This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/Y6xPhAaGaUWtx8rNnI1dXYEj0aw.roa File: Y6xPhAaGaUWtx8rNnI1dXYEj0aw.roa (raw, json) Hash identifier: tm3dFmff/ON3GA1Vgz1QD4kPElsUnFwCa/m/O6fGpE8= Subject key identifier: 63:AC:4F:84:06:86:69:45:AD:C7:CA:CD:9C:8D:5D:5D:81:23:D1:AC Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094 Certificate serial: 019B7DCA7AC6ECE006ED719C1A1FFE376A99 Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/Y6xPhAaGaUWtx8rNnI1dXYEj0aw.roa Signing time: Fri 02 Jan 2026 08:19:40 +0000 ROA not before: Fri 02 Jan 2026 08:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215272 IP address blocks: 5.44.44.0/24 maxlen: 24 45.129.186.0/24 maxlen: 24 193.47.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:7a:c6:ec:e0:06:ed:71:9c:1a:1f:fe:37:6a:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094 Validity Not Before: Jan 2 08:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63ac4f8406866945adc7cacd9c8d5d5d8123d1ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:39:21:48:b1:2f:f3:a5:d4:f9:c7:9d:c4:3f: aa:34:51:a9:7c:12:37:9e:68:0d:56:91:78:ae:a3: 0b:44:4e:67:9a:fb:df:e8:93:4f:2d:14:cd:0d:bd: 55:4a:53:d0:93:06:5d:a1:48:42:83:c0:3d:af:24: b4:eb:d5:24:24:4e:8e:d9:b6:76:4b:c4:07:ac:89: 34:12:6d:d9:4d:e4:66:a9:cb:bc:cf:63:a4:33:2f: ee:34:fe:5c:72:28:fa:f1:ad:0f:fa:78:9a:be:4e: e9:d7:47:db:be:90:3c:77:65:ea:ca:a4:ac:52:b0: cd:c2:56:c5:04:59:3a:7e:2d:13:f1:73:d7:5f:47: c0:84:60:42:66:3b:ae:bc:d7:36:8c:44:d0:64:8d: b4:fe:ee:bf:67:11:b8:4f:a9:ce:c6:7b:5f:8f:b1: 7e:18:dc:ba:59:6c:9e:ea:1b:48:c5:93:8f:66:bf: 67:59:d2:68:e9:58:fe:c1:6b:92:43:80:95:13:76: bb:52:99:a8:6f:78:f2:28:4b:88:f5:19:a0:c2:21: bb:1b:50:c7:a6:be:c7:01:18:b1:81:0d:11:0a:c1: f2:07:82:18:68:95:37:52:bc:49:38:e8:b7:a2:7f: 87:b0:40:b8:60:a1:98:80:8e:4d:9f:f9:51:f5:68: b9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:AC:4F:84:06:86:69:45:AD:C7:CA:CD:9C:8D:5D:5D:81:23:D1:AC X509v3 Authority Key Identifier: keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/Y6xPhAaGaUWtx8rNnI1dXYEj0aw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.44.44.0/24 45.129.186.0/24 193.47.42.0/24 Signature Algorithm: sha256WithRSAEncryption 77:9b:1f:ff:fe:51:fb:0e:d2:70:67:1a:9b:61:0c:06:d3:8f: 26:8d:fd:38:c8:ff:74:88:c7:fe:d2:b6:42:87:63:a1:c4:33: f4:74:7b:67:c3:b5:b8:17:2f:31:20:1b:56:44:1a:bb:f5:9e: e0:da:e6:fb:76:c5:42:b4:87:45:db:67:f8:49:fe:4e:31:1b: 6f:f2:98:6d:33:c4:06:be:4d:7b:12:87:50:3b:30:f2:69:0e: 87:0d:4c:29:61:22:34:e7:ab:6a:fd:21:11:81:dd:bf:ac:68: 59:49:c6:2f:ee:77:7d:91:84:89:19:54:80:2e:61:77:2a:d9: 54:36:c1:8b:bb:2c:ab:84:b8:ec:cf:32:c0:df:cb:32:97:f8: 99:b6:ab:58:98:8c:b9:4c:c2:21:77:60:32:16:0e:04:40:ab: 36:91:1e:a0:e2:d8:d9:57:10:a2:52:b5:45:3e:0b:2d:f2:e9: 42:d1:54:66:cc:31:0b:72:4e:54:bb:fe:bf:40:93:fb:77:18: 1a:7c:89:c7:bd:59:58:2b:d0:76:8d:16:eb:aa:c6:ca:ea:d4: d5:61:04:c0:d3:36:7a:38:f0:50:f8:c7:d0:76:98:27:99:72: 5c:1d:8a:74:5a:ca:57:f9:5e:18:a7:11:36:f2:4f:8d:c3:31: 2d:5d:d2:99 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9ynrG7OAG7XGcGh/+N2qZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYmU2NWFlMjNmMjA3ZmE2OTUyNTVmNTVhOTA3YWMxNjA4 YmUwOTQwHhcNMjYwMTAyMDgxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2FjNGY4NDA2ODY2OTQ1YWRjN2NhY2Q5YzhkNWQ1ZDgxMjNkMWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTkhSLEv86XU+cedxD+qNFGpfBI3 nmgNVpF4rqMLRE5nmvvf6JNPLRTNDb1VSlPQkwZdoUhCg8A9ryS069UkJE6O2bZ2 S8QHrIk0Em3ZTeRmqcu8z2OkMy/uNP5ccij68a0P+niavk7p10fbvpA8d2XqyqSs UrDNwlbFBFk6fi0T8XPXX0fAhGBCZjuuvNc2jETQZI20/u6/ZxG4T6nOxntfj7F+ GNy6WWye6htIxZOPZr9nWdJo6Vj+wWuSQ4CVE3a7Upmob3jyKEuI9RmgwiG7G1DH pr7HARixgQ0RCsHyB4IYaJU3UrxJOOi3on+HsEC4YKGYgI5Nn/lR9Wi5dQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGOsT4QGhmlFrcfKzZyNXV2BI9GsMB8GA1UdIwQY MBaAFF++Za4j8gf6aVJV9VqQesFgi+CUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUt NDkyYWIzNzI2ODlkLzEvWTZ4UGhBYUdhVVd0eDhyTm5JMWRYWUVqMGF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUtNDkyYWIzNzI2ODlk LzEvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABSwsAwQA LYG6AwQAwS8qMA0GCSqGSIb3DQEBCwUAA4IBAQB3mx///lH7DtJwZxqbYQwG048m jf04yP90iMf+0rZCh2OhxDP0dHtnw7W4Fy8xIBtWRBq79Z7g2ub7dsVCtIdF22f4 Sf5OMRtv8phtM8QGvk17EodQOzDyaQ6HDUwpYSI056tq/SERgd2/rGhZScYv7nd9 kYSJGVSALmF3KtlUNsGLuyyrhLjszzLA38syl/iZtqtYmIy5TMIhd2AyFg4EQKs2 kR6g4tjZVxCiUrVFPgst8ulC0VRmzDELck5Uu/6/QJP7dxgafInHvVlYK9B2jRbr qsbK6tTVYQTA0zZ6OPBQ+MfQdpgnmXJcHYp0WspX+V4YpxE28k+NwzEtXdKZ -----END CERTIFICATE-----Generated at Sun Jan 25 20:49:30 2026 by rpki-client