This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/aym4YZ7Ehm_KzkXD3V-QX01Qou4.roa File: aym4YZ7Ehm_KzkXD3V-QX01Qou4.roa (raw, json) Hash identifier: QNBmXDOTHFhuiQC1mFg6H4twIsCe0r1/zgtBgEjdjlA= Subject key identifier: 6B:29:B8:61:9E:C4:86:6F:CA:CE:45:C3:DD:5F:90:5F:4D:50:A2:EE Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda Certificate serial: 019B7BA3589BA806C65D7B62F28DC0D96F63 Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/aym4YZ7Ehm_KzkXD3V-QX01Qou4.roa Signing time: Thu 01 Jan 2026 22:17:41 +0000 ROA not before: Thu 01 Jan 2026 22:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30781 IP address blocks: 5.63.24.0/21 maxlen: 21 91.190.168.0/21 maxlen: 21 185.85.76.0/22 maxlen: 22 2a02:798::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:58:9b:a8:06:c6:5d:7b:62:f2:8d:c0:d9:6f:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda Validity Not Before: Jan 1 22:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b29b8619ec4866fcace45c3dd5f905f4d50a2ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:67:2e:1a:eb:cb:d2:92:f3:71:1c:b8:a7:68: e5:a5:62:79:18:98:09:fe:c1:a2:84:c4:54:4c:c8: ea:6d:6f:7e:c3:47:28:6b:c0:46:a6:b5:66:a4:20: cb:57:58:1f:92:b3:9b:17:6c:a5:4c:76:c6:c3:e3: ec:3b:74:78:79:43:af:7c:f7:c7:b6:a9:8a:93:bd: c4:94:8e:55:48:52:a2:d5:6c:37:d8:5d:b0:dc:79: 73:22:23:f5:b2:8b:a4:ca:c5:11:b1:72:6e:b9:95: 4a:df:ab:79:1d:4c:b3:38:4a:74:47:84:25:99:e5: 56:e6:f6:0e:ca:76:32:06:b7:01:e4:83:75:da:c8: 51:b5:19:85:8d:85:8d:b5:f8:ea:bc:30:e0:63:04: da:0e:e0:7e:76:4a:66:8f:fd:35:49:11:ea:89:04: 2d:96:a5:7c:0d:45:3b:1e:8c:7d:50:84:3b:90:bf: 47:7f:f5:46:fb:b8:9f:3e:79:dd:54:45:9c:38:66: 87:52:30:5b:08:8b:dd:da:a1:4d:d1:2a:d5:ec:14: 9c:43:0b:a5:e7:f7:9f:20:7c:d0:dd:f3:b1:a3:01: 3e:9b:2e:fc:26:e1:ae:6b:87:7c:b0:ed:ea:0b:72: cf:3a:15:3c:72:95:f1:ce:6b:2e:6f:01:79:f0:93: 9a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:29:B8:61:9E:C4:86:6F:CA:CE:45:C3:DD:5F:90:5F:4D:50:A2:EE X509v3 Authority Key Identifier: keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/aym4YZ7Ehm_KzkXD3V-QX01Qou4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.63.24.0/21 91.190.168.0/21 185.85.76.0/22 IPv6: 2a02:798::/32 Signature Algorithm: sha256WithRSAEncryption 62:c8:61:29:87:65:0e:b9:b3:a8:95:59:38:f2:9b:8c:30:77: 4f:13:e6:a7:fd:e0:94:7f:42:f9:ab:45:c0:30:6d:a0:ee:a4: 76:db:28:90:64:38:d0:85:e4:8f:18:fb:cb:54:70:ee:3b:28: 8c:4f:f0:52:9f:b5:e4:59:74:1a:f7:07:5b:8a:06:e1:f1:3e: a8:9e:d8:e6:05:db:a9:52:01:bb:6f:91:2c:b6:b8:9b:58:96: 4d:d5:a2:5b:73:c0:5f:1d:17:01:73:31:c1:6c:bb:de:83:d7: 1f:33:ee:42:ec:b9:cd:54:1c:24:ba:c7:7e:3b:f4:08:6d:c5: b8:e9:dc:13:b5:ed:f1:ae:1c:95:27:d1:7b:fc:ad:7f:6d:dc: 6f:16:0c:36:8d:49:aa:9e:c3:2c:d8:f1:dd:6b:75:1a:c4:f6: 11:9b:2d:16:f9:80:89:64:bc:5b:7d:1a:63:bb:9a:eb:4d:3a: bc:42:5d:a2:9a:db:2e:be:f4:b9:ab:87:56:ae:45:ba:44:bb: 7f:46:ea:70:fb:48:7e:fb:d6:28:2c:3e:72:91:ae:92:32:b4: e6:47:0a:bb:e4:c8:d1:16:bf:6f:99:88:a7:e6:fe:78:e4:3c: 0d:45:42:19:46:22:8b:d3:6d:fc:04:96:d3:8f:a8:34:36:c3: 66:36:f5:34 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt7o1ibqAbGXXti8o3A2W9jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMTQxYzUwOTA4MjRkMGExN2MyOWVjNDA1MGUyMTAwNzEx M2ZiZGEwHhcNMjYwMTAxMjIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjI5Yjg2MTllYzQ4NjZmY2FjZTQ1YzNkZDVmOTA1ZjRkNTBhMmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGcuGuvL0pLzcRy4p2jlpWJ5GJgJ /sGihMRUTMjqbW9+w0coa8BGprVmpCDLV1gfkrObF2ylTHbGw+PsO3R4eUOvfPfH tqmKk73ElI5VSFKi1Ww32F2w3HlzIiP1soukysURsXJuuZVK36t5HUyzOEp0R4Ql meVW5vYOynYyBrcB5IN12shRtRmFjYWNtfjqvDDgYwTaDuB+dkpmj/01SRHqiQQt lqV8DUU7Hox9UIQ7kL9Hf/VG+7ifPnndVEWcOGaHUjBbCIvd2qFN0SrV7BScQwul 5/efIHzQ3fOxowE+my78JuGua4d8sO3qC3LPOhU8cpXxzmsubwF58JOamwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFGspuGGexIZvys5Fw91fkF9NUKLuMB8GA1UdIwQY MBaAFFoUHFCQgk0KF8KexAUOIQBxE/vaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUt ZWNlZWZmOGU4NGUwLzEvYXltNFlaN0VobV9LemtYRDNWLVFYMDFRb3U0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUtZWNlZWZmOGU4NGUw LzEvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDBT8YAwQD W76oAwQCuVVMMA0EAgACMAcDBQAqAgeYMA0GCSqGSIb3DQEBCwUAA4IBAQBiyGEp h2UOubOolVk48puMMHdPE+an/eCUf0L5q0XAMG2g7qR22yiQZDjQheSPGPvLVHDu OyiMT/BSn7XkWXQa9wdbigbh8T6ontjmBdupUgG7b5EstribWJZN1aJbc8BfHRcB czHBbLveg9cfM+5C7LnNVBwkusd+O/QIbcW46dwTte3xrhyVJ9F7/K1/bdxvFgw2 jUmqnsMs2PHda3UaxPYRmy0W+YCJZLxbfRpju5rrTTq8Ql2imtsuvvS5q4dWrkW6 RLt/Rupw+0h++9YoLD5yka6SMrTmRwq75MjRFr9vmYin5v545DwNRUIZRiKL0238 BJbTj6g0NsNmNvU0 -----END CERTIFICATE-----Generated at Fri Jan 2 13:02:05 2026 by rpki-client