This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/y3IDHMPafUN66evhs_FGbUIFlak.roa File: y3IDHMPafUN66evhs_FGbUIFlak.roa (raw, json) Hash identifier: n9PagArYyrmkf0AtpLcSu8nW6jM2gUrBWKZ+vTugGSA= Subject key identifier: CB:72:03:1C:C3:DA:7D:43:7A:E9:EB:E1:B3:F1:46:6D:42:05:95:A9 Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Certificate serial: 019B783452FE3F9357999C2121E5B8EBAE95 Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/y3IDHMPafUN66evhs_FGbUIFlak.roa Signing time: Thu 01 Jan 2026 06:17:33 +0000 ROA not before: Thu 01 Jan 2026 06:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62805 IP address blocks: 45.87.165.0/24 maxlen: 24 45.87.166.0/24 maxlen: 24 45.87.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:52:fe:3f:93:57:99:9c:21:21:e5:b8:eb:ae:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Validity Not Before: Jan 1 06:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb72031cc3da7d437ae9ebe1b3f1466d420595a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:51:ab:d9:66:5a:02:43:5f:48:2f:a3:5d:1e: 96:f7:19:58:b3:e4:bd:bd:a5:6c:ef:c0:66:df:6c: 55:7b:14:5c:56:ca:40:f3:d0:1a:08:a6:4c:04:8e: 2d:ce:df:2b:da:e5:42:d0:ae:b4:05:64:d0:29:06: ca:d2:d7:e2:e6:13:44:27:19:ff:a6:1d:76:f8:80: 1f:fb:14:77:69:95:67:d4:26:ff:71:fa:fb:25:6a: e3:bb:a7:9f:a1:b5:c5:90:ab:ad:f6:54:bc:36:39: c9:dd:cc:0a:1b:71:f5:db:4b:81:2b:5e:73:11:dc: 67:0e:50:90:46:68:03:2c:fd:f5:19:94:68:e8:b6: 00:04:7f:4b:a3:df:85:55:6e:34:b2:29:bb:12:1e: d9:8e:70:58:35:5e:ea:c3:b3:ea:44:67:c6:0c:ce: f5:c5:df:b7:01:a7:18:2b:f2:ba:41:58:20:aa:d4: c1:29:bb:3f:dc:7b:84:a2:c1:91:29:3a:01:4f:e3: cd:64:a2:dd:4a:f1:b2:74:dd:65:0b:c6:bb:36:34: 32:a0:7d:52:70:5c:42:82:c1:36:d9:f0:58:ba:f1: a4:c5:5d:e8:49:2d:3a:e7:fe:2d:fb:c3:4f:c1:70: 32:86:26:ed:7d:fc:19:07:09:f4:74:1f:94:84:3e: 44:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:72:03:1C:C3:DA:7D:43:7A:E9:EB:E1:B3:F1:46:6D:42:05:95:A9 X509v3 Authority Key Identifier: keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/y3IDHMPafUN66evhs_FGbUIFlak.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.165.0-45.87.167.255 Signature Algorithm: sha256WithRSAEncryption 53:25:92:0e:68:34:64:33:a9:6e:d9:5b:47:13:de:f4:ec:93: 59:cf:76:79:43:c6:83:10:ae:ba:06:74:e6:38:86:40:f8:56: 04:b0:6d:b2:7a:2c:a6:37:51:79:01:16:27:9a:10:2d:8b:c6: a5:b1:d9:28:7b:a9:25:6e:99:ee:11:d2:cb:20:27:b4:96:fa: dc:cb:10:09:3e:35:3f:4e:c8:10:16:31:9f:47:21:cf:24:4d: 74:cc:2a:73:fb:70:d1:d0:42:55:d7:b2:17:e0:4f:c1:aa:e1: 49:70:29:bd:2d:88:73:fe:8a:9f:1a:92:b3:19:67:43:ed:49: 4f:c1:f8:e4:e0:24:5b:b2:cb:78:9a:65:f8:b4:1a:8d:96:d8: 7a:10:17:bf:19:d3:93:07:81:0f:a1:11:38:ae:7a:df:27:d2: 51:71:36:41:60:6f:36:33:7e:fd:3a:f2:06:1e:3d:67:e7:6b: 5c:5f:8c:db:57:7a:1e:00:e7:a6:a2:fd:2b:21:bd:d6:8d:f4: e7:ec:1e:b7:ea:a5:7f:3c:89:59:7b:20:a1:7f:ae:d9:bd:90: 03:6d:76:95:24:b1:38:ae:e3:13:fb:4b:ea:47:5c:82:36:3d: e5:e9:85:99:0e:11:ba:92:21:6b:a2:dd:fa:ee:9a:64:c2:1c: db:94:79:f5 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4NFL+P5NXmZwhIeW4666VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi YmFhZTIwHhcNMjYwMTAxMDYxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjcyMDMxY2MzZGE3ZDQzN2FlOWViZTFiM2YxNDY2ZDQyMDU5NWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulGr2WZaAkNfSC+jXR6W9xlYs+S9 vaVs78Bm32xVexRcVspA89AaCKZMBI4tzt8r2uVC0K60BWTQKQbK0tfi5hNEJxn/ ph12+IAf+xR3aZVn1Cb/cfr7JWrju6efobXFkKut9lS8NjnJ3cwKG3H120uBK15z EdxnDlCQRmgDLP31GZRo6LYABH9Lo9+FVW40sim7Eh7ZjnBYNV7qw7PqRGfGDM71 xd+3AacYK/K6QVggqtTBKbs/3HuEosGRKToBT+PNZKLdSvGydN1lC8a7NjQyoH1S cFxCgsE22fBYuvGkxV3oSS065/4t+8NPwXAyhibtffwZBwn0dB+UhD5EiQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFMtyAxzD2n1Deunr4bPxRm1CBZWpMB8GA1UdIwQY MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt MjU0YWNkOTJiNGUxLzEveTNJREhNUGFmVU42NmV2aHNfRkdiVUlGbGFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtV6UD BAMtV6AwDQYJKoZIhvcNAQELBQADggEBAFMlkg5oNGQzqW7ZW0cT3vTsk1nPdnlD xoMQrroGdOY4hkD4VgSwbbJ6LKY3UXkBFieaEC2LxqWx2Sh7qSVume4R0ssgJ7SW +tzLEAk+NT9OyBAWMZ9HIc8kTXTMKnP7cNHQQlXXshfgT8Gq4UlwKb0tiHP+ip8a krMZZ0PtSU/B+OTgJFuyy3iaZfi0Go2W2HoQF78Z05MHgQ+hETiuet8n0lFxNkFg bzYzfv068gYePWfna1xfjNtXeh4A56ai/SshvdaN9OfsHrfqpX88iVl7IKF/rtm9 kANtdpUksTiu4xP7S+pHXII2PeXphZkOEbqSIWui3frummTCHNuUefU= -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:31 2026 by rpki-client