This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/6tdMfiVa3cKe46M4k5y3OEU-0kg.roa File: 6tdMfiVa3cKe46M4k5y3OEU-0kg.roa (raw, json) Hash identifier: 44GC5xCfFwQMGtqX+b63dvhuM3/qeBXPPvsf+/uIBlU= Subject key identifier: EA:D7:4C:7E:25:5A:DD:C2:9E:E3:A3:38:93:9C:B7:38:45:3E:D2:48 Certificate issuer: /CN=64f47c98440f103825c8ea5074298b18cc113e20 Certificate serial: 019B7D5D09E6C45C24AEFD41F80340589A18 Authority key identifier: 64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/6tdMfiVa3cKe46M4k5y3OEU-0kg.roa Signing time: Fri 02 Jan 2026 06:20:07 +0000 ROA not before: Fri 02 Jan 2026 06:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204194 IP address blocks: 185.3.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:09:e6:c4:5c:24:ae:fd:41:f8:03:40:58:9a:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64f47c98440f103825c8ea5074298b18cc113e20 Validity Not Before: Jan 2 06:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ead74c7e255addc29ee3a338939cb738453ed248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0e:66:14:e8:5d:1f:f4:16:4c:ff:3d:6a:8a: 6f:dc:be:12:24:54:27:27:b9:88:db:75:dd:15:01: 35:10:55:1b:c8:62:ca:2d:71:5b:3e:a1:ae:8c:3a: a0:25:0a:6d:26:c8:3a:b2:20:09:2e:d4:62:b8:0d: 9c:6b:1b:75:24:5a:7e:e0:ac:24:f6:5f:52:29:e8: b7:36:3c:40:85:84:66:b4:43:ad:e6:b3:69:c5:92: 74:f7:3d:c1:80:de:e8:19:1a:3b:4d:f7:14:23:7c: 4e:4d:0d:00:9f:73:7d:a3:e1:7c:9e:a3:d4:12:7a: 17:f7:01:fc:b5:6a:e0:35:ac:70:3d:5a:17:c7:9a: 52:35:fe:c4:7c:cc:be:66:23:eb:92:48:8e:83:3a: 4d:cb:ea:49:a0:29:80:81:bd:79:fd:a3:57:05:60: 5a:45:1c:f9:14:40:0e:4b:70:b3:db:95:5a:e3:bb: 4b:63:87:1d:30:90:07:60:8f:e4:1d:e1:07:02:74: 3d:51:01:ae:e2:0c:f0:ba:4c:9d:b1:0d:6b:f7:66: c7:32:c0:7e:9b:0f:a6:e5:b2:48:06:bd:d0:a1:8d: 6a:0e:03:3a:bf:5b:ea:c4:91:39:5c:d9:f4:d5:a6: 40:5e:b7:88:c3:79:d6:29:f1:a9:f0:b4:88:37:76: a3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D7:4C:7E:25:5A:DD:C2:9E:E3:A3:38:93:9C:B7:38:45:3E:D2:48 X509v3 Authority Key Identifier: keyid:64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/6tdMfiVa3cKe46M4k5y3OEU-0kg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.3.191.0/24 Signature Algorithm: sha256WithRSAEncryption b1:53:d1:1e:8f:d2:f7:15:56:b0:ac:74:74:85:a4:ea:df:01: e1:5c:4a:79:ee:29:92:ec:fa:bb:90:9d:26:5e:14:6f:9c:08: 09:38:ed:fa:a3:e0:30:88:70:ac:a9:c2:6c:e6:a7:ec:c4:ad: cd:58:60:d3:f5:77:c2:35:11:43:33:d9:e0:9c:6f:a4:e5:92: 40:13:10:3a:b3:68:78:d4:d1:58:f9:7f:8e:87:82:e1:73:46: 1a:ed:8e:79:0d:f3:cd:9b:38:22:4e:91:59:63:56:bc:89:d3: ae:59:5f:15:f8:a2:68:6d:6f:df:05:da:cb:0a:1c:85:b1:37: 00:e8:9c:ae:61:70:bd:2b:dc:68:7c:c3:b9:8a:0d:91:bb:96: 20:79:38:02:31:52:ff:03:04:bd:d0:b7:dd:2e:b5:e0:93:0c: 5f:b4:44:df:a2:61:7d:89:ca:e7:d8:14:fc:90:fd:dc:7b:9a: 5c:eb:7b:ac:a8:ad:68:6e:00:2b:4f:d1:9c:c4:3f:6e:fc:17: 67:c4:c8:36:98:8a:23:10:89:2a:6d:9a:75:6b:ca:57:d6:a1: c2:01:10:fe:65:b1:b6:cc:c7:c6:19:49:04:d7:94:54:14:7b: 69:a1:5c:e1:38:fa:5f:93:86:0b:e7:83:b2:8e:ef:9c:80:9f: 42:73:c1:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XQnmxFwkrv1B+ANAWJoYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZjQ3Yzk4NDQwZjEwMzgyNWM4ZWE1MDc0Mjk4YjE4Y2Mx MTNlMjAwHhcNMjYwMTAyMDYyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWQ3NGM3ZTI1NWFkZGMyOWVlM2EzMzg5MzljYjczODQ1M2VkMjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg5mFOhdH/QWTP89aopv3L4SJFQn J7mI23XdFQE1EFUbyGLKLXFbPqGujDqgJQptJsg6siAJLtRiuA2caxt1JFp+4Kwk 9l9SKei3NjxAhYRmtEOt5rNpxZJ09z3BgN7oGRo7TfcUI3xOTQ0An3N9o+F8nqPU EnoX9wH8tWrgNaxwPVoXx5pSNf7EfMy+ZiPrkkiOgzpNy+pJoCmAgb15/aNXBWBa RRz5FEAOS3Cz25Va47tLY4cdMJAHYI/kHeEHAnQ9UQGu4gzwukydsQ1r92bHMsB+ mw+m5bJIBr3QoY1qDgM6v1vqxJE5XNn01aZAXreIw3nWKfGp8LSIN3ajFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOrXTH4lWt3CnuOjOJOctzhFPtJIMB8GA1UdIwQY MBaAFGT0fJhEDxA4JcjqUHQpixjMET4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlBSOG1FUVBFRGdseU9wUWRDbUxHTXdSUGlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTlhZWItYzcxMy00MmY4LTkxZDYt Mzg0NDc4NTVkNjY5LzEvNnRkTWZpVmEzY0tlNDZNNGs1eTNPRVUtMGtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTlhZWItYzcxMy00MmY4LTkxZDYtMzg0NDc4NTVkNjY5 LzEvWlBSOG1FUVBFRGdseU9wUWRDbUxHTXdSUGlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQO/MA0G CSqGSIb3DQEBCwUAA4IBAQCxU9Eej9L3FVawrHR0haTq3wHhXEp57imS7Pq7kJ0m XhRvnAgJOO36o+AwiHCsqcJs5qfsxK3NWGDT9XfCNRFDM9ngnG+k5ZJAExA6s2h4 1NFY+X+Oh4Lhc0Ya7Y55DfPNmzgiTpFZY1a8idOuWV8V+KJobW/fBdrLChyFsTcA 6JyuYXC9K9xofMO5ig2Ru5YgeTgCMVL/AwS90LfdLrXgkwxftETfomF9icrn2BT8 kP3ce5pc63usqK1obgArT9GcxD9u/BdnxMg2mIojEIkqbZp1a8pX1qHCARD+ZbG2 zMfGGUkE15RUFHtpoVzhOPpfk4YL54Oyju+cgJ9Cc8E/ -----END CERTIFICATE-----Generated at Mon Jan 26 04:22:01 2026 by rpki-client