This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/T6VYQnhnQYETwVj8BZYLRwwLS3U.roa File: T6VYQnhnQYETwVj8BZYLRwwLS3U.roa (raw, json) Hash identifier: C4QUjsV9O/nqAXRjoFy9pa8X3S9h9F1PXPJew5ITvec= Subject key identifier: 4F:A5:58:42:78:67:41:81:13:C1:58:FC:05:96:0B:47:0C:0B:4B:75 Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451 Certificate serial: 019B7D5C7469B2F251B7BBD25C1E139AFE9B Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/T6VYQnhnQYETwVj8BZYLRwwLS3U.roa Signing time: Fri 02 Jan 2026 06:19:29 +0000 ROA not before: Fri 02 Jan 2026 06:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48329 IP address blocks: 185.159.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:74:69:b2:f2:51:b7:bb:d2:5c:1e:13:9a:fe:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451 Validity Not Before: Jan 2 06:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fa558427867418113c158fc05960b470c0b4b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b6:ab:7c:54:8b:7d:48:8b:c0:b1:a4:f3:c6: 3f:9c:da:51:2a:c5:d0:88:7a:e7:f5:dc:df:84:7e: 89:fb:3b:a3:76:15:64:ea:7a:7b:c2:05:c2:97:fb: 8b:a1:2e:ee:e5:29:1a:60:55:0b:ca:30:26:ce:0c: 25:77:66:f8:6c:59:f3:ad:2a:7a:7e:08:e5:f8:43: 8f:93:2b:38:ad:d0:56:2a:f8:bb:3a:93:37:f1:0c: 7c:d3:19:94:9c:31:63:8a:39:4b:1d:c8:58:dd:e0: 40:ce:e5:56:1a:04:9e:a2:af:03:4a:f6:6f:bd:c9: b7:3a:6e:b9:31:35:48:5d:2e:b7:6c:9d:e7:72:85: 19:97:10:a4:55:74:3e:21:c7:27:ad:b5:1e:bb:6e: 08:99:3b:a9:8c:c5:3d:4e:3a:25:0b:ca:bd:84:ab: 87:0d:b2:2f:30:43:0a:48:fd:dc:eb:59:19:43:aa: 2f:2b:dc:61:e2:b7:f8:f0:93:98:15:a5:b1:67:99: 57:40:40:99:3d:aa:07:24:1c:ae:a8:51:55:d4:8f: ba:68:98:94:26:50:25:bd:40:50:99:7c:43:60:52: fc:13:07:dd:b1:50:15:32:26:21:ca:a4:ea:1d:ca: ce:08:8f:ee:24:28:17:ff:a6:01:af:91:5c:2a:a8: a9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A5:58:42:78:67:41:81:13:C1:58:FC:05:96:0B:47:0C:0B:4B:75 X509v3 Authority Key Identifier: keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/T6VYQnhnQYETwVj8BZYLRwwLS3U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.159.86.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:30:c9:d3:de:eb:98:98:57:81:83:16:d4:2e:ef:60:9a:95: bc:3c:5b:0d:52:27:54:88:50:16:a1:88:24:8f:51:7a:42:fa: 2a:8a:ae:93:43:e4:8b:4f:bb:03:07:7d:f9:e0:71:79:15:ce: 6b:29:10:2d:53:0e:60:09:61:8b:44:c9:8f:64:96:05:b2:1e: 20:ec:61:09:a3:6f:82:64:a5:b6:37:ec:f5:50:01:e7:60:f0: 60:5f:91:aa:73:8e:f5:d0:4b:94:a7:e6:42:2f:ea:67:29:19: f5:ef:88:a7:80:13:38:6d:90:c5:1f:ff:46:5c:b0:67:07:3e: 4e:df:a3:fb:e7:aa:50:7f:7d:42:26:df:b8:3c:be:66:ba:6c: b3:96:da:13:64:a1:ec:e9:4a:21:83:e1:ed:cf:09:1b:25:2d: 3d:0e:22:a1:c3:23:d6:14:8f:84:2d:65:ca:6a:6c:c3:c2:3d: 09:eb:9c:f8:6e:f2:05:a6:15:ad:65:32:6e:4e:65:3d:6b:27: 62:ca:1d:83:63:8a:5e:74:bf:35:43:c6:94:08:ce:cf:33:db: cf:8f:ba:f5:66:a0:cc:85:41:fa:86:9a:87:5c:f8:40:6e:ba: cc:9b:a5:d4:b9:71:de:b2:9b:1f:ee:69:fb:18:cb:94:ce:c5: 8f:02:51:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XHRpsvJRt7vSXB4Tmv6bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlY2Q1M2M2NjQyNGMzZjM2OWNhODhlZTdhZjc2YWRiMjVl MTg0NTEwHhcNMjYwMTAyMDYxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmE1NTg0Mjc4Njc0MTgxMTNjMTU4ZmMwNTk2MGI0NzBjMGI0Yjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7arfFSLfUiLwLGk88Y/nNpRKsXQ iHrn9dzfhH6J+zujdhVk6np7wgXCl/uLoS7u5SkaYFULyjAmzgwld2b4bFnzrSp6 fgjl+EOPkys4rdBWKvi7OpM38Qx80xmUnDFjijlLHchY3eBAzuVWGgSeoq8DSvZv vcm3Om65MTVIXS63bJ3ncoUZlxCkVXQ+IccnrbUeu24ImTupjMU9TjolC8q9hKuH DbIvMEMKSP3c61kZQ6ovK9xh4rf48JOYFaWxZ5lXQECZPaoHJByuqFFV1I+6aJiU JlAlvUBQmXxDYFL8EwfdsVAVMiYhyqTqHcrOCI/uJCgX/6YBr5FcKqipewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE+lWEJ4Z0GBE8FY/AWWC0cMC0t1MB8GA1UdIwQY MBaAFD7NU8ZkJMPzacqI7nr3atsl4YRRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHMxVHhtUWt3X05weW9qdWV2ZHEyeVhoaEZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNjVhZGEtNGQ0YS00MDRkLTg3MDAt YzIyNTY4MDRlOTIyLzEvVDZWWVFuaG5RWUVUd1ZqOEJaWUxSd3dMUzNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9lNjVhZGEtNGQ0YS00MDRkLTg3MDAtYzIyNTY4MDRlOTIy LzEvUHMxVHhtUWt3X05weW9qdWV2ZHEyeVhoaEZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZ9WMA0G CSqGSIb3DQEBCwUAA4IBAQB7MMnT3uuYmFeBgxbULu9gmpW8PFsNUidUiFAWoYgk j1F6Qvoqiq6TQ+SLT7sDB3354HF5Fc5rKRAtUw5gCWGLRMmPZJYFsh4g7GEJo2+C ZKW2N+z1UAHnYPBgX5Gqc4710EuUp+ZCL+pnKRn174ingBM4bZDFH/9GXLBnBz5O 36P756pQf31CJt+4PL5mumyzltoTZKHs6Uohg+HtzwkbJS09DiKhwyPWFI+ELWXK amzDwj0J65z4bvIFphWtZTJuTmU9aydiyh2DY4pedL81Q8aUCM7PM9vPj7r1ZqDM hUH6hpqHXPhAbrrMm6XUuXHespsf7mn7GMuUzsWPAlED -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:57 2026 by rpki-client