This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/a51cXgxKSVntETY6pLsFiKPsOJo.roa File: a51cXgxKSVntETY6pLsFiKPsOJo.roa (raw, json) Hash identifier: o402E4LpPhqmAP+XyqCG1p/8riR3uOjtyT+/vmwZflU= Subject key identifier: 6B:9D:5C:5E:0C:4A:49:59:ED:11:36:3A:A4:BB:05:88:A3:EC:38:9A Certificate issuer: /CN=607548c37abebc58b928ed285433d69e95df9c3b Certificate serial: 019B7E38CCF076A408C85F14BA1CFC2A6A3A Authority key identifier: 60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/a51cXgxKSVntETY6pLsFiKPsOJo.roa Signing time: Fri 02 Jan 2026 10:20:10 +0000 ROA not before: Fri 02 Jan 2026 10:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61980 IP address blocks: 83.220.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:cc:f0:76:a4:08:c8:5f:14:ba:1c:fc:2a:6a:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=607548c37abebc58b928ed285433d69e95df9c3b Validity Not Before: Jan 2 10:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b9d5c5e0c4a4959ed11363aa4bb0588a3ec389a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:96:79:fa:1e:07:0e:2c:00:93:c3:44:f6:2d: fd:e5:56:40:c0:62:99:2d:1f:e8:05:51:c6:c7:9e: 6c:e7:7f:ee:bd:cd:5c:1d:25:ca:09:68:70:36:d5: fb:5b:2f:af:a6:59:4b:32:a0:8e:b1:31:5f:16:37: f3:9e:c5:b6:06:ca:ab:7a:5a:1b:a6:19:d9:7a:c4: 6a:5c:53:7b:3f:8f:b5:74:4a:50:78:a4:48:86:7d: 76:0f:ae:cc:96:e0:c1:f7:b4:bb:0b:1b:b2:75:03: e1:fe:54:15:28:b6:02:43:f6:76:43:97:e8:f1:30: d3:da:4f:8a:fb:a0:c5:c2:45:e9:86:8f:9f:64:03: 43:68:62:ba:a7:af:fd:b3:71:0d:6d:06:e3:d1:0d: 1d:81:59:c9:c7:38:06:e3:b8:72:e0:99:7b:ec:96: a5:09:17:f9:75:16:37:06:a3:f9:c2:c2:8f:0c:ef: 90:e1:4a:cf:82:6b:de:05:94:6a:50:4a:80:b7:bb: b8:57:1b:72:d2:49:c4:94:b6:03:44:f0:7f:62:24: 1f:11:21:4c:b9:f3:57:d9:cf:92:e6:b4:4d:bc:d9: 91:2d:e1:bb:a7:40:45:df:3e:bb:51:c0:e0:ae:c9: 78:c7:15:72:82:1d:92:43:a9:de:a1:ab:20:38:93: 1c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9D:5C:5E:0C:4A:49:59:ED:11:36:3A:A4:BB:05:88:A3:EC:38:9A X509v3 Authority Key Identifier: keyid:60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/a51cXgxKSVntETY6pLsFiKPsOJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.220.166.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:af:fe:7c:71:2c:1a:9a:ae:87:af:df:6b:2e:08:39:91:6e: 8e:40:8c:a3:a5:5c:27:b9:29:f9:3b:22:2e:70:97:a2:50:9a: 0a:32:fc:ac:63:b4:a5:6c:35:56:18:13:10:a9:e1:14:12:51: 42:cd:7f:d2:5a:a3:b8:66:3b:2a:3a:e9:53:27:a8:b4:c6:ca: 7b:92:a0:c0:00:28:cd:43:b8:a1:c2:05:89:53:3a:83:c5:e4: 55:31:e9:ba:2f:06:c8:6d:4b:e5:a1:b0:85:76:26:37:1e:cb: 4f:ea:72:3c:dd:6d:7a:19:b6:14:5d:fb:af:c2:eb:76:0e:2a: 88:4a:0c:0e:33:a5:bb:6d:c6:8d:27:08:1c:59:b7:9d:5c:42: 77:29:fa:f2:9f:d8:0e:2b:0e:22:d2:d6:9d:84:ad:35:5a:18: 1b:12:7c:59:13:55:87:c4:17:ee:33:19:0d:0b:61:f5:f6:5d: 29:41:b8:60:08:ef:bd:ed:c8:78:1b:d3:fc:f1:c1:c1:d8:9d: db:32:6d:b7:e0:ed:55:d2:7b:a9:ae:95:81:21:fd:3a:1f:07: b2:bd:2e:36:05:1e:02:c8:8d:88:67:67:54:9d:12:e7:75:ce: 79:98:a7:24:42:5b:4e:6a:71:e7:4c:6e:46:7c:38:8f:c1:06: b7:45:e7:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OMzwdqQIyF8Uuhz8Kmo6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNzU0OGMzN2FiZWJjNThiOTI4ZWQyODU0MzNkNjllOTVk ZjljM2IwHhcNMjYwMTAyMTAyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjlkNWM1ZTBjNGE0OTU5ZWQxMTM2M2FhNGJiMDU4OGEzZWMzODlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJZ5+h4HDiwAk8NE9i395VZAwGKZ LR/oBVHGx55s53/uvc1cHSXKCWhwNtX7Wy+vpllLMqCOsTFfFjfznsW2Bsqrelob phnZesRqXFN7P4+1dEpQeKRIhn12D67MluDB97S7CxuydQPh/lQVKLYCQ/Z2Q5fo 8TDT2k+K+6DFwkXpho+fZANDaGK6p6/9s3ENbQbj0Q0dgVnJxzgG47hy4Jl77Jal CRf5dRY3BqP5wsKPDO+Q4UrPgmveBZRqUEqAt7u4Vxty0knElLYDRPB/YiQfESFM ufNX2c+S5rRNvNmRLeG7p0BF3z67UcDgrsl4xxVygh2SQ6neoasgOJMctwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGudXF4MSklZ7RE2OqS7BYij7DiaMB8GA1UdIwQY MBaAFGB1SMN6vrxYuSjtKFQz1p6V35w7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUhWSXczcS12Rmk1S08wb1ZEUFducFhmbkRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81MmI2MzQtNjE0OC00ZTJlLWI4ZjMt MGM5OGM1NzBhNmUwLzEvYTUxY1hneEtTVm50RVRZNnBMc0ZpS1BzT0pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi81MmI2MzQtNjE0OC00ZTJlLWI4ZjMtMGM5OGM1NzBhNmUw LzEvWUhWSXczcS12Rmk1S08wb1ZEUFducFhmbkRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU9ymMA0G CSqGSIb3DQEBCwUAA4IBAQBsr/58cSwamq6Hr99rLgg5kW6OQIyjpVwnuSn5OyIu cJeiUJoKMvysY7SlbDVWGBMQqeEUElFCzX/SWqO4ZjsqOulTJ6i0xsp7kqDAACjN Q7ihwgWJUzqDxeRVMem6LwbIbUvlobCFdiY3HstP6nI83W16GbYUXfuvwut2DiqI SgwOM6W7bcaNJwgcWbedXEJ3Kfryn9gOKw4i0tadhK01WhgbEnxZE1WHxBfuMxkN C2H19l0pQbhgCO+97ch4G9P88cHB2J3bMm234O1V0nuprpWBIf06HweyvS42BR4C yI2IZ2dUnRLndc55mKckQltOanHnTG5GfDiPwQa3Rec+ -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:19 2026 by rpki-client