This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/YhZ9fwff9w4xgatIGpRL14zM3PM.roa File: YhZ9fwff9w4xgatIGpRL14zM3PM.roa (raw, json) Hash identifier: iA9BHQGCf6MQBqEfoa7a5mJjbUujB8oZXq8R3pndWb8= Subject key identifier: 62:16:7D:7F:07:DF:F7:0E:31:81:AB:48:1A:94:4B:D7:8C:CC:DC:F3 Certificate issuer: /CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9 Certificate serial: 019B7B36747C25BF1D16AECBD3E9B14CAE78 Authority key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/YhZ9fwff9w4xgatIGpRL14zM3PM.roa Signing time: Thu 01 Jan 2026 20:18:44 +0000 ROA not before: Thu 01 Jan 2026 20:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210413 IP address blocks: 45.157.52.0/24 maxlen: 24 45.157.53.0/24 maxlen: 24 45.157.54.0/24 maxlen: 24 45.157.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:74:7c:25:bf:1d:16:ae:cb:d3:e9:b1:4c:ae:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9 Validity Not Before: Jan 1 20:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62167d7f07dff70e3181ab481a944bd78cccdcf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:07:42:1d:85:ac:4b:7d:84:0a:7b:43:41:0e: 5b:52:13:c3:3f:17:43:b5:8a:7a:ff:46:4c:59:f9: 6b:16:33:f3:58:26:b0:80:17:47:46:fd:10:4f:f9: d3:fa:e1:d6:4e:2c:65:56:1e:e2:9c:89:73:1f:f7: 53:f3:bb:13:45:ab:c4:4c:50:b9:7a:8d:5e:e7:af: b8:18:8d:3f:ca:20:2e:3a:6d:3b:c5:1f:c7:62:bb: 86:e6:f9:66:ea:7f:54:45:a4:58:b3:65:4a:5b:e6: 16:b0:fd:f2:db:66:67:04:7d:d5:95:a9:54:15:5d: f3:90:7a:72:00:2e:6d:90:7c:d1:dc:98:6c:1c:cc: 78:2e:ab:81:09:b4:2c:f3:88:b4:8f:73:b1:72:a6: 19:6d:08:c6:54:70:5e:0c:03:72:87:c3:e4:2b:5a: 92:a6:10:5b:ff:f3:e4:1d:07:64:5f:a6:7c:e4:c9: 2c:da:1d:33:53:79:40:f3:fb:43:7d:46:0e:fc:72: 9e:57:e1:44:50:00:0c:4f:18:02:d7:c1:ba:6d:40: d6:d4:0b:97:43:f9:18:4f:3c:80:29:36:77:50:dc: a9:44:3e:66:30:08:fc:0f:5f:ce:c1:ea:1e:1f:13: 98:db:b9:b6:3b:7e:24:64:89:5b:4a:2d:2b:40:d8: e1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:16:7D:7F:07:DF:F7:0E:31:81:AB:48:1A:94:4B:D7:8C:CC:DC:F3 X509v3 Authority Key Identifier: keyid:55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/YhZ9fwff9w4xgatIGpRL14zM3PM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.52.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:48:36:e5:9d:12:b2:cc:76:7a:1d:0e:c4:dc:53:f9:32:86: 78:54:b0:85:6a:1b:46:08:2a:61:04:47:85:96:dd:eb:4f:3e: 14:b2:9e:95:73:39:ae:92:86:b2:7e:f8:86:e8:58:26:c1:93: 53:ff:be:f3:b5:68:f9:e5:ae:16:ce:c6:ec:b8:6a:48:49:f9: 5c:80:b4:33:ea:3a:07:63:eb:be:ab:17:98:c5:ac:a8:c9:7a: d4:a5:40:24:5d:b9:ba:dc:86:52:2e:7b:99:15:89:d8:7d:39: 0a:24:49:6f:1d:4a:a0:3e:7e:49:fc:1e:94:b1:65:47:4e:80: b9:42:cb:96:05:4d:68:d8:1d:a3:0c:19:4e:17:1c:d1:ab:79: 88:f3:b9:2e:60:de:3b:61:e6:7e:d4:44:b2:b0:d3:a7:39:b5: 51:c9:8d:07:33:ff:59:f0:6e:03:bc:d8:87:8b:89:7b:f5:c5: 34:15:3e:d9:fa:ab:43:2c:23:11:67:69:2a:da:9a:cc:3e:4d: 32:19:d2:a6:7c:4b:f9:22:e0:16:ce:e0:6f:80:17:1f:21:85: 2a:4c:b7:3f:55:93:75:4b:43:42:5e:19:df:79:d8:d0:a2:74: 5b:db:6a:c6:95:c3:08:6a:d3:fb:9d:03:2b:cb:6c:7f:a9:fc: 7b:c4:c6:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NnR8Jb8dFq7L0+mxTK54MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1OThhZTVkNWYxMjgyNWE4NGU2YzQwMWMwMTNjYTVlNWRj ZDllYzkwHhcNMjYwMTAxMjAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjE2N2Q3ZjA3ZGZmNzBlMzE4MWFiNDgxYTk0NGJkNzhjY2NkY2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgdCHYWsS32ECntDQQ5bUhPDPxdD tYp6/0ZMWflrFjPzWCawgBdHRv0QT/nT+uHWTixlVh7inIlzH/dT87sTRavETFC5 eo1e56+4GI0/yiAuOm07xR/HYruG5vlm6n9URaRYs2VKW+YWsP3y22ZnBH3VlalU FV3zkHpyAC5tkHzR3JhsHMx4LquBCbQs84i0j3OxcqYZbQjGVHBeDANyh8PkK1qS phBb//PkHQdkX6Z85Mks2h0zU3lA8/tDfUYO/HKeV+FEUAAMTxgC18G6bUDW1AuX Q/kYTzyAKTZ3UNypRD5mMAj8D1/OweoeHxOY27m2O34kZIlbSi0rQNjhBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGIWfX8H3/cOMYGrSBqUS9eMzNzzMB8GA1UdIwQY MBaAFFWYrl1fEoJahObEAcATyl5dzZ7JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlppdVhWOFNnbHFFNXNRQndCUEtYbDNObnNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xZjYwNzMtODdiMi00YmIzLWFjYjct NWMzZGI5OGJmODY0LzEvWWhaOWZ3ZmY5dzR4Z2F0SUdwUkwxNHpNM1BNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xZjYwNzMtODdiMi00YmIzLWFjYjctNWMzZGI5OGJmODY0 LzEvVlppdVhWOFNnbHFFNXNRQndCUEtYbDNObnNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZ00MA0G CSqGSIb3DQEBCwUAA4IBAQAeSDblnRKyzHZ6HQ7E3FP5MoZ4VLCFahtGCCphBEeF lt3rTz4Usp6VczmukoayfviG6FgmwZNT/77ztWj55a4WzsbsuGpISflcgLQz6joH Y+u+qxeYxayoyXrUpUAkXbm63IZSLnuZFYnYfTkKJElvHUqgPn5J/B6UsWVHToC5 QsuWBU1o2B2jDBlOFxzRq3mI87kuYN47YeZ+1ESysNOnObVRyY0HM/9Z8G4DvNiH i4l79cU0FT7Z+qtDLCMRZ2kq2prMPk0yGdKmfEv5IuAWzuBvgBcfIYUqTLc/VZN1 S0NCXhnfedjQonRb22rGlcMIatP7nQMry2x/qfx7xMYB -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:23 2026 by rpki-client