This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/Y4GsPYL5IzvewFFwkZIhdfeJfyA.roa File: Y4GsPYL5IzvewFFwkZIhdfeJfyA.roa (raw, json) Hash identifier: eD8cUm6eR2m4jrtu7qYzfbk2kaBxMh/aGCqnzhmpaDY= Subject key identifier: 63:81:AC:3D:82:F9:23:3B:DE:C0:51:70:91:92:21:75:F7:89:7F:20 Certificate issuer: /CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df Certificate serial: 019B7C7FCA8118F4C918B5933D9DD122625A Authority key identifier: BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/Y4GsPYL5IzvewFFwkZIhdfeJfyA.roa Signing time: Fri 02 Jan 2026 02:18:28 +0000 ROA not before: Fri 02 Jan 2026 02:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49349 IP address blocks: 5.206.224.0/21 maxlen: 24 185.38.140.0/22 maxlen: 24 185.236.229.0/24 maxlen: 24 185.236.230.0/24 maxlen: 24 185.236.231.0/24 maxlen: 24 188.93.232.0/21 maxlen: 24 2a00:1c60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:ca:81:18:f4:c9:18:b5:93:3d:9d:d1:22:62:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df Validity Not Before: Jan 2 02:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6381ac3d82f9233bdec0517091922175f7897f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:09:dd:39:e9:5c:b5:4f:c6:62:2a:78:4e:e4: ff:89:5d:d2:a6:43:91:87:b2:85:27:6f:60:64:a1: 4d:a2:ab:29:f3:35:50:80:f4:50:01:47:01:de:4c: 84:d2:5c:a4:cb:aa:61:3e:87:78:56:ba:fe:4b:a3: 73:55:d4:88:14:f4:89:67:c9:30:44:7c:ec:47:6d: 38:d9:e2:86:49:4b:19:7f:d9:e6:62:f8:3e:f1:85: 7d:99:09:e8:f2:b5:e5:fe:b8:0c:5a:40:f7:8c:24: c8:3f:62:0c:11:fa:54:86:94:74:46:17:07:85:19: 52:36:3c:e5:57:3d:9b:9a:74:71:69:b8:68:5e:65: 81:43:27:da:83:45:97:ef:4b:ab:72:81:86:0b:a6: 46:04:22:54:51:c6:14:7b:87:e5:1c:8e:5e:8f:39: c9:04:52:3a:47:2c:73:71:91:67:41:fe:8d:65:10: 09:e6:98:56:ca:7b:a5:1e:fd:8e:41:09:96:98:6e: fa:80:1f:af:59:44:e9:5f:c3:3e:05:54:3b:e8:11: f9:41:6a:40:81:39:cb:62:bf:cd:74:24:8f:00:c9: 72:54:af:8a:e8:5b:0d:99:e3:2a:61:b5:1d:65:4d: ac:23:3d:3a:7d:59:99:04:b5:8e:58:57:cf:fb:cf: 19:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:81:AC:3D:82:F9:23:3B:DE:C0:51:70:91:92:21:75:F7:89:7F:20 X509v3 Authority Key Identifier: keyid:BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/Y4GsPYL5IzvewFFwkZIhdfeJfyA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.206.224.0/21 185.38.140.0/22 185.236.229.0-185.236.231.255 188.93.232.0/21 IPv6: 2a00:1c60::/32 Signature Algorithm: sha256WithRSAEncryption 5d:57:d7:d3:b8:5f:ab:46:18:53:e7:4b:3e:75:e3:e0:83:fa: da:86:f6:ef:a4:d3:0e:e3:73:3b:73:5f:18:83:6d:99:fa:cf: dd:13:ee:c2:ee:15:c2:e3:41:26:f8:99:9d:1e:5d:74:99:69: 27:10:a2:05:b1:59:f1:ba:4f:74:a8:7d:bc:9c:b6:c3:78:7a: 92:5e:45:4f:89:e6:ad:44:a5:a5:6a:94:47:e4:d0:8c:c7:1d: ff:02:3e:aa:47:0e:1d:0d:df:4d:73:d8:11:99:3a:17:c5:c9: ab:dc:18:5c:1e:d0:07:42:73:d0:e6:71:6b:ad:6f:0f:ee:eb: 48:d4:b2:25:a4:cb:c3:24:8b:4f:d9:8f:8c:a2:8e:16:43:e0: 3d:57:0c:5d:72:4d:a8:31:44:4b:7e:37:ba:12:90:c1:94:ad: 7d:46:fe:f5:8c:31:c9:bd:75:bb:11:0b:ea:c3:41:80:b1:5c: 2c:dd:56:8d:0e:b7:61:5c:31:0c:20:7e:54:43:51:65:71:2a: da:58:2b:11:d0:ad:f6:a3:21:91:e6:25:fb:d5:77:a4:23:9c: 11:aa:ad:23:f3:7c:0d:87:19:1f:35:68:17:c1:cf:a1:d8:4f: 57:3c:16:69:b5:61:cc:52:fd:e1:ea:d9:6d:bd:ff:a0:b5:6e: 79:60:ca:2b -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt8f8qBGPTJGLWTPZ3RImJaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjOWYwYjlhYzFkNTY1MmYzZGNhMWVmMTYyM2JmOTlhYjI5 NjQ3ZGYwHhcNMjYwMTAyMDIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzgxYWMzZDgyZjkyMzNiZGVjMDUxNzA5MTkyMjE3NWY3ODk3ZjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugndOelctU/GYip4TuT/iV3SpkOR h7KFJ29gZKFNoqsp8zVQgPRQAUcB3kyE0lyky6phPod4Vrr+S6NzVdSIFPSJZ8kw RHzsR2042eKGSUsZf9nmYvg+8YV9mQno8rXl/rgMWkD3jCTIP2IMEfpUhpR0RhcH hRlSNjzlVz2bmnRxabhoXmWBQyfag0WX70urcoGGC6ZGBCJUUcYUe4flHI5ejznJ BFI6RyxzcZFnQf6NZRAJ5phWynulHv2OQQmWmG76gB+vWUTpX8M+BVQ76BH5QWpA gTnLYr/NdCSPAMlyVK+K6FsNmeMqYbUdZU2sIz06fVmZBLWOWFfP+88ZiQIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFGOBrD2C+SM73sBRcJGSIXX3iX8gMB8GA1UdIwQY MBaAFLyfC5rB1WUvPcoe8WI7+ZqylkffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdko4TG1zSFZaUzg5eWg3eFlqdjVtcktXUjk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80OTkyYjYtZmRhZS00YzlmLWJmM2Ut OTVjODk0MmRmNzI0LzEvWTRHc1BZTDVJenZld0ZGd2taSWhkZmVKZnlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS80OTkyYjYtZmRhZS00YzlmLWJmM2UtOTVjODk0MmRmNzI0 LzEvdko4TG1zSFZaUzg5eWg3eFlqdjVtcktXUjk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgAwQDBc7gAwQC uSaMMAwDBAC57OUDBAO57OADBAO8XegwDQQCAAIwBwMFACoAHGAwDQYJKoZIhvcN AQELBQADggEBAF1X19O4X6tGGFPnSz514+CD+tqG9u+k0w7jcztzXxiDbZn6z90T 7sLuFcLjQSb4mZ0eXXSZaScQogWxWfG6T3SofbyctsN4epJeRU+J5q1EpaVqlEfk 0IzHHf8CPqpHDh0N301z2BGZOhfFyavcGFwe0AdCc9DmcWutbw/u60jUsiWky8Mk i0/Zj4yijhZD4D1XDF1yTagxREt+N7oSkMGUrX1G/vWMMcm9dbsRC+rDQYCxXCzd Vo0Ot2FcMQwgflRDUWVxKtpYKxHQrfajIZHmJfvVd6QjnBGqrSPzfA2HGR81aBfB z6HYT1c8Fmm1YcxS/eHq2W29/6C1bnlgyis= -----END CERTIFICATE-----Generated at Mon Jan 26 02:24:21 2026 by rpki-client