This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/y5HQcVK0OCpA2qLDSgEXDDcdvrQ.roa File: y5HQcVK0OCpA2qLDSgEXDDcdvrQ.roa (raw, json) Hash identifier: N7GdQ0FkLOrci0SR8hsklzMqdumTV6SFC6K9X7skI5A= Subject key identifier: CB:91:D0:71:52:B4:38:2A:40:DA:A2:C3:4A:01:17:0C:37:1D:BE:B4 Certificate issuer: /CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405 Certificate serial: 019B7C135E7F1613596F454BD7E4BAABCA83 Authority key identifier: 65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/y5HQcVK0OCpA2qLDSgEXDDcdvrQ.roa Signing time: Fri 02 Jan 2026 00:20:02 +0000 ROA not before: Fri 02 Jan 2026 00:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28730 IP address blocks: 93.95.200.0/21 maxlen: 21 93.95.200.0/24 maxlen: 24 93.95.201.0/24 maxlen: 24 93.95.202.0/24 maxlen: 24 93.95.203.0/24 maxlen: 24 93.95.204.0/24 maxlen: 24 93.95.205.0/24 maxlen: 24 93.95.206.0/24 maxlen: 24 93.95.207.0/24 maxlen: 24 185.176.44.0/24 maxlen: 24 185.176.45.0/24 maxlen: 24 185.176.46.0/24 maxlen: 24 185.176.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:5e:7f:16:13:59:6f:45:4b:d7:e4:ba:ab:ca:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405 Validity Not Before: Jan 2 00:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb91d07152b4382a40daa2c34a01170c371dbeb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c8:ef:62:6f:9f:c2:70:d7:9f:48:50:c0:d7: f7:f3:1e:98:5d:42:06:ab:47:64:ab:f3:e7:67:e1: a3:15:6c:30:d2:ac:4e:f7:26:9f:07:d6:15:ab:82: 1e:88:5c:94:12:4d:6d:f6:5b:c7:de:c5:00:4d:8c: 1a:3b:4e:38:73:02:57:89:cc:92:90:2c:90:49:61: 32:42:4c:af:8d:cc:97:29:96:b8:10:1c:ac:0d:22: e2:da:cf:32:86:eb:7f:fb:1a:52:9c:c0:a0:c1:60: 37:18:28:24:35:e6:9b:a3:d3:5a:1e:5f:66:3c:0a: 5e:eb:53:2e:a9:71:a0:0b:88:9e:ba:b7:a1:52:90: 7a:9f:b3:c3:a3:b1:46:9c:e0:d0:26:96:d5:0d:03: 6f:5b:bd:a4:f8:42:15:46:31:df:6c:42:16:c0:af: f8:12:37:5a:9e:50:9c:4b:13:47:71:92:87:10:22: a0:ca:d0:69:45:57:29:13:d8:8f:07:cd:f3:db:c9: f2:ac:88:d5:b2:0c:f0:b8:c6:cd:10:e5:93:62:eb: e7:0a:43:0d:dc:15:57:30:79:8f:77:19:13:2d:42: 70:20:22:69:93:72:fb:73:47:df:74:0a:21:64:5a: 08:0c:01:df:2f:ae:0c:c6:97:74:c4:e6:3b:c1:cc: 32:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:91:D0:71:52:B4:38:2A:40:DA:A2:C3:4A:01:17:0C:37:1D:BE:B4 X509v3 Authority Key Identifier: keyid:65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/y5HQcVK0OCpA2qLDSgEXDDcdvrQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.95.200.0/21 185.176.44.0/22 Signature Algorithm: sha256WithRSAEncryption 81:91:ef:f1:c1:76:9c:30:95:1d:9e:35:8b:ca:49:d7:09:82: 10:6c:cc:97:c6:ae:d0:99:ae:ff:99:4a:4c:60:e3:fc:44:88: 9b:99:fc:a0:fb:04:54:c3:4b:1b:e7:14:4f:a5:54:41:50:f4: 51:85:e1:89:b6:ec:09:84:3c:01:dc:39:1a:23:54:05:1a:4d: 5e:3b:4c:34:34:42:44:7f:86:dd:c3:76:80:ee:f8:9b:3c:04: 5c:90:16:c9:2c:72:e5:20:4d:91:17:6b:7d:39:5e:61:2a:3a: 73:0a:23:6b:53:0b:a5:32:24:4a:1e:d0:c3:ad:98:69:72:46: 37:f3:47:af:ea:17:1c:fc:cb:c8:7c:33:9a:92:b2:e1:50:60: bf:6a:99:00:69:49:0c:d9:ea:fe:06:ce:fa:7e:5e:94:08:ac: 29:fb:9e:4e:60:3a:52:1b:3d:91:c2:54:4e:e4:63:e7:e6:98: b3:b9:83:92:60:48:44:1a:0c:a1:31:5a:9c:71:6b:ca:c5:04: 23:8a:2a:ad:6c:5f:74:7a:77:13:07:94:30:c5:43:d7:7f:ff: 2b:6f:98:91:7f:1f:41:43:e2:87:50:c4:aa:cc:f1:fc:e7:a0: 98:35:95:13:57:0d:4c:5a:a0:25:55:76:10:f4:08:24:06:43: a3:fc:93:53 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8E15/FhNZb0VL1+S6q8qDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1Y2I0ZjZjZDg0ODlmZGRkMTczOTcwYTBlZjQ0ZDRlMTU0 N2E0MDUwHhcNMjYwMTAyMDAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjkxZDA3MTUyYjQzODJhNDBkYWEyYzM0YTAxMTcwYzM3MWRiZWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8jvYm+fwnDXn0hQwNf38x6YXUIG q0dkq/PnZ+GjFWww0qxO9yafB9YVq4IeiFyUEk1t9lvH3sUATYwaO044cwJXicyS kCyQSWEyQkyvjcyXKZa4EBysDSLi2s8yhut/+xpSnMCgwWA3GCgkNeabo9NaHl9m PApe61MuqXGgC4ieurehUpB6n7PDo7FGnODQJpbVDQNvW72k+EIVRjHfbEIWwK/4 EjdanlCcSxNHcZKHECKgytBpRVcpE9iPB83z28nyrIjVsgzwuMbNEOWTYuvnCkMN 3BVXMHmPdxkTLUJwICJpk3L7c0ffdAohZFoIDAHfL64Mxpd0xOY7wcwyqQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMuR0HFStDgqQNqiw0oBFww3Hb60MB8GA1UdIwQY MBaAFGXLT2zYSJ/d0XOXCg70TU4VR6QFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmN0UGJOaEluOTNSYzVjS0R2Uk5UaFZIcEFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS83MzZhNGEtMzllMC00MTE5LWI0Y2It MDgyZDkyNGMyZjMzLzEveTVIUWNWSzBPQ3BBMnFMRFNnRVhERGNkdnJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS83MzZhNGEtMzllMC00MTE5LWI0Y2ItMDgyZDkyNGMyZjMz LzEvWmN0UGJOaEluOTNSYzVjS0R2Uk5UaFZIcEFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDXV/IAwQC ubAsMA0GCSqGSIb3DQEBCwUAA4IBAQCBke/xwXacMJUdnjWLyknXCYIQbMyXxq7Q ma7/mUpMYOP8RIibmfyg+wRUw0sb5xRPpVRBUPRRheGJtuwJhDwB3DkaI1QFGk1e O0w0NEJEf4bdw3aA7vibPARckBbJLHLlIE2RF2t9OV5hKjpzCiNrUwulMiRKHtDD rZhpckY380ev6hcc/MvIfDOakrLhUGC/apkAaUkM2er+Bs76fl6UCKwp+55OYDpS Gz2RwlRO5GPn5pizuYOSYEhEGgyhMVqccWvKxQQjiiqtbF90encTB5QwxUPXf/8r b5iRfx9BQ+KHUMSqzPH856CYNZUTVw1MWqAlVXYQ9AgkBkOj/JNT -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:49 2026 by rpki-client