This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/y6FPGhs0Ss6vJphqQXiX0e2wQdg.roa File: y6FPGhs0Ss6vJphqQXiX0e2wQdg.roa (raw, json) Hash identifier: nRUF1yLs0gzZVnAltxQkhe0KlScioNi5NL99DbX38f8= Subject key identifier: CB:A1:4F:1A:1B:34:4A:CE:AF:26:98:6A:41:78:97:D1:ED:B0:41:D8 Certificate issuer: /CN=90b8a15466c3ff1e915d780a10b0baa9ad694860 Certificate serial: 019B76EAC946FAF0E17E9225B5D603D62F6C Authority key identifier: 90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/y6FPGhs0Ss6vJphqQXiX0e2wQdg.roa Signing time: Thu 01 Jan 2026 00:17:36 +0000 ROA not before: Thu 01 Jan 2026 00:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59611 IP address blocks: 91.245.80.0/21 maxlen: 21 195.20.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c9:46:fa:f0:e1:7e:92:25:b5:d6:03:d6:2f:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90b8a15466c3ff1e915d780a10b0baa9ad694860 Validity Not Before: Jan 1 00:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cba14f1a1b344aceaf26986a417897d1edb041d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:49:30:1e:a5:bc:58:16:01:ae:5f:2e:d1:50: fb:7f:12:63:cd:64:a8:70:f6:c2:25:fd:47:40:83: 9b:5f:a9:d6:69:4c:a5:0c:43:b2:d5:c2:19:33:cb: a2:77:3c:3e:0c:cb:32:d0:b7:cc:4c:2c:e9:f4:54: fb:51:b9:33:02:f3:df:41:6e:0f:47:0e:c6:12:96: 60:6a:8d:1b:96:bf:c4:97:45:56:fc:c6:6f:94:be: 19:47:01:f0:2e:a9:86:5f:b1:36:ab:fb:4b:04:b1: c3:cd:46:3e:e9:8c:01:86:15:0d:da:95:93:18:5e: e5:6b:ff:c6:5b:55:5c:fd:27:6f:6a:e4:0a:6d:62: 23:90:2f:76:b1:3d:b2:b8:e4:5b:d1:b7:4e:f1:95: b7:4e:d2:df:5d:6d:17:aa:d8:91:9e:46:bf:9a:0a: ea:72:0c:68:a1:2c:64:26:39:3b:73:58:0d:22:ba: 28:ff:85:91:96:9d:b0:5d:20:e5:f8:63:87:2c:72: 01:5d:cd:0b:b3:a8:62:ff:e5:ca:08:89:02:3d:b2: f3:67:a1:95:de:7a:28:c4:9d:ee:d5:77:94:06:a8: 22:93:c2:a5:ca:65:8f:2f:53:63:bc:da:e5:e7:37: 58:62:f5:e3:b3:f5:e1:42:a7:65:1e:33:00:1a:51: f6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A1:4F:1A:1B:34:4A:CE:AF:26:98:6A:41:78:97:D1:ED:B0:41:D8 X509v3 Authority Key Identifier: keyid:90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/y6FPGhs0Ss6vJphqQXiX0e2wQdg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.245.80.0/21 195.20.200.0/23 Signature Algorithm: sha256WithRSAEncryption 61:a9:bc:f6:81:a6:cf:10:a2:66:bf:3c:29:2f:9d:23:0c:5d: 4c:3a:47:53:fa:d1:52:34:f3:13:79:10:e0:cc:92:c2:fd:35: 97:32:ec:09:5d:46:43:a7:64:ca:61:2b:90:e5:a5:dc:78:15: 23:80:27:49:c9:48:d0:41:f2:10:eb:c7:c8:66:16:3f:4f:37: b6:79:c2:f7:fd:42:12:77:6e:ed:4c:aa:0e:f6:ce:2e:68:21: c6:85:b6:60:43:da:03:ab:cf:5d:03:42:3a:0d:6b:f1:71:08: 42:ea:a4:cd:be:f1:03:91:07:b7:0c:d4:41:de:57:6f:12:5f: 22:03:ab:b0:6d:0a:22:00:98:11:8e:3f:c9:59:57:f8:a6:58: 03:ab:6e:5e:60:4c:89:5c:51:2e:b2:64:a6:25:b2:9c:10:6a: 3c:73:32:d6:4f:3c:e3:83:9b:1c:2c:2c:5a:ae:2b:be:b0:39: 8e:63:2e:72:c6:f1:a9:75:d4:26:8c:f7:bc:1d:d3:1b:8c:c2: 0a:db:d9:75:a1:69:82:db:6e:02:be:bf:4b:c1:c8:1b:3f:72: 60:62:cd:44:09:41:b1:24:5a:a1:91:69:0a:39:cb:91:f7:ed: 01:01:3f:d5:f3:ff:19:7e:6d:c4:96:aa:74:d5:35:e7:e0:98: 5a:02:8d:3b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26slG+vDhfpIltdYD1i9sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYjhhMTU0NjZjM2ZmMWU5MTVkNzgwYTEwYjBiYWE5YWQ2 OTQ4NjAwHhcNMjYwMTAxMDAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmExNGYxYTFiMzQ0YWNlYWYyNjk4NmE0MTc4OTdkMWVkYjA0MWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kkwHqW8WBYBrl8u0VD7fxJjzWSo cPbCJf1HQIObX6nWaUylDEOy1cIZM8uidzw+DMsy0LfMTCzp9FT7UbkzAvPfQW4P Rw7GEpZgao0blr/El0VW/MZvlL4ZRwHwLqmGX7E2q/tLBLHDzUY+6YwBhhUN2pWT GF7la//GW1Vc/SdvauQKbWIjkC92sT2yuORb0bdO8ZW3TtLfXW0XqtiRnka/mgrq cgxooSxkJjk7c1gNIroo/4WRlp2wXSDl+GOHLHIBXc0Ls6hi/+XKCIkCPbLzZ6GV 3nooxJ3u1XeUBqgik8KlymWPL1NjvNrl5zdYYvXjs/XhQqdlHjMAGlH2PQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMuhTxobNErOryaYakF4l9HtsEHYMB8GA1UdIwQY MBaAFJC4oVRmw/8ekV14ChCwuqmtaUhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0xpaFZHYkRfeDZSWFhnS0VMQzZxYTFwU0dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMmRmNDQtMzhiMi00ZDEyLTgzNDct NzhlOTk3ODY5OTUyLzEveTZGUEdoczBTczZ2SnBocVFYaVgwZTJ3UWRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9hMmRmNDQtMzhiMi00ZDEyLTgzNDctNzhlOTk3ODY5OTUy LzEva0xpaFZHYkRfeDZSWFhnS0VMQzZxYTFwU0dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDW/VQAwQB wxTIMA0GCSqGSIb3DQEBCwUAA4IBAQBhqbz2gabPEKJmvzwpL50jDF1MOkdT+tFS NPMTeRDgzJLC/TWXMuwJXUZDp2TKYSuQ5aXceBUjgCdJyUjQQfIQ68fIZhY/Tze2 ecL3/UISd27tTKoO9s4uaCHGhbZgQ9oDq89dA0I6DWvxcQhC6qTNvvEDkQe3DNRB 3ldvEl8iA6uwbQoiAJgRjj/JWVf4plgDq25eYEyJXFEusmSmJbKcEGo8czLWTzzj g5scLCxariu+sDmOYy5yxvGpddQmjPe8HdMbjMIK29l1oWmC224Cvr9LwcgbP3Jg Ys1ECUGxJFqhkWkKOcuR9+0BAT/V8/8Zfm3Elqp01TXn4JhaAo07 -----END CERTIFICATE-----Generated at Tue Jan 27 09:55:32 2026 by rpki-client