This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/y6SgGqUwF1orCwM1q_h9gF5lwzg.roa File: y6SgGqUwF1orCwM1q_h9gF5lwzg.roa (raw, json) Hash identifier: sM80+3geVpyNrctiYCuONPPHQwPp/qBYWg1fQR5qB4s= Subject key identifier: CB:A4:A0:1A:A5:30:17:5A:2B:0B:03:35:AB:F8:7D:80:5E:65:C3:38 Certificate issuer: /CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe Certificate serial: 019B7CEE690D1AC76E345111E12AED53DA86 Authority key identifier: 08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/y6SgGqUwF1orCwM1q_h9gF5lwzg.roa Signing time: Fri 02 Jan 2026 04:19:17 +0000 ROA not before: Fri 02 Jan 2026 04:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 5.154.244.0/22 maxlen: 23 5.154.246.0/23 maxlen: 23 185.48.80.0/23 maxlen: 23 185.48.82.0/23 maxlen: 23 2a01:9560::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:69:0d:1a:c7:6e:34:51:11:e1:2a:ed:53:da:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe Validity Not Before: Jan 2 04:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cba4a01aa530175a2b0b0335abf87d805e65c338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1c:f2:a7:d0:4b:4c:eb:77:3e:99:32:4f:54: 64:d7:de:9e:d2:c8:1d:5f:7d:58:e8:7d:9d:fd:3d: 89:26:d2:23:b7:9c:80:4e:9a:83:07:3c:d7:6d:76: 32:a2:4b:88:2a:a6:1e:86:db:51:ae:b1:ad:27:44: 38:2f:6f:f5:61:0a:95:31:c3:20:6e:df:26:7d:87: 6c:be:42:9d:53:29:04:2b:81:cb:7a:42:11:13:3b: df:28:54:42:e6:f6:ea:fb:85:a0:93:3c:36:95:88: bb:bd:39:47:51:37:14:45:ec:fd:86:f0:d4:43:af: 7b:32:23:85:86:f5:b1:0c:21:be:d7:b0:b1:4b:8f: 24:19:41:ee:73:cd:0b:f4:6a:ef:a6:73:25:96:91: 7a:85:4e:e2:97:86:12:96:41:cd:d3:23:df:3a:c1: bd:a7:96:ec:54:59:a1:08:2c:f1:b3:77:21:3d:92: b4:19:30:3d:82:64:0f:c9:f3:05:ab:fd:28:52:38: 5f:eb:ed:89:7e:ac:fc:ff:c1:63:a0:b5:6b:cd:91: 9c:2f:ff:6a:14:10:5b:b1:73:ce:aa:5b:f0:f7:db: 7c:83:4c:9c:8a:3b:08:ce:64:02:1d:4e:46:39:42: 90:2b:08:d1:ec:55:cd:0a:54:13:09:e8:f0:3f:5e: 27:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A4:A0:1A:A5:30:17:5A:2B:0B:03:35:AB:F8:7D:80:5E:65:C3:38 X509v3 Authority Key Identifier: keyid:08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/y6SgGqUwF1orCwM1q_h9gF5lwzg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.244.0/22 185.48.80.0/22 IPv6: 2a01:9560::/32 Signature Algorithm: sha256WithRSAEncryption aa:3b:d9:bd:9b:55:0b:4f:17:f7:ad:db:b4:b5:66:6b:08:19: 3c:34:34:ca:69:20:d8:8f:c6:e3:80:18:ce:51:a1:b9:40:29: 91:64:db:df:48:23:35:95:44:15:2a:5f:41:17:ea:9c:a7:3f: 43:7f:17:49:2f:54:25:39:d1:46:b3:5f:e1:bc:aa:66:07:ed: e1:5b:6e:68:00:36:11:f2:4c:f2:ba:2a:49:64:d9:6b:22:1c: 54:e5:96:67:8f:42:7b:4c:04:5f:70:d7:99:ec:28:12:66:ff: a7:64:6b:4a:e4:8f:04:ee:d9:ad:fb:c2:87:69:de:d8:2a:12: a0:e3:79:84:3f:c9:24:c0:af:ad:fd:85:1b:23:06:5e:2b:f8: c7:ff:9d:c1:9e:6b:c2:08:92:56:74:49:3b:c6:06:79:97:61: 47:1b:42:02:26:88:a6:57:d7:3b:3a:e5:b0:a7:f2:8c:49:1b: 45:83:0f:4d:db:43:9f:02:51:07:1b:95:ee:d4:08:22:7a:be: 96:20:d0:c0:44:77:24:e2:7b:f4:03:eb:67:7c:58:5a:a2:99: ae:6c:37:8d:25:27:6d:f6:73:38:9d:e8:67:26:41:45:e9:6c: b0:87:fe:be:ff:90:2b:cd:38:65:93:2d:9a:2d:fd:75:bf:74: f0:60:06:43 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87mkNGsduNFER4SrtU9qGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MzBiYzM0YjhmNGZjYmMyYmY1MjNiYmRiZTlhMDQ0YTI0 NDVmYmUwHhcNMjYwMTAyMDQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmE0YTAxYWE1MzAxNzVhMmIwYjAzMzVhYmY4N2Q4MDVlNjVjMzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBzyp9BLTOt3PpkyT1Rk196e0sgd X31Y6H2d/T2JJtIjt5yATpqDBzzXbXYyokuIKqYehttRrrGtJ0Q4L2/1YQqVMcMg bt8mfYdsvkKdUykEK4HLekIREzvfKFRC5vbq+4Wgkzw2lYi7vTlHUTcURez9hvDU Q697MiOFhvWxDCG+17CxS48kGUHuc80L9GrvpnMllpF6hU7il4YSlkHN0yPfOsG9 p5bsVFmhCCzxs3chPZK0GTA9gmQPyfMFq/0oUjhf6+2Jfqz8/8FjoLVrzZGcL/9q FBBbsXPOqlvw99t8g0ycijsIzmQCHU5GOUKQKwjR7FXNClQTCejwP14n5QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMukoBqlMBdaKwsDNav4fYBeZcM4MB8GA1UdIwQY MBaAFAgwvDS49Py8K/Uju9vpoESiRF++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0RDOE5MajBfTHdyOVNPNzItbWdSS0pFWDc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zZmEzNmQtOGZhZi00YmRjLWFkOWUt MDEzYzFmMDFlZGI5LzEveTZTZ0dxVXdGMW9yQ3dNMXFfaDlnRjVsd3pnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8zZmEzNmQtOGZhZi00YmRjLWFkOWUtMDEzYzFmMDFlZGI5 LzEvQ0RDOE5MajBfTHdyOVNPNzItbWdSS0pFWDc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCBZr0AwQC uTBQMA0EAgACMAcDBQAqAZVgMA0GCSqGSIb3DQEBCwUAA4IBAQCqO9m9m1ULTxf3 rdu0tWZrCBk8NDTKaSDYj8bjgBjOUaG5QCmRZNvfSCM1lUQVKl9BF+qcpz9DfxdJ L1QlOdFGs1/hvKpmB+3hW25oADYR8kzyuipJZNlrIhxU5ZZnj0J7TARfcNeZ7CgS Zv+nZGtK5I8E7tmt+8KHad7YKhKg43mEP8kkwK+t/YUbIwZeK/jH/53BnmvCCJJW dEk7xgZ5l2FHG0ICJoimV9c7OuWwp/KMSRtFgw9N20OfAlEHG5Xu1Agier6WINDA RHck4nv0A+tnfFhaopmubDeNJSdt9nM4nehnJkFF6Wywh/6+/5ArzThlky2aLf11 v3TwYAZD -----END CERTIFICATE-----Generated at Fri Jan 9 06:25:37 2026 by rpki-client