This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/y_vc6s_Py2qwffoPUemYyQ3C93I.roa File: y_vc6s_Py2qwffoPUemYyQ3C93I.roa (raw, json) Hash identifier: jTDTDDTAp7a9jlbajKDV/IreUhiB7BfxphmCimNa3V0= Subject key identifier: CB:FB:DC:EA:CF:CF:CB:6A:B0:7D:FA:0F:51:E9:98:C9:0D:C2:F7:72 Certificate issuer: /CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5 Certificate serial: 019B7B35EE4AF8BAD6DE7E8FA9B0CED0D793 Authority key identifier: AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/y_vc6s_Py2qwffoPUemYyQ3C93I.roa Signing time: Thu 01 Jan 2026 20:18:10 +0000 ROA not before: Thu 01 Jan 2026 20:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209143 IP address blocks: 45.92.24.0/22 maxlen: 22 45.92.24.0/24 maxlen: 24 45.92.25.0/24 maxlen: 24 45.92.26.0/24 maxlen: 24 45.92.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:ee:4a:f8:ba:d6:de:7e:8f:a9:b0:ce:d0:d7:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5 Validity Not Before: Jan 1 20:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbfbdceacfcfcb6ab07dfa0f51e998c90dc2f772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c6:61:4b:a3:82:bc:6a:80:2d:39:0d:c5:0c: 8f:f7:47:c6:98:05:eb:ab:40:e8:7c:79:88:3c:e4: 06:3c:2b:1e:71:37:98:dd:77:0c:53:25:d9:35:ad: 8b:79:08:e4:96:45:46:0e:8f:f1:26:c0:97:b6:4f: 28:11:0b:2e:cc:02:f2:fe:54:d1:6a:2f:5d:1c:10: f3:ad:3d:56:6e:65:78:eb:bb:87:ff:f1:a4:5f:66: 0b:ef:14:e0:4f:eb:08:19:c4:83:53:26:2f:c5:3a: 8b:93:a4:85:ca:1a:ab:f9:20:91:36:bc:88:91:b0: 03:5d:ed:ba:be:c8:6e:3d:da:d4:c7:70:c4:3f:95: 0f:aa:f5:1b:db:0c:f8:9d:03:a8:2f:bc:ad:bb:9b: 18:a5:26:e5:c5:fd:66:c2:d0:6c:63:75:e5:6c:e4: cb:33:24:66:52:eb:29:eb:af:82:22:c7:49:36:5f: 45:e0:b2:b1:3e:42:d5:a5:cb:56:2b:64:d4:48:81: 71:84:0f:5d:6c:3a:2d:c4:3a:bd:d2:7c:31:75:ad: a5:db:85:6f:80:e1:78:8b:09:57:4f:6a:53:e6:cc: e5:fe:db:1d:6f:70:07:14:e5:ae:8d:29:c5:4f:ff: 31:dc:6a:13:f9:9f:4c:3c:b1:11:16:c2:12:79:37: 7a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FB:DC:EA:CF:CF:CB:6A:B0:7D:FA:0F:51:E9:98:C9:0D:C2:F7:72 X509v3 Authority Key Identifier: keyid:AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/y_vc6s_Py2qwffoPUemYyQ3C93I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.24.0/22 Signature Algorithm: sha256WithRSAEncryption 18:5d:cf:67:c7:89:54:bf:94:f0:b9:15:18:0e:9b:93:44:e6: 2a:7d:63:72:dc:ab:86:55:8d:4b:33:a6:df:b9:38:87:82:71: 41:12:b8:de:17:9c:9f:ab:f6:a5:a7:f5:71:92:82:25:a3:44: 83:51:2d:b2:d1:5e:69:b0:a0:a1:53:18:f5:75:c6:6f:8d:1e: 30:40:fe:8e:da:90:a8:f0:c5:c0:5b:db:fc:91:99:13:72:ed: 9a:dc:76:d2:6e:8e:40:9f:05:be:38:1c:4d:d1:d7:82:f1:da: 3f:af:74:d2:26:9b:f9:16:dc:6d:12:62:82:b7:07:76:5f:d6: 01:a4:e3:dc:48:62:d0:10:24:6c:7a:11:f3:2a:c0:07:7c:d1: ae:c4:60:86:90:6b:54:6a:8c:1e:a9:84:45:2e:84:1b:a7:dd: 8d:43:a6:c8:eb:4c:d3:22:1a:89:0f:13:fc:f0:4f:d8:46:f0: 21:0b:7c:95:b7:e6:65:50:03:92:4b:37:10:f8:1b:a8:17:b3: d2:a1:fd:95:b5:11:72:fd:3e:83:d9:96:92:4d:6f:99:92:a3: 75:8a:c5:2a:ac:88:d2:32:d6:12:30:ed:b2:39:7a:1c:3f:73: 60:24:ae:13:77:29:2c:da:8e:06:a6:cc:bf:2a:71:c3:e8:71: b7:b7:81:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Ne5K+LrW3n6PqbDO0NeTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNDZmYjhkNDFhNDcyNDJhZTNlZThjZTFmMGZhOGVmODEx Njk4YjUwHhcNMjYwMTAxMjAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmZiZGNlYWNmY2ZjYjZhYjA3ZGZhMGY1MWU5OThjOTBkYzJmNzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcZhS6OCvGqALTkNxQyP90fGmAXr q0DofHmIPOQGPCsecTeY3XcMUyXZNa2LeQjklkVGDo/xJsCXtk8oEQsuzALy/lTR ai9dHBDzrT1WbmV467uH//GkX2YL7xTgT+sIGcSDUyYvxTqLk6SFyhqr+SCRNryI kbADXe26vshuPdrUx3DEP5UPqvUb2wz4nQOoL7ytu5sYpSblxf1mwtBsY3XlbOTL MyRmUusp66+CIsdJNl9F4LKxPkLVpctWK2TUSIFxhA9dbDotxDq90nwxda2l24Vv gOF4iwlXT2pT5szl/tsdb3AHFOWujSnFT/8x3GoT+Z9MPLERFsISeTd6uQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMv73OrPz8tqsH36D1HpmMkNwvdyMB8GA1UdIwQY MBaAFK9G+41BpHJCrj7ozh8PqO+BFpi1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjBiN2pVR2tja0t1UHVqT0h3LW83NEVXbUxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kODI3NWUtYzQ3OS00ZWQ4LWJlZWEt ZGE4OWVkMmViNTVlLzEveV92YzZzX1B5MnF3ZmZvUFVlbVl5UTNDOTNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9kODI3NWUtYzQ3OS00ZWQ4LWJlZWEtZGE4OWVkMmViNTVl LzEvcjBiN2pVR2tja0t1UHVqT0h3LW83NEVXbUxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVwYMA0G CSqGSIb3DQEBCwUAA4IBAQAYXc9nx4lUv5TwuRUYDpuTROYqfWNy3KuGVY1LM6bf uTiHgnFBErjeF5yfq/alp/VxkoIlo0SDUS2y0V5psKChUxj1dcZvjR4wQP6O2pCo 8MXAW9v8kZkTcu2a3HbSbo5AnwW+OBxN0deC8do/r3TSJpv5FtxtEmKCtwd2X9YB pOPcSGLQECRsehHzKsAHfNGuxGCGkGtUaoweqYRFLoQbp92NQ6bI60zTIhqJDxP8 8E/YRvAhC3yVt+ZlUAOSSzcQ+BuoF7PSof2VtRFy/T6D2ZaSTW+ZkqN1isUqrIjS MtYSMO2yOXocP3NgJK4Tdyks2o4Gpsy/KnHD6HG3t4EJ -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:17 2026 by rpki-client