This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/a6YPy8t2smPnddF-vAybhOouYkI.roa File: a6YPy8t2smPnddF-vAybhOouYkI.roa (raw, json) Hash identifier: 2VTnHbp49NXPzMqgsIFYWCQ+9Ms6/ReLgmJTyeo9QTM= Subject key identifier: 6B:A6:0F:CB:CB:76:B2:63:E7:75:D1:7E:BC:0C:9B:84:EA:2E:62:42 Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e Certificate serial: 019B7EA6AD9A875B2FD9FA8D57BB3EFF48EB Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/a6YPy8t2smPnddF-vAybhOouYkI.roa Signing time: Fri 02 Jan 2026 12:20:11 +0000 ROA not before: Fri 02 Jan 2026 12:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214041 IP address blocks: 213.146.165.0/24 maxlen: 24 213.146.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ad:9a:87:5b:2f:d9:fa:8d:57:bb:3e:ff:48:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e Validity Not Before: Jan 2 12:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ba60fcbcb76b263e775d17ebc0c9b84ea2e6242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5a:1a:0b:11:84:b7:f0:84:ad:f3:c6:ad:b0: 01:74:8b:4b:9a:71:de:ec:25:f1:32:49:c0:01:dc: 1d:57:46:b0:61:9b:70:01:6e:60:69:ca:bc:3e:f8: bf:ef:14:7d:78:b0:86:ef:45:97:d8:d8:30:d3:97: 92:a8:ec:56:9c:16:9a:27:53:f9:63:52:7b:7b:32: b2:0b:62:6f:99:2d:61:d5:bd:43:3f:ec:cf:5e:07: 58:9a:a8:22:13:93:4c:92:f3:e5:f4:47:f8:82:f7: de:04:5d:6f:5c:32:e6:e5:19:e9:ee:d8:3c:8c:d0: c6:a1:d3:8c:2e:27:86:15:be:33:e3:5e:5a:30:e0: 47:f5:31:c8:e6:c6:43:ca:1e:b2:40:58:ae:f0:ed: 43:f8:b8:3d:16:a7:70:52:c3:3e:bd:d4:49:50:07: 02:3f:a6:b4:0c:c5:24:49:cf:3b:6b:ec:72:34:e2: 44:6f:ad:06:23:78:88:15:02:14:ba:9f:86:98:82: a6:df:4c:90:77:6e:50:9b:c6:77:7d:c9:93:a8:f9: e9:fb:10:7e:8c:e6:8f:13:79:cb:3e:c9:aa:32:7d: 80:f3:fa:5f:24:24:5f:0b:1b:04:54:6b:6b:d0:e6: a3:b1:16:d6:9c:58:f0:4d:a3:7d:a3:1a:d1:cc:a9: 43:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A6:0F:CB:CB:76:B2:63:E7:75:D1:7E:BC:0C:9B:84:EA:2E:62:42 X509v3 Authority Key Identifier: keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/a6YPy8t2smPnddF-vAybhOouYkI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.146.165.0/24 213.146.184.0/24 Signature Algorithm: sha256WithRSAEncryption 22:02:cf:ae:d8:40:2d:96:9c:d8:67:cf:4c:36:9b:b1:83:69: e8:a2:27:a8:43:fb:52:da:8c:a2:3d:0c:0d:af:74:1f:1d:2a: e0:91:cd:ab:16:59:52:24:67:32:b4:c4:b5:ac:c0:d4:e1:70: d6:1d:16:23:d0:59:dc:3b:81:4a:f0:22:8b:bd:6a:be:8a:cb: 8e:62:8b:c1:7f:71:c4:90:5a:86:69:d4:28:5d:e7:b0:cd:60: 3f:a6:a8:4f:5e:de:de:9f:86:2d:8f:6d:e6:6c:4f:bd:02:e8: e2:6b:75:bc:a3:de:09:53:d3:33:95:8c:32:ec:aa:1d:79:48: a0:47:83:ef:6e:75:78:aa:b7:c6:b8:86:97:af:f6:37:6b:ad: 9f:ae:6a:2c:fe:c7:3b:80:87:dd:c0:67:bf:fe:1b:56:37:62: 0e:05:bb:48:1f:5e:37:ae:66:43:b7:1e:a8:06:5a:97:85:b0: c6:46:15:1d:26:9a:f9:04:4f:b5:7b:5f:31:56:7e:9c:d1:ce: 09:ba:52:d7:d8:cf:d5:99:d6:fc:2a:5f:d6:8b:14:e8:15:c1: 9a:8b:bb:65:eb:32:02:63:c7:ea:11:7b:9b:f1:85:b9:3e:8d: c1:74:9a:b7:5d:72:8b:e4:22:70:0f:80:db:4c:03:17:72:a5: 23:99:6e:82 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pq2ah1sv2fqNV7s+/0jrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2 ZGI5OWUwHhcNMjYwMTAyMTIyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmE2MGZjYmNiNzZiMjYzZTc3NWQxN2ViYzBjOWI4NGVhMmU2MjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlloaCxGEt/CErfPGrbABdItLmnHe 7CXxMknAAdwdV0awYZtwAW5gacq8Pvi/7xR9eLCG70WX2Ngw05eSqOxWnBaaJ1P5 Y1J7ezKyC2JvmS1h1b1DP+zPXgdYmqgiE5NMkvPl9Ef4gvfeBF1vXDLm5Rnp7tg8 jNDGodOMLieGFb4z415aMOBH9THI5sZDyh6yQFiu8O1D+Lg9FqdwUsM+vdRJUAcC P6a0DMUkSc87a+xyNOJEb60GI3iIFQIUup+GmIKm30yQd25Qm8Z3fcmTqPnp+xB+ jOaPE3nLPsmqMn2A8/pfJCRfCxsEVGtr0OajsRbWnFjwTaN9oxrRzKlDRQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGumD8vLdrJj53XRfrwMm4TqLmJCMB8GA1UdIwQY MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt OTU2ZjZiNWM2MTcwLzEvYTZZUHk4dDJzbVBuZGRGLXZBeWJoT291WWtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1ZKlAwQA 1ZK4MA0GCSqGSIb3DQEBCwUAA4IBAQAiAs+u2EAtlpzYZ89MNpuxg2nooieoQ/tS 2oyiPQwNr3QfHSrgkc2rFllSJGcytMS1rMDU4XDWHRYj0FncO4FK8CKLvWq+isuO YovBf3HEkFqGadQoXeewzWA/pqhPXt7en4Ytj23mbE+9Aujia3W8o94JU9MzlYwy 7KodeUigR4PvbnV4qrfGuIaXr/Y3a62frmos/sc7gIfdwGe//htWN2IOBbtIH143 rmZDtx6oBlqXhbDGRhUdJpr5BE+1e18xVn6c0c4JulLX2M/Vmdb8Kl/WixToFcGa i7tl6zICY8fqEXub8YW5Po3BdJq3XXKL5CJwD4DbTAMXcqUjmW6C -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:03 2026 by rpki-client