This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/6ly5xS7Crn95qS-sabxmTiXk0Gw.roa File: 6ly5xS7Crn95qS-sabxmTiXk0Gw.roa (raw, json) Hash identifier: orel+0qepeeJDJ5TDLnEm1CeQiuPhxAXOKIcf81qcUQ= Subject key identifier: EA:5C:B9:C5:2E:C2:AE:7F:79:A9:2F:AC:69:BC:66:4E:25:E4:D0:6C Certificate issuer: /CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df Certificate serial: 019B7835611624A859CBBB709DB04B8629C1 Authority key identifier: BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/6ly5xS7Crn95qS-sabxmTiXk0Gw.roa Signing time: Thu 01 Jan 2026 06:18:42 +0000 ROA not before: Thu 01 Jan 2026 06:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203411 IP address blocks: 185.135.144.0/24 maxlen: 24 185.135.145.0/24 maxlen: 24 185.135.146.0/24 maxlen: 24 185.135.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:61:16:24:a8:59:cb:bb:70:9d:b0:4b:86:29:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df Validity Not Before: Jan 1 06:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea5cb9c52ec2ae7f79a92fac69bc664e25e4d06c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e2:0a:5d:85:27:55:0b:a0:88:a6:ae:bd:7f: ad:40:43:00:da:cf:8c:14:8d:1d:89:f9:63:2c:f8: 63:7e:f8:95:b5:3d:bc:4d:1b:a5:c2:f0:f5:40:d7: 6a:3d:b4:90:a7:6d:cf:0b:70:03:18:fc:0e:d9:be: b9:38:ae:fe:22:a8:17:48:7f:85:c8:cf:aa:24:d9: c3:38:37:2f:df:7c:f7:43:73:8b:d5:35:4a:b4:5a: 17:d3:05:87:92:f7:e5:93:ae:c6:47:da:fb:75:0f: a2:de:5c:bd:2a:09:e7:a9:4a:e8:ef:89:1c:dc:7b: 25:65:16:db:4b:fd:7b:7b:cd:c6:89:73:fa:5c:5e: ea:e7:00:13:01:51:9d:d8:a2:eb:7c:98:93:45:aa: 81:fd:fa:22:8c:c4:87:07:24:7b:28:8f:08:84:73: d3:3b:b9:df:ce:2f:4f:71:5f:13:48:a6:92:4a:11: 0f:e9:99:a5:47:c1:97:95:13:a9:0c:12:92:74:92: a2:b2:46:4f:a8:dd:81:75:b7:66:2d:f3:5a:8f:c5: 49:38:9e:ba:ad:29:c6:9f:34:3e:49:53:d6:84:bf: 27:00:bc:37:e5:53:1f:54:c3:cc:b4:99:51:19:e8: 4c:f8:19:ea:6c:29:99:f1:8c:2c:c1:92:2f:2e:f4: d8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:5C:B9:C5:2E:C2:AE:7F:79:A9:2F:AC:69:BC:66:4E:25:E4:D0:6C X509v3 Authority Key Identifier: keyid:BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/6ly5xS7Crn95qS-sabxmTiXk0Gw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.135.144.0/22 Signature Algorithm: sha256WithRSAEncryption a8:4b:f5:61:1c:19:69:cc:18:93:30:c3:61:77:69:f2:f4:b1: e2:44:2c:02:6e:29:64:8b:53:08:bf:06:e2:88:c5:bf:fb:90: 3a:c3:f2:09:62:83:a4:de:71:2a:16:07:d1:32:52:56:3a:3f: 39:30:33:58:ae:b0:c6:42:65:53:c3:d4:e5:ea:18:80:5e:f2: 27:ab:ae:82:5e:00:f3:0e:43:6e:f9:0d:97:4d:f8:c6:41:0e: 66:50:f1:54:2c:f6:3e:86:7a:c1:5a:cd:fc:0b:56:10:c7:e1: 73:05:77:2e:4e:ee:21:b5:c4:f6:3b:3c:5b:3c:9e:7e:da:9a: 46:8d:d2:79:88:f4:99:9a:2c:95:d1:f3:1f:50:37:5c:f2:78: 23:05:e3:1f:c1:b6:83:d0:ee:d4:cd:0d:34:6b:c4:8d:a3:a6: 8e:e4:d8:10:ba:cc:d5:a9:c2:97:ef:5a:94:14:98:60:b4:a1: d4:a7:53:53:8b:dc:d4:0e:90:c6:ee:2f:85:a3:bc:69:4d:a3: f9:23:c3:59:b5:aa:36:4f:97:3e:bb:14:5f:3c:5d:84:8f:6e: 81:a0:80:c5:25:b5:22:a9:ef:8e:07:6c:a8:0c:ae:08:1a:f2: 74:85:eb:6f:96:2f:11:df:50:0a:54:8d:4a:41:da:53:36:f5: 4f:4b:1d:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NWEWJKhZy7twnbBLhinBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZjlmMGIwOTQ3MzhjNTI4MmZiZjRiMzA2NzBlYzVmZGNi NTg5ZGYwHhcNMjYwMTAxMDYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTVjYjljNTJlYzJhZTdmNzlhOTJmYWM2OWJjNjY0ZTI1ZTRkMDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuIKXYUnVQugiKauvX+tQEMA2s+M FI0difljLPhjfviVtT28TRulwvD1QNdqPbSQp23PC3ADGPwO2b65OK7+IqgXSH+F yM+qJNnDODcv33z3Q3OL1TVKtFoX0wWHkvflk67GR9r7dQ+i3ly9KgnnqUro74kc 3HslZRbbS/17e83GiXP6XF7q5wATAVGd2KLrfJiTRaqB/foijMSHByR7KI8IhHPT O7nfzi9PcV8TSKaSShEP6ZmlR8GXlROpDBKSdJKiskZPqN2BdbdmLfNaj8VJOJ66 rSnGnzQ+SVPWhL8nALw35VMfVMPMtJlRGehM+BnqbCmZ8YwswZIvLvTYGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOpcucUuwq5/eakvrGm8Zk4l5NBsMB8GA1UdIwQY MBaAFLz58LCUc4xSgvv0swZw7F/ctYnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlBud3NKUnpqRktDLV9TekJuRHNYOXkxaWQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZjE5ZjktODM5NS00MDg4LWFmMTct ZTVjYTY3YzExNTMzLzEvNmx5NXhTN0Nybjk1cVMtc2FieG1UaVhrMEd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZjE5ZjktODM5NS00MDg4LWFmMTctZTVjYTY3YzExNTMz LzEvdlBud3NKUnpqRktDLV9TekJuRHNYOXkxaWQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYeQMA0G CSqGSIb3DQEBCwUAA4IBAQCoS/VhHBlpzBiTMMNhd2ny9LHiRCwCbilki1MIvwbi iMW/+5A6w/IJYoOk3nEqFgfRMlJWOj85MDNYrrDGQmVTw9Tl6hiAXvInq66CXgDz DkNu+Q2XTfjGQQ5mUPFULPY+hnrBWs38C1YQx+FzBXcuTu4htcT2OzxbPJ5+2ppG jdJ5iPSZmiyV0fMfUDdc8ngjBeMfwbaD0O7UzQ00a8SNo6aO5NgQuszVqcKX71qU FJhgtKHUp1NTi9zUDpDG7i+Fo7xpTaP5I8NZtao2T5c+uxRfPF2Ej26BoIDFJbUi qe+OB2yoDK4IGvJ0hetvli8R31AKVI1KQdpTNvVPSx25 -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:27 2026 by rpki-client