This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/6-LYShGdtFu2Nyi-6m5NptYJBCw.roa File: 6-LYShGdtFu2Nyi-6m5NptYJBCw.roa (raw, json) Hash identifier: pCChEGRh0lt/HCBsI0AnydKM37+rgJWloeeUpKn5NEc= Subject key identifier: EB:E2:D8:4A:11:9D:B4:5B:B6:37:28:BE:EA:6E:4D:A6:D6:09:04:2C Certificate issuer: /CN=c0142e5d5cfaa452166bc7b55a65558f524d6751 Certificate serial: 019B7F83596B5185002A3002F6C83FFD36E8 Authority key identifier: C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/6-LYShGdtFu2Nyi-6m5NptYJBCw.roa Signing time: Fri 02 Jan 2026 16:21:13 +0000 ROA not before: Fri 02 Jan 2026 16:21:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198454 IP address blocks: 5.154.187.0/24 maxlen: 24 31.211.184.0/21 maxlen: 24 94.24.38.0/23 maxlen: 24 128.0.52.0/24 maxlen: 24 185.33.132.0/22 maxlen: 24 188.208.100.0/24 maxlen: 24 2a00:fdc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:59:6b:51:85:00:2a:30:02:f6:c8:3f:fd:36:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0142e5d5cfaa452166bc7b55a65558f524d6751 Validity Not Before: Jan 2 16:21:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ebe2d84a119db45bb63728beea6e4da6d609042c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:42:77:82:c9:e8:51:40:36:ed:24:f5:ed:b3: b0:39:5f:50:09:1d:46:31:a1:0b:43:6c:64:d8:0d: bd:24:62:d8:d3:f9:b9:08:95:d5:a4:fc:f6:33:bf: 25:e9:cc:85:d6:63:65:51:8f:46:80:61:b9:40:9f: d3:73:e9:2a:1d:dc:c6:bb:33:e7:70:e0:8b:72:4f: 4b:37:59:97:df:ea:69:a2:9c:ce:ca:98:82:57:3a: 36:18:ff:c3:dc:a4:24:2c:56:fd:5e:9d:72:84:e1: 42:4a:4a:b3:64:df:52:f6:41:cd:86:cc:db:67:fd: 05:fe:6c:26:cf:19:79:1b:de:a7:28:6d:88:2d:45: 53:b1:45:0d:09:7f:2b:a7:84:ae:e8:41:b4:df:6d: 2d:28:8c:d0:8b:92:a8:e4:f3:68:09:b9:4c:3e:ac: 11:3c:8b:cc:7e:66:3f:1b:b3:0f:6a:19:dd:58:32: 5d:e4:1f:30:b6:3a:1c:0b:82:7b:90:70:11:68:2d: f8:a4:23:1d:9e:b9:b0:55:9b:e4:2b:1e:c0:d3:36: 3b:73:95:8c:05:53:b9:f0:6b:cc:50:5c:60:29:ab: a8:ad:4a:09:40:f7:ff:5f:fb:16:3b:16:9a:d7:e0: 51:95:31:6c:25:e1:6e:5b:e6:e7:ee:99:5b:d0:e7: 43:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E2:D8:4A:11:9D:B4:5B:B6:37:28:BE:EA:6E:4D:A6:D6:09:04:2C X509v3 Authority Key Identifier: keyid:C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/6-LYShGdtFu2Nyi-6m5NptYJBCw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.187.0/24 31.211.184.0/21 94.24.38.0/23 128.0.52.0/24 185.33.132.0/22 188.208.100.0/24 IPv6: 2a00:fdc0::/32 Signature Algorithm: sha256WithRSAEncryption 43:0e:c0:77:3c:ac:bf:b8:1f:74:51:c4:37:ac:19:51:04:3d: 6e:39:41:09:a9:d2:db:20:83:63:59:33:08:52:55:6f:af:f1: 11:19:07:70:cb:11:7b:49:e8:8a:88:b3:13:4f:19:e4:da:e5: 75:24:7c:73:ac:67:96:0a:ec:63:65:83:4a:97:37:07:9d:75: fa:30:91:1b:3e:ff:9d:6e:db:48:bb:77:e1:69:9c:79:8d:06: d6:c3:ea:59:cb:78:53:93:74:05:30:50:ce:9c:17:a8:9f:5a: 15:2c:91:f8:1f:5e:b0:a7:b1:38:96:f2:33:fd:bb:03:c4:0b: b6:0f:7e:23:d2:da:a9:e9:d9:d3:3d:c9:0b:02:f1:3a:a2:42: cf:7d:9c:be:5e:b8:62:81:74:43:06:cb:e3:75:5e:26:64:6f: 3c:f3:1e:98:e1:0d:8a:e4:2a:0c:d5:57:c3:43:f8:99:22:fb: 98:03:e4:31:50:14:52:0f:5c:ba:fd:00:49:f5:b8:75:a1:ec: 1d:8c:f3:61:7f:44:f8:7f:6a:50:00:0d:99:5b:49:95:29:a9: 44:06:0c:f2:59:c3:fc:66:04:93:89:bb:1e:37:eb:ef:dd:e6: 32:89:3e:ba:d4:7c:83:ce:f9:2c:14:1d:5b:a7:57:5a:bd:ee: 26:8e:b8:7f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt/g1lrUYUAKjAC9sg//TboMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMTQyZTVkNWNmYWE0NTIxNjZiYzdiNTVhNjU1NThmNTI0 ZDY3NTEwHhcNMjYwMTAyMTYyMTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmUyZDg0YTExOWRiNDViYjYzNzI4YmVlYTZlNGRhNmQ2MDkwNDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEJ3gsnoUUA27ST17bOwOV9QCR1G MaELQ2xk2A29JGLY0/m5CJXVpPz2M78l6cyF1mNlUY9GgGG5QJ/Tc+kqHdzGuzPn cOCLck9LN1mX3+ppopzOypiCVzo2GP/D3KQkLFb9Xp1yhOFCSkqzZN9S9kHNhszb Z/0F/mwmzxl5G96nKG2ILUVTsUUNCX8rp4Su6EG0320tKIzQi5Ko5PNoCblMPqwR PIvMfmY/G7MPahndWDJd5B8wtjocC4J7kHARaC34pCMdnrmwVZvkKx7A0zY7c5WM BVO58GvMUFxgKauorUoJQPf/X/sWOxaa1+BRlTFsJeFuW+bn7plb0OdDPwIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFOvi2EoRnbRbtjcovupuTabWCQQsMB8GA1UdIwQY MBaAFMAULl1c+qRSFmvHtVplVY9STWdRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0JRdVhWejZwRklXYThlMVdtVlZqMUpOWjFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iN2YxZGEtNDY3YS00MzYyLThiMmUt MTk3MGRlODRhMWYwLzEvNi1MWVNoR2R0RnUyTnlpLTZtNU5wdFlKQkN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iN2YxZGEtNDY3YS00MzYyLThiMmUtMTk3MGRlODRhMWYw LzEvd0JRdVhWejZwRklXYThlMVdtVlZqMUpOWjFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQABZq7AwQD H9O4AwQBXhgmAwQAgAA0AwQCuSGEAwQAvNBkMA0EAgACMAcDBQAqAP3AMA0GCSqG SIb3DQEBCwUAA4IBAQBDDsB3PKy/uB90UcQ3rBlRBD1uOUEJqdLbIINjWTMIUlVv r/ERGQdwyxF7SeiKiLMTTxnk2uV1JHxzrGeWCuxjZYNKlzcHnXX6MJEbPv+dbttI u3fhaZx5jQbWw+pZy3hTk3QFMFDOnBeon1oVLJH4H16wp7E4lvIz/bsDxAu2D34j 0tqp6dnTPckLAvE6okLPfZy+XrhigXRDBsvjdV4mZG888x6Y4Q2K5CoM1VfDQ/iZ IvuYA+QxUBRSD1y6/QBJ9bh1oewdjPNhf0T4f2pQAA2ZW0mVKalEBgzyWcP8ZgST ibseN+vv3eYyiT661HyDzvksFB1bp1dave4mjrh/ -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:26 2026 by rpki-client