This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/cyljAWZPlifrM5byUgXStgguUUo.roa File: cyljAWZPlifrM5byUgXStgguUUo.roa (raw, json) Hash identifier: g+31Md1m8aEfNmg7bSRZKEh9QswceyQTpMg+XQVZ8Kc= Subject key identifier: 73:29:63:01:66:4F:96:27:EB:33:96:F2:52:05:D2:B6:08:2E:51:4A Certificate issuer: /CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8 Certificate serial: 019B7EA43FA9CB9D1B095EEEEEAB08B3811A Authority key identifier: 42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/cyljAWZPlifrM5byUgXStgguUUo.roa Signing time: Fri 02 Jan 2026 12:17:32 +0000 ROA not before: Fri 02 Jan 2026 12:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207671 IP address blocks: 45.91.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:3f:a9:cb:9d:1b:09:5e:ee:ee:ab:08:b3:81:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8 Validity Not Before: Jan 2 12:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73296301664f9627eb3396f25205d2b6082e514a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:28:69:65:c8:c7:c2:53:d7:35:47:05:42:d0: a9:af:c6:62:38:7c:67:08:0c:5a:fc:bb:9c:37:65: 10:64:06:69:cf:08:82:3a:a5:0e:d1:56:1b:56:06: 2a:ad:0e:69:0b:2f:e8:3d:b7:f2:62:01:c5:07:95: bd:8d:6c:72:77:88:19:34:3d:5d:64:8a:08:72:87: d6:d1:7f:be:96:4d:e7:b3:c9:58:3a:1e:ea:2b:7f: de:55:2f:51:bc:de:cf:28:f7:c8:63:9c:d6:5f:65: a3:27:74:16:03:10:a7:d0:43:ea:49:5e:cd:74:64: df:27:9b:94:d8:fb:c0:f2:91:2c:11:d2:7b:27:f7: 8d:31:02:b2:a6:ea:da:ad:3a:fb:bb:18:35:37:dc: 93:8b:8d:46:97:63:00:ba:94:08:da:e0:34:4a:ca: 79:20:41:8a:a8:68:9b:42:a0:35:68:5a:ca:b4:ab: 51:ad:31:c9:a5:0c:c7:e3:45:dd:c7:a1:42:61:ce: 19:fd:7a:20:e1:f4:08:48:2b:5b:cf:3f:0e:5e:47: 60:e7:aa:a0:04:4d:d5:78:bc:33:20:f0:04:c1:d0: 07:2f:71:37:13:dd:e1:ce:2c:29:93:0f:44:3d:6e: 53:a3:24:b5:49:4f:43:7e:12:4b:a8:a8:ab:f2:ab: ce:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:29:63:01:66:4F:96:27:EB:33:96:F2:52:05:D2:B6:08:2E:51:4A X509v3 Authority Key Identifier: keyid:42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/cyljAWZPlifrM5byUgXStgguUUo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.77.0/24 Signature Algorithm: sha256WithRSAEncryption 95:e0:b7:ae:a0:48:81:85:1f:eb:bb:68:5a:12:3a:04:bf:b3: 43:b9:9b:e2:65:d1:54:0f:df:2d:f1:ee:c6:fd:28:53:a6:ae: 7c:0f:af:d2:86:02:28:3a:7e:66:04:f7:79:69:d3:82:b0:da: c4:d7:82:bd:35:03:93:c4:9e:41:1c:dc:4f:0a:96:b4:c5:7d: 21:cd:d7:99:26:bf:7a:f6:22:5a:49:b8:65:85:92:94:40:6b: 5e:db:c0:1b:7d:84:10:8e:0b:f6:bc:4e:b1:f8:03:18:b9:9d: 74:6f:4e:9a:52:ea:39:5f:68:51:08:de:f4:22:f6:68:e3:36: 18:a4:6d:12:e1:fd:04:26:8c:c3:e5:55:e2:ee:90:ca:62:42: 3d:26:6c:ca:2c:fa:29:a2:3a:cf:a5:c6:9a:d1:0e:85:3c:0e: 95:42:a8:48:69:66:99:ed:b6:9e:91:24:63:54:1b:bd:f5:c8: 1f:7a:be:b4:35:06:0a:81:db:fc:bc:b8:d8:99:93:c1:c8:07: 9d:d8:95:dc:f1:7f:c8:7e:d1:65:c4:e4:ac:ec:d1:63:65:c8: 4d:9c:34:ad:40:06:eb:38:ba:ad:c0:43:76:35:c1:52:db:84: 91:d0:91:b7:4b:f6:c6:84:44:68:da:1d:6c:da:34:20:33:44: e2:fd:0e:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pD+py50bCV7u7qsIs4EaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOWM1NGJlMWRhN2U3MzhlM2M5NmZmYjQxZjFlYTM5MDBh NjdiZTgwHhcNMjYwMTAyMTIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzI5NjMwMTY2NGY5NjI3ZWIzMzk2ZjI1MjA1ZDJiNjA4MmU1MTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApChpZcjHwlPXNUcFQtCpr8ZiOHxn CAxa/LucN2UQZAZpzwiCOqUO0VYbVgYqrQ5pCy/oPbfyYgHFB5W9jWxyd4gZND1d ZIoIcofW0X++lk3ns8lYOh7qK3/eVS9RvN7PKPfIY5zWX2WjJ3QWAxCn0EPqSV7N dGTfJ5uU2PvA8pEsEdJ7J/eNMQKypurarTr7uxg1N9yTi41Gl2MAupQI2uA0Ssp5 IEGKqGibQqA1aFrKtKtRrTHJpQzH40Xdx6FCYc4Z/Xog4fQISCtbzz8OXkdg56qg BE3VeLwzIPAEwdAHL3E3E93hziwpkw9EPW5ToyS1SU9DfhJLqKir8qvOTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHMpYwFmT5Yn6zOW8lIF0rYILlFKMB8GA1UdIwQY MBaAFEKcVL4dp+c448lv+0Hx6jkApnvoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXB4VXZoMm41empqeVdfN1FmSHFPUUNtZS1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mNmY1YzMtNjE0Ni00OGNhLWFmZmEt M2Q4NTg0Y2Y1M2ZlLzEvY3lsakFXWlBsaWZyTTVieVVnWFN0Z2d1VVVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mNmY1YzMtNjE0Ni00OGNhLWFmZmEtM2Q4NTg0Y2Y1M2Zl LzEvUXB4VXZoMm41empqeVdfN1FmSHFPUUNtZS1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVtNMA0G CSqGSIb3DQEBCwUAA4IBAQCV4LeuoEiBhR/ru2haEjoEv7NDuZviZdFUD98t8e7G /ShTpq58D6/ShgIoOn5mBPd5adOCsNrE14K9NQOTxJ5BHNxPCpa0xX0hzdeZJr96 9iJaSbhlhZKUQGte28AbfYQQjgv2vE6x+AMYuZ10b06aUuo5X2hRCN70IvZo4zYY pG0S4f0EJozD5VXi7pDKYkI9JmzKLPopojrPpcaa0Q6FPA6VQqhIaWaZ7baekSRj VBu99cgfer60NQYKgdv8vLjYmZPByAed2JXc8X/IftFlxOSs7NFjZchNnDStQAbr OLqtwEN2NcFS24SR0JG3S/bGhERo2h1s2jQgM0Ti/Q6z -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:02 2026 by rpki-client