This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/e51r6d8MY0z0wgESUl_beU3OIIY.roa File: e51r6d8MY0z0wgESUl_beU3OIIY.roa (raw, json) Hash identifier: NKb+xyyt/CtCVFv1JVTrUrEnFhYCHL7jXn1hVp8rZ4E= Subject key identifier: 7B:9D:6B:E9:DF:0C:63:4C:F4:C2:01:12:52:5F:DB:79:4D:CE:20:86 Certificate issuer: /CN=6cc7585ab7a83ec80b55ab957bf37b791e765016 Certificate serial: 019B775971D1ECAD534CF8AF172616E49415 Authority key identifier: 6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/e51r6d8MY0z0wgESUl_beU3OIIY.roa Signing time: Thu 01 Jan 2026 02:18:29 +0000 ROA not before: Thu 01 Jan 2026 02:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212813 IP address blocks: 185.76.158.0/24 maxlen: 24 2a10:2680::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:71:d1:ec:ad:53:4c:f8:af:17:26:16:e4:94:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cc7585ab7a83ec80b55ab957bf37b791e765016 Validity Not Before: Jan 1 02:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b9d6be9df0c634cf4c20112525fdb794dce2086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:68:6e:97:d8:00:54:f8:7f:51:b5:b8:e7:b4: ca:2a:6b:59:13:f0:47:54:46:e1:60:2a:c6:71:3b: 71:3f:a0:1d:c4:6f:9b:97:1e:51:a9:f0:8c:54:09: ba:a9:39:d0:04:17:bf:9b:ac:ab:8d:38:c5:4d:b8: 18:99:af:db:a2:2b:bf:88:50:ea:46:ab:eb:2e:3e: d1:f0:73:25:60:2e:81:19:45:66:b6:0c:1f:88:84: 16:95:14:ad:27:76:db:86:7f:73:59:7b:83:69:31: 5f:a9:7e:76:1b:97:7b:5d:b2:dc:95:8d:7b:5a:ee: c0:d9:56:0f:00:78:ca:5a:37:ef:f7:5f:a4:81:fa: 4e:23:01:c2:6a:be:49:1f:4c:4e:c0:b0:f6:21:fa: 42:37:9b:d5:17:6f:02:8a:5b:37:7c:95:0b:b1:a5: 8b:9b:14:dc:31:cc:fd:3d:88:4d:fa:1a:fd:9e:69: 73:5d:72:c1:b5:b1:01:1e:1a:bd:78:33:d7:12:bb: 0d:0c:fd:cd:7b:81:d2:07:c7:de:cd:a0:a4:ea:85: aa:49:ba:74:f2:e1:72:0f:45:19:5f:a4:1f:06:80: 71:12:7f:5f:ff:b3:14:d9:d9:66:18:16:0b:09:e1: 10:ef:6d:38:a1:ed:a0:32:d0:6f:cf:98:bd:55:06: 20:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:9D:6B:E9:DF:0C:63:4C:F4:C2:01:12:52:5F:DB:79:4D:CE:20:86 X509v3 Authority Key Identifier: keyid:6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/e51r6d8MY0z0wgESUl_beU3OIIY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.76.158.0/24 IPv6: 2a10:2680::/29 Signature Algorithm: sha256WithRSAEncryption 4a:db:db:ab:c4:16:c9:da:01:44:3d:28:5e:c3:59:29:be:09: 17:6d:10:60:e6:29:6f:9b:58:68:63:61:6e:5a:3f:32:31:b3: 62:e9:21:7a:6f:01:85:96:2f:3a:f7:65:b6:84:0e:ae:51:c1: 57:2c:08:fb:4e:bb:19:07:1f:50:dd:73:2a:69:55:c4:cf:f3: 1f:9b:dc:54:f5:ce:cb:65:82:d8:42:d5:ce:4a:3b:f2:f4:6f: 15:73:05:67:f8:1d:7b:b0:8c:ec:ba:4c:bc:8f:ea:18:34:f9: af:8f:c0:bd:fa:78:72:b9:1b:16:64:c5:23:c8:e9:75:f2:63: 1f:d6:6d:d2:5b:ba:8f:15:d5:fd:e5:20:cc:e6:2d:1d:0d:8e: ee:1c:65:fc:59:a5:6d:f6:2b:3c:30:1f:4a:87:d7:0a:0d:b2: c3:8c:83:6c:01:62:d5:38:4a:8e:a1:39:57:1a:3d:85:31:ed: cb:f9:a7:8e:94:c8:79:6c:44:d8:90:03:e5:b4:6c:d6:3e:86: e7:9d:1e:fe:95:1c:5d:65:11:a0:6c:fb:30:ed:0c:d3:52:07: 15:f4:08:cf:39:ee:90:c7:69:0a:fc:40:af:c6:00:de:4d:bb: 7b:c8:81:84:e1:5e:fd:1e:01:e2:aa:54:60:f0:cd:55:9c:f4: bb:e5:e1:06 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WXHR7K1TTPivFyYW5JQVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYzc1ODVhYjdhODNlYzgwYjU1YWI5NTdiZjM3Yjc5MWU3 NjUwMTYwHhcNMjYwMTAxMDIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjlkNmJlOWRmMGM2MzRjZjRjMjAxMTI1MjVmZGI3OTRkY2UyMDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymhul9gAVPh/UbW457TKKmtZE/BH VEbhYCrGcTtxP6AdxG+blx5RqfCMVAm6qTnQBBe/m6yrjTjFTbgYma/boiu/iFDq RqvrLj7R8HMlYC6BGUVmtgwfiIQWlRStJ3bbhn9zWXuDaTFfqX52G5d7XbLclY17 Wu7A2VYPAHjKWjfv91+kgfpOIwHCar5JH0xOwLD2IfpCN5vVF28Cils3fJULsaWL mxTcMcz9PYhN+hr9nmlzXXLBtbEBHhq9eDPXErsNDP3Ne4HSB8fezaCk6oWqSbp0 8uFyD0UZX6QfBoBxEn9f/7MU2dlmGBYLCeEQ7204oe2gMtBvz5i9VQYgNQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHuda+nfDGNM9MIBElJf23lNziCGMB8GA1UdIwQY MBaAFGzHWFq3qD7IC1WrlXvze3kedlAWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk1kWVdyZW9Qc2dMVmF1VmVfTjdlUjUyVUJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83MDZmNDEtMDUzMS00M2RmLWIxZTkt NmY4NmQwYjdlM2UwLzEvZTUxcjZkOE1ZMHowd2dFU1VsX2JlVTNPSUlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83MDZmNDEtMDUzMS00M2RmLWIxZTktNmY4NmQwYjdlM2Uw LzEvYk1kWVdyZW9Qc2dMVmF1VmVfTjdlUjUyVUJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuUyeMA0E AgACMAcDBQMqECaAMA0GCSqGSIb3DQEBCwUAA4IBAQBK29urxBbJ2gFEPShew1kp vgkXbRBg5ilvm1hoY2FuWj8yMbNi6SF6bwGFli8692W2hA6uUcFXLAj7TrsZBx9Q 3XMqaVXEz/Mfm9xU9c7LZYLYQtXOSjvy9G8VcwVn+B17sIzsuky8j+oYNPmvj8C9 +nhyuRsWZMUjyOl18mMf1m3SW7qPFdX95SDM5i0dDY7uHGX8WaVt9is8MB9Kh9cK DbLDjINsAWLVOEqOoTlXGj2FMe3L+aeOlMh5bETYkAPltGzWPobnnR7+lRxdZRGg bPsw7QzTUgcV9AjPOe6Qx2kK/ECvxgDeTbt7yIGE4V79HgHiqlRg8M1VnPS75eEG -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:28 2026 by rpki-client