This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/rSxYbtc3wK03MmGwB_aC3VLNBZI.roa File: rSxYbtc3wK03MmGwB_aC3VLNBZI.roa (raw, json) Hash identifier: arQLf8HcdlNDERayy5Egebiz2uMfWCC+brorxBH58HA= Subject key identifier: AD:2C:58:6E:D7:37:C0:AD:37:32:61:B0:07:F6:82:DD:52:CD:05:92 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAC756C7010518B10EC3032351648E Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/rSxYbtc3wK03MmGwB_aC3VLNBZI.roa Signing time: Thu 01 Jan 2026 00:17:36 +0000 ROA not before: Thu 01 Jan 2026 00:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142111 IP address blocks: 45.86.73.0/24 maxlen: 24 45.89.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c7:56:c7:01:05:18:b1:0e:c3:03:23:51:64:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad2c586ed737c0ad373261b007f682dd52cd0592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:51:95:e3:4b:37:02:38:3a:26:10:c4:65:3e: c9:65:60:c7:ab:71:29:c2:7e:03:8a:a0:a5:43:08: 86:58:b3:35:4b:77:ab:82:be:58:51:bd:70:e0:d7: 9c:e1:d0:b0:00:87:45:c1:a4:09:72:29:51:ff:a6: 46:74:54:65:18:9c:df:e0:5f:1c:02:a6:d0:c8:f9: c1:de:1c:80:2e:96:17:5b:eb:43:ca:eb:07:ea:ab: b3:b9:48:0c:ef:fc:da:fb:ae:b3:14:2a:52:5b:b2: 47:e3:76:ba:b5:d6:87:c5:9a:ba:cc:83:48:cf:8f: 16:d0:dd:51:4d:c1:43:6f:f5:0a:da:b7:c1:e8:14: 9a:08:0d:8e:9e:9e:95:f4:78:b1:e2:2b:f9:31:e4: 6a:72:b0:28:62:53:41:13:58:35:4f:8a:49:ac:77: a1:bc:5b:57:c7:85:a1:51:28:a0:4e:b5:79:2f:8d: d8:64:28:4c:5f:d8:39:5c:2a:24:53:6f:3c:f9:ee: 75:87:60:9d:ea:55:d4:58:6d:ab:7a:e6:3b:75:94: e6:e5:ef:57:c8:d9:7c:1c:2c:39:83:d7:96:91:35: 87:c4:5f:80:21:85:b7:47:ef:80:96:4d:e5:5a:79: e6:e1:a2:fc:5a:2b:fd:77:6d:64:b0:32:c5:d9:e9: a1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2C:58:6E:D7:37:C0:AD:37:32:61:B0:07:F6:82:DD:52:CD:05:92 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/rSxYbtc3wK03MmGwB_aC3VLNBZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.73.0/24 45.89.104.0/24 Signature Algorithm: sha256WithRSAEncryption a5:e4:c9:f9:e6:b9:c4:40:42:d6:1f:0e:65:8d:4e:2e:b8:1d: ba:b2:8a:49:0e:a1:5d:8f:e3:ee:24:0e:46:7a:34:fa:21:bd: 02:e3:95:2b:73:69:b9:a8:cd:2b:61:36:f0:87:21:db:9d:e3: 6b:e8:73:6a:c0:f8:e9:79:69:42:c2:f3:cd:e0:1e:68:16:87: e7:72:5e:a6:80:69:d8:66:68:ab:d5:a4:74:14:c0:f9:d4:f9: fb:8f:1c:61:59:ef:33:3f:f6:ed:55:ba:0d:14:56:10:a2:19: 10:72:ce:1b:c4:2c:6e:33:4d:dc:ce:5a:d8:8b:c6:6f:77:7b: 06:4b:dc:05:08:b5:d8:3d:ad:84:d3:f3:97:da:eb:8a:92:a0: 5a:5b:cc:71:fd:7d:ca:d0:e5:d8:0d:70:aa:0e:42:69:c5:cf: dc:42:1d:2c:a7:71:81:91:41:f9:aa:99:5a:b4:89:88:5c:62: 13:a3:70:b7:ab:7a:1b:8f:97:d3:e8:d3:fc:70:ce:30:4c:47: cd:55:2f:c0:3f:b0:63:54:b7:70:94:e1:c7:63:f7:a9:d2:73: d6:26:82:87:93:98:6e:8d:3f:74:2c:0f:52:d2:2c:a9:11:1b: b8:53:3a:8d:2b:e5:21:a1:93:ba:41:07:33:71:c4:53:0b:2a: 3e:5a:d7:35 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26sdWxwEFGLEOwwMjUWSOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDJjNTg2ZWQ3MzdjMGFkMzczMjYxYjAwN2Y2ODJkZDUyY2QwNTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulGV40s3Ajg6JhDEZT7JZWDHq3Ep wn4DiqClQwiGWLM1S3ergr5YUb1w4Nec4dCwAIdFwaQJcilR/6ZGdFRlGJzf4F8c AqbQyPnB3hyALpYXW+tDyusH6quzuUgM7/za+66zFCpSW7JH43a6tdaHxZq6zINI z48W0N1RTcFDb/UK2rfB6BSaCA2Onp6V9Hix4iv5MeRqcrAoYlNBE1g1T4pJrHeh vFtXx4WhUSigTrV5L43YZChMX9g5XCokU288+e51h2Cd6lXUWG2reuY7dZTm5e9X yNl8HCw5g9eWkTWHxF+AIYW3R++Alk3lWnnm4aL8Wiv9d21ksDLF2emh/QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK0sWG7XN8CtNzJhsAf2gt1SzQWSMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvclN4WWJ0YzN3SzAzTW1Hd0JfYUMzVkxOQlpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVZJAwQA LVloMA0GCSqGSIb3DQEBCwUAA4IBAQCl5Mn55rnEQELWHw5ljU4uuB26sopJDqFd j+PuJA5GejT6Ib0C45Urc2m5qM0rYTbwhyHbneNr6HNqwPjpeWlCwvPN4B5oFofn cl6mgGnYZmir1aR0FMD51Pn7jxxhWe8zP/btVboNFFYQohkQcs4bxCxuM03czlrY i8Zvd3sGS9wFCLXYPa2E0/OX2uuKkqBaW8xx/X3K0OXYDXCqDkJpxc/cQh0sp3GB kUH5qplatImIXGITo3C3q3obj5fT6NP8cM4wTEfNVS/AP7BjVLdwlOHHY/ep0nPW JoKHk5hujT90LA9S0iypERu4UzqNK+UhoZO6QQczccRTCyo+Wtc1 -----END CERTIFICATE-----Generated at Sun Jan 25 08:48:31 2026 by rpki-client