This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/7YkwqMeQNo1ZCW5cXDDtW6tJPIM.roa File: 7YkwqMeQNo1ZCW5cXDDtW6tJPIM.roa (raw, json) Hash identifier: QYaRajMdHdtvejmwMr8bX6WzRjepO0NpayhGfPPYZjs= Subject key identifier: ED:89:30:A8:C7:90:36:8D:59:09:6E:5C:5C:30:ED:5B:AB:49:3C:83 Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Certificate serial: 019B7758F21F5AF5E995E5C13D5116F03CB6 Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/7YkwqMeQNo1ZCW5cXDDtW6tJPIM.roa Signing time: Thu 01 Jan 2026 02:17:56 +0000 ROA not before: Thu 01 Jan 2026 02:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207810 IP address blocks: 5.134.84.0/23 maxlen: 24 45.159.73.0/24 maxlen: 24 45.159.74.0/23 maxlen: 24 45.159.74.0/24 maxlen: 24 45.159.75.0/24 maxlen: 24 217.113.12.0/22 maxlen: 22 217.113.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f2:1f:5a:f5:e9:95:e5:c1:3d:51:16:f0:3c:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Validity Not Before: Jan 1 02:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed8930a8c790368d59096e5c5c30ed5bab493c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9f:da:97:3f:55:c5:65:72:6b:66:c4:78:77: ae:4e:f5:e1:c0:96:11:fd:d4:35:fd:88:b1:d8:83: ba:f7:4c:07:8d:ff:a8:ba:b3:5e:1e:15:65:85:0d: bc:77:1e:ef:c4:5d:22:c8:7b:4f:94:13:c5:90:74: 75:85:d7:70:df:16:bf:34:ec:0e:c9:58:52:ae:e9: d6:05:d7:3c:82:f2:5f:ed:93:bd:6b:22:23:12:dc: c2:4c:31:b7:80:07:58:c4:71:06:50:2a:e5:56:1d: 00:5d:2e:7c:f0:9e:93:e8:e9:54:1d:dd:55:48:69: 13:53:91:34:2c:35:0a:ee:7e:2a:4b:de:ff:39:b5: e8:72:38:8b:76:f3:1c:73:7d:ae:48:5a:41:8c:25: 92:73:70:d6:45:e8:52:9d:1e:95:e2:76:9d:28:a1: f9:d0:f3:b4:82:c8:5d:f0:fa:84:89:f1:8f:86:6a: a5:09:06:ea:70:59:68:b2:4a:1d:49:f8:57:51:92: 30:d6:d2:5b:b1:b0:24:51:0b:ab:f1:87:ce:7f:b7: 11:d9:5b:3c:05:a1:29:a3:40:68:08:d3:e1:18:c8: 8e:a8:5d:64:99:31:b1:a9:6a:18:ae:38:92:13:8c: 51:a1:7a:34:29:13:d1:a9:76:97:38:cc:6a:7c:2b: 35:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:89:30:A8:C7:90:36:8D:59:09:6E:5C:5C:30:ED:5B:AB:49:3C:83 X509v3 Authority Key Identifier: keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/7YkwqMeQNo1ZCW5cXDDtW6tJPIM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.134.84.0/23 45.159.73.0-45.159.75.255 217.113.12.0/22 217.113.18.0/23 Signature Algorithm: sha256WithRSAEncryption 37:94:4c:9e:90:fc:a9:3f:03:62:eb:17:f2:88:de:03:5e:5b: cd:cf:9a:7b:2a:99:e4:5d:dc:70:2d:39:3a:d7:f9:8a:6a:b3: c6:ce:b8:88:24:72:f5:0d:bc:f1:06:f8:4b:cf:55:8a:a7:7a: 5a:c6:0b:d3:06:b2:7a:cf:29:6f:2d:c5:0d:ad:b6:13:5e:b6: d1:e1:f9:2c:d7:d2:40:1d:c8:84:3f:65:52:74:44:52:aa:f5: 55:16:ec:b3:5e:c0:22:9c:8b:42:0b:16:52:a6:9f:1e:b7:7f: d1:11:5d:44:31:0e:77:44:73:29:65:3f:ee:d0:60:73:9b:8e: 22:87:e1:a9:03:ce:ab:29:84:c2:2c:ac:27:2a:dd:9c:88:f1: e8:9a:0a:82:08:eb:f9:e1:b2:76:af:06:b0:8e:6e:75:9c:ee: 63:72:f8:22:24:eb:90:1e:0c:b7:a0:b0:81:63:8f:bb:b5:99: 04:5a:43:32:ee:d2:96:94:9e:d0:6a:70:0f:6f:88:fe:7f:14: df:4e:0c:2a:c7:17:d5:1b:e9:62:01:c3:24:f5:de:f7:69:55: a7:e2:d2:39:0d:aa:70:31:c1:e8:ee:85:d3:8b:98:5a:d8:a9: 30:73:c9:d4:0d:9f:a8:f9:c3:00:6d:53:49:fa:de:80:be:d1: dd:8d:71:63 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt3WPIfWvXpleXBPVEW8Dy2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1 ZjU2NzQwHhcNMjYwMTAxMDIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDg5MzBhOGM3OTAzNjhkNTkwOTZlNWM1YzMwZWQ1YmFiNDkzYzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp/alz9VxWVya2bEeHeuTvXhwJYR /dQ1/Yix2IO690wHjf+ourNeHhVlhQ28dx7vxF0iyHtPlBPFkHR1hddw3xa/NOwO yVhSrunWBdc8gvJf7ZO9ayIjEtzCTDG3gAdYxHEGUCrlVh0AXS588J6T6OlUHd1V SGkTU5E0LDUK7n4qS97/ObXocjiLdvMcc32uSFpBjCWSc3DWRehSnR6V4nadKKH5 0PO0gshd8PqEifGPhmqlCQbqcFloskodSfhXUZIw1tJbsbAkUQur8YfOf7cR2Vs8 BaEpo0BoCNPhGMiOqF1kmTGxqWoYrjiSE4xRoXo0KRPRqXaXOMxqfCs1OQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFO2JMKjHkDaNWQluXFww7VurSTyDMB8GA1UdIwQY MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt MWZjMTllYTczYTJhLzEvN1lrd3FNZVFObzFaQ1c1Y1hERHRXNnRKUElNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBBYZUMAwD BAAtn0kDBAItn0gDBALZcQwDBAHZcRIwDQYJKoZIhvcNAQELBQADggEBADeUTJ6Q /Kk/A2LrF/KI3gNeW83PmnsqmeRd3HAtOTrX+Ypqs8bOuIgkcvUNvPEG+EvPVYqn elrGC9MGsnrPKW8txQ2tthNettHh+SzX0kAdyIQ/ZVJ0RFKq9VUW7LNewCKci0IL FlKmnx63f9ERXUQxDndEcyllP+7QYHObjiKH4akDzqsphMIsrCcq3ZyI8eiaCoII 6/nhsnavBrCObnWc7mNy+CIk65AeDLegsIFjj7u1mQRaQzLu0paUntBqcA9viP5/ FN9ODCrHF9Ub6WIBwyT13vdpVafi0jkNqnAxwejuhdOLmFrYqTBzydQNn6j5wwBt U0n63oC+0d2NcWM= -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:23 2026 by rpki-client