This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/y4_u6MP25DDbYftrjo0-BN4CqP0.roa File: y4_u6MP25DDbYftrjo0-BN4CqP0.roa (raw, json) Hash identifier: P3A69WpiF0MyDiVo1cBJGQBqn5Zv2zHMeyZO0MmbAb4= Subject key identifier: CB:8F:EE:E8:C3:F6:E4:30:DB:61:FB:6B:8E:8D:3E:04:DE:02:A8:FD Certificate issuer: /CN=e6a54852077a007838303c1f61c84387cccdd684 Certificate serial: 019B7D5BE7CEBB9CC30DC66F324D66105F15 Authority key identifier: E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/y4_u6MP25DDbYftrjo0-BN4CqP0.roa Signing time: Fri 02 Jan 2026 06:18:53 +0000 ROA not before: Fri 02 Jan 2026 06:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199378 IP address blocks: 185.151.116.0/23 maxlen: 23 185.151.116.0/24 maxlen: 24 185.151.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:e7:ce:bb:9c:c3:0d:c6:6f:32:4d:66:10:5f:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6a54852077a007838303c1f61c84387cccdd684 Validity Not Before: Jan 2 06:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb8feee8c3f6e430db61fb6b8e8d3e04de02a8fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ca:58:1d:72:8a:0c:42:98:98:cf:20:07:aa: 04:1e:8b:a2:5d:11:7d:52:0e:b7:df:6d:c4:01:2f: d7:41:33:d8:9b:ac:55:92:b9:05:ad:80:32:92:94: 29:3e:ef:b1:3c:63:80:51:7d:ef:28:f0:1f:c7:b6: 2c:ef:2d:6c:67:64:7f:40:a9:7d:fe:02:04:c8:69: d7:5f:dd:35:bc:c3:53:1f:ce:25:ad:46:29:22:36: 76:29:75:f3:12:d2:15:41:8f:2d:b0:71:01:9b:05: 1b:38:60:af:65:bf:38:68:15:c2:03:12:aa:23:af: b8:ec:ef:27:95:b1:1d:f6:9c:e9:b8:18:0b:be:11: 52:cf:a2:53:b7:5e:8c:45:28:7d:61:66:c5:8d:83: 9b:ad:78:6b:9c:c4:eb:99:33:cc:0d:4b:dc:b2:2e: b5:29:c6:a3:15:de:18:0b:ce:14:fb:df:00:ba:62: d5:8e:18:df:78:5c:b3:87:b9:0d:74:51:fa:5d:41: 44:ea:d2:cd:8e:33:8f:5b:1d:98:44:c3:ea:26:4f: 8a:ad:79:e8:49:fa:dc:60:90:f5:cc:c9:6a:23:00: 07:97:00:d9:17:6c:9d:ed:d9:4c:97:75:f1:73:dc: e5:d9:2a:c4:e3:7c:75:ee:bc:fc:0d:04:57:bc:8f: 7c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8F:EE:E8:C3:F6:E4:30:DB:61:FB:6B:8E:8D:3E:04:DE:02:A8:FD X509v3 Authority Key Identifier: keyid:E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/y4_u6MP25DDbYftrjo0-BN4CqP0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.151.116.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:14:67:ca:b9:73:9b:cc:17:94:4e:90:e0:0b:d8:aa:f5:1e: c7:30:12:51:50:bd:49:bf:07:4b:c6:78:93:ca:e6:ca:f6:19: 5a:ab:77:08:44:bc:1f:83:5a:fd:8d:50:e2:db:d7:d0:95:e9: ea:77:f7:4e:c9:a7:59:21:a5:8b:82:bb:0c:54:4f:10:b1:3d: aa:68:ba:9c:5b:3f:e7:55:26:9b:69:ff:e7:e1:98:87:08:cd: 5e:87:c1:a0:9c:f0:8b:d9:83:9c:49:14:78:b5:c5:e5:67:28: 43:28:a5:e6:b8:e9:2a:79:ff:ff:72:a0:0b:0d:33:68:66:57: 97:49:69:00:65:4e:ef:45:9e:84:62:c6:8d:4e:62:bc:fc:4b: 80:80:2c:ce:66:4f:2a:9d:85:aa:68:42:cb:a7:b2:9d:a0:a7: d3:11:c0:33:9e:5b:d9:92:13:9b:88:10:15:bd:58:98:b8:47: 8d:95:51:2d:93:aa:38:63:9d:a4:c6:a1:25:ed:d5:06:f6:5c: 0c:da:b8:78:4f:58:a9:f7:fa:78:d8:49:27:1c:dd:84:f2:ec: 9a:ae:b4:32:d7:69:ac:a5:f9:f1:62:94:d0:fe:1c:a4:db:59: a0:bc:e7:57:e0:96:30:94:e3:be:10:a5:83:a8:70:1f:15:9a: 8c:8a:6c:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W+fOu5zDDcZvMk1mEF8VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YTU0ODUyMDc3YTAwNzgzODMwM2MxZjYxYzg0Mzg3Y2Nj ZGQ2ODQwHhcNMjYwMTAyMDYxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjhmZWVlOGMzZjZlNDMwZGI2MWZiNmI4ZThkM2UwNGRlMDJhOGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8pYHXKKDEKYmM8gB6oEHouiXRF9 Ug63323EAS/XQTPYm6xVkrkFrYAykpQpPu+xPGOAUX3vKPAfx7Ys7y1sZ2R/QKl9 /gIEyGnXX901vMNTH84lrUYpIjZ2KXXzEtIVQY8tsHEBmwUbOGCvZb84aBXCAxKq I6+47O8nlbEd9pzpuBgLvhFSz6JTt16MRSh9YWbFjYObrXhrnMTrmTPMDUvcsi61 KcajFd4YC84U+98AumLVjhjfeFyzh7kNdFH6XUFE6tLNjjOPWx2YRMPqJk+KrXno SfrcYJD1zMlqIwAHlwDZF2yd7dlMl3Xxc9zl2SrE43x17rz8DQRXvI98MQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMuP7ujD9uQw22H7a46NPgTeAqj9MB8GA1UdIwQY MBaAFOalSFIHegB4ODA8H2HIQ4fMzdaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXFWSVVnZDZBSGc0TUR3ZlljaERoOHpOMW9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mYzgwM2YtOTY3NS00MzU1LTgwZjYt Nzc3MzAxNTljOGQ0LzEveTRfdTZNUDI1RERiWWZ0cmpvMC1CTjRDcVAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mYzgwM2YtOTY3NS00MzU1LTgwZjYtNzc3MzAxNTljOGQ0 LzEvNXFWSVVnZDZBSGc0TUR3ZlljaERoOHpOMW9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuZd0MA0G CSqGSIb3DQEBCwUAA4IBAQBqFGfKuXObzBeUTpDgC9iq9R7HMBJRUL1JvwdLxniT yubK9hlaq3cIRLwfg1r9jVDi29fQlenqd/dOyadZIaWLgrsMVE8QsT2qaLqcWz/n VSabaf/n4ZiHCM1eh8GgnPCL2YOcSRR4tcXlZyhDKKXmuOkqef//cqALDTNoZleX SWkAZU7vRZ6EYsaNTmK8/EuAgCzOZk8qnYWqaELLp7KdoKfTEcAznlvZkhObiBAV vViYuEeNlVEtk6o4Y52kxqEl7dUG9lwM2rh4T1ip9/p42EknHN2E8uyarrQy12ms pfnxYpTQ/hyk21mgvOdX4JYwlOO+EKWDqHAfFZqMimx6 -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:35 2026 by rpki-client