This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/y2kC-JHxws7OdlKjntbmzAIGoYo.roa File: y2kC-JHxws7OdlKjntbmzAIGoYo.roa (raw, json) Hash identifier: LqoUkGt/W9j9zMAyvyXO0TzR2hTHbWsAzvz5pfbOIEo= Subject key identifier: CB:69:02:F8:91:F1:C2:CE:CE:76:52:A3:9E:D6:E6:CC:02:06:A1:8A Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Certificate serial: 019B78A3046ECE97BAED34D8F9874B9AFC19 Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/y2kC-JHxws7OdlKjntbmzAIGoYo.roa Signing time: Thu 01 Jan 2026 08:18:27 +0000 ROA not before: Thu 01 Jan 2026 08:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209640 IP address blocks: 149.3.189.0/24 maxlen: 24 149.3.190.0/24 maxlen: 24 149.3.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:04:6e:ce:97:ba:ed:34:d8:f9:87:4b:9a:fc:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Validity Not Before: Jan 1 08:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb6902f891f1c2cece7652a39ed6e6cc0206a18a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7a:28:d3:c4:fa:21:7a:fe:21:b9:87:59:6f: f0:03:e6:56:e0:ba:b6:39:34:e8:a6:7d:ef:7b:33: 94:09:e1:60:55:15:d9:c5:43:f8:40:12:d5:62:65: ee:a3:bb:81:62:ff:fa:77:6e:65:a1:11:27:26:e0: 9b:a5:b2:b0:3b:71:a5:b0:8b:b5:d4:e8:cc:55:47: 65:fe:67:df:5f:d8:55:dd:29:31:c1:2e:14:a7:d5: cc:e0:4c:ea:3c:86:ec:39:4a:02:ed:26:66:e2:a7: 03:2b:b8:16:f9:53:75:e1:fd:33:f7:c2:47:a9:ec: 32:e0:5e:85:57:92:4a:ae:6d:fa:d4:75:68:07:97: e5:fc:f5:dc:fe:1f:37:52:74:34:6b:c1:a0:1c:4e: 93:e0:92:a1:4e:9c:97:2b:af:89:38:7c:f6:a1:ae: 0a:4d:7b:d3:64:fc:d0:1d:1d:46:55:f9:06:de:f3: 81:34:f6:03:76:f1:75:9b:58:f0:4e:c0:52:6c:06: ab:2f:ce:76:c4:8d:b2:a7:c7:8e:d0:4b:35:5c:9a: d3:16:da:3c:54:15:b5:f5:e6:a7:6c:8b:9c:64:1e: a8:c7:8f:9a:e1:e2:76:12:be:0f:cd:22:b4:fe:a0: b1:94:1e:88:64:ed:6e:00:00:51:fa:a8:ac:e6:1d: e9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:69:02:F8:91:F1:C2:CE:CE:76:52:A3:9E:D6:E6:CC:02:06:A1:8A X509v3 Authority Key Identifier: keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/y2kC-JHxws7OdlKjntbmzAIGoYo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.3.189.0-149.3.191.255 Signature Algorithm: sha256WithRSAEncryption 4d:b5:6a:e3:f5:f4:67:10:1b:f1:ab:3d:92:49:99:25:a3:3f: c7:26:27:cb:df:8b:a5:a3:c6:9f:16:95:f3:53:28:3b:1b:01: ca:f0:65:89:75:de:4a:90:f7:ed:cd:fc:3a:af:cf:78:43:0f: d0:cd:bb:bc:98:99:fe:2e:d2:5a:e4:65:8e:51:80:69:f3:c9: f8:17:fe:8a:94:64:23:fd:39:0f:eb:88:32:cc:a1:ef:83:df: 60:19:8f:b9:eb:71:af:ed:8a:30:1e:05:a5:09:11:58:8c:c8: 90:de:6d:bf:a1:6e:75:c0:07:2a:a2:a0:35:2b:2a:86:dc:68: e7:6f:c4:f8:b6:14:c6:9b:ca:6d:53:24:68:37:3e:7a:b2:15: 42:40:38:60:fc:d8:b1:c4:5c:0f:5d:cf:17:64:99:c4:1c:8b: 5b:e0:07:e2:09:8f:30:4e:f8:f0:f6:62:1d:56:b7:4a:d1:ad: 0a:d3:5d:f6:9e:78:a1:38:7b:3b:f2:e1:d4:95:6a:30:43:ba: 80:d5:b4:01:a5:2f:33:b8:c5:7e:75:07:ce:ff:7f:eb:a4:70: cf:9f:fb:23:6e:93:a9:8c:f1:b0:7e:ad:5b:30:24:b2:0c:5b: 5f:19:e9:08:99:ea:58:2c:64:f0:a6:e3:15:11:07:fb:4d:a9: 44:10:a6:94 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4owRuzpe67TTY+YdLmvwZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZmE2NjM2ZmU2NDQwYWNmMjkzYjc1NzA1YTdhMWRjYWRh ODQyMGIwHhcNMjYwMTAxMDgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjY5MDJmODkxZjFjMmNlY2U3NjUyYTM5ZWQ2ZTZjYzAyMDZhMThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3oo08T6IXr+IbmHWW/wA+ZW4Lq2 OTTopn3vezOUCeFgVRXZxUP4QBLVYmXuo7uBYv/6d25loREnJuCbpbKwO3GlsIu1 1OjMVUdl/mffX9hV3SkxwS4Up9XM4EzqPIbsOUoC7SZm4qcDK7gW+VN14f0z98JH qewy4F6FV5JKrm361HVoB5fl/PXc/h83UnQ0a8GgHE6T4JKhTpyXK6+JOHz2oa4K TXvTZPzQHR1GVfkG3vOBNPYDdvF1m1jwTsBSbAarL852xI2yp8eO0Es1XJrTFto8 VBW19eanbIucZB6ox4+a4eJ2Er4PzSK0/qCxlB6IZO1uAABR+qis5h3pvwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFMtpAviR8cLOznZSo57W5swCBqGKMB8GA1UdIwQY MBaAFDv6Zjb+ZECs8pO3VwWnodytqEILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEt OTJlYzUxNWM1OTVhLzEveTJrQy1KSHh3czdPZGxLam50Ym16QUlHb1lvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEtOTJlYzUxNWM1OTVh LzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACVA70D BAaVA4AwDQYJKoZIhvcNAQELBQADggEBAE21auP19GcQG/GrPZJJmSWjP8cmJ8vf i6Wjxp8WlfNTKDsbAcrwZYl13kqQ9+3N/Dqvz3hDD9DNu7yYmf4u0lrkZY5RgGnz yfgX/oqUZCP9OQ/riDLMoe+D32AZj7nrca/tijAeBaUJEViMyJDebb+hbnXAByqi oDUrKobcaOdvxPi2FMabym1TJGg3PnqyFUJAOGD82LHEXA9dzxdkmcQci1vgB+IJ jzBO+PD2Yh1Wt0rRrQrTXfaeeKE4ezvy4dSVajBDuoDVtAGlLzO4xX51B87/f+uk cM+f+yNuk6mM8bB+rVswJLIMW18Z6QiZ6lgsZPCm4xURB/tNqUQQppQ= -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:16 2026 by rpki-client