This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/Y7Cn6mOoxe1_7Uuyy59kXlBScLM.roa File: Y7Cn6mOoxe1_7Uuyy59kXlBScLM.roa (raw, json) Hash identifier: s2BCgbmOai4wgR+uR0rtMOzU4KIIRdOiikKKdKe67gk= Subject key identifier: 63:B0:A7:EA:63:A8:C5:ED:7F:ED:4B:B2:CB:9F:64:5E:50:52:70:B3 Certificate issuer: /CN=c173d1c002eeaafda1b7588dd5621c4e6fc99fae Certificate serial: 019B78352218DC9CFA74E45C5C07ACE2CF9C Authority key identifier: C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/Y7Cn6mOoxe1_7Uuyy59kXlBScLM.roa Signing time: Thu 01 Jan 2026 06:18:26 +0000 ROA not before: Thu 01 Jan 2026 06:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39637 IP address blocks: 45.136.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.crl rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:22:18:dc:9c:fa:74:e4:5c:5c:07:ac:e2:cf:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c173d1c002eeaafda1b7588dd5621c4e6fc99fae Validity Not Before: Jan 1 06:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63b0a7ea63a8c5ed7fed4bb2cb9f645e505270b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d0:06:bd:67:63:0d:69:3e:20:96:02:9f:88: 93:22:91:77:dd:c6:c7:b9:a7:ba:20:83:98:46:99: a1:b8:07:7d:75:33:e7:73:0a:c2:1b:24:51:7d:82: 05:08:aa:c5:45:8d:ee:0a:1e:38:00:2b:57:d4:ac: d1:a5:03:18:50:96:90:68:6c:75:ef:16:e2:2c:6c: 71:ed:c8:fa:8b:07:0f:e3:5c:1d:be:d5:13:18:dc: 89:ee:a2:b7:68:ff:da:25:44:6e:8c:83:c2:56:6b: 26:48:28:d7:12:b3:f9:7f:2e:41:29:5a:fe:3c:e8: 14:15:d0:e7:58:7b:d5:11:1b:7e:70:d7:70:9c:ac: 02:0c:e0:46:c9:5d:8e:fe:54:e4:09:a2:f2:67:6b: 7f:3d:e6:c5:6a:22:84:ae:a2:cc:c6:cf:bd:4d:18: a3:49:71:8b:b4:3f:ac:53:07:f9:a7:71:c7:aa:d5: 7a:a0:d5:c0:70:9a:5c:1c:9c:4d:af:8a:5f:43:1f: 27:20:9b:62:4e:f8:93:ee:cd:ed:e5:66:f7:a0:d8: e6:11:14:49:33:e1:25:67:64:cc:62:ce:4f:62:3e: d8:e1:d1:53:ad:d1:96:c1:c5:29:7f:f5:cf:dd:49: a0:77:79:99:75:5d:ea:a3:3d:9c:ff:46:db:7f:fc: d9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B0:A7:EA:63:A8:C5:ED:7F:ED:4B:B2:CB:9F:64:5E:50:52:70:B3 X509v3 Authority Key Identifier: keyid:C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/Y7Cn6mOoxe1_7Uuyy59kXlBScLM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.111.0/24 Signature Algorithm: sha256WithRSAEncryption 38:0c:b8:ed:5a:94:5a:63:61:99:4d:17:fa:76:2e:29:63:7e: 64:dc:7e:db:ec:fb:8a:8b:a5:4e:11:a4:8c:99:d5:57:da:e2: a4:39:c3:7a:6a:c8:2b:d8:6c:fe:de:92:8c:d5:f6:fa:95:31: 55:27:2d:7f:73:29:c5:b6:90:5e:9f:81:0b:a0:89:4a:15:e1: 16:6c:e2:b9:f0:94:92:67:7e:c8:eb:27:b5:0e:f9:c4:7b:68: 5f:de:9c:a5:36:47:20:48:52:b1:5d:e6:85:77:cf:00:f4:78: 08:de:ba:25:9b:96:96:47:36:82:be:b5:10:ce:22:d8:1a:b0: 9b:b6:b0:6b:f0:df:06:f4:a2:2f:c4:d4:1f:ee:47:ec:2a:4b: e7:0f:ff:8b:cc:64:68:3d:72:6a:11:07:b7:93:74:99:cd:62: e3:8b:33:77:0b:f9:8e:51:e2:3c:32:e3:06:e9:e3:2f:b9:bd: 54:4a:ad:cf:ee:13:ad:cb:d0:a0:a9:70:e4:3b:b7:ed:e3:df: e9:4a:57:b4:31:bf:c8:b9:bc:7b:bd:43:d3:a5:fc:87:dd:db: 9e:80:0d:3b:5a:11:7e:9d:56:03:d3:ca:4e:10:ef:d3:bb:9c: 9b:8a:7d:cf:58:01:c8:f8:34:65:a5:cc:be:51:01:d8:3b:25: c7:fe:bc:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NSIY3Jz6dORcXAes4s+cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNzNkMWMwMDJlZWFhZmRhMWI3NTg4ZGQ1NjIxYzRlNmZj OTlmYWUwHhcNMjYwMTAxMDYxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2IwYTdlYTYzYThjNWVkN2ZlZDRiYjJjYjlmNjQ1ZTUwNTI3MGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudAGvWdjDWk+IJYCn4iTIpF33cbH uae6IIOYRpmhuAd9dTPncwrCGyRRfYIFCKrFRY3uCh44ACtX1KzRpQMYUJaQaGx1 7xbiLGxx7cj6iwcP41wdvtUTGNyJ7qK3aP/aJURujIPCVmsmSCjXErP5fy5BKVr+ POgUFdDnWHvVERt+cNdwnKwCDOBGyV2O/lTkCaLyZ2t/PebFaiKErqLMxs+9TRij SXGLtD+sUwf5p3HHqtV6oNXAcJpcHJxNr4pfQx8nIJtiTviT7s3t5Wb3oNjmERRJ M+ElZ2TMYs5PYj7Y4dFTrdGWwcUpf/XP3Umgd3mZdV3qoz2c/0bbf/zZuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGOwp+pjqMXtf+1LssufZF5QUnCzMB8GA1UdIwQY MBaAFMFz0cAC7qr9obdYjdViHE5vyZ+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1hQUndBTHVxdjJodDFpTjFXSWNUbV9KbjY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jNGZlMDQtMDYzYi00N2I3LWJlYmIt YjJjMGE0ZTdhZmMzLzEvWTdDbjZtT294ZTFfN1V1eXk1OWtYbEJTY0xNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9jNGZlMDQtMDYzYi00N2I3LWJlYmItYjJjMGE0ZTdhZmMz LzEvd1hQUndBTHVxdjJodDFpTjFXSWNUbV9KbjY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYhvMA0G CSqGSIb3DQEBCwUAA4IBAQA4DLjtWpRaY2GZTRf6di4pY35k3H7b7PuKi6VOEaSM mdVX2uKkOcN6asgr2Gz+3pKM1fb6lTFVJy1/cynFtpBen4ELoIlKFeEWbOK58JSS Z37I6ye1DvnEe2hf3pylNkcgSFKxXeaFd88A9HgI3rolm5aWRzaCvrUQziLYGrCb trBr8N8G9KIvxNQf7kfsKkvnD/+LzGRoPXJqEQe3k3SZzWLjizN3C/mOUeI8MuMG 6eMvub1USq3P7hOty9CgqXDkO7ft49/pSle0Mb/Iubx7vUPTpfyH3duegA07WhF+ nVYD08pOEO/Tu5ybin3PWAHI+DRlpcy+UQHYOyXH/rxX -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:31 2026 by rpki-client