This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/JkyXPttoPAp3cCPnCVEZfnX2vVk.roa File: JkyXPttoPAp3cCPnCVEZfnX2vVk.roa (raw, json) Hash identifier: 09s5xjIn5aKowlmf/hI3/pYB+SNQW1utLJ78KCcVxLc= Subject key identifier: 26:4C:97:3E:DB:68:3C:0A:77:70:23:E7:09:51:19:7E:75:F6:BD:59 Certificate issuer: /CN=460d3149fc50ca9797f50fde9e02a083134c5019 Certificate serial: 019B09E87B94A840BC5D334B27AF4CE1F36F Authority key identifier: 46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/JkyXPttoPAp3cCPnCVEZfnX2vVk.roa Signing time: Wed 10 Dec 2025 20:16:29 +0000 ROA not before: Wed 10 Dec 2025 20:16:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8873 IP address blocks: 45.154.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:e8:7b:94:a8:40:bc:5d:33:4b:27:af:4c:e1:f3:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=460d3149fc50ca9797f50fde9e02a083134c5019 Validity Not Before: Dec 10 20:16:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=264c973edb683c0a777023e70951197e75f6bd59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1f:4e:ce:5a:bb:19:4e:3b:52:af:c9:f1:4b: da:d7:d0:2b:9e:55:66:1c:8e:23:28:fe:be:7a:06: 66:a4:e6:4a:df:3a:22:b5:45:90:7d:a1:6d:64:4f: b9:ce:b1:84:e5:ca:c1:4a:23:35:37:15:99:92:c6: aa:41:88:8b:27:5a:f1:59:53:29:de:e6:a9:10:5b: 16:6c:89:de:fe:f4:cc:f5:d2:02:cb:fc:1f:b7:4c: f3:18:cb:17:64:60:ce:57:cc:24:1f:71:1c:6b:b7: 89:e8:8d:e7:e1:b3:93:81:6f:bb:34:e0:52:df:b3: e0:07:3b:fa:d2:03:cd:e2:0f:bb:e3:05:ef:22:6d: 4b:0b:d6:93:4a:ed:30:bf:31:39:cc:fd:b5:8c:91: 4c:44:0f:bc:f4:e4:83:c9:ac:aa:61:6e:b3:6c:7b: 3e:6c:eb:5e:7f:ef:f4:29:57:31:a6:5f:2d:82:e4: ff:4f:2f:63:fb:c8:0b:f1:62:76:32:bf:21:53:90: 0e:9f:39:d5:3a:16:00:a2:6d:e7:1f:6b:5e:7f:2b: 3d:e3:19:ba:51:0c:9c:e6:32:22:8b:aa:2f:0a:4c: 09:a7:f8:00:0d:01:b5:37:c1:3b:30:fc:6d:0c:e3: ea:05:80:47:b0:fc:9a:9f:0a:76:a2:f0:24:75:7e: a2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:4C:97:3E:DB:68:3C:0A:77:70:23:E7:09:51:19:7E:75:F6:BD:59 X509v3 Authority Key Identifier: keyid:46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/JkyXPttoPAp3cCPnCVEZfnX2vVk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.28.0/22 Signature Algorithm: sha256WithRSAEncryption 76:06:26:66:ef:b5:c6:90:d0:de:4b:12:85:4b:13:85:ba:93: 66:82:7d:3d:9c:ed:df:d6:57:09:31:52:ce:e2:96:14:e7:db: c8:8e:93:92:41:b2:1e:53:31:03:2e:45:cc:7e:b2:34:0c:dd: 8a:88:95:ff:ce:c8:6a:a9:e5:c1:81:1e:9e:d9:13:b3:b0:76: cd:35:4b:04:c9:bf:b4:60:76:f1:68:50:79:b6:06:b8:77:bc: 9a:2e:d5:a8:fa:d2:01:8a:19:f0:e1:a0:6c:e2:c0:67:6f:fb: 90:15:02:43:d9:b4:26:14:06:bc:ba:6e:c4:3d:75:64:b5:ad: 09:9f:dd:21:86:e6:44:b3:63:e8:05:f4:86:a3:48:9c:38:f8: 2d:39:e4:07:be:1a:2d:77:e0:45:0f:33:b3:ce:48:0f:d5:b8: af:40:8f:b5:c0:cb:b7:81:65:60:4f:43:47:36:3c:d7:8d:72: af:17:ca:bf:6a:73:b1:95:b8:ba:14:4f:f8:5f:52:25:41:44: 08:ae:7e:c7:10:67:fe:52:18:98:9c:41:11:30:cb:7d:a4:fe: 62:aa:01:a1:a3:96:bb:cb:a4:3d:26:49:27:3c:31:67:71:44: 92:5a:ed:4b:85:93:c7:5d:63:5c:81:c6:ea:9a:1e:54:61:ae: c7:ed:69:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsJ6HuUqEC8XTNLJ69M4fNvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MGQzMTQ5ZmM1MGNhOTc5N2Y1MGZkZTllMDJhMDgzMTM0 YzUwMTkwHhcNMjUxMjEwMjAxNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjRjOTczZWRiNjgzYzBhNzc3MDIzZTcwOTUxMTk3ZTc1ZjZiZDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh9Ozlq7GU47Uq/J8Uva19ArnlVm HI4jKP6+egZmpOZK3zoitUWQfaFtZE+5zrGE5crBSiM1NxWZksaqQYiLJ1rxWVMp 3uapEFsWbIne/vTM9dICy/wft0zzGMsXZGDOV8wkH3Eca7eJ6I3n4bOTgW+7NOBS 37PgBzv60gPN4g+74wXvIm1LC9aTSu0wvzE5zP21jJFMRA+89OSDyayqYW6zbHs+ bOtef+/0KVcxpl8tguT/Ty9j+8gL8WJ2Mr8hU5AOnznVOhYAom3nH2tefys94xm6 UQyc5jIii6ovCkwJp/gADQG1N8E7MPxtDOPqBYBHsPyanwp2ovAkdX6iuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCZMlz7baDwKd3Aj5wlRGX519r1ZMB8GA1UdIwQY MBaAFEYNMUn8UMqXl/UP3p4CoIMTTFAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmcweFNmeFF5cGVYOVFfZW5nS2dneE5NVUJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wMTYyNDYtMzc2Yy00NzI1LTgwYWUt NzViZDk0NmE3MzU1LzEvSmt5WFB0dG9QQXAzY0NQbkNWRVpmblgydlZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wMTYyNDYtMzc2Yy00NzI1LTgwYWUtNzViZDk0NmE3MzU1 LzEvUmcweFNmeFF5cGVYOVFfZW5nS2dneE5NVUJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZocMA0G CSqGSIb3DQEBCwUAA4IBAQB2BiZm77XGkNDeSxKFSxOFupNmgn09nO3f1lcJMVLO 4pYU59vIjpOSQbIeUzEDLkXMfrI0DN2KiJX/zshqqeXBgR6e2ROzsHbNNUsEyb+0 YHbxaFB5tga4d7yaLtWo+tIBihnw4aBs4sBnb/uQFQJD2bQmFAa8um7EPXVkta0J n90hhuZEs2PoBfSGo0icOPgtOeQHvhotd+BFDzOzzkgP1bivQI+1wMu3gWVgT0NH NjzXjXKvF8q/anOxlbi6FE/4X1IlQUQIrn7HEGf+UhiYnEERMMt9pP5iqgGho5a7 y6Q9JkknPDFncUSSWu1LhZPHXWNcgcbqmh5UYa7H7WlW -----END CERTIFICATE-----Generated at Thu Dec 18 00:20:25 2025 by rpki-client