This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/6LY_I5SzlhFBv9eGnwKkecDyqDs.roa File: 6LY_I5SzlhFBv9eGnwKkecDyqDs.roa (raw, json) Hash identifier: rY/4K0UyTx9gEr0sURKBlWuNRZZ59rIT1DcPYpDH8zU= Subject key identifier: E8:B6:3F:23:94:B3:96:11:41:BF:D7:86:9F:02:A4:79:C0:F2:A8:3B Certificate issuer: /CN=c784128505f7f99c7570442980adeb8af90cc270 Certificate serial: 019B797F4E58CFA026B98DDC1A436341E454 Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/6LY_I5SzlhFBv9eGnwKkecDyqDs.roa Signing time: Thu 01 Jan 2026 12:19:04 +0000 ROA not before: Thu 01 Jan 2026 12:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61273 IP address blocks: 185.151.204.0/24 maxlen: 24 185.151.205.0/24 maxlen: 24 185.151.206.0/24 maxlen: 24 185.151.207.0/24 maxlen: 24 185.230.39.0/24 maxlen: 24 185.255.24.0/22 maxlen: 24 2a0b:14c0:2::/48 maxlen: 48 2a0b:14c0:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:4e:58:cf:a0:26:b9:8d:dc:1a:43:63:41:e4:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270 Validity Not Before: Jan 1 12:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8b63f2394b3961141bfd7869f02a479c0f2a83b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ec:23:c9:3e:7b:27:a6:af:71:6b:25:c7:9f: 00:ea:b5:a8:dd:0d:06:10:04:ae:37:b9:08:1c:3e: 98:7a:82:2d:cc:36:d9:1d:8f:9d:cd:85:20:6d:11: d3:94:74:a2:bc:5e:b7:b5:32:e7:a5:96:4d:29:1f: a1:eb:39:7b:c3:58:57:e9:38:b7:a6:4d:c9:98:78: 3b:10:9a:66:d4:ca:e4:7c:00:86:57:b1:56:e4:2b: c0:6f:56:98:95:5c:a5:1c:50:76:9a:b8:fe:d1:d0: 9f:00:ea:4f:11:d8:db:fc:00:67:c9:82:b7:42:12: 53:37:23:38:46:da:04:8a:20:3d:c0:89:f9:ea:d7: a7:53:b2:ac:26:29:78:dc:a1:6a:68:95:c2:97:93: 63:f3:67:7b:28:a5:46:3b:40:42:d3:8f:c2:65:5e: 0f:91:57:a9:1d:c3:c5:c5:01:8c:7b:23:96:30:6e: 12:3a:db:dd:46:dc:e9:f7:2b:e8:3b:60:40:cf:e8: d8:d5:61:fc:a6:5b:cb:3a:c0:dd:d0:06:2b:72:d5: 17:42:5d:2d:58:c4:fd:01:2b:09:dd:08:c6:fe:2b: 0b:e0:fe:4e:77:d0:7e:56:df:25:71:c8:59:95:f0: 6d:5b:0a:f2:c2:dd:d7:a2:6e:a0:94:12:38:7c:a5: d8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B6:3F:23:94:B3:96:11:41:BF:D7:86:9F:02:A4:79:C0:F2:A8:3B X509v3 Authority Key Identifier: keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/6LY_I5SzlhFBv9eGnwKkecDyqDs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.151.204.0/22 185.230.39.0/24 185.255.24.0/22 IPv6: 2a0b:14c0:2::/48 2a0b:14c0:4::/48 Signature Algorithm: sha256WithRSAEncryption 62:d0:1d:85:c6:3e:6c:da:85:b8:ed:9f:b1:94:fe:72:02:f3: b4:3a:a3:92:70:49:04:62:1c:da:0d:25:ae:78:cb:88:99:b4: 05:36:6d:5c:3a:91:68:57:27:b1:81:99:08:6e:c6:d8:bd:37: dc:83:78:6e:76:65:dd:e6:d6:9c:53:b0:33:c5:2b:cf:f3:d9: ef:87:b3:9c:f5:e2:e1:0f:6c:f6:17:31:b1:c1:44:0e:a1:a0: 82:bf:1e:47:14:7e:b1:d9:6a:4f:92:98:0d:69:da:04:69:17: f6:38:50:0c:b6:60:d6:0a:0e:56:fb:4a:78:24:3a:da:35:fd: ce:1e:dd:6d:40:1b:1f:62:60:bd:67:f8:85:63:3e:3d:6e:de: 81:89:36:94:61:12:42:8b:48:15:ac:d7:e4:ab:f2:63:36:4d: 42:a5:c3:0a:0a:34:c6:96:10:16:09:ae:0b:77:86:41:bc:9d: 8a:c5:a4:b3:37:45:fd:77:d6:4e:93:f2:10:62:71:5c:6f:d2: 2c:59:b5:fd:21:61:f3:62:b8:1a:b2:43:bc:e1:17:2f:f4:fd: d8:6c:69:a6:4b:90:81:f4:f3:5e:bd:ea:92:de:8b:6e:ed:34: 50:7b:40:9b:28:9e:0f:ec:f6:40:21:29:bf:b0:fc:da:98:26: b1:d6:44:50 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt5f05Yz6AmuY3cGkNjQeRUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ODQxMjg1MDVmN2Y5OWM3NTcwNDQyOTgwYWRlYjhhZjkw Y2MyNzAwHhcNMjYwMTAxMTIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGI2M2YyMzk0YjM5NjExNDFiZmQ3ODY5ZjAyYTQ3OWMwZjJhODNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+wjyT57J6avcWslx58A6rWo3Q0G EASuN7kIHD6YeoItzDbZHY+dzYUgbRHTlHSivF63tTLnpZZNKR+h6zl7w1hX6Ti3 pk3JmHg7EJpm1MrkfACGV7FW5CvAb1aYlVylHFB2mrj+0dCfAOpPEdjb/ABnyYK3 QhJTNyM4RtoEiiA9wIn56tenU7KsJil43KFqaJXCl5Nj82d7KKVGO0BC04/CZV4P kVepHcPFxQGMeyOWMG4SOtvdRtzp9yvoO2BAz+jY1WH8plvLOsDd0AYrctUXQl0t WMT9ASsJ3QjG/isL4P5Od9B+Vt8lcchZlfBtWwrywt3Xom6glBI4fKXYPQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFOi2PyOUs5YRQb/Xhp8CpHnA8qg7MB8GA1UdIwQY MBaAFMeEEoUF9/mcdXBEKYCt64r5DMJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDRRU2hRWDMtWngxY0VRcGdLM3JpdmtNd25BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80YzVjM2QtMjFiMC00MDU4LTg5ZmQt NmMxYjQ0NzFmN2VlLzEvNkxZX0k1U3psaEZCdjllR253S2tlY0R5cURzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC80YzVjM2QtMjFiMC00MDU4LTg5ZmQtNmMxYjQ0NzFmN2Vl LzEveDRRU2hRWDMtWngxY0VRcGdLM3JpdmtNd25BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAYBAIAATASAwQCuZfMAwQA ueYnAwQCuf8YMBgEAgACMBIDBwAqCxTAAAIDBwAqCxTAAAQwDQYJKoZIhvcNAQEL BQADggEBAGLQHYXGPmzahbjtn7GU/nIC87Q6o5JwSQRiHNoNJa54y4iZtAU2bVw6 kWhXJ7GBmQhuxti9N9yDeG52Zd3m1pxTsDPFK8/z2e+Hs5z14uEPbPYXMbHBRA6h oIK/HkcUfrHZak+SmA1p2gRpF/Y4UAy2YNYKDlb7SngkOto1/c4e3W1AGx9iYL1n +IVjPj1u3oGJNpRhEkKLSBWs1+Sr8mM2TUKlwwoKNMaWEBYJrgt3hkG8nYrFpLM3 Rf131k6T8hBicVxv0ixZtf0hYfNiuBqyQ7zhFy/0/dhsaaZLkIH081696pLei27t NFB7QJsong/s9kAhKb+w/NqYJrHWRFA= -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:57 2026 by rpki-client