This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/yxBWMEqUTuUpppX4kQbNWZMUag8.roa File: yxBWMEqUTuUpppX4kQbNWZMUag8.roa (raw, json) Hash identifier: GfoDixWxoGP9Yf1RA/HAN8eaFxjgurmqtoh7fzztQM4= Subject key identifier: CB:10:56:30:4A:94:4E:E5:29:A6:95:F8:91:06:CD:59:93:14:6A:0F Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Certificate serial: 019B7B3646C49BCD489DA0C19811054BD4CC Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/yxBWMEqUTuUpppX4kQbNWZMUag8.roa Signing time: Thu 01 Jan 2026 20:18:33 +0000 ROA not before: Thu 01 Jan 2026 20:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30848 IP address blocks: 45.90.20.0/22 maxlen: 24 45.131.76.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:46:c4:9b:cd:48:9d:a0:c1:98:11:05:4b:d4:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Validity Not Before: Jan 1 20:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb1056304a944ee529a695f89106cd5993146a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b9:14:3d:87:97:eb:3f:fb:2d:5a:76:5f:c1: d7:81:66:f8:a0:60:69:61:24:18:0b:27:ba:a0:a4: a2:fa:76:5a:fc:8a:52:10:95:17:ed:a2:64:2a:3d: d6:b7:d9:7a:60:37:ca:bf:3f:e3:e7:aa:a8:97:b4: 90:b4:0c:f9:74:d1:84:50:5a:d0:f1:5e:8c:c1:b8: d4:8c:41:be:d5:e4:9b:8a:2e:f4:98:12:70:bf:bc: f7:b3:e9:4f:5b:0f:e9:71:a9:67:71:24:e1:8b:cd: f3:d2:a8:cf:28:57:c3:9d:0d:de:00:9f:7f:5e:b7: 90:8b:45:99:c0:9d:bf:0c:be:95:0b:95:1b:49:36: 16:94:c4:a4:62:ae:2c:c6:ca:76:68:ac:5d:10:d1: fb:0a:b8:de:ae:32:9c:87:9c:3c:17:62:50:70:fe: 01:50:1c:ef:b8:04:85:ba:63:88:50:6f:23:d3:d6: 54:64:9f:61:7b:58:48:43:3e:3b:75:7d:53:d0:4c: 6d:63:7c:76:f1:49:29:1a:c7:ed:ea:5f:9c:c8:6d: aa:4f:6c:67:7a:8f:1f:37:e8:54:a7:4f:60:41:1d: 96:c8:69:1f:87:c1:b7:53:a7:d0:67:19:11:12:16: b4:46:f2:91:0b:db:a0:1a:d7:46:a4:f0:b0:76:6a: 57:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:10:56:30:4A:94:4E:E5:29:A6:95:F8:91:06:CD:59:93:14:6A:0F X509v3 Authority Key Identifier: keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/yxBWMEqUTuUpppX4kQbNWZMUag8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.20.0/22 45.131.76.0/23 Signature Algorithm: sha256WithRSAEncryption 44:27:71:52:00:9f:20:a8:56:8a:55:d7:9f:4f:69:d4:a7:9a: d3:05:1d:3f:71:ca:c6:03:e7:5d:13:8b:e8:25:87:31:18:2d: 1a:48:cf:5d:9e:b6:1c:67:3e:89:bc:fb:48:a6:df:9d:aa:47: 6a:f1:70:b9:ad:66:92:9b:22:ee:a5:a9:cf:98:ef:5b:77:25: a5:00:4a:c6:f1:34:13:6c:30:6e:1d:78:ed:b9:69:50:27:d6: b8:09:76:0e:1a:ed:1f:06:26:46:fc:c1:7e:76:a7:0e:45:51: 29:80:c7:d4:35:21:68:1e:6a:de:85:8d:fa:67:c3:3b:f6:28: e5:de:96:80:9b:4e:da:a9:c9:d3:ab:7f:43:46:47:d6:5a:00: 9c:d5:1d:86:7c:5b:6a:4a:4b:28:9d:29:6a:97:b0:d6:90:23: c0:10:08:ff:2e:6a:02:76:02:0f:c5:19:d3:60:c9:93:6c:b7: 09:c3:db:d4:91:41:5c:27:cc:0a:ba:b1:15:88:7a:d2:07:3e: 20:76:06:b4:60:58:55:18:7d:5d:d5:71:b6:59:32:3a:d5:0d: 76:98:0f:f0:c1:cf:e6:16:9d:02:bc:92:fd:42:20:3d:51:a7: 3d:ad:67:b4:5b:21:f6:82:f4:52:3c:5a:02:e8:a6:03:35:7f: 03:cb:40:a7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NkbEm81InaDBmBEFS9TMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2 MmU1NmUwHhcNMjYwMTAxMjAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjEwNTYzMDRhOTQ0ZWU1MjlhNjk1Zjg5MTA2Y2Q1OTkzMTQ2YTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7kUPYeX6z/7LVp2X8HXgWb4oGBp YSQYCye6oKSi+nZa/IpSEJUX7aJkKj3Wt9l6YDfKvz/j56qol7SQtAz5dNGEUFrQ 8V6MwbjUjEG+1eSbii70mBJwv7z3s+lPWw/pcalncSThi83z0qjPKFfDnQ3eAJ9/ XreQi0WZwJ2/DL6VC5UbSTYWlMSkYq4sxsp2aKxdENH7CrjerjKch5w8F2JQcP4B UBzvuASFumOIUG8j09ZUZJ9he1hIQz47dX1T0ExtY3x28UkpGsft6l+cyG2qT2xn eo8fN+hUp09gQR2WyGkfh8G3U6fQZxkREha0RvKRC9ugGtdGpPCwdmpXlwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMsQVjBKlE7lKaaV+JEGzVmTFGoPMB8GA1UdIwQY MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt YjBiMzVhMzRlMzg4LzEveXhCV01FcVVUdVVwcHBYNGtRYk5XWk1VYWc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4 LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVoUAwQB LYNMMA0GCSqGSIb3DQEBCwUAA4IBAQBEJ3FSAJ8gqFaKVdefT2nUp5rTBR0/ccrG A+ddE4voJYcxGC0aSM9dnrYcZz6JvPtIpt+dqkdq8XC5rWaSmyLupanPmO9bdyWl AErG8TQTbDBuHXjtuWlQJ9a4CXYOGu0fBiZG/MF+dqcORVEpgMfUNSFoHmrehY36 Z8M79ijl3paAm07aqcnTq39DRkfWWgCc1R2GfFtqSksonSlql7DWkCPAEAj/LmoC dgIPxRnTYMmTbLcJw9vUkUFcJ8wKurEViHrSBz4gdga0YFhVGH1d1XG2WTI61Q12 mA/wwc/mFp0CvJL9QiA9Uac9rWe0WyH2gvRSPFoC6KYDNX8Dy0Cn -----END CERTIFICATE-----Generated at Sun Jan 25 15:29:11 2026 by rpki-client