This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/_kSC6SxEhsOLshYqTVwsSFaNbLI.roa File: _kSC6SxEhsOLshYqTVwsSFaNbLI.roa (raw, json) Hash identifier: KB6xLUsnETAFSWCWhqb4kG0B7HnLwgn6REmfOJuSowg= Subject key identifier: FE:44:82:E9:2C:44:86:C3:8B:B2:16:2A:4D:5C:2C:48:56:8D:6C:B2 Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Certificate serial: 019B7C7FC11322306F0FD35337DA12C3DE02 Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/_kSC6SxEhsOLshYqTVwsSFaNbLI.roa Signing time: Fri 02 Jan 2026 02:18:25 +0000 ROA not before: Fri 02 Jan 2026 02:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63473 IP address blocks: 150.107.200.0/24 maxlen: 32 150.107.201.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:c1:13:22:30:6f:0f:d3:53:37:da:12:c3:de:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Validity Not Before: Jan 2 02:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe4482e92c4486c38bb2162a4d5c2c48568d6cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:01:a8:48:29:0e:86:ad:19:88:3e:fc:31:60: 94:86:15:29:23:92:e0:48:e3:79:2e:f9:62:2d:ae: ee:4c:e0:f8:6a:5e:2e:3f:5e:3d:82:05:30:03:6d: a1:b1:ab:fd:f6:8f:1d:59:80:55:13:c9:79:d8:22: 1d:7e:92:94:40:6b:16:61:da:83:fe:a9:ea:95:62: d4:52:46:25:68:61:7c:76:d4:0b:1e:d2:28:70:16: ac:8b:c8:b1:d9:fd:c2:8f:ae:b5:02:50:46:49:a1: 10:cf:58:e7:4e:2e:c2:ab:18:38:2d:1b:fc:28:5b: 67:0f:67:48:92:4e:db:08:c6:2d:60:74:db:7c:1b: 09:79:27:e9:36:5f:75:96:35:77:1b:27:2d:5c:58: 8a:74:4b:fb:74:ea:b7:bb:07:98:b5:59:d0:bd:e6: c4:14:44:29:2c:17:2d:d5:26:44:48:cd:80:04:df: 03:94:36:b2:cb:71:9a:72:13:16:de:e7:55:bc:65: 59:60:02:1f:05:2f:8b:28:dd:43:db:bc:b9:bc:d3: de:8d:ae:a0:cf:21:b8:ec:af:44:57:01:d5:07:08: 7d:92:1a:37:b4:8f:13:45:dc:e1:55:df:a0:00:84: 93:59:29:98:88:86:9f:fd:d7:71:6a:d8:52:54:5c: 3d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:44:82:E9:2C:44:86:C3:8B:B2:16:2A:4D:5C:2C:48:56:8D:6C:B2 X509v3 Authority Key Identifier: keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/_kSC6SxEhsOLshYqTVwsSFaNbLI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.107.200.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:86:25:32:94:14:a2:93:bd:68:74:86:68:d5:74:5e:0c:1f: 6e:25:82:97:f1:36:a9:9d:fa:9b:ef:41:30:ea:9f:b0:b9:96: c2:88:c6:84:1e:76:8a:4e:3d:a8:54:91:68:8b:60:85:88:9f: 3a:56:e2:34:85:59:16:6f:77:1d:b2:73:21:18:d2:6c:0e:4e: bd:4f:1d:a2:84:50:04:14:3e:99:82:b8:bc:ad:b6:30:47:b3: dc:ff:ec:d9:62:ce:0a:61:13:1c:11:64:bf:ee:e9:26:2b:2d: ce:0a:91:ba:bc:34:fd:be:8e:76:2c:cd:46:9b:13:31:b1:a2: d8:a7:0f:e0:a1:76:12:20:64:67:3c:a3:7d:11:20:20:fc:84: 38:38:03:d9:28:10:2d:c4:a5:ff:9e:fe:c9:6b:bd:c5:d9:b9: 30:da:03:fc:d6:bd:51:76:71:e9:f7:22:d0:75:d1:24:47:e6: 5f:ca:dc:32:7f:7f:2a:89:2c:21:ce:fb:4a:4f:dc:54:f1:08: d1:c0:7d:98:31:ad:76:fd:cb:2a:49:50:2c:de:f5:23:ce:73: 14:45:b6:3f:9b:0c:14:77:4a:b6:7a:3d:4b:4f:bf:99:bc:71: 52:d6:40:fa:f7:fa:ec:e2:67:aa:8b:61:c9:59:01:fc:d5:39: 52:19:61:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f8ETIjBvD9NTN9oSw94CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx OWE3NGUwHhcNMjYwMTAyMDIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTQ0ODJlOTJjNDQ4NmMzOGJiMjE2MmE0ZDVjMmM0ODU2OGQ2Y2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wGoSCkOhq0ZiD78MWCUhhUpI5Lg SON5LvliLa7uTOD4al4uP149ggUwA22hsav99o8dWYBVE8l52CIdfpKUQGsWYdqD /qnqlWLUUkYlaGF8dtQLHtIocBasi8ix2f3Cj661AlBGSaEQz1jnTi7Cqxg4LRv8 KFtnD2dIkk7bCMYtYHTbfBsJeSfpNl91ljV3GyctXFiKdEv7dOq3uweYtVnQvebE FEQpLBct1SZESM2ABN8DlDayy3GachMW3udVvGVZYAIfBS+LKN1D27y5vNPeja6g zyG47K9EVwHVBwh9kho3tI8TRdzhVd+gAISTWSmYiIaf/ddxathSVFw9CQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP5EguksRIbDi7IWKk1cLEhWjWyyMB8GA1UdIwQY MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct OTViMDhlMzY2MGNmLzEvX2tTQzZTeEVoc09Mc2hZcVRWd3NTRmFOYkxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlmvIMA0G CSqGSIb3DQEBCwUAA4IBAQAqhiUylBSik71odIZo1XReDB9uJYKX8Tapnfqb70Ew 6p+wuZbCiMaEHnaKTj2oVJFoi2CFiJ86VuI0hVkWb3cdsnMhGNJsDk69Tx2ihFAE FD6Zgri8rbYwR7Pc/+zZYs4KYRMcEWS/7ukmKy3OCpG6vDT9vo52LM1GmxMxsaLY pw/goXYSIGRnPKN9ESAg/IQ4OAPZKBAtxKX/nv7Ja73F2bkw2gP81r1RdnHp9yLQ ddEkR+Zfytwyf38qiSwhzvtKT9xU8QjRwH2YMa12/csqSVAs3vUjznMURbY/mwwU d0q2ej1LT7+ZvHFS1kD69/rs4meqi2HJWQH81TlSGWGv -----END CERTIFICATE-----Generated at Sun Jan 25 15:01:33 2026 by rpki-client