This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/1y4mjCjd3yaeU16gh_uU_xDclvA.roa File: 1y4mjCjd3yaeU16gh_uU_xDclvA.roa (raw, json) Hash identifier: akVEsaylTtagPHzHitk7WCUHGfvzfwDTl/6FhQXu8p4= Subject key identifier: D7:2E:26:8C:28:DD:DF:26:9E:53:5E:A0:87:FB:94:FF:10:DC:96:F0 Certificate issuer: /CN=aaa314592ef5ea8bbe84d064b256171fe2afc83e Certificate serial: 019B7CECCBC8643E96803FDBA4B9AC413055 Authority key identifier: AA:A3:14:59:2E:F5:EA:8B:BE:84:D0:64:B2:56:17:1F:E2:AF:C8:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/1y4mjCjd3yaeU16gh_uU_xDclvA.roa Signing time: Fri 02 Jan 2026 04:17:31 +0000 ROA not before: Fri 02 Jan 2026 04:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209242 IP address blocks: 45.80.108.0/24 maxlen: 24 45.80.110.0/24 maxlen: 24 185.159.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.crl rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:cb:c8:64:3e:96:80:3f:db:a4:b9:ac:41:30:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaa314592ef5ea8bbe84d064b256171fe2afc83e Validity Not Before: Jan 2 04:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d72e268c28dddf269e535ea087fb94ff10dc96f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:24:3a:1f:11:b8:66:31:e2:6d:94:0e:32:29: ea:30:b2:22:b7:d2:eb:ef:0d:39:ed:5e:9b:be:3d: 94:9e:e2:2b:40:d1:41:15:86:89:99:3a:de:86:de: 6a:9e:b1:a7:3e:c8:1a:95:2b:43:1d:bf:fd:6b:23: 2f:a1:aa:0b:6f:e1:19:39:97:3c:e3:22:3c:1b:63: e6:59:9b:e6:b2:d6:e0:b0:1a:06:e0:25:ac:86:16: bf:14:63:42:5c:a0:70:0d:20:97:ef:e0:26:36:11: 3e:60:fb:ce:c9:dd:de:c8:7f:e2:77:9b:0c:f5:19: 72:8e:65:fe:25:1e:93:3a:75:87:e5:a3:b9:b7:c0: b4:4b:05:29:d4:20:b8:73:5c:40:68:c9:b3:02:35: fd:5c:5a:2a:72:7d:4f:11:cd:04:3d:e3:f1:92:53: 04:b2:5e:55:9f:e7:be:bc:1f:69:be:64:09:a6:fd: d8:fb:a2:06:ce:88:57:44:4a:32:51:a1:ad:8b:de: 66:dc:f3:b8:6e:52:0e:5e:91:08:dd:ae:bb:5b:b7: a3:25:82:b4:2b:b6:98:ae:a7:51:ae:b1:0b:d9:90: 77:d4:e6:78:48:02:91:89:24:94:d4:d9:b5:5e:33: 0a:ba:2e:3e:0e:3d:31:83:b7:cb:6b:15:f1:6f:b7: 77:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:2E:26:8C:28:DD:DF:26:9E:53:5E:A0:87:FB:94:FF:10:DC:96:F0 X509v3 Authority Key Identifier: keyid:AA:A3:14:59:2E:F5:EA:8B:BE:84:D0:64:B2:56:17:1F:E2:AF:C8:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/1y4mjCjd3yaeU16gh_uU_xDclvA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.108.0/24 45.80.110.0/24 185.159.247.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:23:93:ab:8c:a1:f2:77:06:b1:be:39:bb:b8:37:63:3e:5d: 26:88:8a:39:57:bb:b2:6c:5d:59:d7:d6:5d:2a:0a:16:c0:90: f5:9e:b4:ba:41:e8:42:07:9d:be:2c:6a:1c:33:7e:63:bc:f2: a8:2e:a2:74:59:c5:3e:19:f8:c6:3b:41:ee:df:72:aa:6e:99: b1:ff:cc:a4:cd:4f:c9:12:be:3a:bf:db:e8:e4:df:ba:d2:79: 94:f3:ed:77:65:75:fd:61:13:8b:21:c3:ef:d9:0c:8c:5b:e0: 5c:a9:f6:d5:68:41:53:54:95:f2:c2:33:f6:c2:5a:60:72:7d: 14:5d:ee:f4:a2:30:62:54:95:12:d7:1f:a2:2a:d5:6a:0f:5b: fc:bc:5e:f1:a6:69:eb:1a:dc:17:06:11:c0:88:47:de:cc:be: 55:d1:37:1c:cb:94:39:4e:33:40:ef:68:77:67:4a:83:09:05: a6:c3:00:70:a8:7e:a7:4d:5a:cd:5b:56:5e:7a:93:3c:d3:15: b7:26:1a:40:01:66:09:2c:09:1c:1e:98:e0:3a:83:8a:1b:d8: a2:b8:6e:cc:88:86:79:e1:aa:df:a9:46:b0:fa:ab:6d:8f:b0: ca:dc:90:3a:d2:d3:55:cd:8e:26:05:7c:5d:36:35:e1:9c:4e: 9d:83:30:fc -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87MvIZD6WgD/bpLmsQTBVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYTMxNDU5MmVmNWVhOGJiZTg0ZDA2NGIyNTYxNzFmZTJh ZmM4M2UwHhcNMjYwMTAyMDQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzJlMjY4YzI4ZGRkZjI2OWU1MzVlYTA4N2ZiOTRmZjEwZGM5NmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCQ6HxG4ZjHibZQOMinqMLIit9Lr 7w057V6bvj2UnuIrQNFBFYaJmTreht5qnrGnPsgalStDHb/9ayMvoaoLb+EZOZc8 4yI8G2PmWZvmstbgsBoG4CWshha/FGNCXKBwDSCX7+AmNhE+YPvOyd3eyH/id5sM 9RlyjmX+JR6TOnWH5aO5t8C0SwUp1CC4c1xAaMmzAjX9XFoqcn1PEc0EPePxklME sl5Vn+e+vB9pvmQJpv3Y+6IGzohXREoyUaGti95m3PO4blIOXpEI3a67W7ejJYK0 K7aYrqdRrrEL2ZB31OZ4SAKRiSSU1Nm1XjMKui4+Dj0xg7fLaxXxb7d3GwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNcuJowo3d8mnlNeoIf7lP8Q3JbwMB8GA1UdIwQY MBaAFKqjFFku9eqLvoTQZLJWFx/ir8g+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXFNVVdTNzE2b3UtaE5Ca3NsWVhILUt2eUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83ZThjMTctZTIwMS00ZmY0LTgzNjYt ZjBkZjIzODk4ZjY0LzEvMXk0bWpDamQzeWFlVTE2Z2hfdVVfeERjbHZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83ZThjMTctZTIwMS00ZmY0LTgzNjYtZjBkZjIzODk4ZjY0 LzEvcXFNVVdTNzE2b3UtaE5Ca3NsWVhILUt2eUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVBsAwQA LVBuAwQAuZ/3MA0GCSqGSIb3DQEBCwUAA4IBAQBOI5OrjKHydwaxvjm7uDdjPl0m iIo5V7uybF1Z19ZdKgoWwJD1nrS6QehCB52+LGocM35jvPKoLqJ0WcU+GfjGO0Hu 33Kqbpmx/8ykzU/JEr46v9vo5N+60nmU8+13ZXX9YROLIcPv2QyMW+BcqfbVaEFT VJXywjP2wlpgcn0UXe70ojBiVJUS1x+iKtVqD1v8vF7xpmnrGtwXBhHAiEfezL5V 0Tccy5Q5TjNA72h3Z0qDCQWmwwBwqH6nTVrNW1ZeepM80xW3JhpAAWYJLAkcHpjg OoOKG9iiuG7MiIZ54arfqUaw+qttj7DK3JA60tNVzY4mBXxdNjXhnE6dgzD8 -----END CERTIFICATE-----Generated at Sun Jan 25 07:56:25 2026 by rpki-client