This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/6xzwjLfc074wzpSsasUFpTvwQ78.roa File: 6xzwjLfc074wzpSsasUFpTvwQ78.roa (raw, json) Hash identifier: fXZfzg+UYAPpupI96tb5/VxIz5QW19/qQNhNNMcTUWI= Subject key identifier: EB:1C:F0:8C:B7:DC:D3:BE:30:CE:94:AC:6A:C5:05:A5:3B:F0:43:BF Certificate issuer: /CN=cb2cc7ce42e79c351ac7d28f645de7f5938acc9c Certificate serial: 019B7F15653C7CBFC22FF2C35C4537F8B0B3 Authority key identifier: CB:2C:C7:CE:42:E7:9C:35:1A:C7:D2:8F:64:5D:E7:F5:93:8A:CC:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/6xzwjLfc074wzpSsasUFpTvwQ78.roa Signing time: Fri 02 Jan 2026 14:21:07 +0000 ROA not before: Fri 02 Jan 2026 14:21:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197064 IP address blocks: 151.248.56.0/21 maxlen: 21 178.23.104.0/21 maxlen: 21 185.24.196.0/22 maxlen: 22 2a02:2408::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:65:3c:7c:bf:c2:2f:f2:c3:5c:45:37:f8:b0:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb2cc7ce42e79c351ac7d28f645de7f5938acc9c Validity Not Before: Jan 2 14:21:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb1cf08cb7dcd3be30ce94ac6ac505a53bf043bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:24:c7:6f:96:fe:15:81:33:ca:76:71:62:e5: 65:6f:e1:b8:03:1a:6e:96:c3:7c:5a:11:22:53:10: 81:1f:f4:a1:f3:cc:2d:f7:53:9f:0c:d9:1d:b7:e5: 4e:b6:11:cb:3b:ca:46:7d:e5:8b:1e:36:fd:e7:c4: 72:89:85:b4:e1:fc:50:0a:f8:29:54:f6:14:15:00: 0e:09:9d:27:8b:72:7a:b8:7e:65:f5:61:8c:c7:0e: 51:90:ee:60:ea:aa:4f:c6:2f:0d:29:11:cc:4f:a7: 06:05:df:29:a7:33:3d:06:8d:05:9d:ab:2f:3c:e7: 2c:90:39:f5:9b:82:76:df:f4:62:e0:66:c6:6a:6e: 47:7e:04:82:c9:05:0c:6c:7a:8a:0a:38:62:51:ee: 08:82:da:00:54:55:11:ec:38:ef:8a:fa:ca:e1:a2: aa:b7:42:0a:02:19:16:4e:a5:e7:af:00:cd:4d:a4: cb:c7:68:92:45:c6:7e:05:60:c3:19:55:2b:92:9e: 2c:db:6d:08:d3:76:1f:64:97:2e:77:15:fa:46:b7: 48:84:29:47:19:bc:64:a5:a9:dd:4b:11:a6:48:59: 60:86:79:08:d5:f5:cf:30:24:fb:18:30:e6:e0:bf: fc:47:1d:c3:8d:64:82:32:51:a7:db:ec:ed:ad:1d: 32:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1C:F0:8C:B7:DC:D3:BE:30:CE:94:AC:6A:C5:05:A5:3B:F0:43:BF X509v3 Authority Key Identifier: keyid:CB:2C:C7:CE:42:E7:9C:35:1A:C7:D2:8F:64:5D:E7:F5:93:8A:CC:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/6xzwjLfc074wzpSsasUFpTvwQ78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.248.56.0/21 178.23.104.0/21 185.24.196.0/22 IPv6: 2a02:2408::/32 Signature Algorithm: sha256WithRSAEncryption 9a:fc:95:e2:d7:d8:bf:02:30:b8:88:56:7a:ae:7a:63:2b:22: 14:2f:8b:d7:3d:de:23:03:36:7d:fc:71:f6:03:1d:66:f1:85: c1:0f:71:17:22:d6:53:e0:fd:ef:cc:37:a1:64:1c:6c:9e:b5: b8:dc:1b:c5:4a:da:6c:25:68:26:e8:bd:1b:99:a0:5f:8c:71: c3:91:4e:b3:e4:65:3c:8f:21:ce:09:28:3a:d0:8c:14:cf:45: c5:97:93:d8:25:1c:fc:29:a0:e8:8c:33:97:86:56:37:41:71: 0e:a2:ae:14:aa:d4:24:94:35:4e:9b:3a:2f:cb:1e:19:39:2e: 1d:f0:66:38:04:b4:c8:f2:e3:83:9b:13:b1:db:3f:e0:a7:c4: 40:7b:33:bf:e0:81:e6:62:34:77:96:36:9b:3a:54:4e:a4:3c: c4:a1:53:ba:47:09:fd:16:f4:aa:e5:b3:f7:82:67:81:99:62: 08:1d:67:ee:7e:57:92:f3:e5:fe:2e:84:9c:fa:92:c8:40:0d: bf:a2:90:4c:93:4b:cf:7f:13:a2:f1:e1:85:f0:8c:7a:55:3e: c8:95:77:87:e4:09:36:c8:46:cc:3a:85:c0:c7:72:44:8f:00: 42:e3:30:4e:07:8a:3b:68:38:4f:3b:e8:95:0e:f2:ed:b5:af: a6:14:a2:8b -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/FWU8fL/CL/LDXEU3+LCzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMmNjN2NlNDJlNzljMzUxYWM3ZDI4ZjY0NWRlN2Y1OTM4 YWNjOWMwHhcNMjYwMTAyMTQyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjFjZjA4Y2I3ZGNkM2JlMzBjZTk0YWM2YWM1MDVhNTNiZjA0M2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyTHb5b+FYEzynZxYuVlb+G4Axpu lsN8WhEiUxCBH/Sh88wt91OfDNkdt+VOthHLO8pGfeWLHjb958RyiYW04fxQCvgp VPYUFQAOCZ0ni3J6uH5l9WGMxw5RkO5g6qpPxi8NKRHMT6cGBd8ppzM9Bo0Fnasv POcskDn1m4J23/Ri4GbGam5HfgSCyQUMbHqKCjhiUe4IgtoAVFUR7DjvivrK4aKq t0IKAhkWTqXnrwDNTaTLx2iSRcZ+BWDDGVUrkp4s220I03YfZJcudxX6RrdIhClH GbxkpandSxGmSFlghnkI1fXPMCT7GDDm4L/8Rx3DjWSCMlGn2+ztrR0y9wIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFOsc8Iy33NO+MM6UrGrFBaU78EO/MB8GA1UdIwQY MBaAFMssx85C55w1GsfSj2Rd5/WTisycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXl6SHprTG5uRFVheDlLUFpGM245Wk9Lekp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC85MGM0MDMtZTZlOS00MWUwLWIxNTct NzgxZDhmYjFkMmZiLzEvNnh6d2pMZmMwNzR3enBTc2FzVUZwVHZ3UTc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC85MGM0MDMtZTZlOS00MWUwLWIxNTctNzgxZDhmYjFkMmZi LzEveXl6SHprTG5uRFVheDlLUFpGM245Wk9Lekp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDl/g4AwQD shdoAwQCuRjEMA0EAgACMAcDBQAqAiQIMA0GCSqGSIb3DQEBCwUAA4IBAQCa/JXi 19i/AjC4iFZ6rnpjKyIUL4vXPd4jAzZ9/HH2Ax1m8YXBD3EXItZT4P3vzDehZBxs nrW43BvFStpsJWgm6L0bmaBfjHHDkU6z5GU8jyHOCSg60IwUz0XFl5PYJRz8KaDo jDOXhlY3QXEOoq4UqtQklDVOmzovyx4ZOS4d8GY4BLTI8uODmxOx2z/gp8RAezO/ 4IHmYjR3ljabOlROpDzEoVO6Rwn9FvSq5bP3gmeBmWIIHWfufleS8+X+LoSc+pLI QA2/opBMk0vPfxOi8eGF8Ix6VT7IlXeH5Ak2yEbMOoXAx3JEjwBC4zBOB4o7aDhP O+iVDvLtta+mFKKL -----END CERTIFICATE-----Generated at Tue Feb 10 06:07:38 2026 by rpki-client