This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/RYCkmpH2b2Jhy7VdmwMy71iHAMU.roa File: RYCkmpH2b2Jhy7VdmwMy71iHAMU.roa (raw, json) Hash identifier: m7nxILjYkQDIx4jO5jxneiBadE/Bw699fTnvikNCX4U= Subject key identifier: 45:80:A4:9A:91:F6:6F:62:61:CB:B5:5D:9B:03:32:EF:58:87:00:C5 Certificate issuer: /CN=db2d75c6d547750642241b0749cfa052c8c17f34 Certificate serial: 019B7C136096958DF57E37D2D04AF68EB574 Authority key identifier: DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/RYCkmpH2b2Jhy7VdmwMy71iHAMU.roa Signing time: Fri 02 Jan 2026 00:20:03 +0000 ROA not before: Fri 02 Jan 2026 00:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206366 IP address blocks: 45.142.68.0/22 maxlen: 24 185.188.148.0/22 maxlen: 24 193.37.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:60:96:95:8d:f5:7e:37:d2:d0:4a:f6:8e:b5:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db2d75c6d547750642241b0749cfa052c8c17f34 Validity Not Before: Jan 2 00:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4580a49a91f66f6261cbb55d9b0332ef588700c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f8:e2:09:b1:4b:27:50:d7:49:4a:73:29:a1: ee:02:fc:fe:1b:44:9f:4e:92:e3:10:89:2c:4f:7c: 98:05:8c:e1:2a:98:a0:94:80:1c:d8:89:ef:65:55: 84:6f:36:7c:d5:73:a4:6b:22:29:7b:7e:9b:97:46: 7e:28:fa:db:78:04:a8:79:f5:5c:cc:66:f4:1c:77: 89:3b:b4:6e:06:91:f7:0d:05:72:b0:4a:ef:7f:cb: d4:bd:77:78:f6:da:23:10:ca:66:d2:1f:26:16:a7: 34:8b:c7:c1:4b:6c:08:2c:1d:05:df:f7:3e:d6:d5: 0d:6e:e5:15:40:26:f6:5e:a8:4f:cb:65:6e:c1:fd: 85:90:84:63:2e:8c:8d:78:95:6f:27:91:1c:bf:d7: 30:2c:69:8c:23:94:6d:ca:68:e3:bd:74:a0:9d:44: b8:9a:02:79:c6:e9:fe:d4:8d:fd:c6:8c:13:c7:7b: c0:6b:81:d3:83:be:c6:25:6a:32:e4:aa:b1:92:68: fa:e5:5b:54:cd:a1:e2:ac:7e:4e:6d:90:fe:1d:b5: fe:fb:bb:cd:91:34:fa:3e:76:dc:fe:71:76:dc:01: 8a:d4:48:7b:0d:2e:59:52:62:3e:d6:94:2a:4f:5a: 4e:4e:84:13:a6:e3:b1:7d:38:51:46:aa:d0:cb:ae: 4f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:80:A4:9A:91:F6:6F:62:61:CB:B5:5D:9B:03:32:EF:58:87:00:C5 X509v3 Authority Key Identifier: keyid:DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/RYCkmpH2b2Jhy7VdmwMy71iHAMU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.68.0/22 185.188.148.0/22 193.37.60.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:85:72:0d:25:92:71:fb:4a:4c:b4:b0:27:af:22:f1:d0:cd: 55:b7:ec:4d:79:e0:03:c3:ab:67:3c:51:80:c2:b1:b0:a1:89: f0:53:d2:3b:38:3a:6b:c2:20:05:f3:d8:d2:cf:f4:d5:76:fb: 60:5d:02:53:8d:17:4f:84:3b:59:de:09:11:4b:2a:82:c3:ce: 47:9d:2c:53:48:aa:33:68:20:58:f4:9c:66:f0:57:24:38:ae: e7:76:1a:ab:83:df:53:54:84:55:7b:5b:f2:7d:32:90:66:63: 4d:22:84:0b:12:13:13:a5:de:8f:19:81:fc:0d:c1:14:05:a5: f8:ae:f9:5f:53:b5:87:22:ce:a8:13:3c:31:2d:fb:c4:28:5e: 48:6f:f2:ca:b4:98:97:53:b0:6f:5f:18:39:87:9b:ea:01:f6: fc:f2:c2:be:ec:2f:a8:13:e1:1f:ac:df:f8:ab:95:70:75:46: c7:cf:04:22:ab:1c:42:65:69:5b:60:d9:14:21:78:0f:fa:a7: f8:41:44:82:3a:8f:01:c8:75:f3:25:d8:85:c6:0a:b6:38:b6: e5:f6:47:44:94:09:92:17:39:09:8c:fb:19:2f:67:a2:22:26: bf:5a:2f:e5:ab:a6:9d:cf:7c:87:26:27:83:95:22:b3:e8:23: d6:4c:1c:d6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8E2CWlY31fjfS0Er2jrV0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMmQ3NWM2ZDU0Nzc1MDY0MjI0MWIwNzQ5Y2ZhMDUyYzhj MTdmMzQwHhcNMjYwMTAyMDAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTgwYTQ5YTkxZjY2ZjYyNjFjYmI1NWQ5YjAzMzJlZjU4ODcwMGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfjiCbFLJ1DXSUpzKaHuAvz+G0Sf TpLjEIksT3yYBYzhKpiglIAc2InvZVWEbzZ81XOkayIpe36bl0Z+KPrbeASoefVc zGb0HHeJO7RuBpH3DQVysErvf8vUvXd49tojEMpm0h8mFqc0i8fBS2wILB0F3/c+ 1tUNbuUVQCb2XqhPy2Vuwf2FkIRjLoyNeJVvJ5Ecv9cwLGmMI5RtymjjvXSgnUS4 mgJ5xun+1I39xowTx3vAa4HTg77GJWoy5Kqxkmj65VtUzaHirH5ObZD+HbX++7vN kTT6Pnbc/nF23AGK1Eh7DS5ZUmI+1pQqT1pOToQTpuOxfThRRqrQy65PLQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEWApJqR9m9iYcu1XZsDMu9YhwDFMB8GA1UdIwQY MBaAFNstdcbVR3UGQiQbB0nPoFLIwX80MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnkxMXh0VkhkUVpDSkJzSFNjLWdVc2pCZnpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jYzQwYTktOGIzZi00M2Q2LWEwNzgt YTkwMWUwMzRhZmU1LzEvUllDa21wSDJiMkpoeTdWZG13TXk3MWlIQU1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9jYzQwYTktOGIzZi00M2Q2LWEwNzgtYTkwMWUwMzRhZmU1 LzEvMnkxMXh0VkhkUVpDSkJzSFNjLWdVc2pCZnpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLY5EAwQC ubyUAwQCwSU8MA0GCSqGSIb3DQEBCwUAA4IBAQA/hXINJZJx+0pMtLAnryLx0M1V t+xNeeADw6tnPFGAwrGwoYnwU9I7ODprwiAF89jSz/TVdvtgXQJTjRdPhDtZ3gkR SyqCw85HnSxTSKozaCBY9Jxm8FckOK7ndhqrg99TVIRVe1vyfTKQZmNNIoQLEhMT pd6PGYH8DcEUBaX4rvlfU7WHIs6oEzwxLfvEKF5Ib/LKtJiXU7BvXxg5h5vqAfb8 8sK+7C+oE+EfrN/4q5VwdUbHzwQiqxxCZWlbYNkUIXgP+qf4QUSCOo8ByHXzJdiF xgq2OLbl9kdElAmSFzkJjPsZL2eiIia/Wi/lq6adz3yHJieDlSKz6CPWTBzW -----END CERTIFICATE-----Generated at Mon Jan 26 11:39:58 2026 by rpki-client