This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/b1Y-3WgMyGS1G7jrmGG-e81lNDA.roa File: b1Y-3WgMyGS1G7jrmGG-e81lNDA.roa (raw, json) Hash identifier: GBEZ8Y0pqF1M+xMOeRWL/nxMJhb8iYsyNvr/SwhBu1Q= Subject key identifier: 6F:56:3E:DD:68:0C:C8:64:B5:1B:B8:EB:98:61:BE:7B:CD:65:34:30 Certificate issuer: /CN=16f9f928b0ac67731991f374b8e194eb6542ac24 Certificate serial: 019B7F849C307F98F5C7CFD0D44563EE9117 Authority key identifier: 16:F9:F9:28:B0:AC:67:73:19:91:F3:74:B8:E1:94:EB:65:42:AC:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/b1Y-3WgMyGS1G7jrmGG-e81lNDA.roa Signing time: Fri 02 Jan 2026 16:22:35 +0000 ROA not before: Fri 02 Jan 2026 16:22:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209053 IP address blocks: 45.8.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 01:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:9c:30:7f:98:f5:c7:cf:d0:d4:45:63:ee:91:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16f9f928b0ac67731991f374b8e194eb6542ac24 Validity Not Before: Jan 2 16:22:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f563edd680cc864b51bb8eb9861be7bcd653430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:52:f6:b0:e7:e2:ea:ae:f6:3b:bc:6d:57:75: ff:64:df:81:3a:fa:3b:cd:d6:e5:1c:cd:fa:50:0a: 46:30:bd:5e:79:db:a2:28:64:fe:41:c7:97:a4:5b: 6e:f6:54:bc:02:57:8a:42:c5:2d:95:60:cf:bd:26: 66:53:98:2f:85:cb:dc:e3:05:47:3c:a7:1d:8f:ca: e3:5e:44:71:48:e1:b8:06:b9:8c:ca:72:69:c6:0c: 1a:05:73:ed:84:99:97:d2:6a:f2:96:e6:2b:68:2b: ea:70:8a:6a:c2:f0:fb:73:31:09:f1:a8:b1:b5:9a: 9b:b3:9f:76:69:6e:2e:f3:c6:8d:5c:d7:d2:50:92: 15:43:8f:41:d1:30:b6:67:96:b1:24:8b:0c:ce:5a: 35:38:c8:e2:1a:2e:63:6e:87:5e:40:93:5c:fb:86: 48:63:b6:56:e3:23:b5:b1:c4:31:80:0f:31:3f:3a: e3:e7:25:a1:15:14:1d:41:d4:b6:0b:e3:06:92:ea: 6e:06:ef:1e:78:14:ee:21:48:8b:4b:25:bb:3f:d3: 03:e2:26:34:e0:07:87:e8:16:57:38:45:b3:61:fc: 3d:a0:51:d2:3f:c3:c8:9f:bf:e6:47:93:18:df:c5: aa:80:37:e8:9f:73:6c:e1:df:9a:17:a5:a5:af:c0: 19:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:56:3E:DD:68:0C:C8:64:B5:1B:B8:EB:98:61:BE:7B:CD:65:34:30 X509v3 Authority Key Identifier: keyid:16:F9:F9:28:B0:AC:67:73:19:91:F3:74:B8:E1:94:EB:65:42:AC:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/b1Y-3WgMyGS1G7jrmGG-e81lNDA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.232.0/24 Signature Algorithm: sha256WithRSAEncryption b7:ef:66:73:7f:47:aa:0d:f8:2d:4b:ef:39:07:e9:2c:63:db: 05:1d:61:b1:87:69:2f:56:c7:55:0a:ff:cd:5d:46:31:ec:86: 52:e7:67:9a:40:59:8f:a0:b5:95:68:3e:70:be:2f:1d:e2:46: 6b:e8:9a:dc:10:fc:d9:f1:2b:c3:b0:32:2c:a7:16:fe:d6:cf: ab:8b:79:b7:82:4d:35:7f:0c:ee:18:35:4f:84:73:d7:10:2c: 6b:64:ac:75:e6:9a:70:94:9e:f7:4d:3f:cd:12:03:9f:a9:b5: aa:00:c9:06:2e:e3:fb:7b:5c:0d:57:04:e9:4b:a8:07:b5:be: a7:00:6b:da:ff:9d:99:6d:75:75:b5:e4:49:04:23:99:8d:68: 0e:dd:d4:d1:a1:ad:11:21:2c:65:03:10:6a:4f:9f:ac:e7:89: f5:9a:49:ae:d4:93:89:0f:b4:c7:ed:f5:c2:cb:65:c5:9b:8c: 15:97:2b:ce:db:ba:57:dc:93:47:f2:c7:d7:7f:12:e4:51:e0: f2:70:d3:7b:3f:7f:3d:39:95:06:61:f5:ff:2f:ea:c9:df:ff: 24:c6:30:9c:a0:5e:c0:4e:de:f3:df:96:14:84:40:7f:fd:f2: b7:b0:5f:da:76:bb:0e:3e:18:56:bd:d3:6e:32:9e:8a:e9:41: a6:e0:fc:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hJwwf5j1x8/Q1EVj7pEXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZjlmOTI4YjBhYzY3NzMxOTkxZjM3NGI4ZTE5NGViNjU0 MmFjMjQwHhcNMjYwMTAyMTYyMjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjU2M2VkZDY4MGNjODY0YjUxYmI4ZWI5ODYxYmU3YmNkNjUzNDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolL2sOfi6q72O7xtV3X/ZN+BOvo7 zdblHM36UApGML1eeduiKGT+QceXpFtu9lS8AleKQsUtlWDPvSZmU5gvhcvc4wVH PKcdj8rjXkRxSOG4BrmMynJpxgwaBXPthJmX0mryluYraCvqcIpqwvD7czEJ8aix tZqbs592aW4u88aNXNfSUJIVQ49B0TC2Z5axJIsMzlo1OMjiGi5jbodeQJNc+4ZI Y7ZW4yO1scQxgA8xPzrj5yWhFRQdQdS2C+MGkupuBu8eeBTuIUiLSyW7P9MD4iY0 4AeH6BZXOEWzYfw9oFHSP8PIn7/mR5MY38WqgDfon3Ns4d+aF6Wlr8AZFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG9WPt1oDMhktRu465hhvnvNZTQwMB8GA1UdIwQY MBaAFBb5+SiwrGdzGZHzdLjhlOtlQqwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnZuNUtMQ3NaM01aa2ZOMHVPR1U2MlZDckNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kNWMwNDItNWI0ZC00YjEwLWJjNzYt NDJlYWFiYmZiZmQyLzEvYjFZLTNXZ015R1MxRzdqcm1HRy1lODFsTkRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9kNWMwNDItNWI0ZC00YjEwLWJjNzYtNDJlYWFiYmZiZmQy LzEvRnZuNUtMQ3NaM01aa2ZOMHVPR1U2MlZDckNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQjoMA0G CSqGSIb3DQEBCwUAA4IBAQC372Zzf0eqDfgtS+85B+ksY9sFHWGxh2kvVsdVCv/N XUYx7IZS52eaQFmPoLWVaD5wvi8d4kZr6JrcEPzZ8SvDsDIspxb+1s+ri3m3gk01 fwzuGDVPhHPXECxrZKx15ppwlJ73TT/NEgOfqbWqAMkGLuP7e1wNVwTpS6gHtb6n AGva/52ZbXV1teRJBCOZjWgO3dTRoa0RISxlAxBqT5+s54n1mkmu1JOJD7TH7fXC y2XFm4wVlyvO27pX3JNH8sfXfxLkUeDycNN7P389OZUGYfX/L+rJ3/8kxjCcoF7A Tt7z35YUhEB//fK3sF/adrsOPhhWvdNuMp6K6UGm4Pwe -----END CERTIFICATE-----Generated at Fri Jan 9 09:28:15 2026 by rpki-client