This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/YyEjnHRlckr_V27zZG0mJ7mtsUY.roa
File: YyEjnHRlckr_V27zZG0mJ7mtsUY.roa (raw, json)
Hash identifier: TMaxyAx06Cm6JWuqxguyXAjdJbsUvcCD71I5rrjSBnE=
Subject key identifier: 63:21:23:9C:74:65:72:4A:FF:57:6E:F3:64:6D:26:27:B9:AD:B1:46
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 019B78A2DF833BF875491F816E246E905A73
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/YyEjnHRlckr_V27zZG0mJ7mtsUY.roa
Signing time: Thu 01 Jan 2026 08:18:18 +0000
ROA not before: Thu 01 Jan 2026 08:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20712
IP address blocks: 45.139.229.0/24 maxlen: 24
45.139.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:df:83:3b:f8:75:49:1f:81:6e:24:6e:90:5a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Jan 1 08:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6321239c7465724aff576ef3646d2627b9adb146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1d:65:2b:88:86:d5:af:92:88:db:a1:9a:35:
6e:70:4b:5d:d8:7d:b2:ee:67:83:97:9f:79:c9:de:
55:e1:e1:73:03:ea:98:21:86:d9:ca:1c:ce:fe:26:
85:05:39:0f:dc:77:eb:78:de:21:b4:03:c2:27:5d:
76:79:ba:7e:6d:1f:cb:c4:48:d8:b1:a2:25:3e:af:
2a:81:dd:76:00:0e:d8:2e:0f:11:ca:46:98:92:30:
7d:27:3f:3f:08:da:96:df:33:07:93:4d:26:52:41:
68:86:00:cd:77:b6:dd:8b:ea:e7:ee:42:87:a8:de:
6b:5b:21:c4:64:59:e6:ba:22:e6:1a:e4:22:94:13:
21:af:55:8b:36:ac:f6:85:e9:b2:07:9c:8c:c3:8b:
31:08:f8:13:65:03:bc:36:93:b2:38:fb:4d:df:64:
b6:53:9c:ff:89:83:1b:39:32:09:58:44:77:40:3d:
79:89:b3:4f:7f:98:e2:4c:3b:94:1d:92:d4:33:c0:
3a:f0:7b:8c:97:02:b1:19:30:da:71:17:fa:f0:c4:
3d:5e:36:9c:ba:00:51:32:b7:9a:21:03:a2:9c:67:
3b:b3:92:19:78:2f:ae:b3:40:12:5b:de:3b:04:b1:
f0:a3:0e:f8:80:97:c8:96:e5:25:68:7a:56:34:8a:
07:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:21:23:9C:74:65:72:4A:FF:57:6E:F3:64:6D:26:27:B9:AD:B1:46
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/YyEjnHRlckr_V27zZG0mJ7mtsUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.229.0/24
45.139.231.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:dd:24:68:8e:82:69:e2:e3:4c:53:35:5b:b7:8d:7b:42:78:
d1:d7:ea:07:1d:52:8c:31:52:53:73:0d:ee:55:0b:20:83:ea:
78:c6:7f:23:f4:51:31:13:67:ff:c8:eb:85:e3:95:ab:af:26:
f3:db:2c:08:63:02:9e:bf:60:35:be:e2:a9:e2:10:7c:9f:72:
b0:5d:2c:44:93:ce:2a:05:61:12:e9:7e:a4:c4:ff:26:bf:ea:
0f:d8:c5:ba:9b:67:f8:dc:ee:88:68:46:13:64:49:03:f6:bc:
4a:78:31:be:46:82:c3:46:9a:30:47:9f:0a:0c:00:d0:13:7e:
a2:33:d8:e6:b2:3c:2b:91:b0:22:3d:44:6e:a9:aa:bf:df:8a:
b8:22:1d:8e:e5:52:e2:2a:08:ca:ce:68:ee:00:06:51:7d:19:
9d:6f:30:a4:cf:5e:78:79:ad:a5:f3:f7:c3:10:ef:6e:bd:77:
2e:8f:db:ef:1c:4c:b4:4d:26:9b:36:b6:08:bd:58:b6:11:09:
9d:46:3f:2f:2a:d0:63:8d:c0:8d:79:dc:fa:be:67:ce:c9:2b:
ba:f1:d6:53:72:bd:50:f3:de:df:24:e6:34:d9:92:82:2b:8c:
d8:5d:f3:c4:20:d2:b6:66:c4:c9:46:0a:92:34:d3:c1:c0:2c:
29:0a:56:d4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt4ot+DO/h1SR+BbiRukFpzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl
MTdjMjcwHhcNMjYwMTAxMDgxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzIxMjM5Yzc0NjU3MjRhZmY1NzZlZjM2NDZkMjYyN2I5YWRiMTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR1lK4iG1a+SiNuhmjVucEtd2H2y
7meDl595yd5V4eFzA+qYIYbZyhzO/iaFBTkP3HfreN4htAPCJ112ebp+bR/LxEjY
saIlPq8qgd12AA7YLg8RykaYkjB9Jz8/CNqW3zMHk00mUkFohgDNd7bdi+rn7kKH
qN5rWyHEZFnmuiLmGuQilBMhr1WLNqz2hemyB5yMw4sxCPgTZQO8NpOyOPtN32S2
U5z/iYMbOTIJWER3QD15ibNPf5jiTDuUHZLUM8A68HuMlwKxGTDacRf68MQ9Xjac
ugBRMreaIQOinGc7s5IZeC+us0ASW947BLHwow74gJfIluUlaHpWNIoHwQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGMhI5x0ZXJK/1du82RtJie5rbFGMB8GA1UdIwQY
MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It
ZDc4ZDU2MzFkN2Y2LzEvWXlFam5IUmxja3JfVjI3elpHMG1KN210c1VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2
LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYvlAwQA
LYvnMA0GCSqGSIb3DQEBCwUAA4IBAQDK3SRojoJp4uNMUzVbt417QnjR1+oHHVKM
MVJTcw3uVQsgg+p4xn8j9FExE2f/yOuF45Wrrybz2ywIYwKev2A1vuKp4hB8n3Kw
XSxEk84qBWES6X6kxP8mv+oP2MW6m2f43O6IaEYTZEkD9rxKeDG+RoLDRpowR58K
DADQE36iM9jmsjwrkbAiPURuqaq/34q4Ih2O5VLiKgjKzmjuAAZRfRmdbzCkz154
ea2l8/fDEO9uvXcuj9vvHEy0TSabNrYIvVi2EQmdRj8vKtBjjcCNedz6vmfOySu6
8dZTcr1Q897fJOY02ZKCK4zYXfPEINK2ZsTJRgqSNNPBwCwpClbU
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:38:13 2026 by rpki-client