This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/yTs6YqC9fER5Y_s7b4sZKV4fxNM.roa File: yTs6YqC9fER5Y_s7b4sZKV4fxNM.roa (raw, json) Hash identifier: K9GMU5+gUx1MkYLqtMzQhxnG0+5DQyeWPgJU54TbrTM= Subject key identifier: C9:3B:3A:62:A0:BD:7C:44:79:63:FB:3B:6F:8B:19:29:5E:1F:C4:D3 Certificate issuer: /CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8 Certificate serial: 019B7E3875B00097FFD7073F91AE4BBAA2EE Authority key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/yTs6YqC9fER5Y_s7b4sZKV4fxNM.roa Signing time: Fri 02 Jan 2026 10:19:47 +0000 ROA not before: Fri 02 Jan 2026 10:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204397 IP address blocks: 45.86.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:75:b0:00:97:ff:d7:07:3f:91:ae:4b:ba:a2:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8 Validity Not Before: Jan 2 10:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c93b3a62a0bd7c447963fb3b6f8b19295e1fc4d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9d:84:a6:ef:1a:d7:e2:26:fc:9c:97:c1:6b: c3:40:1b:7d:73:d9:e3:27:20:4e:4d:99:b9:bc:51: 2b:a1:5e:47:69:97:aa:b8:29:3e:c7:c9:bc:63:e6: 93:c0:13:64:b4:1f:f3:5d:18:e3:64:30:9e:ca:1b: 50:f8:98:13:dd:4c:74:40:ae:85:c5:9e:83:9b:5d: a7:88:1c:fc:3d:ec:a3:95:c7:8c:9d:2a:73:9e:df: 57:64:5d:29:30:53:30:87:b1:c1:ea:09:eb:d8:0d: ec:32:03:d7:8c:51:91:08:a4:88:44:ab:7e:fb:af: 14:ea:69:43:3b:e4:3a:18:0a:6a:35:9f:b4:22:db: fc:65:24:ae:35:a1:73:7c:29:7a:f6:d7:f2:45:cf: c1:1e:0a:2a:96:3f:06:c1:10:ec:a5:38:36:1b:af: 3d:5c:1d:b2:7b:ce:ca:ea:e4:64:f4:a0:15:f2:18: 76:d2:b9:cc:48:e1:0c:2c:25:f3:d3:93:5a:92:38: 3e:3b:e0:9b:4e:66:f2:ed:69:a8:34:bc:05:30:38: 81:6a:85:01:76:29:f5:c6:fa:dd:23:7d:7e:45:e4: 82:5c:fd:ab:19:fa:51:ca:23:b1:93:a0:be:8c:f8: 60:2f:a2:00:cd:eb:48:27:93:1d:27:e7:82:6c:0a: 7d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:3B:3A:62:A0:BD:7C:44:79:63:FB:3B:6F:8B:19:29:5E:1F:C4:D3 X509v3 Authority Key Identifier: keyid:78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/yTs6YqC9fER5Y_s7b4sZKV4fxNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.35.0/24 Signature Algorithm: sha256WithRSAEncryption 52:44:80:75:f9:b7:e4:a0:d4:84:c2:c3:5c:79:d0:1c:6b:24: 72:bf:1a:f0:73:05:3a:fa:cf:3d:8f:19:2e:02:49:b4:f1:fa: ce:a7:bb:0b:01:f9:d9:28:05:db:37:b1:a2:6a:c3:a7:b9:08: 67:0b:ae:23:a8:72:71:98:27:d3:cd:56:b6:c3:9a:04:b5:d7: c5:46:21:9a:11:12:c7:e4:0b:69:b0:21:65:28:8a:a6:60:33: bd:3b:e6:c2:96:87:6e:b4:d4:31:f5:09:2c:cb:dc:32:cf:77: be:3c:46:4c:06:a2:73:5c:de:d2:47:cc:21:da:4c:20:af:4d: 25:d9:b7:62:6f:fb:ce:3a:06:59:51:9a:e0:82:5b:2c:16:85: 6b:b0:c3:9d:e9:f7:8d:d4:9d:54:d7:ca:7b:54:49:cf:bb:24: 12:28:16:8d:b8:33:ec:66:f4:0a:9f:75:05:c6:23:38:2e:ce: f8:4b:76:41:a6:82:c8:95:6d:0d:13:16:3c:29:e5:ac:37:f7: 53:ab:f1:9c:e6:9b:a5:52:da:3f:f8:15:b3:13:76:4c:ce:73: 56:d4:8a:9e:db:15:e8:3c:da:1d:bd:68:0f:f1:8f:8b:5c:c9: 1e:7a:db:de:67:69:3e:0c:44:b2:25:de:7a:46:ed:09:a3:f3: 06:fc:1c:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OHWwAJf/1wc/ka5LuqLuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4OGY1YjIxMGYzYzNlYjQyMDY1OTYwZTg1ZDA2MWU5ZDlk NjNhYjgwHhcNMjYwMTAyMTAxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTNiM2E2MmEwYmQ3YzQ0Nzk2M2ZiM2I2ZjhiMTkyOTVlMWZjNGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ2Epu8a1+Im/JyXwWvDQBt9c9nj JyBOTZm5vFEroV5HaZequCk+x8m8Y+aTwBNktB/zXRjjZDCeyhtQ+JgT3Ux0QK6F xZ6Dm12niBz8PeyjlceMnSpznt9XZF0pMFMwh7HB6gnr2A3sMgPXjFGRCKSIRKt+ +68U6mlDO+Q6GApqNZ+0Itv8ZSSuNaFzfCl69tfyRc/BHgoqlj8GwRDspTg2G689 XB2ye87K6uRk9KAV8hh20rnMSOEMLCXz05Nakjg+O+CbTmby7WmoNLwFMDiBaoUB din1xvrdI31+ReSCXP2rGfpRyiOxk6C+jPhgL6IAzetIJ5MdJ+eCbAp9BwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMk7OmKgvXxEeWP7O2+LGSleH8TTMB8GA1UdIwQY MBaAFHiPWyEPPD60IGWWDoXQYenZ1jq4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUk5YklRODhQclFnWlpZT2hkQmg2ZG5XT3JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lMTAwYjUtNmYwYS00ZmU5LWJlZmIt YzRhY2I4OTY5YzQ5LzEveVRzNllxQzlmRVI1WV9zN2I0c1pLVjRmeE5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9lMTAwYjUtNmYwYS00ZmU5LWJlZmItYzRhY2I4OTY5YzQ5 LzEvZUk5YklRODhQclFnWlpZT2hkQmg2ZG5XT3JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVYjMA0G CSqGSIb3DQEBCwUAA4IBAQBSRIB1+bfkoNSEwsNcedAcayRyvxrwcwU6+s89jxku Akm08frOp7sLAfnZKAXbN7GiasOnuQhnC64jqHJxmCfTzVa2w5oEtdfFRiGaERLH 5AtpsCFlKIqmYDO9O+bClodutNQx9Qksy9wyz3e+PEZMBqJzXN7SR8wh2kwgr00l 2bdib/vOOgZZUZrgglssFoVrsMOd6feN1J1U18p7VEnPuyQSKBaNuDPsZvQKn3UF xiM4Ls74S3ZBpoLIlW0NExY8KeWsN/dTq/Gc5pulUto/+BWzE3ZMznNW1Iqe2xXo PNodvWgP8Y+LXMkeetveZ2k+DESyJd56Ru0Jo/MG/Bzt -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:54 2026 by rpki-client