This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/6yVWhhQWfzj2sbvx8_GIlONHBiY.roa File: 6yVWhhQWfzj2sbvx8_GIlONHBiY.roa (raw, json) Hash identifier: gy7S4MewOgzjZJmXLphYMThB+PJuj/0KSl7GoYmvutQ= Subject key identifier: EB:25:56:86:14:16:7F:38:F6:B1:BB:F1:F3:F1:88:94:E3:47:06:26 Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Certificate serial: 019B7D5D0E00C75D851C2D72429B00EA0906 Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/6yVWhhQWfzj2sbvx8_GIlONHBiY.roa Signing time: Fri 02 Jan 2026 06:20:09 +0000 ROA not before: Fri 02 Jan 2026 06:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206770 IP address blocks: 157.25.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:0e:00:c7:5d:85:1c:2d:72:42:9b:00:ea:09:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Validity Not Before: Jan 2 06:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb25568614167f38f6b1bbf1f3f18894e3470626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:24:7f:a9:de:0f:b5:ee:9d:07:7d:a7:35:4c: fc:be:01:65:c7:7d:68:89:94:95:75:e0:70:91:38: 7c:46:16:d3:5b:4b:71:f6:89:79:09:da:9b:fc:b2: 4a:8f:ba:3e:42:a8:3f:fd:47:2c:ee:6f:ef:4c:5d: 82:ef:89:40:97:51:9e:6d:0c:0b:9f:a9:08:18:a2: 3d:f5:c3:ed:c4:5d:15:51:7b:a5:67:c8:49:f0:7c: 0a:95:45:d6:9b:61:8d:15:d5:18:c2:d5:0d:42:0e: 66:46:be:d5:92:bb:6c:7e:e1:43:c9:b0:ce:21:58: fe:56:c5:6e:ff:93:a4:15:54:69:49:7b:4a:4a:fd: 2e:4d:76:dd:9c:05:5e:9f:97:10:9f:d8:98:61:5f: 12:45:97:45:20:50:eb:d2:32:e2:86:f6:07:fc:a6: f5:b9:00:41:e5:46:ea:f2:60:e8:84:c0:c7:aa:6a: b0:3d:ea:89:8c:d2:a9:4f:f8:58:d1:8f:12:4e:b4: 1e:02:6d:4e:50:41:4d:58:f7:7e:8c:2a:fb:45:3d: 8c:45:cf:05:7b:d9:ed:58:10:ed:f5:71:b1:64:d7: 00:2c:f3:39:5c:89:f0:13:25:a8:a3:81:94:c9:ea: 01:cb:61:95:d7:5f:0a:3a:fa:f8:01:55:1a:d1:1e: 5b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:25:56:86:14:16:7F:38:F6:B1:BB:F1:F3:F1:88:94:E3:47:06:26 X509v3 Authority Key Identifier: keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/6yVWhhQWfzj2sbvx8_GIlONHBiY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.25.57.0/24 Signature Algorithm: sha256WithRSAEncryption a5:18:bc:d9:6c:2e:ce:3a:42:12:ae:1c:07:5b:41:87:c7:37: 10:11:3a:ad:10:ba:db:44:be:22:fa:b4:c4:73:45:56:26:46: 86:52:83:b6:ae:1a:c1:84:d6:57:f3:0a:3e:c4:e3:8b:33:53: 7a:83:cb:6c:64:41:83:5b:01:92:33:f6:ca:2e:5a:f4:2d:8e: b6:ba:64:85:81:99:ca:26:c1:17:04:3c:ff:96:f9:99:fb:94: ce:c4:fc:e2:42:87:1e:0a:53:70:2e:9b:fd:98:d2:cd:42:72: 41:b9:34:25:bc:97:a6:9d:e6:97:8c:e6:5c:86:43:48:98:c0: f5:5d:86:a5:a0:e2:52:83:06:75:bd:bd:ad:28:f8:62:be:6d: 73:c8:34:82:6f:7a:a5:94:e3:39:b7:8a:dc:00:01:fe:6d:2a: 6d:17:74:f0:4e:e4:7a:df:65:d5:6a:6e:88:36:b6:0a:e4:51: 28:cc:6b:0b:ee:0c:60:a7:4e:af:33:a2:d4:dd:70:b4:30:cf: d0:05:84:f3:1a:03:cf:04:1c:41:c8:9d:e3:00:cb:a3:c3:8e: 16:2f:dd:e1:e6:d4:07:d9:98:c1:14:6d:b4:bd:59:a8:ca:4f: a4:fa:4b:b0:76:92:13:68:72:d4:8c:7c:c2:33:1e:80:5f:0a: 38:46:dc:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XQ4Ax12FHC1yQpsA6gkGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj ZWY5MzMwHhcNMjYwMTAyMDYyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjI1NTY4NjE0MTY3ZjM4ZjZiMWJiZjFmM2YxODg5NGUzNDcwNjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziR/qd4Pte6dB32nNUz8vgFlx31o iZSVdeBwkTh8RhbTW0tx9ol5Cdqb/LJKj7o+Qqg//Ucs7m/vTF2C74lAl1GebQwL n6kIGKI99cPtxF0VUXulZ8hJ8HwKlUXWm2GNFdUYwtUNQg5mRr7VkrtsfuFDybDO IVj+VsVu/5OkFVRpSXtKSv0uTXbdnAVen5cQn9iYYV8SRZdFIFDr0jLihvYH/Kb1 uQBB5Ubq8mDohMDHqmqwPeqJjNKpT/hY0Y8STrQeAm1OUEFNWPd+jCr7RT2MRc8F e9ntWBDt9XGxZNcALPM5XInwEyWoo4GUyeoBy2GV118KOvr4AVUa0R5bpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOslVoYUFn849rG78fPxiJTjRwYmMB8GA1UdIwQY MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt OTFlMzE4NGJiMGFiLzEvNnlWV2hoUVdmemoyc2J2eDhfR0lsT05IQmlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRk5MA0G CSqGSIb3DQEBCwUAA4IBAQClGLzZbC7OOkISrhwHW0GHxzcQETqtELrbRL4i+rTE c0VWJkaGUoO2rhrBhNZX8wo+xOOLM1N6g8tsZEGDWwGSM/bKLlr0LY62umSFgZnK JsEXBDz/lvmZ+5TOxPziQoceClNwLpv9mNLNQnJBuTQlvJemneaXjOZchkNImMD1 XYaloOJSgwZ1vb2tKPhivm1zyDSCb3qllOM5t4rcAAH+bSptF3TwTuR632XVam6I NrYK5FEozGsL7gxgp06vM6LU3XC0MM/QBYTzGgPPBBxByJ3jAMujw44WL93h5tQH 2ZjBFG20vVmoyk+k+kuwdpITaHLUjHzCMx6AXwo4RtwN -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:55 2026 by rpki-client