This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/Yte9L4xekX_uW58axTYZcgt8FmY.roa File: Yte9L4xekX_uW58axTYZcgt8FmY.roa (raw, json) Hash identifier: VZMJbU3AsKOjrEeywUZWh1wAyOqk7L0RVRYGi611mv4= Subject key identifier: 62:D7:BD:2F:8C:5E:91:7F:EE:5B:9F:1A:C5:36:19:72:0B:7C:16:66 Certificate issuer: /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Certificate serial: 019B797DFAFAF4B1DDBEBD246992CA93479C Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/Yte9L4xekX_uW58axTYZcgt8FmY.roa Signing time: Thu 01 Jan 2026 12:17:37 +0000 ROA not before: Thu 01 Jan 2026 12:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200908 IP address blocks: 45.131.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:fa:fa:f4:b1:dd:be:bd:24:69:92:ca:93:47:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Validity Not Before: Jan 1 12:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62d7bd2f8c5e917fee5b9f1ac53619720b7c1666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0a:77:f9:ea:d7:c7:c1:0a:e8:2c:f6:93:31: 8d:97:4d:19:86:cd:ba:d0:e0:ee:71:81:fe:a5:81: 39:87:de:b5:14:c6:d2:ec:48:05:01:18:19:09:80: 07:57:35:a6:b8:63:b2:a2:72:54:90:f6:5f:4a:20: 56:87:a6:ad:8e:5f:14:fa:81:cc:25:3f:8d:fa:b9: 42:36:e3:f3:9c:d6:ad:0d:b5:2f:ba:84:35:76:e2: 5c:d2:cd:88:3f:d1:a2:3e:c4:48:ff:ad:11:56:76: be:67:d0:55:32:b3:7b:a7:20:be:72:1b:58:22:e4: fe:7f:78:63:92:40:9e:39:0d:6d:0a:9e:25:0a:ce: 56:2a:12:30:36:25:ea:c2:50:4b:13:bd:86:52:0b: 55:00:4c:40:30:c4:1e:54:2a:59:c8:fe:16:bd:10: 3e:bf:2d:3c:0d:7d:d5:65:81:64:8b:b6:a3:be:6d: 63:a6:12:bf:34:58:25:a2:c1:10:1e:f5:30:b4:0f: 8f:94:a8:a9:39:0e:6f:af:87:3e:f9:f9:cf:d7:34: 2b:79:ad:ed:24:24:37:49:f2:d4:14:85:53:b6:2e: e7:c2:ec:a7:e6:4e:8d:55:14:df:c7:e1:9e:ad:8e: fa:c5:d9:4b:5d:89:fe:0e:e7:99:33:4e:09:56:35: 62:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D7:BD:2F:8C:5E:91:7F:EE:5B:9F:1A:C5:36:19:72:0B:7C:16:66 X509v3 Authority Key Identifier: keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/Yte9L4xekX_uW58axTYZcgt8FmY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.80.0/22 Signature Algorithm: sha256WithRSAEncryption 58:64:07:1d:d5:7b:18:30:b1:c9:e9:c2:50:77:ba:19:59:14: 15:f8:7a:cd:49:66:6a:9d:de:e7:1d:a0:97:95:33:22:b3:bb: a1:e0:31:2e:fd:be:ff:51:aa:4c:e1:2b:93:77:ff:83:40:a3: 2f:9f:f6:d0:c8:9e:2c:af:d6:17:9d:ce:1e:31:f9:cc:f8:0c: 52:62:ee:d2:ac:53:70:bd:82:4e:32:d2:a1:36:be:80:0d:dd: 42:4a:d2:8b:1a:4e:d0:f4:fa:b6:d9:5f:4b:ea:7c:eb:8c:cb: c4:a9:d8:12:d7:c2:50:f4:71:7e:d3:24:6c:df:3a:6d:6d:68: 75:66:e1:17:54:d9:64:ee:e9:fa:94:12:9c:dd:00:2e:af:e7: 86:a0:0c:fa:2d:a3:62:5b:da:36:6e:aa:be:5c:d0:f7:cf:43: 40:1d:a0:87:20:f6:64:2a:a7:dd:32:45:cd:ec:5d:0d:43:16: e4:82:bb:55:7e:4c:2d:b4:16:7f:3b:45:a7:ab:02:e2:92:3d: 8c:86:4d:15:b6:c8:07:1c:00:ca:6a:64:58:85:ec:8f:50:5a: 92:7c:5a:2e:9b:1f:24:96:69:8d:d0:7f:63:71:8b:c3:2f:7a: 7f:20:1f:a5:ad:6e:c6:e5:16:23:f2:54:15:1f:06:57:1a:8d: f8:27:eb:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ffr69LHdvr0kaZLKk0ecMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMjk4OTAwMzU1ZmRmNDI1NGMyMDgzMWYyZDdlZTNiZWM0 MjliZGIwHhcNMjYwMTAxMTIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmQ3YmQyZjhjNWU5MTdmZWU1YjlmMWFjNTM2MTk3MjBiN2MxNjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwp3+erXx8EK6Cz2kzGNl00Zhs26 0ODucYH+pYE5h961FMbS7EgFARgZCYAHVzWmuGOyonJUkPZfSiBWh6atjl8U+oHM JT+N+rlCNuPznNatDbUvuoQ1duJc0s2IP9GiPsRI/60RVna+Z9BVMrN7pyC+chtY IuT+f3hjkkCeOQ1tCp4lCs5WKhIwNiXqwlBLE72GUgtVAExAMMQeVCpZyP4WvRA+ vy08DX3VZYFki7ajvm1jphK/NFglosEQHvUwtA+PlKipOQ5vr4c++fnP1zQrea3t JCQ3SfLUFIVTti7nwuyn5k6NVRTfx+GerY76xdlLXYn+DueZM04JVjVihQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGLXvS+MXpF/7lufGsU2GXILfBZmMB8GA1UdIwQY MBaAFA4piQA1X99CVMIIMfLX7jvsQpvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYt M2U0Yjc0ZGQwNThkLzEvWXRlOUw0eGVrWF91VzU4YXhUWVpjZ3Q4Rm1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYtM2U0Yjc0ZGQwNThk LzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYNQMA0G CSqGSIb3DQEBCwUAA4IBAQBYZAcd1XsYMLHJ6cJQd7oZWRQV+HrNSWZqnd7nHaCX lTMis7uh4DEu/b7/UapM4SuTd/+DQKMvn/bQyJ4sr9YXnc4eMfnM+AxSYu7SrFNw vYJOMtKhNr6ADd1CStKLGk7Q9Pq22V9L6nzrjMvEqdgS18JQ9HF+0yRs3zptbWh1 ZuEXVNlk7un6lBKc3QAur+eGoAz6LaNiW9o2bqq+XND3z0NAHaCHIPZkKqfdMkXN 7F0NQxbkgrtVfkwttBZ/O0WnqwLikj2Mhk0VtsgHHADKamRYheyPUFqSfFoumx8k lmmN0H9jcYvDL3p/IB+lrW7G5RYj8lQVHwZXGo34J+si -----END CERTIFICATE-----Generated at Sun Jan 25 11:58:58 2026 by rpki-client