This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/YlxMB1ZZ-ow203ws5UgFMDiy-aw.roa File: YlxMB1ZZ-ow203ws5UgFMDiy-aw.roa (raw, json) Hash identifier: AUEoKkZI29uogZ3xQ0ZfV6IUpZXozQCkx7EKfEnNRlI= Subject key identifier: 62:5C:4C:07:56:59:FA:8C:36:D3:7C:2C:E5:48:05:30:38:B2:F9:AC Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Certificate serial: 019B7F8108F5AFD9DF5B3233730C6333435A Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/YlxMB1ZZ-ow203ws5UgFMDiy-aw.roa Signing time: Fri 02 Jan 2026 16:18:41 +0000 ROA not before: Fri 02 Jan 2026 16:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8708 IP address blocks: 45.91.6.0/24 maxlen: 24 45.133.152.0/24 maxlen: 24 45.135.224.0/24 maxlen: 24 45.145.18.0/23 maxlen: 24 45.150.82.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:08:f5:af:d9:df:5b:32:33:73:0c:63:33:43:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Validity Not Before: Jan 2 16:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=625c4c075659fa8c36d37c2ce548053038b2f9ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3d:a3:ce:ca:58:b0:7c:51:d9:4c:90:06:09: 2c:9f:5d:59:fe:a5:d3:30:e4:72:cb:f6:fa:04:6c: 67:ca:5d:41:2c:d1:83:ce:47:e8:96:42:6e:26:3a: 24:e0:f1:4e:5b:e6:b7:ce:68:12:02:53:b2:c5:f4: 05:73:b3:6c:42:36:3e:7e:70:44:5f:09:fa:51:7a: f3:1e:d4:64:50:a5:de:b8:46:73:03:3f:5f:23:72: 75:c1:ec:04:dd:29:88:9a:72:cb:43:f1:3e:58:4c: 00:aa:fb:bf:a9:af:9d:9b:4d:f3:86:a6:dd:10:06: 70:9e:2e:d5:fd:b7:1d:c2:ec:fe:07:bf:7d:41:3f: f3:c0:d5:bb:02:da:ed:f7:e6:9d:6e:71:b0:6d:d1: db:48:d5:3b:68:6e:15:72:0e:f7:1d:3c:3d:e3:08: 8f:6f:0d:2e:f5:c6:c7:dc:ba:a5:83:f2:6b:6e:08: cf:dd:3d:8f:d1:eb:74:93:16:60:72:87:f9:7f:f8: bf:0c:82:a9:b8:70:f5:60:13:f2:16:30:77:b6:ae: a3:ce:7d:9f:74:61:3e:86:32:44:83:da:00:58:73: 4b:c5:f9:24:f3:3b:4a:b1:d9:c1:a1:69:ed:bc:7d: 71:d2:39:6c:b2:9e:24:e1:07:e7:11:63:0e:7d:b3: 70:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:5C:4C:07:56:59:FA:8C:36:D3:7C:2C:E5:48:05:30:38:B2:F9:AC X509v3 Authority Key Identifier: keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/YlxMB1ZZ-ow203ws5UgFMDiy-aw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.6.0/24 45.133.152.0/24 45.135.224.0/24 45.145.18.0/23 45.150.82.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:f1:fa:d8:fa:c7:34:75:0e:16:62:e8:7c:ee:16:09:c8:e3: 6d:a2:c7:c5:90:6e:80:8b:3a:e2:4a:f4:2e:d8:6a:4e:a5:1a: 92:4e:f4:df:ef:36:14:02:b6:e6:00:5c:7d:ad:92:9f:a6:bd: 9c:a7:44:1f:93:f8:8c:33:1f:3b:51:f4:9c:1c:c2:32:51:34: 42:66:5c:52:84:c8:5b:71:7f:35:0a:55:15:b1:57:45:34:d3: cf:5a:2c:53:5b:cc:7e:d6:b3:83:a2:8b:6e:f7:fb:22:79:81: c9:d5:94:ad:4b:71:16:88:f7:2b:8b:9d:17:cc:50:f4:2b:56: 87:1d:25:3b:ab:ef:78:0d:c2:98:df:60:d6:9d:1e:b9:02:cf: cf:22:bb:de:dc:aa:a3:49:d8:13:db:41:9b:cf:31:11:2b:86: 75:dd:de:85:2e:c6:10:a3:89:96:8a:b4:66:b5:f6:c6:c6:de: 07:11:00:b9:fe:c5:79:1f:43:42:fc:44:d3:65:68:a8:5d:d1: 92:5f:6d:bd:6c:7b:52:b9:ea:b2:f4:73:90:a3:9e:65:68:68: 87:0c:5f:33:3d:2c:4b:d8:2f:e3:a4:79:6e:88:ff:c5:99:dc: 39:2a:95:8e:05:d2:f0:7c:24:19:52:c6:37:59:ec:ca:2e:70: 0c:f0:0c:e7 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/gQj1r9nfWzIzcwxjM0NaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw YmQ5ODYwHhcNMjYwMTAyMTYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjVjNGMwNzU2NTlmYThjMzZkMzdjMmNlNTQ4MDUzMDM4YjJmOWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj2jzspYsHxR2UyQBgksn11Z/qXT MORyy/b6BGxnyl1BLNGDzkfolkJuJjok4PFOW+a3zmgSAlOyxfQFc7NsQjY+fnBE Xwn6UXrzHtRkUKXeuEZzAz9fI3J1wewE3SmImnLLQ/E+WEwAqvu/qa+dm03zhqbd EAZwni7V/bcdwuz+B799QT/zwNW7Atrt9+adbnGwbdHbSNU7aG4Vcg73HTw94wiP bw0u9cbH3Lqlg/JrbgjP3T2P0et0kxZgcof5f/i/DIKpuHD1YBPyFjB3tq6jzn2f dGE+hjJEg9oAWHNLxfkk8ztKsdnBoWntvH1x0jlssp4k4QfnEWMOfbNwOQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFGJcTAdWWfqMNtN8LOVIBTA4svmsMB8GA1UdIwQY MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt ZjUyNTgxNjQwMmJkLzEvWWx4TUIxWlotb3cyMDN3czVVZ0ZNRGl5LWF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALVsGAwQA LYWYAwQALYfgAwQBLZESAwQBLZZSMA0GCSqGSIb3DQEBCwUAA4IBAQA68frY+sc0 dQ4WYuh87hYJyONtosfFkG6AizriSvQu2GpOpRqSTvTf7zYUArbmAFx9rZKfpr2c p0Qfk/iMMx87UfScHMIyUTRCZlxShMhbcX81ClUVsVdFNNPPWixTW8x+1rODootu 9/sieYHJ1ZStS3EWiPcri50XzFD0K1aHHSU7q+94DcKY32DWnR65As/PIrve3Kqj SdgT20GbzzERK4Z13d6FLsYQo4mWirRmtfbGxt4HEQC5/sV5H0NC/ETTZWioXdGS X229bHtSueqy9HOQo55laGiHDF8zPSxL2C/jpHluiP/Fmdw5KpWOBdLwfCQZUsY3 WezKLnAM8Azn -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:24 2026 by rpki-client