This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/yWDSl9yDDWwKXKm5areAK-BgE_4.roa File: yWDSl9yDDWwKXKm5areAK-BgE_4.roa (raw, json) Hash identifier: 9t658G/RphCv/dZEb8OenZ41/3jlcAPrpuRTSbCffNo= Subject key identifier: C9:60:D2:97:DC:83:0D:6C:0A:5C:A9:B9:6A:B7:80:2B:E0:60:13:FE Certificate issuer: /CN=6b1a57f06ef72007dd6193f960a616344b73301f Certificate serial: 019B7AC7BE0597F71422F600C913A36470AE Authority key identifier: 6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/yWDSl9yDDWwKXKm5areAK-BgE_4.roa Signing time: Thu 01 Jan 2026 18:17:49 +0000 ROA not before: Thu 01 Jan 2026 18:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203052 IP address blocks: 185.146.140.0/22 maxlen: 22 2a07:5100::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:be:05:97:f7:14:22:f6:00:c9:13:a3:64:70:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1a57f06ef72007dd6193f960a616344b73301f Validity Not Before: Jan 1 18:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c960d297dc830d6c0a5ca9b96ab7802be06013fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:76:1e:d4:fd:36:ba:56:9c:6a:a7:58:ba:ca: ab:47:a5:1e:a8:42:d8:fc:40:88:48:32:fe:00:38: 1f:5c:2d:e3:ee:60:58:63:c4:b6:85:41:48:1d:27: 0c:f7:40:6d:bf:a5:32:49:e7:06:1b:47:a2:16:68: 7a:64:91:47:57:c9:e8:d0:46:9b:df:b5:bc:fb:31: d0:90:cc:f5:8f:ee:dd:07:92:5b:b0:2b:84:1c:c3: e9:3b:18:fd:31:5f:e4:b2:b6:57:dc:f8:8c:1b:0a: cd:a4:57:cc:66:e5:86:36:a2:4e:ab:c5:61:73:95: e5:f0:65:5d:3f:a9:a2:94:17:61:4d:7f:56:63:3d: 58:ff:0e:5b:f3:7f:b1:d8:65:ba:cc:d7:6e:a1:d8: 36:6a:91:4d:40:bb:cb:95:ce:61:b6:e0:95:b7:26: c8:10:b9:e5:8a:cb:b9:6b:99:99:81:5f:f5:46:58: 98:df:00:04:18:c8:71:27:f2:ac:de:f0:55:43:46: 2a:f8:6f:4f:53:26:ff:6c:84:07:32:ce:17:8a:66: 7f:24:66:a2:6b:a2:c7:1c:47:5f:28:51:eb:02:70: 84:a3:8a:e5:9f:78:0d:3d:b3:07:fd:02:e7:23:c6: f4:8d:37:76:3c:e2:00:1b:b6:9f:88:30:4d:3f:bf: 7d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:60:D2:97:DC:83:0D:6C:0A:5C:A9:B9:6A:B7:80:2B:E0:60:13:FE X509v3 Authority Key Identifier: keyid:6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/yWDSl9yDDWwKXKm5areAK-BgE_4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.146.140.0/22 IPv6: 2a07:5100::/29 Signature Algorithm: sha256WithRSAEncryption 9e:26:88:6c:95:74:d2:38:b7:a2:cc:14:02:c4:53:cb:8d:07: 50:de:cb:8e:07:ad:95:63:ad:e6:aa:a9:50:0a:21:2e:29:fa: 02:d7:65:a5:5a:f4:bc:43:78:f2:1f:55:9a:0a:ba:54:80:3f: 90:5a:00:35:8a:a3:b0:ae:ff:1e:03:2a:ed:51:0b:52:5a:e5: 9c:4b:d6:83:ab:ba:85:91:0a:16:c1:42:f8:93:14:4b:1b:da: 7c:46:9d:1e:d4:91:01:db:7c:57:f2:cf:44:5a:cb:5d:39:85: fa:12:c8:90:21:90:7d:89:b5:b0:7b:3e:40:8c:95:05:dd:9d: 8b:66:b2:04:8e:9a:57:f3:e9:de:39:48:32:db:a8:02:7a:6a: 1f:df:3e:a3:da:d5:0e:dd:9e:73:bc:e6:61:4f:23:62:67:6b: d3:1c:68:fc:c7:f9:54:7b:8e:94:8c:0d:15:df:f6:50:ab:94: c0:61:6f:fb:50:96:04:3e:36:a7:24:55:1b:8d:81:17:28:21: e1:0c:07:b1:7d:0a:15:c6:af:d5:0a:da:09:3a:08:61:07:d4: 30:91:85:95:74:8d:42:f0:cd:96:5d:1d:cf:84:5e:8c:dc:6a: 39:c8:10:97:e3:3c:72:46:5b:cb:70:69:97:03:9c:81:04:a6: ed:e9:1c:3c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6x74Fl/cUIvYAyROjZHCuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMWE1N2YwNmVmNzIwMDdkZDYxOTNmOTYwYTYxNjM0NGI3 MzMwMWYwHhcNMjYwMTAxMTgxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTYwZDI5N2RjODMwZDZjMGE1Y2E5Yjk2YWI3ODAyYmUwNjAxM2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHYe1P02ulacaqdYusqrR6UeqELY /ECISDL+ADgfXC3j7mBYY8S2hUFIHScM90Btv6UySecGG0eiFmh6ZJFHV8no0Eab 37W8+zHQkMz1j+7dB5JbsCuEHMPpOxj9MV/ksrZX3PiMGwrNpFfMZuWGNqJOq8Vh c5Xl8GVdP6milBdhTX9WYz1Y/w5b83+x2GW6zNduodg2apFNQLvLlc5htuCVtybI ELnlisu5a5mZgV/1RliY3wAEGMhxJ/Ks3vBVQ0Yq+G9PUyb/bIQHMs4XimZ/JGai a6LHHEdfKFHrAnCEo4rln3gNPbMH/QLnI8b0jTd2POIAG7afiDBNP799twIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMlg0pfcgw1sClypuWq3gCvgYBP+MB8GA1UdIwQY MBaAFGsaV/Bu9yAH3WGT+WCmFjRLczAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhwWDhHNzNJQWZkWVpQNVlLWVdORXR6TUI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9jOTYyNDctZTk3OS00ZTU4LTg5ZjYt ZWViZGNiZDNhZWU4LzEveVdEU2w5eUREV3dLWEttNWFyZUFLLUJnRV80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9jOTYyNDctZTk3OS00ZTU4LTg5ZjYtZWViZGNiZDNhZWU4 LzEvYXhwWDhHNzNJQWZkWVpQNVlLWVdORXR6TUI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZKMMA0E AgACMAcDBQMqB1EAMA0GCSqGSIb3DQEBCwUAA4IBAQCeJohslXTSOLeizBQCxFPL jQdQ3suOB62VY63mqqlQCiEuKfoC12WlWvS8Q3jyH1WaCrpUgD+QWgA1iqOwrv8e AyrtUQtSWuWcS9aDq7qFkQoWwUL4kxRLG9p8Rp0e1JEB23xX8s9EWstdOYX6EsiQ IZB9ibWwez5AjJUF3Z2LZrIEjppX8+neOUgy26gCemof3z6j2tUO3Z5zvOZhTyNi Z2vTHGj8x/lUe46UjA0V3/ZQq5TAYW/7UJYEPjanJFUbjYEXKCHhDAexfQoVxq/V CtoJOghhB9QwkYWVdI1C8M2WXR3PhF6M3Go5yBCX4zxyRlvLcGmXA5yBBKbt6Rw8 -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:54 2026 by rpki-client