This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/t72vzDed8xwwFdYwzkhMty8CSXI.roa File: t72vzDed8xwwFdYwzkhMty8CSXI.roa (raw, json) Hash identifier: YW4OPr8TGjFQl6muhUEM/uVQLLBIy3RVHE6bb2pg68w= Subject key identifier: B7:BD:AF:CC:37:9D:F3:1C:30:15:D6:30:CE:48:4C:B7:2F:02:49:72 Certificate issuer: /CN=cab936b35f92cdec5e90df33bdc508661c27b455 Certificate serial: 019B7C804270F999E1E628B86DA7B1F2CFE4 Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/t72vzDed8xwwFdYwzkhMty8CSXI.roa Signing time: Fri 02 Jan 2026 02:18:58 +0000 ROA not before: Fri 02 Jan 2026 02:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214089 IP address blocks: 45.94.100.0/22 maxlen: 22 45.94.103.0/24 maxlen: 24 193.178.44.0/22 maxlen: 22 193.178.44.0/24 maxlen: 24 193.178.45.0/24 maxlen: 24 193.178.46.0/24 maxlen: 24 193.178.47.0/24 maxlen: 24 2a12:b840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:42:70:f9:99:e1:e6:28:b8:6d:a7:b1:f2:cf:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455 Validity Not Before: Jan 2 02:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7bdafcc379df31c3015d630ce484cb72f024972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6a:dd:5f:2e:c6:e4:9c:bf:99:d5:f0:d5:f6: 58:c5:99:a5:e9:37:24:a9:9f:b8:89:b5:ec:81:9a: c0:50:68:3b:cd:84:ce:c7:66:eb:cd:8f:8a:01:51: c0:dc:27:4c:09:18:02:c9:4a:1c:8f:32:6c:0a:76: 83:53:23:55:ff:32:e1:5b:4a:7a:ee:01:3a:17:9c: f1:59:66:97:21:76:7e:d3:65:ac:08:85:be:78:28: 57:ad:8a:1a:64:3f:cf:77:44:63:4a:cd:a1:f1:05: 02:57:60:df:05:c5:9e:71:59:2e:5c:09:33:6c:fe: 00:7c:1c:74:3e:f3:a8:c5:09:1e:22:81:1b:82:34: 60:e6:5f:53:9f:bf:db:0d:20:ea:c3:78:ef:21:71: f7:26:9d:a8:aa:86:96:d9:41:29:25:52:21:9c:64: 93:b6:7f:83:bf:80:26:85:7a:97:bc:a2:67:af:a4: c5:92:3e:a8:de:04:e1:3c:b5:63:11:ca:48:24:20: d4:e3:be:de:be:ba:74:60:86:0a:83:98:f3:1a:fc: 93:33:2c:a0:4a:f0:d5:a3:df:45:ba:9c:a0:49:2b: 6f:09:45:4f:8e:d0:4f:42:fa:bb:d8:34:7d:6c:9e: f4:d7:0a:cb:65:5e:8b:ba:2b:d8:06:01:f0:5a:76: 50:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:BD:AF:CC:37:9D:F3:1C:30:15:D6:30:CE:48:4C:B7:2F:02:49:72 X509v3 Authority Key Identifier: keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/t72vzDed8xwwFdYwzkhMty8CSXI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.100.0/22 193.178.44.0/22 IPv6: 2a12:b840::/32 Signature Algorithm: sha256WithRSAEncryption 9f:de:b9:62:f6:0f:f4:8c:40:40:b3:e4:62:f9:62:4d:c4:9c: 74:91:a0:cb:e2:1b:ab:99:2f:10:fe:1a:96:27:75:c8:4f:4b: e4:79:7c:b8:2e:4f:ed:01:62:ca:3e:05:00:47:fe:99:ec:4c: 4e:54:60:39:b3:6f:be:aa:34:de:03:dc:0e:8c:34:2b:00:a0: ae:34:e0:4e:23:5d:85:b2:96:c2:36:87:ab:0d:7d:f9:64:1a: 75:ad:bf:5b:2b:df:83:3b:ae:39:29:f7:e7:49:c1:31:de:ba: 39:af:43:e8:d6:26:2f:06:af:05:70:f0:2f:7b:33:28:34:7c: b8:f5:9a:c0:ac:ab:fb:27:de:4a:e1:52:1c:a4:db:a2:0e:51: ef:e4:bb:bd:59:e5:9a:5f:64:af:5a:46:aa:f4:0c:ad:ff:a9: 35:7b:41:c9:b5:46:ed:ef:9b:a4:73:65:7f:f6:1e:df:92:be: c4:81:d9:41:b0:88:57:07:ce:69:89:6d:11:52:26:c6:93:b9: 01:ab:be:87:09:a3:b5:39:55:52:a9:2a:05:38:02:5f:7b:ca: 6d:df:98:4a:fe:98:fb:8b:0b:76:36:01:cb:31:cb:76:58:59: df:4a:5b:03:5c:bc:86:eb:a5:f2:00:b6:a1:27:5a:50:28:d0: 78:66:72:b5 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8gEJw+Znh5ii4baex8s/kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYjkzNmIzNWY5MmNkZWM1ZTkwZGYzM2JkYzUwODY2MWMy N2I0NTUwHhcNMjYwMTAyMDIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2JkYWZjYzM3OWRmMzFjMzAxNWQ2MzBjZTQ4NGNiNzJmMDI0OTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2rdXy7G5Jy/mdXw1fZYxZml6Tck qZ+4ibXsgZrAUGg7zYTOx2brzY+KAVHA3CdMCRgCyUocjzJsCnaDUyNV/zLhW0p6 7gE6F5zxWWaXIXZ+02WsCIW+eChXrYoaZD/Pd0RjSs2h8QUCV2DfBcWecVkuXAkz bP4AfBx0PvOoxQkeIoEbgjRg5l9Tn7/bDSDqw3jvIXH3Jp2oqoaW2UEpJVIhnGST tn+Dv4AmhXqXvKJnr6TFkj6o3gThPLVjEcpIJCDU477evrp0YIYKg5jzGvyTMyyg SvDVo99FupygSStvCUVPjtBPQvq72DR9bJ701wrLZV6LuivYBgHwWnZQUQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFLe9r8w3nfMcMBXWMM5ITLcvAklyMB8GA1UdIwQY MBaAFMq5NrNfks3sXpDfM73FCGYcJ7RVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXJrMnMxLVN6ZXhla044enZjVUlaaHdudEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yZjk3N2EtYzBkYi00MzdlLTlmNjAt NTU5MjM2MGUzZThlLzEvdDcydnpEZWQ4eHd3RmRZd3praE10eThDU1hJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yZjk3N2EtYzBkYi00MzdlLTlmNjAtNTU5MjM2MGUzZThl LzEveXJrMnMxLVN6ZXhla044enZjVUlaaHdudEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLV5kAwQC wbIsMA0EAgACMAcDBQAqErhAMA0GCSqGSIb3DQEBCwUAA4IBAQCf3rli9g/0jEBA s+Ri+WJNxJx0kaDL4hurmS8Q/hqWJ3XIT0vkeXy4Lk/tAWLKPgUAR/6Z7ExOVGA5 s2++qjTeA9wOjDQrAKCuNOBOI12FspbCNoerDX35ZBp1rb9bK9+DO645KffnScEx 3ro5r0Po1iYvBq8FcPAvezMoNHy49ZrArKv7J95K4VIcpNuiDlHv5Lu9WeWaX2Sv Wkaq9Ayt/6k1e0HJtUbt75ukc2V/9h7fkr7EgdlBsIhXB85piW0RUibGk7kBq76H CaO1OVVSqSoFOAJfe8pt35hK/pj7iwt2NgHLMct2WFnfSlsDXLyG66XyALahJ1pQ KNB4ZnK1 -----END CERTIFICATE-----Generated at Mon Jan 26 04:38:51 2026 by rpki-client