This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/AS-661G75-znuPlEcg291RY_YW8.roa File: AS-661G75-znuPlEcg291RY_YW8.roa (raw, json) Hash identifier: tryrPTL4snW84NvT9kdcp6puokqa439kxN3NLW6DORc= Subject key identifier: 01:2F:BA:EB:51:BB:E7:EC:E7:B8:F9:44:72:0D:BD:D5:16:3F:61:6F Certificate issuer: /CN=e443fc203f706f9731412761b27a1a4b395cfc1e Certificate serial: 019B78351B4B7578CBC13A7240C105F76D31 Authority key identifier: E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/AS-661G75-znuPlEcg291RY_YW8.roa Signing time: Thu 01 Jan 2026 06:18:24 +0000 ROA not before: Thu 01 Jan 2026 06:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203646 IP address blocks: 87.239.64.0/21 maxlen: 21 185.128.72.0/22 maxlen: 22 2a03:9aa0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:1b:4b:75:78:cb:c1:3a:72:40:c1:05:f7:6d:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e443fc203f706f9731412761b27a1a4b395cfc1e Validity Not Before: Jan 1 06:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=012fbaeb51bbe7ece7b8f944720dbdd5163f616f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4e:ca:77:86:e4:77:53:61:1d:db:2e:3c:86: 17:0d:d1:9b:f3:d4:98:9e:77:1a:ff:9e:b2:3f:72: d7:13:cc:9c:e1:54:0f:88:02:76:c7:34:21:b8:4e: ec:ea:e1:db:05:9b:57:7a:1a:00:63:6c:cf:77:97: c1:f0:d7:8e:f7:40:c5:5a:fc:f9:e6:ce:22:44:64: 52:a6:c1:70:70:0c:b9:5b:d3:9d:f6:9d:94:dc:15: 7b:ea:35:8a:cd:af:4b:6b:06:a2:b7:75:19:41:96: eb:43:9b:f0:67:bb:e9:27:a9:17:0f:73:11:81:c1: a1:25:ea:4d:12:f9:77:eb:e6:c6:91:03:21:29:25: 20:c6:5e:a4:21:5b:7e:64:73:b6:8c:a4:51:0c:db: 4d:04:ea:33:fa:47:ba:3c:1e:47:67:f2:54:ba:34: ae:76:91:63:bf:9e:14:d4:5c:23:c7:9f:60:a1:a4: 22:d7:f1:34:c5:db:ed:8e:7e:35:d1:ed:94:ab:42: 11:d3:c2:9c:e8:b4:1c:61:54:0e:66:d5:b4:32:a9: 46:4f:ab:3c:4f:7a:05:9e:e8:81:d2:05:15:bd:93: c1:e9:3a:a9:c4:68:ae:02:16:7b:a5:dc:74:5e:1c: 19:01:b3:09:d4:7d:52:63:87:33:af:7d:c4:6c:ab: c1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2F:BA:EB:51:BB:E7:EC:E7:B8:F9:44:72:0D:BD:D5:16:3F:61:6F X509v3 Authority Key Identifier: keyid:E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/AS-661G75-znuPlEcg291RY_YW8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.239.64.0/21 185.128.72.0/22 IPv6: 2a03:9aa0::/32 Signature Algorithm: sha256WithRSAEncryption 1f:a0:f7:1e:20:86:9a:b5:65:26:99:e3:0a:4d:dd:20:be:18: 49:2c:81:ea:a8:c5:e7:1f:7e:7d:08:68:99:d8:e1:dd:82:de: ac:0a:18:fa:84:b8:0f:48:77:65:2b:8b:0d:b4:8d:3a:37:b0: 57:8d:d8:d1:5a:a3:12:06:64:fd:a4:cf:56:7a:82:0c:3d:d8: 95:18:52:65:74:af:4e:50:c7:0c:e3:41:70:84:01:0c:96:ba: b2:d2:c4:ac:00:f5:06:6a:69:f1:18:68:e4:e7:70:54:cf:46: 98:3e:c3:a7:45:eb:97:29:3d:8c:f6:7d:db:e4:04:f2:8a:07: aa:c7:30:0f:df:6a:32:cd:1f:41:f1:2c:37:17:e6:86:81:46: 47:bd:8a:32:14:e7:7d:e3:dd:95:26:dd:63:61:c9:0f:02:ea: c6:7b:16:1f:3a:e1:e2:4a:93:06:ad:c4:5d:f5:74:64:14:f5: f1:f8:7a:3b:78:2f:31:59:89:81:ce:6c:90:00:55:6f:b3:c8: 8f:9a:d1:ff:84:c9:2b:c6:30:85:11:ac:2f:59:44:37:47:97: 31:8e:bc:b5:d9:78:88:a9:76:15:77:ae:2e:22:b0:6c:0b:89: 8f:3e:e4:e1:05:5e:ff:58:27:66:23:07:3a:51:29:96:a4:e6: 1f:f0:d2:ff -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4NRtLdXjLwTpyQMEF920xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NDNmYzIwM2Y3MDZmOTczMTQxMjc2MWIyN2ExYTRiMzk1 Y2ZjMWUwHhcNMjYwMTAxMDYxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTJmYmFlYjUxYmJlN2VjZTdiOGY5NDQ3MjBkYmRkNTE2M2Y2MTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk7Kd4bkd1NhHdsuPIYXDdGb89SY nnca/56yP3LXE8yc4VQPiAJ2xzQhuE7s6uHbBZtXehoAY2zPd5fB8NeO90DFWvz5 5s4iRGRSpsFwcAy5W9Od9p2U3BV76jWKza9Lawait3UZQZbrQ5vwZ7vpJ6kXD3MR gcGhJepNEvl36+bGkQMhKSUgxl6kIVt+ZHO2jKRRDNtNBOoz+ke6PB5HZ/JUujSu dpFjv54U1Fwjx59goaQi1/E0xdvtjn410e2Uq0IR08Kc6LQcYVQOZtW0MqlGT6s8 T3oFnuiB0gUVvZPB6TqpxGiuAhZ7pdx0XhwZAbMJ1H1SY4czr33EbKvBbQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAEvuutRu+fs57j5RHINvdUWP2FvMB8GA1UdIwQY MBaAFORD/CA/cG+XMUEnYbJ6Gks5XPweMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUVQOElEOXdiNWN4UVNkaHNub2FTemxjX0I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wNjg5ZWEtY2RkOS00NzkwLTlmOWIt YzBmOWQwODdmYzEwLzEvQVMtNjYxRzc1LXpudVBsRWNnMjkxUllfWVc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8wNjg5ZWEtY2RkOS00NzkwLTlmOWItYzBmOWQwODdmYzEw LzEvNUVQOElEOXdiNWN4UVNkaHNub2FTemxjX0I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDV+9AAwQC uYBIMA0EAgACMAcDBQAqA5qgMA0GCSqGSIb3DQEBCwUAA4IBAQAfoPceIIaatWUm meMKTd0gvhhJLIHqqMXnH359CGiZ2OHdgt6sChj6hLgPSHdlK4sNtI06N7BXjdjR WqMSBmT9pM9WeoIMPdiVGFJldK9OUMcM40FwhAEMlrqy0sSsAPUGamnxGGjk53BU z0aYPsOnReuXKT2M9n3b5ATyigeqxzAP32oyzR9B8Sw3F+aGgUZHvYoyFOd9492V Jt1jYckPAurGexYfOuHiSpMGrcRd9XRkFPXx+Ho7eC8xWYmBzmyQAFVvs8iPmtH/ hMkrxjCFEawvWUQ3R5cxjry12XiIqXYVd64uIrBsC4mPPuThBV7/WCdmIwc6USmW pOYf8NL/ -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:49 2026 by rpki-client