This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/mB6ctQ7JDyjcQ3pzEiNkX3oG_lc.roa File: mB6ctQ7JDyjcQ3pzEiNkX3oG_lc.roa (raw, json) Hash identifier: eNl+c0XuwCaTPy+dCHBabXrocGDi3GDbO258cnnWPK4= Subject key identifier: 98:1E:9C:B5:0E:C9:0F:28:DC:43:7A:73:12:23:64:5F:7A:06:FE:57 Certificate issuer: /CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c Certificate serial: 019B7F157AE7E0A5212F48FB573B804F438B Authority key identifier: 61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/mB6ctQ7JDyjcQ3pzEiNkX3oG_lc.roa Signing time: Fri 02 Jan 2026 14:21:12 +0000 ROA not before: Fri 02 Jan 2026 14:21:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 159.60.0.0/20 maxlen: 24 159.60.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:7a:e7:e0:a5:21:2f:48:fb:57:3b:80:4f:43:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c Validity Not Before: Jan 2 14:21:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=981e9cb50ec90f28dc437a731223645f7a06fe57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4a:62:dc:6b:5c:6f:f0:1a:66:4e:95:6c:95: 3c:d5:ed:07:fb:21:fd:61:9b:9d:74:9c:a4:c6:33: 14:81:d6:f6:74:c4:de:bf:83:e5:6c:81:c1:f8:f7: 55:e5:36:8c:5a:92:9d:5a:b2:39:2f:66:54:58:7c: f0:08:9b:bd:08:0b:47:6d:d6:83:be:d7:40:a8:86: e0:08:83:83:6c:2f:0a:7b:39:d6:91:3e:f4:64:c8: b9:d7:42:3f:3c:8d:fe:e8:4d:d5:c7:bb:74:3b:dd: db:7a:89:76:d1:82:20:a6:e5:c3:7a:f3:3d:40:12: 21:59:0a:5a:0c:bc:5b:82:f3:e5:3a:d7:40:4a:08: 86:28:39:85:6d:50:c8:c6:76:38:83:ad:7e:d1:68: 61:0a:3a:a9:61:39:42:48:ab:59:48:96:a7:ee:68: a4:a2:7e:5b:93:04:de:27:cb:57:5a:2a:e2:ba:70: 18:f2:fd:df:a4:d3:01:9a:09:8e:7b:a2:a2:32:b9: c3:a5:2a:cd:10:96:14:a8:84:3a:47:d9:3f:95:a2: 80:83:73:f7:1c:9c:ab:ab:d0:c4:8a:44:0a:47:47: 5c:1b:54:48:dc:50:ad:42:89:3d:a0:b7:47:07:af: a4:b4:0a:de:05:09:49:0b:80:37:11:e3:08:1a:97: 82:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:1E:9C:B5:0E:C9:0F:28:DC:43:7A:73:12:23:64:5F:7A:06:FE:57 X509v3 Authority Key Identifier: keyid:61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/mB6ctQ7JDyjcQ3pzEiNkX3oG_lc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.60.0.0/20 159.60.192.0/18 Signature Algorithm: sha256WithRSAEncryption 95:29:c0:af:d6:d1:da:68:3e:26:3d:27:cd:60:5a:d5:5f:19: 75:c8:80:21:43:a9:9c:f1:29:2a:28:28:3c:f6:b7:b6:62:6c: b4:12:c7:3e:60:20:60:a2:a2:33:b2:71:e3:0a:c1:f5:73:6b: be:bf:eb:77:a0:d1:1e:eb:6c:95:8f:9f:db:d1:77:25:12:60: dd:8c:d6:86:58:5d:d5:7d:7f:11:0b:13:ec:ad:ed:38:ce:09: e9:be:0f:d6:33:31:17:3b:6b:c6:c8:87:24:e2:73:b5:a8:8d: e8:53:36:3f:68:12:ba:ce:57:b7:9c:bc:41:71:06:db:ff:e6: 19:34:ae:8f:83:63:ff:56:9a:c2:32:9c:1a:5c:47:ba:ce:3c: b3:68:a7:e8:4f:7f:2a:3b:da:ed:15:c6:9c:dd:ac:0e:a3:3b: 77:97:cc:d3:f5:52:bf:ce:37:37:81:a2:91:0d:c3:29:08:be: da:e9:c5:2e:34:e1:58:e2:fc:b2:a8:85:d7:b1:ee:b9:1f:0f: 97:00:7a:1c:a5:97:09:a5:c5:4e:82:7d:88:66:98:9d:aa:32: 35:1c:aa:e7:fe:46:00:de:3d:1c:00:25:af:1f:12:12:82:5e: 7f:59:7b:32:33:27:c7:3e:aa:ca:ff:74:d4:50:d4:c9:e4:54: f3:86:74:0a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FXrn4KUhL0j7VzuAT0OLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYjNlMWNhYjhjYmY1YjNjNmUwZmJiZTE0OTFmNDhkYTYw Y2FlNmMwHhcNMjYwMTAyMTQyMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODFlOWNiNTBlYzkwZjI4ZGM0MzdhNzMxMjIzNjQ1ZjdhMDZmZTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0pi3Gtcb/AaZk6VbJU81e0H+yH9 YZuddJykxjMUgdb2dMTev4PlbIHB+PdV5TaMWpKdWrI5L2ZUWHzwCJu9CAtHbdaD vtdAqIbgCIODbC8KeznWkT70ZMi510I/PI3+6E3Vx7t0O93beol20YIgpuXDevM9 QBIhWQpaDLxbgvPlOtdASgiGKDmFbVDIxnY4g61+0WhhCjqpYTlCSKtZSJan7mik on5bkwTeJ8tXWiriunAY8v3fpNMBmgmOe6KiMrnDpSrNEJYUqIQ6R9k/laKAg3P3 HJyrq9DEikQKR0dcG1RI3FCtQok9oLdHB6+ktAreBQlJC4A3EeMIGpeCIQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJgenLUOyQ8o3EN6cxIjZF96Bv5XMB8GA1UdIwQY MBaAFGGz4cq4y/WzxuD7vhSR9I2mDK5sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWJQaHlyakw5YlBHNFB1LUZKSDBqYVlNcm13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi85ZGVmODYtYjFhYy00MGU2LTgzYmQt OTQ3Y2M1NGViZTAyLzEvbUI2Y3RRN0pEeWpjUTNwekVpTmtYM29HX2xjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi85ZGVmODYtYjFhYy00MGU2LTgzYmQtOTQ3Y2M1NGViZTAy LzEvWWJQaHlyakw5YlBHNFB1LUZKSDBqYVlNcm13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEnzwAAwQG nzzAMA0GCSqGSIb3DQEBCwUAA4IBAQCVKcCv1tHaaD4mPSfNYFrVXxl1yIAhQ6mc 8SkqKCg89re2Ymy0Esc+YCBgoqIzsnHjCsH1c2u+v+t3oNEe62yVj5/b0XclEmDd jNaGWF3VfX8RCxPsre04zgnpvg/WMzEXO2vGyIck4nO1qI3oUzY/aBK6zle3nLxB cQbb/+YZNK6Pg2P/VprCMpwaXEe6zjyzaKfoT38qO9rtFcac3awOozt3l8zT9VK/ zjc3gaKRDcMpCL7a6cUuNOFY4vyyqIXXse65Hw+XAHocpZcJpcVOgn2IZpidqjI1 HKrn/kYA3j0cACWvHxISgl5/WXsyMyfHPqrK/3TUUNTJ5FTzhnQK -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:10 2026 by rpki-client