This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/y6ZMA0bem_ypGe2FfpEWzTN8nno.roa File: y6ZMA0bem_ypGe2FfpEWzTN8nno.roa (raw, json) Hash identifier: 7OMxhExrtHyZxin9THZMP8/My2Hk6Y9f4O3yqoFNYvo= Subject key identifier: CB:A6:4C:03:46:DE:9B:FC:A9:19:ED:85:7E:91:16:CD:33:7C:9E:7A Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe Certificate serial: 019B7BA4F9F72A0AE0C2DED639A515441504 Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/y6ZMA0bem_ypGe2FfpEWzTN8nno.roa Signing time: Thu 01 Jan 2026 22:19:27 +0000 ROA not before: Thu 01 Jan 2026 22:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51295 IP address blocks: 45.153.88.0/24 maxlen: 24 45.153.91.0/24 maxlen: 24 185.165.184.0/22 maxlen: 22 185.179.156.0/22 maxlen: 22 185.248.196.0/22 maxlen: 22 193.29.227.0/24 maxlen: 24 194.165.26.0/24 maxlen: 24 2a0a:8880::/48 maxlen: 48 2a0a:8880:1::/48 maxlen: 48 2a0a:8880:2::/48 maxlen: 48 2a0a:8880:aaaa::/48 maxlen: 48 2a0f:4440:aaaa::/48 maxlen: 48 2a0f:4440:abcd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:f9:f7:2a:0a:e0:c2:de:d6:39:a5:15:44:15:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe Validity Not Before: Jan 1 22:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cba64c0346de9bfca919ed857e9116cd337c9e7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6a:ed:c0:c3:11:75:13:76:3a:e0:02:44:60: ac:8b:b4:83:68:c0:af:74:84:a5:d7:ed:30:c3:30: 70:bb:15:94:1d:8a:22:2a:34:ca:dd:47:34:24:57: 52:1e:4d:1f:eb:77:55:5a:ad:95:0d:b8:3c:41:6c: 9d:1e:af:f8:b1:ba:45:d5:6c:ed:fa:9a:a4:55:20: 68:ce:be:25:1a:a2:5e:91:0f:45:b5:33:67:bf:2f: 18:92:4f:c0:5a:2c:5d:5a:52:b9:f8:d0:13:d6:78: e4:6e:83:37:82:df:34:bb:2c:cf:0a:39:e9:04:5b: a0:22:86:49:2e:d7:98:b5:b7:05:c6:c1:90:96:d5: b4:d5:2f:03:b8:a7:12:0b:8c:8c:e1:0e:3f:43:fb: 54:24:d4:e8:6f:b7:ed:60:75:df:cb:ab:53:14:83: 5c:71:60:de:48:a4:bb:f3:d7:49:49:6f:7d:de:82: 09:eb:e4:59:bb:d1:84:80:0e:99:6d:e0:f0:0a:a9: c7:4c:2a:81:be:46:3e:08:3f:b1:2b:b8:be:fb:a2: 03:ca:ab:04:cb:17:d3:b6:43:29:e9:ba:1e:66:fa: 0f:79:c3:01:31:77:40:d7:3c:09:58:3b:83:83:08: 5a:bc:6f:a2:18:63:7a:c9:f8:9a:22:62:17:3c:dc: 7c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A6:4C:03:46:DE:9B:FC:A9:19:ED:85:7E:91:16:CD:33:7C:9E:7A X509v3 Authority Key Identifier: keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/y6ZMA0bem_ypGe2FfpEWzTN8nno.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.88.0/24 45.153.91.0/24 185.165.184.0/22 185.179.156.0/22 185.248.196.0/22 193.29.227.0/24 194.165.26.0/24 IPv6: 2a0a:8880::-2a0a:8880:2:ffff:ffff:ffff:ffff:ffff 2a0a:8880:aaaa::/48 2a0f:4440:aaaa::/48 2a0f:4440:abcd::/48 Signature Algorithm: sha256WithRSAEncryption 8a:cd:51:d8:12:6b:a0:28:35:33:55:77:be:d0:1e:5d:1b:d9: 07:bf:51:61:4d:3c:e6:11:69:c9:e4:6d:dc:6f:63:47:64:7b: 04:98:f4:37:7d:9e:7f:47:d3:fd:be:3e:db:10:7c:a8:63:46: 59:bb:be:5b:f8:4e:3f:0f:44:58:5a:08:75:32:cc:b6:9d:21: aa:c2:e5:e0:61:cc:6d:56:52:fb:77:6e:5a:1c:af:86:c0:d0: 43:9c:18:ce:33:cf:ae:04:0d:f6:0b:f7:8b:58:3a:23:28:08: 55:26:e4:3e:40:a9:a6:d6:fe:6d:c3:7b:3f:51:b4:0e:7a:80: ee:c9:a0:d7:d6:1f:9e:43:60:15:9e:b1:f7:08:0f:37:e7:ed: 59:ab:13:7c:e1:41:29:0d:ec:96:6f:e5:d0:6f:a6:0e:d7:d8: 74:a3:cf:55:d7:d7:45:20:26:8d:51:4f:1d:7a:70:f9:1f:46: 0b:ea:3e:16:f3:cb:b7:11:33:62:69:b0:70:29:04:16:3a:a8: 56:fb:18:b9:0b:8c:44:40:f0:bf:7a:e9:ea:e6:5f:87:02:04: 15:25:ee:60:29:4a:44:47:c5:97:3e:2e:1d:a1:12:f5:be:2c: f3:e1:12:4d:79:c8:ae:ec:a9:b1:a1:83:8e:de:db:6e:d5:bf: 25:01:03:de -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgISAZt7pPn3Kgrgwt7WOaUVRBUEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ODI0N2QzZjgxNDcyZGJiYTA2ZGJlYTliZDE5Yzc4NWQx OGJhYmUwHhcNMjYwMTAxMjIxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmE2NGMwMzQ2ZGU5YmZjYTkxOWVkODU3ZTkxMTZjZDMzN2M5ZTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2rtwMMRdRN2OuACRGCsi7SDaMCv dISl1+0wwzBwuxWUHYoiKjTK3Uc0JFdSHk0f63dVWq2VDbg8QWydHq/4sbpF1Wzt +pqkVSBozr4lGqJekQ9FtTNnvy8Ykk/AWixdWlK5+NAT1njkboM3gt80uyzPCjnp BFugIoZJLteYtbcFxsGQltW01S8DuKcSC4yM4Q4/Q/tUJNTob7ftYHXfy6tTFINc cWDeSKS789dJSW993oIJ6+RZu9GEgA6ZbeDwCqnHTCqBvkY+CD+xK7i++6IDyqsE yxfTtkMp6boeZvoPecMBMXdA1zwJWDuDgwhavG+iGGN6yfiaImIXPNx8jQIDAQAB o4ICYjCCAl4wHQYDVR0OBBYEFMumTANG3pv8qRnthX6RFs0zfJ56MB8GA1UdIwQY MBaAFNmCR9P4FHLbugbb6pvRnHhdGLq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgt YTMwMzI2MTU2NjBjLzEveTZaTUEwYmVtX3lwR2UyRmZwRVd6VE44bm5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgtYTMwMzI2MTU2NjBj LzEvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzAwBAIAATAqAwQALZlYAwQA LZlbAwQCuaW4AwQCubOcAwQCufjEAwQAwR3jAwQAwqUaMDMEAgACMC0wEAMFByoK iIADBwAqCoiAAAIDBwAqCoiAqqoDBwAqD0RAqqoDBwAqD0RAq80wDQYJKoZIhvcN AQELBQADggEBAIrNUdgSa6AoNTNVd77QHl0b2Qe/UWFNPOYRacnkbdxvY0dkewSY 9Dd9nn9H0/2+PtsQfKhjRlm7vlv4Tj8PRFhaCHUyzLadIarC5eBhzG1WUvt3bloc r4bA0EOcGM4zz64EDfYL94tYOiMoCFUm5D5AqabW/m3Dez9RtA56gO7JoNfWH55D YBWesfcIDzfn7VmrE3zhQSkN7JZv5dBvpg7X2HSjz1XX10UgJo1RTx16cPkfRgvq Phbzy7cRM2JpsHApBBY6qFb7GLkLjERA8L966ermX4cCBBUl7mApSkRHxZc+Lh2h EvW+LPPhEk15yK7sqbGhg47e227VvyUBA94= -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:03 2026 by rpki-client