This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/yUSfqsPPl1YTQhIE73fMTmMnfkE.roa File: yUSfqsPPl1YTQhIE73fMTmMnfkE.roa (raw, json) Hash identifier: yAZHs4HcwBg1li8wEtRge9Bo9Q1pztQUu5urOyY+7Fc= Subject key identifier: C9:44:9F:AA:C3:CF:97:56:13:42:12:04:EF:77:CC:4E:63:27:7E:41 Certificate issuer: /CN=b754b22c5540508d9629a311ef1e83543657c4ee Certificate serial: 019B7CED45353EB974994160D0AC55963FA9 Authority key identifier: B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/yUSfqsPPl1YTQhIE73fMTmMnfkE.roa Signing time: Fri 02 Jan 2026 04:18:03 +0000 ROA not before: Fri 02 Jan 2026 04:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8315 IP address blocks: 45.157.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:45:35:3e:b9:74:99:41:60:d0:ac:55:96:3f:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b754b22c5540508d9629a311ef1e83543657c4ee Validity Not Before: Jan 2 04:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9449faac3cf975613421204ef77cc4e63277e41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e7:fc:47:1a:c5:b7:5d:29:15:ab:a4:d3:06: 85:6d:56:0a:63:44:e4:89:f0:1f:f1:82:2f:18:66: fc:37:34:6d:cb:5d:d1:f4:13:3c:05:52:b9:68:fe: 41:08:78:70:95:f5:c8:fe:42:75:cc:da:34:a7:47: 10:7a:e2:05:3e:43:4a:90:20:32:0f:13:51:35:6e: 9d:86:06:ce:37:33:5c:31:42:5c:e0:7e:32:cb:e6: 88:8c:86:4b:d6:05:8a:0e:d7:22:ed:b4:28:2d:bb: c0:24:5e:50:06:64:2b:03:b7:09:d1:26:6b:d6:5e: 41:ce:c1:86:93:23:46:79:3f:5b:14:27:64:f5:59: 22:09:25:86:59:45:80:3b:e4:f4:1f:ec:2d:9c:4f: 2c:e8:0d:0d:c5:7b:be:e6:90:86:ef:b6:26:e1:0e: d5:c3:3f:14:bf:97:a6:16:19:0b:ad:88:80:cd:af: f7:ee:63:a4:c1:76:26:96:73:99:2d:47:c0:93:17: 3f:13:a2:30:1f:a8:0c:a8:39:7b:f8:7e:a9:4e:eb: f2:7c:44:4d:89:97:b2:fc:54:cc:dc:64:24:2f:7a: 90:d5:e0:cc:aa:69:88:4c:ac:88:a0:7d:0a:99:f4: 14:20:85:45:b0:a8:4f:f1:1e:b7:c4:e6:8e:7c:7e: 1a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:44:9F:AA:C3:CF:97:56:13:42:12:04:EF:77:CC:4E:63:27:7E:41 X509v3 Authority Key Identifier: keyid:B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/yUSfqsPPl1YTQhIE73fMTmMnfkE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.174.0/24 Signature Algorithm: sha256WithRSAEncryption 03:6f:ae:bb:bc:3d:d0:2e:95:18:7e:9e:81:c9:df:a7:9b:34: b4:36:b1:e9:6a:28:0b:0a:ed:eb:5c:ac:b0:e0:89:bf:e3:78: 15:25:9e:50:74:8c:d8:60:b8:de:f3:92:d1:b1:1e:91:c6:a5: bd:3c:ed:8d:c9:74:b3:61:de:af:81:c2:94:f8:07:e1:d3:a3: ea:26:5b:d2:69:39:96:ad:0d:b7:82:ae:7c:4e:56:ce:2e:47: 55:56:f7:fb:e4:36:09:f8:62:f2:21:d8:da:cc:67:5f:61:39: 1c:6f:c5:90:62:d7:10:36:c6:91:f0:37:3b:ac:a8:b0:0d:b3: ee:0f:52:1b:8d:1a:c2:0c:9a:e1:d7:66:81:6a:2b:8e:dd:bf: fa:ea:ae:06:7b:61:d4:1a:0e:61:8f:79:ff:7f:ce:c7:40:89: ca:02:dc:e3:9e:82:bd:cc:2e:c8:47:a5:be:f3:10:c3:dc:ab: 7f:45:67:33:45:a2:75:2a:32:86:8f:12:21:80:01:8d:97:a2: 84:6d:b0:f5:45:3a:70:75:4f:6b:ee:45:0f:15:70:03:d8:1f: 52:ca:81:0f:a8:75:a3:cc:8e:9f:65:6a:c3:eb:38:b0:0e:e5: c6:6e:8d:5d:46:60:b7:68:2c:6f:2a:91:a6:40:4f:f2:aa:5e: e3:68:61:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87UU1Prl0mUFg0KxVlj+pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NTRiMjJjNTU0MDUwOGQ5NjI5YTMxMWVmMWU4MzU0MzY1 N2M0ZWUwHhcNMjYwMTAyMDQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTQ0OWZhYWMzY2Y5NzU2MTM0MjEyMDRlZjc3Y2M0ZTYzMjc3ZTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Of8RxrFt10pFauk0waFbVYKY0Tk ifAf8YIvGGb8NzRty13R9BM8BVK5aP5BCHhwlfXI/kJ1zNo0p0cQeuIFPkNKkCAy DxNRNW6dhgbONzNcMUJc4H4yy+aIjIZL1gWKDtci7bQoLbvAJF5QBmQrA7cJ0SZr 1l5BzsGGkyNGeT9bFCdk9VkiCSWGWUWAO+T0H+wtnE8s6A0NxXu+5pCG77Ym4Q7V wz8Uv5emFhkLrYiAza/37mOkwXYmlnOZLUfAkxc/E6IwH6gMqDl7+H6pTuvyfERN iZey/FTM3GQkL3qQ1eDMqmmITKyIoH0KmfQUIIVFsKhP8R63xOaOfH4aTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMlEn6rDz5dWE0ISBO93zE5jJ35BMB8GA1UdIwQY MBaAFLdUsixVQFCNlimjEe8eg1Q2V8TuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDFTeUxGVkFVSTJXS2FNUjd4NkRWRFpYeE80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iNTUxM2EtYmE2OS00OGM0LTk1ZWUt NTZlYzEzMjY5YTFjLzEveVVTZnFzUFBsMVlUUWhJRTczZk1UbU1uZmtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9iNTUxM2EtYmE2OS00OGM0LTk1ZWUtNTZlYzEzMjY5YTFj LzEvdDFTeUxGVkFVSTJXS2FNUjd4NkRWRFpYeE80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ2uMA0G CSqGSIb3DQEBCwUAA4IBAQADb667vD3QLpUYfp6Byd+nmzS0NrHpaigLCu3rXKyw 4Im/43gVJZ5QdIzYYLje85LRsR6RxqW9PO2NyXSzYd6vgcKU+Afh06PqJlvSaTmW rQ23gq58TlbOLkdVVvf75DYJ+GLyIdjazGdfYTkcb8WQYtcQNsaR8Dc7rKiwDbPu D1IbjRrCDJrh12aBaiuO3b/66q4Ge2HUGg5hj3n/f87HQInKAtzjnoK9zC7IR6W+ 8xDD3Kt/RWczRaJ1KjKGjxIhgAGNl6KEbbD1RTpwdU9r7kUPFXAD2B9SyoEPqHWj zI6fZWrD6ziwDuXGbo1dRmC3aCxvKpGmQE/yql7jaGH7 -----END CERTIFICATE-----Generated at Mon Jan 26 05:55:45 2026 by rpki-client