This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/TY6_RErHZwMLwaGjVhsCzV2QsIA.roa File: TY6_RErHZwMLwaGjVhsCzV2QsIA.roa (raw, json) Hash identifier: Pen7p5QY0R4eFgeU4z2Sze4YFXIqdZffU0dnu0AuPAk= Subject key identifier: 4D:8E:BF:44:4A:C7:67:03:0B:C1:A1:A3:56:1B:02:CD:5D:90:B0:80 Certificate issuer: /CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc Certificate serial: 019B930A8543C82F3D0CA98CAFD7566EB1A4 Authority key identifier: A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/TY6_RErHZwMLwaGjVhsCzV2QsIA.roa Signing time: Tue 06 Jan 2026 11:21:38 +0000 ROA not before: Tue 06 Jan 2026 11:21:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5466 IP address blocks: 51.171.0.0/16 maxlen: 16 62.77.160.0/19 maxlen: 19 82.141.192.0/18 maxlen: 18 83.70.0.0/15 maxlen: 15 83.174.160.0/19 maxlen: 19 86.40.0.0/13 maxlen: 24 95.44.0.0/15 maxlen: 15 159.134.0.0/16 maxlen: 24 159.134.250.0/24 maxlen: 24 185.57.112.0/22 maxlen: 22 194.106.128.0/19 maxlen: 19 194.125.128.0/18 maxlen: 18 194.125.192.0/19 maxlen: 19 195.7.32.0/19 maxlen: 19 213.94.128.0/17 maxlen: 17 213.190.128.0/19 maxlen: 19 217.183.0.0/16 maxlen: 16 2001:bb0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:93:0a:85:43:c8:2f:3d:0c:a9:8c:af:d7:56:6e:b1:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc Validity Not Before: Jan 6 11:21:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d8ebf444ac767030bc1a1a3561b02cd5d90b080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:41:89:c4:9a:7f:3c:94:58:15:d8:3f:be:4e: f6:a8:3d:bd:c1:7f:bf:fa:a0:9b:91:cd:88:02:fc: 0c:c2:04:ef:bb:94:90:32:6a:86:2d:f3:b3:fc:ef: fe:86:5c:33:05:9d:79:71:bb:71:03:9b:fd:44:5e: 20:d8:e1:eb:92:da:64:d7:77:92:9e:2d:e9:26:58: 63:5e:80:99:71:d2:31:99:6d:98:98:c8:77:b1:10: e0:4d:80:f4:0a:a3:49:92:47:8d:85:4f:de:b9:7e: f7:e4:48:59:83:53:04:8d:97:73:6a:ed:be:63:ac: 51:5a:16:67:9f:43:19:6d:3c:db:b2:eb:cc:91:0b: f7:29:14:15:30:6d:3c:e6:a5:be:92:59:57:49:b9: 1b:b9:b4:c9:e5:e4:40:45:ff:43:30:ed:71:5f:10: c7:fd:7a:22:5c:1b:b4:e0:de:e0:77:b2:5f:50:a1: 16:6b:cc:ad:e2:a6:78:78:25:61:77:5a:10:f6:3a: 07:dc:5f:8e:52:85:80:d2:3a:71:d6:f3:8f:0d:b0: 79:27:65:98:b2:22:4c:76:cb:f0:9c:88:01:36:88: d6:10:46:05:cd:9f:ab:e8:e6:0f:29:66:46:d4:10: 87:f8:f3:b9:09:68:6f:60:8e:bd:67:9d:29:5d:b0: 1c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8E:BF:44:4A:C7:67:03:0B:C1:A1:A3:56:1B:02:CD:5D:90:B0:80 X509v3 Authority Key Identifier: keyid:A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/TY6_RErHZwMLwaGjVhsCzV2QsIA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.171.0.0/16 62.77.160.0/19 82.141.192.0/18 83.70.0.0/15 83.174.160.0/19 86.40.0.0/13 95.44.0.0/15 159.134.0.0/16 185.57.112.0/22 194.106.128.0/19 194.125.128.0-194.125.223.255 195.7.32.0/19 213.94.128.0/17 213.190.128.0/19 217.183.0.0/16 IPv6: 2001:bb0::/29 Signature Algorithm: sha256WithRSAEncryption 10:b2:b3:50:90:ec:c9:31:3d:55:76:8d:0c:7f:1c:1c:37:a4: f4:f5:74:20:8b:14:af:73:3f:54:fc:33:98:07:fc:a1:b2:cb: 5a:e5:71:e5:ca:81:ea:44:b0:39:17:aa:4f:f8:f4:98:a9:84: e7:b6:63:f2:1a:e6:0c:ec:eb:b6:ef:b0:1f:fe:09:0b:2d:7b: a0:fb:17:be:bc:80:e6:e7:76:52:50:53:8d:8c:8d:06:27:c0: 20:6f:b1:1d:1b:9c:7a:fa:83:40:c0:d6:b9:5f:cf:14:ef:0b: 24:ec:b1:71:e5:4e:be:c0:26:11:93:ea:3e:f0:4e:a3:0a:ee: a2:c7:48:32:f1:c5:e4:f9:e8:50:da:b5:33:43:52:d4:f6:a5: c7:fa:0e:ae:bd:23:26:49:c5:52:29:17:d3:58:b5:30:cb:14: b8:e7:16:49:51:f2:9e:b4:7f:86:4f:30:6a:52:ba:49:0a:5a: 53:ce:14:a0:f7:2e:67:e1:39:6a:ae:06:4c:fe:c6:7f:4a:e2: 83:6e:0c:88:1f:6e:52:80:19:c3:59:da:47:a8:6c:9a:23:5c: 07:34:6f:94:17:28:89:d3:7e:b5:b0:de:9b:91:83:d2:12:4d: 00:98:db:4d:c7:c6:c1:e5:7a:9a:0c:8b:2e:97:c9:16:c5:6d: 10:e2:4d:8b -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgISAZuTCoVDyC89DKmMr9dWbrGkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZWQwYmE4YjQ2ZWYyNTFlNWEwNThhNjRhMjFiMzA3ZDM2 NTBkZGMwHhcNMjYwMTA2MTEyMTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDhlYmY0NDRhYzc2NzAzMGJjMWExYTM1NjFiMDJjZDVkOTBiMDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEGJxJp/PJRYFdg/vk72qD29wX+/ +qCbkc2IAvwMwgTvu5SQMmqGLfOz/O/+hlwzBZ15cbtxA5v9RF4g2OHrktpk13eS ni3pJlhjXoCZcdIxmW2YmMh3sRDgTYD0CqNJkkeNhU/euX735EhZg1MEjZdzau2+ Y6xRWhZnn0MZbTzbsuvMkQv3KRQVMG085qW+kllXSbkbubTJ5eRARf9DMO1xXxDH /XoiXBu04N7gd7JfUKEWa8yt4qZ4eCVhd1oQ9joH3F+OUoWA0jpx1vOPDbB5J2WY siJMdsvwnIgBNojWEEYFzZ+r6OYPKWZG1BCH+PO5CWhvYI69Z50pXbAcWQIDAQAB o4ICbzCCAmswHQYDVR0OBBYEFE2Ov0RKx2cDC8Gho1YbAs1dkLCAMB8GA1UdIwQY MBaAFKLtC6i0bvJR5aBYpkohswfTZQ3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3UwTHFMUnU4bEhsb0ZpbVNpR3pCOU5sRGR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81YmU4ZjctMWFkMC00NGJmLThiM2Ut NzkxYzVhODUzOTBkLzEvVFk2X1JFckhad01Md2FHalZoc0N6VjJRc0lBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC81YmU4ZjctMWFkMC00NGJmLThiM2UtNzkxYzVhODUzOTBk LzEvb3UwTHFMUnU4bEhsb0ZpbVNpR3pCOU5sRGR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGEBggrBgEFBQcBBwEB/wR1MHMwYgQCAAEwXAMDADOrAwQF Pk2gAwQGUo3AAwMBU0YDBAVTrqADAwNWKAMDAV8sAwMAn4YDBAK5OXADBAXCaoAw DAMEB8J9gAMEBcJ9wAMEBcMHIAMEB9VegAMEBdW+gAMDANm3MA0EAgACMAcDBQMg AQuwMA0GCSqGSIb3DQEBCwUAA4IBAQAQsrNQkOzJMT1Vdo0MfxwcN6T09XQgixSv cz9U/DOYB/yhssta5XHlyoHqRLA5F6pP+PSYqYTntmPyGuYM7Ou277Af/gkLLXug +xe+vIDm53ZSUFONjI0GJ8Agb7EdG5x6+oNAwNa5X88U7wsk7LFx5U6+wCYRk+o+ 8E6jCu6ix0gy8cXk+ehQ2rUzQ1LU9qXH+g6uvSMmScVSKRfTWLUwyxS45xZJUfKe tH+GTzBqUrpJClpTzhSg9y5n4TlqrgZM/sZ/SuKDbgyIH25SgBnDWdpHqGyaI1wH NG+UFyiJ0361sN6bkYPSEk0AmNtNx8bB5XqaDIsul8kWxW0Q4k2L -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:24 2026 by rpki-client