This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/YhhsybWAzHa63YaPvrgi4sjbjbI.roa File: YhhsybWAzHa63YaPvrgi4sjbjbI.roa (raw, json) Hash identifier: T2MXxILyF0Me/fqVllL7VCaBjrZcghSwrlaqWl2tPkE= Subject key identifier: 62:18:6C:C9:B5:80:CC:76:BA:DD:86:8F:BE:B8:22:E2:C8:DB:8D:B2 Certificate issuer: /CN=da980a45fe487366e386b6064c2c652519f9fc93 Certificate serial: 019B7C806D5EBDFEF66F6BBEED5340028080 Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/YhhsybWAzHa63YaPvrgi4sjbjbI.roa Signing time: Fri 02 Jan 2026 02:19:09 +0000 ROA not before: Fri 02 Jan 2026 02:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206313 IP address blocks: 45.154.108.0/22 maxlen: 24 45.154.108.0/24 maxlen: 24 45.154.109.0/24 maxlen: 24 45.154.110.0/24 maxlen: 24 2a0f:b500::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:6d:5e:bd:fe:f6:6f:6b:be:ed:53:40:02:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93 Validity Not Before: Jan 2 02:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62186cc9b580cc76badd868fbeb822e2c8db8db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:14:d9:9c:12:75:92:2a:2c:5c:bc:9c:7b:39: 7a:00:80:d6:7d:95:25:67:ce:e9:cc:8c:96:11:7f: 0d:ea:a6:a6:19:c7:78:2c:2f:81:5a:78:bb:28:d5: dd:23:f7:df:17:c5:ce:ef:82:c2:4c:2c:71:bd:b8: dd:bb:02:61:f8:f4:be:b3:33:0d:d2:e4:1f:f0:80: 3f:87:b4:03:84:1e:5f:56:61:ef:58:09:ec:65:8d: ab:a3:7d:39:27:98:19:d4:14:84:10:78:14:ee:1b: e2:58:4c:c7:2c:d3:01:39:41:aa:57:8d:6f:79:af: b5:43:12:5b:dd:19:9f:96:50:7f:da:a5:a3:ba:40: 9e:8f:c2:a1:b8:eb:ec:5c:42:ae:95:35:24:c9:ac: 19:ac:a8:7d:44:ff:a7:f4:3e:17:92:ef:78:84:10: 53:e8:e1:33:de:e5:1e:32:5b:5a:4c:c0:9e:37:a9: b2:e1:3e:82:c5:54:4a:69:19:87:cf:39:c3:77:d0: 77:05:4c:54:cb:8d:d1:6e:af:ac:54:d8:41:ff:06: 1f:be:30:be:97:ff:f1:f1:b0:4f:15:16:1c:ba:ec: 12:24:0e:59:ed:b1:8c:90:dc:15:bb:85:0a:21:ae: cf:f7:61:71:1c:aa:79:6a:79:51:39:bd:9c:b1:90: 7a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:18:6C:C9:B5:80:CC:76:BA:DD:86:8F:BE:B8:22:E2:C8:DB:8D:B2 X509v3 Authority Key Identifier: keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/YhhsybWAzHa63YaPvrgi4sjbjbI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.108.0/22 IPv6: 2a0f:b500::/29 Signature Algorithm: sha256WithRSAEncryption 2e:0f:f5:05:75:3d:be:ad:82:51:43:8d:59:3a:cf:ec:7d:5d: 4a:49:ac:06:50:28:db:71:e3:42:72:f4:f1:79:52:ae:5b:8f: 56:60:cc:be:83:e9:1d:fb:ca:de:0d:45:44:00:70:d8:b0:14: bc:3d:fb:0e:32:5e:8d:e7:36:39:8f:88:1a:6d:75:d1:89:32: 6b:64:f8:b7:56:e7:df:53:23:c6:7c:68:11:ff:42:f5:f2:d6: 02:94:98:46:76:82:a8:3a:96:28:0e:fa:56:8a:49:b3:e6:71: 2b:ca:35:eb:43:9d:df:06:76:e6:e2:bf:aa:fe:40:6e:27:c0: d5:3a:9e:16:d3:e1:3b:f6:2f:eb:7b:c1:0a:b1:a6:30:af:99: 35:41:18:75:44:9f:5d:ad:00:3a:8f:d8:01:b8:19:35:65:40: c5:64:0f:88:96:d9:58:03:43:1c:5e:0c:22:02:92:d1:8c:6b: d0:7b:9b:28:4b:67:9d:ef:87:d0:8e:e1:33:16:36:eb:fb:48: 9b:07:65:18:d8:cd:6f:3a:e0:bb:9f:f4:dd:1c:f4:34:89:c3: 55:5d:13:ab:78:15:db:30:17:25:1f:c1:c7:38:ab:1e:8c:22: 87:52:6e:47:91:7b:1b:cd:a4:7a:d8:03:98:22:25:5a:f8:8d: cf:10:fa:84 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gG1evf72b2u+7VNAAoCAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOTgwYTQ1ZmU0ODczNjZlMzg2YjYwNjRjMmM2NTI1MTlm OWZjOTMwHhcNMjYwMTAyMDIxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjE4NmNjOWI1ODBjYzc2YmFkZDg2OGZiZWI4MjJlMmM4ZGI4ZGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhTZnBJ1kiosXLycezl6AIDWfZUl Z87pzIyWEX8N6qamGcd4LC+BWni7KNXdI/ffF8XO74LCTCxxvbjduwJh+PS+szMN 0uQf8IA/h7QDhB5fVmHvWAnsZY2ro305J5gZ1BSEEHgU7hviWEzHLNMBOUGqV41v ea+1QxJb3RmfllB/2qWjukCej8KhuOvsXEKulTUkyawZrKh9RP+n9D4Xku94hBBT 6OEz3uUeMltaTMCeN6my4T6CxVRKaRmHzznDd9B3BUxUy43Rbq+sVNhB/wYfvjC+ l//x8bBPFRYcuuwSJA5Z7bGMkNwVu4UKIa7P92FxHKp5anlROb2csZB6yQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGIYbMm1gMx2ut2Gj764IuLI242yMB8GA1UdIwQY MBaAFNqYCkX+SHNm44a2BkwsZSUZ+fyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80MTBlMzktYjhhNi00NmNhLWFjZGMt M2YxMmFmZjI3NGRhLzEvWWhoc3liV0F6SGE2M1lhUHZyZ2k0c2piamJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC80MTBlMzktYjhhNi00NmNhLWFjZGMtM2YxMmFmZjI3NGRh LzEvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZpsMA0E AgACMAcDBQMqD7UAMA0GCSqGSIb3DQEBCwUAA4IBAQAuD/UFdT2+rYJRQ41ZOs/s fV1KSawGUCjbceNCcvTxeVKuW49WYMy+g+kd+8reDUVEAHDYsBS8PfsOMl6N5zY5 j4gabXXRiTJrZPi3VuffUyPGfGgR/0L18tYClJhGdoKoOpYoDvpWikmz5nEryjXr Q53fBnbm4r+q/kBuJ8DVOp4W0+E79i/re8EKsaYwr5k1QRh1RJ9drQA6j9gBuBk1 ZUDFZA+IltlYA0McXgwiApLRjGvQe5soS2ed74fQjuEzFjbr+0ibB2UY2M1vOuC7 n/TdHPQ0icNVXROreBXbMBclH8HHOKsejCKHUm5HkXsbzaR62AOYIiVa+I3PEPqE -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:35 2026 by rpki-client