This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/9c0fb9-89d9-44b2-a730-3efa5edf3752/1/YLdG9gSP6tOA5nRVAr6Czesuu7c.roa File: YLdG9gSP6tOA5nRVAr6Czesuu7c.roa (raw, json) Hash identifier: Esw0AP/etP1/+NNzQ2J+2kPKUVRATKNpi71gEgTw88k= Subject key identifier: 60:B7:46:F6:04:8F:EA:D3:80:E6:74:55:02:BE:82:CD:EB:2E:BB:B7 Certificate issuer: /CN=6d6f8256fac82aacb682ba216a83033b51456a52 Certificate serial: 019B936E4FC0624246120F8F5805342BCA08 Authority key identifier: 6D:6F:82:56:FA:C8:2A:AC:B6:82:BA:21:6A:83:03:3B:51:45:6A:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-CVvrIKqy2grohaoMDO1FFalI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/9c0fb9-89d9-44b2-a730-3efa5edf3752/1/YLdG9gSP6tOA5nRVAr6Czesuu7c.roa Signing time: Tue 06 Jan 2026 13:10:38 +0000 ROA not before: Tue 06 Jan 2026 13:10:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210372 IP address blocks: 45.136.224.0/22 maxlen: 22 45.136.224.0/24 maxlen: 24 45.136.225.0/24 maxlen: 24 45.136.226.0/24 maxlen: 24 45.136.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/9c0fb9-89d9-44b2-a730-3efa5edf3752/1/bW-CVvrIKqy2grohaoMDO1FFalI.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/9c0fb9-89d9-44b2-a730-3efa5edf3752/1/bW-CVvrIKqy2grohaoMDO1FFalI.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-CVvrIKqy2grohaoMDO1FFalI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:93:6e:4f:c0:62:42:46:12:0f:8f:58:05:34:2b:ca:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d6f8256fac82aacb682ba216a83033b51456a52 Validity Not Before: Jan 6 13:10:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60b746f6048fead380e6745502be82cdeb2ebbb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:14:d3:a0:27:05:2f:41:e1:96:77:11:31:22: d2:c4:4f:de:68:ea:63:46:54:53:0b:79:ef:56:c0: 74:30:61:7b:c5:27:67:12:22:81:c0:03:cb:04:a4: c6:9a:50:48:e4:ea:97:87:12:21:4f:3a:e0:fe:ad: da:e6:c7:a2:43:d7:92:26:0b:33:64:6d:98:25:12: c3:ec:82:7b:be:02:6e:7f:50:0b:59:9b:37:13:3a: b8:1d:06:55:8a:af:48:ea:28:dd:16:0c:0d:64:71: 9e:03:22:01:2c:e2:d9:7b:2b:b1:5b:51:b0:55:8f: ca:f3:07:c7:fb:37:ef:93:29:34:48:45:38:8d:66: 31:3d:66:0c:80:f5:bb:a3:ab:cf:8e:00:bc:ba:db: 7b:9d:cd:1f:c6:e2:70:f9:54:b1:28:55:cd:97:fd: fd:17:c3:a9:ff:52:22:7d:9e:be:4e:f0:61:6f:d6: 9d:2a:6a:25:32:dd:0d:d4:b3:56:1d:36:c6:ef:06: bd:73:c7:6b:e5:6c:1c:12:0f:54:f8:75:f1:12:15: 22:5b:29:4b:30:d2:27:0b:41:90:52:da:3f:aa:3d: 6f:f1:17:37:fe:8b:d0:42:c0:04:2a:f4:2c:99:79: 75:29:94:bc:2a:54:95:e7:57:bf:b6:5c:f1:00:5c: 48:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B7:46:F6:04:8F:EA:D3:80:E6:74:55:02:BE:82:CD:EB:2E:BB:B7 X509v3 Authority Key Identifier: keyid:6D:6F:82:56:FA:C8:2A:AC:B6:82:BA:21:6A:83:03:3B:51:45:6A:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-CVvrIKqy2grohaoMDO1FFalI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9c0fb9-89d9-44b2-a730-3efa5edf3752/1/YLdG9gSP6tOA5nRVAr6Czesuu7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9c0fb9-89d9-44b2-a730-3efa5edf3752/1/bW-CVvrIKqy2grohaoMDO1FFalI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.224.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:bf:0d:9f:42:04:8c:88:bd:db:c6:e7:75:87:3b:29:a7:76: 9b:33:65:a5:f3:a6:8e:79:b8:a7:52:d4:66:cd:c9:85:88:e2: 8e:d3:44:0a:42:cb:5f:ee:7b:f9:99:ee:93:fd:cd:d0:51:5e: b8:0b:0b:aa:22:75:ae:d1:b0:b8:6a:65:a0:3a:65:9e:09:8c: 86:75:8d:6b:1e:09:1e:a8:8a:b7:a6:ef:66:af:9d:42:05:51: d2:cf:88:63:72:ab:cf:6e:ff:4b:d5:b7:8e:11:4b:e8:e7:ad: 18:30:15:b6:b9:4e:bb:62:4e:94:59:f1:fc:eb:d3:e4:a6:31: d5:81:36:66:70:91:95:e8:0d:f5:dc:7d:60:b3:29:78:20:84: 8d:ce:8e:1a:99:fb:a4:c8:21:66:35:b2:8d:57:63:6b:c9:c9: b3:cd:a1:2f:52:99:a7:01:40:1e:b5:98:f2:0c:01:53:d2:f3: f1:86:25:7b:3f:75:94:14:5e:f5:f6:22:54:de:4d:97:8a:47: 23:8b:9f:2a:92:85:4c:a6:dd:78:aa:a8:e2:7b:42:fc:27:6f: 3f:1b:28:63:43:07:4a:9a:9b:d7:81:f2:df:94:b8:bd:9e:15: 74:8d:78:a8:23:7c:59:11:92:e9:ea:23:f7:7f:86:fe:51:c6: 52:d6:e6:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuTbk/AYkJGEg+PWAU0K8oIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNmY4MjU2ZmFjODJhYWNiNjgyYmEyMTZhODMwMzNiNTE0 NTZhNTIwHhcNMjYwMTA2MTMxMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGI3NDZmNjA0OGZlYWQzODBlNjc0NTUwMmJlODJjZGViMmViYmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9RTToCcFL0HhlncRMSLSxE/eaOpj RlRTC3nvVsB0MGF7xSdnEiKBwAPLBKTGmlBI5OqXhxIhTzrg/q3a5seiQ9eSJgsz ZG2YJRLD7IJ7vgJuf1ALWZs3Ezq4HQZViq9I6ijdFgwNZHGeAyIBLOLZeyuxW1Gw VY/K8wfH+zfvkyk0SEU4jWYxPWYMgPW7o6vPjgC8utt7nc0fxuJw+VSxKFXNl/39 F8Op/1IifZ6+TvBhb9adKmolMt0N1LNWHTbG7wa9c8dr5WwcEg9U+HXxEhUiWylL MNInC0GQUto/qj1v8Rc3/ovQQsAEKvQsmXl1KZS8KlSV51e/tlzxAFxITQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGC3RvYEj+rTgOZ0VQK+gs3rLru3MB8GA1UdIwQY MBaAFG1vglb6yCqstoK6IWqDAztRRWpSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlctQ1Z2cklLcXkyZ3JvaGFvTURPMUZGYWxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy85YzBmYjktODlkOS00NGIyLWE3MzAt M2VmYTVlZGYzNzUyLzEvWUxkRzlnU1A2dE9BNW5SVkFyNkN6ZXN1dTdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy85YzBmYjktODlkOS00NGIyLWE3MzAtM2VmYTVlZGYzNzUy LzEvYlctQ1Z2cklLcXkyZ3JvaGFvTURPMUZGYWxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYjgMA0G CSqGSIb3DQEBCwUAA4IBAQCavw2fQgSMiL3bxud1hzspp3abM2Wl86aOebinUtRm zcmFiOKO00QKQstf7nv5me6T/c3QUV64CwuqInWu0bC4amWgOmWeCYyGdY1rHgke qIq3pu9mr51CBVHSz4hjcqvPbv9L1beOEUvo560YMBW2uU67Yk6UWfH869PkpjHV gTZmcJGV6A313H1gsyl4IISNzo4amfukyCFmNbKNV2NrycmzzaEvUpmnAUAetZjy DAFT0vPxhiV7P3WUFF719iJU3k2Xikcji58qkoVMpt14qqjie0L8J28/GyhjQwdK mpvXgfLflLi9nhV0jXioI3xZEZLp6iP3f4b+UcZS1ubd -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:38 2026 by rpki-client