This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/yT1hexyLHS2DwS_5x6NFbxR-bTw.roa File: yT1hexyLHS2DwS_5x6NFbxR-bTw.roa (raw, json) Hash identifier: 5x41FW1Qtljmqrx6g3WCie+5bNcqPVjQcU0e0sjDv04= Subject key identifier: C9:3D:61:7B:1C:8B:1D:2D:83:C1:2F:F9:C7:A3:45:6F:14:7E:6D:3C Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Certificate serial: 019B8DAD6F61B6AC6C2BDE35106DFA14C4DE Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/yT1hexyLHS2DwS_5x6NFbxR-bTw.roa Signing time: Mon 05 Jan 2026 10:21:52 +0000 ROA not before: Mon 05 Jan 2026 10:21:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214208 IP address blocks: 45.91.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:ad:6f:61:b6:ac:6c:2b:de:35:10:6d:fa:14:c4:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Validity Not Before: Jan 5 10:21:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c93d617b1c8b1d2d83c12ff9c7a3456f147e6d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:98:5d:24:7e:d3:fc:db:e8:10:84:fa:bb:5e: d4:cd:7c:72:36:d9:41:a4:1d:05:58:38:6e:c7:dd: 9c:b8:20:50:61:3d:68:96:9d:9e:fa:ea:b3:66:ed: c9:c5:2e:9f:df:87:79:5f:24:99:6a:22:47:c3:b1: fa:97:67:4d:b0:fa:d6:9b:1f:35:f0:3f:9d:30:c3: 2c:c9:ca:eb:0e:34:fd:39:5f:7d:df:2a:d1:13:db: ea:10:9e:01:e9:8a:b2:d9:0e:02:95:b7:5a:46:4f: 6e:ba:2d:7b:cd:25:bb:79:70:40:48:98:81:13:d1: 07:11:13:e9:24:cf:49:92:d3:59:74:f8:6f:2c:e4: 54:77:aa:27:a1:6f:cb:03:c1:4f:e0:17:bf:8f:f1: 0a:b9:dc:a1:13:29:fa:09:db:29:06:72:c6:95:18: eb:18:24:c4:45:34:62:0c:c2:22:bb:11:30:71:21: 31:0d:a1:18:35:d4:af:be:d5:81:7a:6d:52:30:60: f9:03:34:00:79:72:28:41:38:d2:28:35:18:87:c8: 01:d5:25:a9:b4:51:c9:5e:17:65:25:8b:b3:9b:3f: b1:a3:14:19:64:60:ee:c9:c5:8c:03:c4:9d:c2:d4: dd:b5:41:33:83:26:7d:ed:46:41:3d:5e:a4:e9:c7: 97:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:3D:61:7B:1C:8B:1D:2D:83:C1:2F:F9:C7:A3:45:6F:14:7E:6D:3C X509v3 Authority Key Identifier: keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/yT1hexyLHS2DwS_5x6NFbxR-bTw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.7.0/24 Signature Algorithm: sha256WithRSAEncryption 77:2e:04:fd:0b:a7:75:e3:61:b9:42:6a:82:15:de:a6:d0:06: b1:0f:43:2d:cd:ae:29:d2:92:04:46:af:48:9e:8f:a8:22:3d: 58:91:16:65:dc:c2:ec:b4:a5:6b:2d:2e:4e:d5:2c:e7:62:f5: c5:84:4b:83:b7:29:fc:e2:cc:b7:40:01:6b:25:ce:c0:45:be: f2:0f:79:86:99:af:12:2e:1d:d9:93:89:9b:66:02:dc:b3:4c: b4:13:85:f9:66:48:51:45:b6:11:3e:bd:a7:d7:e6:ff:de:9e: 22:8b:d1:91:61:cb:34:10:97:b9:ee:bb:83:03:f3:84:56:21: 97:27:d4:39:66:83:33:ec:de:d4:50:f0:9f:be:54:c4:11:08: f5:de:4e:7d:f6:3b:32:bf:03:6c:be:a5:7d:23:97:89:0b:6b: 32:7d:55:9e:08:7b:29:c6:9f:3e:51:9c:80:44:7b:a7:f5:2c: 40:1e:cd:d7:6b:28:ff:17:1d:18:05:74:a7:80:1f:04:a3:17: 2b:d9:e1:45:23:27:2e:25:70:e8:d5:86:e9:a3:c4:9f:0c:d4: 6e:0d:00:e8:6d:b8:d1:97:e3:44:b6:87:e2:99:29:4a:9b:2e: 67:26:8e:63:d7:1e:06:7b:59:aa:41:d4:fc:64:f2:fa:dc:2f: 88:c6:66:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuNrW9htqxsK941EG36FMTeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw YmQ5ODYwHhcNMjYwMTA1MTAyMTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTNkNjE3YjFjOGIxZDJkODNjMTJmZjljN2EzNDU2ZjE0N2U2ZDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJhdJH7T/NvoEIT6u17UzXxyNtlB pB0FWDhux92cuCBQYT1olp2e+uqzZu3JxS6f34d5XySZaiJHw7H6l2dNsPrWmx81 8D+dMMMsycrrDjT9OV993yrRE9vqEJ4B6Yqy2Q4ClbdaRk9uui17zSW7eXBASJiB E9EHERPpJM9JktNZdPhvLORUd6onoW/LA8FP4Be/j/EKudyhEyn6CdspBnLGlRjr GCTERTRiDMIiuxEwcSExDaEYNdSvvtWBem1SMGD5AzQAeXIoQTjSKDUYh8gB1SWp tFHJXhdlJYuzmz+xoxQZZGDuycWMA8SdwtTdtUEzgyZ97UZBPV6k6ceXCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMk9YXscix0tg8Ev+cejRW8Ufm08MB8GA1UdIwQY MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt ZjUyNTgxNjQwMmJkLzEveVQxaGV4eUxIUzJEd1NfNXg2TkZieFItYlR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVsHMA0G CSqGSIb3DQEBCwUAA4IBAQB3LgT9C6d142G5QmqCFd6m0AaxD0Mtza4p0pIERq9I no+oIj1YkRZl3MLstKVrLS5O1SznYvXFhEuDtyn84sy3QAFrJc7ARb7yD3mGma8S Lh3Zk4mbZgLcs0y0E4X5ZkhRRbYRPr2n1+b/3p4ii9GRYcs0EJe57ruDA/OEViGX J9Q5ZoMz7N7UUPCfvlTEEQj13k599jsyvwNsvqV9I5eJC2syfVWeCHspxp8+UZyA RHun9SxAHs3Xayj/Fx0YBXSngB8Eoxcr2eFFIycuJXDo1Ybpo8SfDNRuDQDobbjR l+NEtofimSlKmy5nJo5j1x4Ge1mqQdT8ZPL63C+Ixmae -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:23 2026 by rpki-client