This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/y6q-4aOfHflX0pozAnd7z21SiEw.roa File: y6q-4aOfHflX0pozAnd7z21SiEw.roa (raw, json) Hash identifier: BNrcMKA3+AgY/9eYfHPZuG3AM/va4c4zSTiZb/uHiLo= Subject key identifier: CB:AA:BE:E1:A3:9F:1D:F9:57:D2:9A:33:02:77:7B:CF:6D:52:88:4C Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87 Certificate serial: 019B7DCA764EF3800E28C8724EF3E1BC69DA Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/y6q-4aOfHflX0pozAnd7z21SiEw.roa Signing time: Fri 02 Jan 2026 08:19:39 +0000 ROA not before: Fri 02 Jan 2026 08:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203063 IP address blocks: 185.145.0.0/24 maxlen: 24 185.145.1.0/24 maxlen: 24 185.145.2.0/24 maxlen: 24 185.145.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:76:4e:f3:80:0e:28:c8:72:4e:f3:e1:bc:69:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c612adfabf915df33198935808cf0df9738dca87 Validity Not Before: Jan 2 08:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbaabee1a39f1df957d29a3302777bcf6d52884c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0d:85:0d:fb:45:d7:09:72:03:ae:12:79:cd: f2:5a:b1:88:a2:91:0d:14:0a:5e:7a:85:1b:a2:57: 59:95:4e:92:86:7c:5e:f1:45:40:c8:57:b5:9c:72: 0f:27:b2:bb:50:59:2b:8f:72:fc:00:dc:8a:e6:e4: e5:cf:f9:75:1d:5e:47:09:38:32:b0:e9:d2:13:d0: df:2c:53:46:cf:17:34:35:32:22:36:cf:6b:9b:12: e5:7c:96:45:fb:c8:cc:e0:52:f8:91:66:a8:fa:1f: ce:69:57:e5:b5:50:25:81:7c:60:ad:a0:1a:4f:92: 54:f4:a8:7e:54:98:17:32:fb:91:a5:ed:d2:d2:dc: 5f:78:39:ec:e4:38:00:09:3f:98:27:a7:d7:2b:64: cc:7d:c6:c8:99:e2:ca:bf:07:6e:01:3b:fb:91:7f: e3:9e:72:7c:ac:8e:cb:d8:8c:6e:9e:40:63:38:08: fa:6d:2b:e7:07:f5:50:0b:fe:ee:c5:56:1d:92:ae: 4c:61:d8:59:96:56:94:8a:49:2e:57:e1:e4:a9:db: ae:e1:71:17:25:24:e6:2e:79:f9:32:fb:22:11:ca: b7:ba:af:9b:b9:af:a5:eb:b9:d4:c8:0e:f1:64:75: fe:5d:7c:4f:18:fe:9f:61:91:6a:c9:72:4d:c3:ce: 59:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:AA:BE:E1:A3:9F:1D:F9:57:D2:9A:33:02:77:7B:CF:6D:52:88:4C X509v3 Authority Key Identifier: keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/y6q-4aOfHflX0pozAnd7z21SiEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.145.0.0/22 Signature Algorithm: sha256WithRSAEncryption 82:2e:f0:58:6b:4a:86:3a:6a:25:f3:d4:5b:ab:cb:ba:42:b6: d6:61:8c:87:d8:b0:db:90:fb:fb:3f:ca:77:1a:0a:ba:d4:3c: 62:17:a8:46:6e:66:7c:b5:f1:07:7f:28:8a:93:f6:39:0a:70: 7e:fc:4a:0d:69:16:55:d8:c6:00:c5:1c:25:d2:bf:85:fe:ee: 7a:9f:a0:0f:8d:57:f9:eb:d1:8f:6f:d7:55:36:77:5f:a0:1d: c4:56:a9:dc:9a:69:78:3f:a0:6b:a2:a7:1b:b4:12:01:b6:f4: 95:bd:82:f2:c5:ff:0d:29:bc:9f:c7:08:4e:19:41:fc:94:a8: 5b:6c:b8:11:ef:33:54:de:87:8a:a9:bb:fa:71:1b:2b:fb:d3: dd:af:98:86:67:48:0b:07:13:ed:d5:e1:e2:f8:dc:28:55:62: e4:38:1d:02:c6:53:d6:6c:f4:de:57:42:c8:2e:b1:09:d7:32: c1:49:02:d7:b4:a7:13:b0:64:27:18:1f:15:6c:68:32:be:c0: e5:76:8b:b5:31:6c:5d:31:69:87:15:a7:5f:3c:b1:99:ad:3d: 1a:5b:e0:d9:21:64:ba:1c:4a:17:2d:70:5e:27:24:b0:ba:98: 87:82:a4:22:b7:7c:87:68:00:19:40:ab:f8:b2:df:a8:0d:60: 5f:b7:1a:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ynZO84AOKMhyTvPhvGnaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTJhZGZhYmY5MTVkZjMzMTk4OTM1ODA4Y2YwZGY5NzM4 ZGNhODcwHhcNMjYwMTAyMDgxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmFhYmVlMWEzOWYxZGY5NTdkMjlhMzMwMjc3N2JjZjZkNTI4ODRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw2FDftF1wlyA64Sec3yWrGIopEN FApeeoUboldZlU6Shnxe8UVAyFe1nHIPJ7K7UFkrj3L8ANyK5uTlz/l1HV5HCTgy sOnSE9DfLFNGzxc0NTIiNs9rmxLlfJZF+8jM4FL4kWao+h/OaVfltVAlgXxgraAa T5JU9Kh+VJgXMvuRpe3S0txfeDns5DgACT+YJ6fXK2TMfcbImeLKvwduATv7kX/j nnJ8rI7L2IxunkBjOAj6bSvnB/VQC/7uxVYdkq5MYdhZllaUikkuV+Hkqduu4XEX JSTmLnn5MvsiEcq3uq+bua+l67nUyA7xZHX+XXxPGP6fYZFqyXJNw85ZbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMuqvuGjnx35V9KaMwJ3e89tUohMMB8GA1UdIwQY MBaAFMYSrfq/kV3zMZiTWAjPDflzjcqHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMGFiMTgtZDM3OS00YWM3LWE5MDgt ODFhNDZmNGY2ZDVhLzEveTZxLTRhT2ZIZmxYMHBvekFuZDd6MjFTaUV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zMGFiMTgtZDM3OS00YWM3LWE5MDgtODFhNDZmNGY2ZDVh LzEveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZEAMA0G CSqGSIb3DQEBCwUAA4IBAQCCLvBYa0qGOmol89Rbq8u6QrbWYYyH2LDbkPv7P8p3 Ggq61DxiF6hGbmZ8tfEHfyiKk/Y5CnB+/EoNaRZV2MYAxRwl0r+F/u56n6APjVf5 69GPb9dVNndfoB3EVqncmml4P6BroqcbtBIBtvSVvYLyxf8NKbyfxwhOGUH8lKhb bLgR7zNU3oeKqbv6cRsr+9Pdr5iGZ0gLBxPt1eHi+NwoVWLkOB0CxlPWbPTeV0LI LrEJ1zLBSQLXtKcTsGQnGB8VbGgyvsDldou1MWxdMWmHFadfPLGZrT0aW+DZIWS6 HEoXLXBeJySwupiHgqQit3yHaAAZQKv4st+oDWBftxqM -----END CERTIFICATE-----Generated at Mon Jan 26 04:43:00 2026 by rpki-client