This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/caBIae9CEHVeobDlhrsIwWgLPPE.roa File: caBIae9CEHVeobDlhrsIwWgLPPE.roa (raw, json) Hash identifier: ag5394iSdE8oZzWf2j6ilocmezqzkT0RpT4UFS5WgGg= Subject key identifier: 71:A0:48:69:EF:42:10:75:5E:A1:B0:E5:86:BB:08:C1:68:0B:3C:F1 Certificate issuer: /CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef Certificate serial: 019B79111513E642D72B6B44D469EDFE77EE Authority key identifier: 60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/caBIae9CEHVeobDlhrsIwWgLPPE.roa Signing time: Thu 01 Jan 2026 10:18:41 +0000 ROA not before: Thu 01 Jan 2026 10:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202767 IP address blocks: 185.135.116.0/22 maxlen: 22 185.155.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 04:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:15:13:e6:42:d7:2b:6b:44:d4:69:ed:fe:77:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef Validity Not Before: Jan 1 10:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71a04869ef4210755ea1b0e586bb08c1680b3cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:79:09:db:16:cc:4b:82:0c:3f:52:0b:e8:e0: c5:c4:69:25:8a:11:64:fc:ab:e8:3a:e2:71:ae:14: 6c:ce:cf:b2:8e:f6:0d:6a:a2:2f:87:68:d6:6b:16: 68:d5:02:9a:86:9e:22:3e:6b:d3:cf:1f:cb:e1:bc: 7e:89:9a:04:ef:c2:6d:c3:ff:ec:af:fc:ed:22:75: a0:aa:2c:80:53:e4:7c:a4:27:7d:2c:d6:12:f4:f1: 4f:81:7a:1e:59:13:b6:8a:4b:fe:82:d9:28:ae:a8: c7:d0:61:3b:f2:e1:31:7c:a5:02:8f:cc:49:4f:4b: ee:c0:da:c1:d4:52:6b:ec:27:1c:30:76:ad:7e:c0: d1:0c:99:d6:2f:77:20:6e:4f:f4:b3:8c:a3:78:64: e2:61:c3:ba:7f:45:df:a1:71:f6:44:46:3a:58:79: 6f:b4:96:db:7d:d9:50:da:84:ee:3b:dd:5a:d3:ff: 4e:02:98:0a:49:10:f2:ef:6e:a8:a9:76:7a:c2:ac: ed:31:6b:7f:14:f7:f1:e6:69:a4:29:c6:8f:3c:33: f0:2a:3f:31:5d:3d:cf:f3:93:9c:e0:f1:92:e8:73: 2e:3a:78:a6:75:9f:dd:61:3e:53:4d:7f:a4:07:84: b3:b5:63:31:bd:7a:de:83:0c:c9:c7:87:7b:ff:cf: ce:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A0:48:69:EF:42:10:75:5E:A1:B0:E5:86:BB:08:C1:68:0B:3C:F1 X509v3 Authority Key Identifier: keyid:60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/caBIae9CEHVeobDlhrsIwWgLPPE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.135.116.0/22 185.155.60.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:30:97:f0:6a:0c:91:31:ff:01:40:b4:dd:2e:e6:b9:ad:f7: 90:03:85:99:4f:ba:e3:12:20:2d:18:66:d7:fd:bd:a9:40:6b: 48:1b:06:1c:a0:4d:a6:0e:82:18:bc:f4:8d:17:83:1d:c5:cb: 03:63:10:46:d0:9e:c8:2c:1c:c8:9c:b8:c6:ea:ea:cf:f4:ef: 63:3b:05:fc:64:f7:71:e0:40:dd:5d:d2:7a:7f:df:42:83:da: a0:ff:bd:e8:d6:ce:38:11:3b:ae:fd:44:64:cc:2b:f9:9f:39: 71:78:51:3c:0f:2b:16:f7:19:ff:5b:fb:f6:7b:f0:fc:06:e0: 58:7f:d4:06:99:f3:0a:76:e8:e5:37:bc:3c:50:68:c4:a3:45: a6:5a:63:18:12:6d:e0:cc:58:31:bd:d5:65:8f:e2:03:22:01: 2b:bf:e4:8b:cf:80:ba:36:ee:37:d4:25:88:bf:87:cf:aa:0f: 36:54:e1:28:7b:fb:36:ef:90:b0:51:4c:4a:aa:82:31:49:80: 2b:5a:5b:72:23:27:1f:cb:3f:86:93:ca:b9:f0:fb:a9:98:d6: 08:cc:55:e5:1b:88:8b:0c:0a:e5:fd:63:9a:26:3f:97:32:2d: 37:9b:07:fc:cb:5b:db:ac:d0:62:32:98:a4:7c:f1:9f:1d:78: b9:a8:3d:b8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ERUT5kLXK2tE1Gnt/nfuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNmI5YmEyMTllMzYyYjJhODI3NzIwYTA1YzQzYzdkMWMx ZmE4ZWYwHhcNMjYwMTAxMTAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWEwNDg2OWVmNDIxMDc1NWVhMWIwZTU4NmJiMDhjMTY4MGIzY2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3kJ2xbMS4IMP1IL6ODFxGklihFk /KvoOuJxrhRszs+yjvYNaqIvh2jWaxZo1QKahp4iPmvTzx/L4bx+iZoE78Jtw//s r/ztInWgqiyAU+R8pCd9LNYS9PFPgXoeWRO2ikv+gtkorqjH0GE78uExfKUCj8xJ T0vuwNrB1FJr7CccMHatfsDRDJnWL3cgbk/0s4yjeGTiYcO6f0XfoXH2REY6WHlv tJbbfdlQ2oTuO91a0/9OApgKSRDy726oqXZ6wqztMWt/FPfx5mmkKcaPPDPwKj8x XT3P85Oc4PGS6HMuOnimdZ/dYT5TTX+kB4SztWMxvXregwzJx4d7/8/OfQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHGgSGnvQhB1XqGw5Ya7CMFoCzzxMB8GA1UdIwQY MBaAFGBrm6IZ42KyqCdyCgXEPH0cH6jvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUd1Ym9obmpZcktvSjNJS0JjUThmUndmcU84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81YTBhZjgtMjRiMi00MTU0LWE0MTIt YjRmYjU3MDhkYjE1LzEvY2FCSWFlOUNFSFZlb2JEbGhyc0l3V2dMUFBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81YTBhZjgtMjRiMi00MTU0LWE0MTItYjRmYjU3MDhkYjE1 LzEvWUd1Ym9obmpZcktvSjNJS0JjUThmUndmcU84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuYd0AwQC uZs8MA0GCSqGSIb3DQEBCwUAA4IBAQCOMJfwagyRMf8BQLTdLua5rfeQA4WZT7rj EiAtGGbX/b2pQGtIGwYcoE2mDoIYvPSNF4MdxcsDYxBG0J7ILBzInLjG6urP9O9j OwX8ZPdx4EDdXdJ6f99Cg9qg/73o1s44ETuu/URkzCv5nzlxeFE8DysW9xn/W/v2 e/D8BuBYf9QGmfMKdujlN7w8UGjEo0WmWmMYEm3gzFgxvdVlj+IDIgErv+SLz4C6 Nu431CWIv4fPqg82VOEoe/s275CwUUxKqoIxSYArWltyIycfyz+Gk8q58PupmNYI zFXlG4iLDArl/WOaJj+XMi03mwf8y1vbrNBiMpikfPGfHXi5qD24 -----END CERTIFICATE-----Generated at Fri Jan 2 14:22:16 2026 by rpki-client