjGinm0.roa File: p__i-U7pcEQLEBgB5wPBhjGinm0.roa (raw, json) Hash identifier: zaMbyW0VF3syUyLrRsMw091fnnYV79MbJ6aORVCIeLg= Subject key identifier: A7:FF:E2:F9:4E:E9:70:44:0B:10:18:01:E7:03:C1:86:31:A2:9E:6D Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C804D71C440609F569C232BB53D094C Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/p__i-U7pcEQLEBgB5wPBhjGinm0.roa Signing time: Fri 02 Jan 2026 02:19:01 +0000 ROA not before: Fri 02 Jan 2026 02:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24940 IP address blocks: 45.148.28.0/22 maxlen: 22 217.78.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:4d:71:c4:40:60:9f:56:9c:23:2b:b5:3d:09:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7ffe2f94ee970440b101801e703c18631a29e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:93:ef:77:dc:fe:a7:54:aa:7b:2d:e7:8c:d6: 4d:97:1f:86:f4:d7:f4:b8:27:e2:4d:51:23:64:37: 9e:13:bf:67:b0:df:f3:d0:e6:aa:33:18:ff:20:bc: 3b:aa:eb:2b:72:b1:e8:fa:a4:9a:81:af:57:e1:40: d5:aa:5b:3e:61:66:2a:d1:87:60:9a:bb:cf:dc:f8: bc:6c:1f:f3:68:b3:b2:25:80:ff:90:80:f8:40:57: 2d:74:7a:53:bf:4d:f6:82:99:17:72:5d:96:e6:81: 99:99:4a:bb:73:44:97:d9:60:a9:89:ee:73:6e:aa: 4e:5c:7d:b8:eb:7f:fa:6e:94:12:3c:37:c8:90:cc: 0c:d7:3d:f7:24:f1:20:58:3b:7c:df:3e:c0:81:fd: 0a:a3:3d:5d:09:ff:1a:3e:79:ba:6a:32:7a:b9:43: 78:e8:50:10:d4:86:88:d9:4f:bc:aa:00:30:ee:95: 44:35:6b:fb:14:50:cd:67:e6:ff:ed:ce:09:b6:df: 83:e9:a1:72:5e:a7:26:f9:16:63:96:e6:39:1c:13: f7:84:63:2a:91:6a:3a:f1:96:cd:96:e6:26:29:85: be:b3:7b:27:da:4a:41:f7:eb:73:6e:c9:13:7a:f4: 3d:54:38:f6:3b:22:dc:f7:0f:be:83:4d:d6:8a:4f: 3e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FF:E2:F9:4E:E9:70:44:0B:10:18:01:E7:03:C1:86:31:A2:9E:6D X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/p__i-U7pcEQLEBgB5wPBhjGinm0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.28.0/22 217.78.237.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:7a:cf:98:d1:44:13:e9:df:60:e2:26:82:48:4e:6f:45:44: 37:f7:95:a8:7e:17:2d:c2:96:c9:fd:84:df:c1:5c:ad:2c:c3: 2e:c0:36:28:33:e0:c4:68:d9:59:fd:94:c5:4d:4b:54:59:5e: 5c:bc:77:35:38:78:f5:a1:63:ef:7d:87:fd:c8:54:fc:10:63: b8:45:be:dc:41:50:77:da:1c:50:7a:d5:9f:ce:c3:49:b4:9d: 2d:af:b9:45:39:d9:ae:5a:d8:9c:f4:87:de:3d:d7:0a:e7:86: de:31:55:9a:b4:69:25:d3:dc:00:8f:79:94:82:7e:30:75:e0: 45:66:da:09:96:c0:90:1b:59:56:18:06:88:0f:23:dc:5c:c8: 80:7d:f6:aa:20:f9:9c:3c:b8:e9:c6:73:a5:d9:67:ba:5f:f9: 88:31:53:42:9c:81:bd:f7:31:3b:50:c7:95:12:96:31:68:7e: be:9e:e6:a5:07:23:41:be:56:ae:6c:69:13:7e:34:7c:78:20: 66:43:46:d8:36:85:19:74:e5:4c:99:47:45:d0:70:bd:51:77: d5:93:99:9c:a4:cd:76:e8:f9:2f:98:11:db:82:7c:06:1a:a4: f3:86:c4:7d:6e:f4:95:14:54:54:02:1e:7a:89:95:6c:72:0b: f3:c8:d4:60 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gE1xxEBgn1acIyu1PQlMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2ZmZTJmOTRlZTk3MDQ0MGIxMDE4MDFlNzAzYzE4NjMxYTI5ZTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5Pvd9z+p1Sqey3njNZNlx+G9Nf0 uCfiTVEjZDeeE79nsN/z0OaqMxj/ILw7qusrcrHo+qSaga9X4UDVqls+YWYq0Ydg mrvP3Pi8bB/zaLOyJYD/kID4QFctdHpTv032gpkXcl2W5oGZmUq7c0SX2WCpie5z bqpOXH2463/6bpQSPDfIkMwM1z33JPEgWDt83z7Agf0Koz1dCf8aPnm6ajJ6uUN4 6FAQ1IaI2U+8qgAw7pVENWv7FFDNZ+b/7c4Jtt+D6aFyXqcm+RZjluY5HBP3hGMq kWo68ZbNluYmKYW+s3sn2kpB9+tzbskTevQ9VDj2OyLc9w++g03Wik8+PQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKf/4vlO6XBECxAYAecDwYYxop5tMB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvcF9faS1VN3BjRVFMRUJnQjV3UEJoakdpbm0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLZQcAwQA 2U7tMA0GCSqGSIb3DQEBCwUAA4IBAQAdes+Y0UQT6d9g4iaCSE5vRUQ395Wofhct wpbJ/YTfwVytLMMuwDYoM+DEaNlZ/ZTFTUtUWV5cvHc1OHj1oWPvfYf9yFT8EGO4 Rb7cQVB32hxQetWfzsNJtJ0tr7lFOdmuWtic9IfePdcK54beMVWatGkl09wAj3mU gn4wdeBFZtoJlsCQG1lWGAaIDyPcXMiAffaqIPmcPLjpxnOl2We6X/mIMVNCnIG9 9zE7UMeVEpYxaH6+nualByNBvlaubGkTfjR8eCBmQ0bYNoUZdOVMmUdF0HC9UXfV k5mcpM126PkvmBHbgnwGGqTzhsR9bvSVFFRUAh56iZVscgvzyNRg -----END CERTIFICATE-----Generated at Sat Jan 10 03:55:37 2026 by rpki-client