This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/yVcflys92CzAxU-EuN_3N-w3nlE.roa
File: yVcflys92CzAxU-EuN_3N-w3nlE.roa (raw, json)
Hash identifier: zUTtMpuZxFGygRwVxvfWbYqYKDMVT6hU9O37iMaFGcM=
Subject key identifier: C9:57:1F:97:2B:3D:D8:2C:C0:C5:4F:84:B8:DF:F7:37:EC:37:9E:51
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 019B7CEE54339978E291C88265F8E4252FA4
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/yVcflys92CzAxU-EuN_3N-w3nlE.roa
Signing time: Fri 02 Jan 2026 04:19:12 +0000
ROA not before: Fri 02 Jan 2026 04:19:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207326
IP address blocks: 45.158.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:54:33:99:78:e2:91:c8:82:65:f8:e4:25:2f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 2 04:19:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9571f972b3dd82cc0c54f84b8dff737ec379e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ca:39:5a:4d:cf:d8:89:d1:05:ee:f0:c2:44:
7d:40:ab:9b:4f:30:3d:22:22:52:b1:03:72:8c:e1:
e0:cc:be:45:a5:3b:a6:3c:2f:1e:21:72:62:7e:9b:
ce:5a:b9:86:75:a1:12:d0:c6:08:af:df:68:58:f9:
5a:89:02:62:6f:7a:b1:a2:6a:54:59:04:84:17:29:
76:7a:43:40:a3:24:f1:ed:1f:8b:7d:ab:93:bc:46:
d4:0e:af:7a:20:34:2c:20:90:0b:cd:b5:4d:4a:25:
12:61:60:0a:a7:f9:7b:73:46:10:9b:d3:57:54:88:
57:24:41:92:f3:75:47:9f:84:ca:d6:51:53:3f:4e:
5a:d7:ff:9c:9c:88:ed:f9:46:46:cd:f5:78:41:b5:
db:4d:b5:fe:1d:bf:5a:0c:a3:83:fd:17:19:c3:62:
d9:94:d2:8c:66:a6:e2:e8:1a:18:aa:c8:a5:31:e7:
31:fe:6e:23:fc:35:52:3d:32:d4:36:9e:ff:27:f5:
86:26:e4:bd:0e:1b:59:fe:02:74:10:e7:27:22:29:
60:9c:71:db:12:0b:73:ce:34:02:85:fb:06:bb:2d:
87:ca:bd:22:79:fb:eb:68:c3:f3:c3:e9:33:2b:56:
a9:e7:05:4b:8b:ca:f1:88:6f:f8:07:f1:c4:e9:9c:
99:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:57:1F:97:2B:3D:D8:2C:C0:C5:4F:84:B8:DF:F7:37:EC:37:9E:51
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/yVcflys92CzAxU-EuN_3N-w3nlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.14.0/24
Signature Algorithm: sha256WithRSAEncryption
96:08:c8:26:0a:cf:c2:52:66:3d:35:0a:2e:f1:92:67:f7:c4:
83:96:60:d5:14:11:8e:05:ab:b9:5d:be:0f:d8:4f:51:e1:2f:
fe:b6:0f:d9:5b:e8:9f:2e:c0:6d:6f:34:bf:60:ac:ac:49:8c:
7a:de:a5:88:20:ad:4d:29:63:00:d4:cd:b0:52:2c:56:21:7a:
ca:98:ce:4b:b8:eb:a1:cc:06:56:62:27:25:71:dd:bd:41:39:
9c:6d:99:2c:e3:d0:f8:12:b5:78:4f:07:1b:22:f5:6d:1f:26:
f1:6e:10:41:87:a2:82:df:ae:58:cd:33:77:a1:58:00:70:a4:
4c:c6:78:65:6f:44:ee:80:21:c5:c3:fa:61:62:63:2f:ba:dc:
00:6a:30:42:61:53:38:b6:77:ad:1f:a6:8b:53:1c:56:ea:11:
2c:f5:bf:56:0e:eb:ce:ae:63:08:f5:14:01:45:e2:bb:ad:2e:
64:21:96:75:e6:19:4f:e4:39:44:fe:5f:64:04:5d:41:29:5c:
6c:85:60:d2:6f:39:2a:77:e0:41:ea:6b:00:6b:a9:92:5f:60:
14:e7:09:6e:ba:14:80:ab:bc:8c:d1:dd:7d:0e:6a:23:d6:6b:
f0:e2:10:fe:de:a4:41:04:5d:20:3a:e5:dc:e8:82:fc:66:39:
c0:29:96:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt87lQzmXjikciCZfjkJS+kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1
N2E0OGIwHhcNMjYwMTAyMDQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTU3MWY5NzJiM2RkODJjYzBjNTRmODRiOGRmZjczN2VjMzc5ZTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMo5Wk3P2InRBe7wwkR9QKubTzA9
IiJSsQNyjOHgzL5FpTumPC8eIXJifpvOWrmGdaES0MYIr99oWPlaiQJib3qxompU
WQSEFyl2ekNAoyTx7R+LfauTvEbUDq96IDQsIJALzbVNSiUSYWAKp/l7c0YQm9NX
VIhXJEGS83VHn4TK1lFTP05a1/+cnIjt+UZGzfV4QbXbTbX+Hb9aDKOD/RcZw2LZ
lNKMZqbi6BoYqsilMecx/m4j/DVSPTLUNp7/J/WGJuS9DhtZ/gJ0EOcnIilgnHHb
EgtzzjQChfsGuy2Hyr0iefvraMPzw+kzK1ap5wVLi8rxiG/4B/HE6ZyZVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMlXH5crPdgswMVPhLjf9zfsN55RMB8GA1UdIwQY
MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt
YjIwZTI4ZjUxODhmLzEveVZjZmx5czkyQ3pBeFUtRXVOXzNOLXczbmxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm
LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ4OMA0G
CSqGSIb3DQEBCwUAA4IBAQCWCMgmCs/CUmY9NQou8ZJn98SDlmDVFBGOBau5Xb4P
2E9R4S/+tg/ZW+ifLsBtbzS/YKysSYx63qWIIK1NKWMA1M2wUixWIXrKmM5LuOuh
zAZWYiclcd29QTmcbZks49D4ErV4TwcbIvVtHybxbhBBh6KC365YzTN3oVgAcKRM
xnhlb0TugCHFw/phYmMvutwAajBCYVM4tnetH6aLUxxW6hEs9b9WDuvOrmMI9RQB
ReK7rS5kIZZ15hlP5DlE/l9kBF1BKVxshWDSbzkqd+BB6msAa6mSX2AU5wluuhSA
q7yM0d19Dmoj1mvw4hD+3qRBBF0gOuXc6IL8ZjnAKZbV
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:11:22 2026 by rpki-client