This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/6qGh1CWEL5urT7KqlTeQZmDgafw.roa File: 6qGh1CWEL5urT7KqlTeQZmDgafw.roa (raw, json) Hash identifier: OCUd2zNoXwmHcdVRlj45FZmejRsmzHfWho56l2ASAPc= Subject key identifier: EA:A1:A1:D4:25:84:2F:9B:AB:4F:B2:AA:95:37:90:66:60:E0:69:FC Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae Certificate serial: 019B7AC92C9FC72F5BCD90863C7C8B05FFED Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/6qGh1CWEL5urT7KqlTeQZmDgafw.roa Signing time: Thu 01 Jan 2026 18:19:23 +0000 ROA not before: Thu 01 Jan 2026 18:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47516 IP address blocks: 185.136.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:2c:9f:c7:2f:5b:cd:90:86:3c:7c:8b:05:ff:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae Validity Not Before: Jan 1 18:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eaa1a1d425842f9bab4fb2aa9537906660e069fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:73:3a:c7:ba:36:87:b2:05:75:76:2f:e3:07: 1e:6e:48:5c:5d:66:33:a0:bc:e6:77:fd:11:88:b0: e3:32:29:52:0a:34:70:65:4e:9d:9a:cb:2a:5d:88: 9d:b8:27:39:c2:f4:6c:b7:f8:be:1d:f3:59:75:fe: 38:ab:ee:61:27:b3:e6:4f:4e:5e:e0:73:a6:7b:f1: 10:3e:54:ca:53:90:42:c3:4b:99:cf:ca:82:68:35: ef:f9:9f:24:20:78:86:98:e3:b6:b9:77:d0:7c:91: 67:e3:73:95:70:bd:6e:c2:a8:d8:94:9d:2d:32:4d: 7d:7d:4d:9a:de:90:d6:88:7b:c4:4a:d3:a8:61:fc: d4:e0:13:3c:d9:8e:a7:a0:1b:55:fe:1a:e8:e6:1b: 12:a6:5c:d4:d7:a7:04:c7:2e:b6:61:32:d8:1b:c8: e8:f0:97:f3:ae:3e:08:9b:2b:9f:af:9c:da:b6:cf: ba:01:b6:5c:1a:57:49:f9:fd:b3:f7:6a:01:7b:cb: 19:5e:42:58:54:6c:50:25:55:60:17:6b:73:c8:6b: 4e:26:2a:c6:d0:d9:9f:0a:29:6c:01:a4:a8:ee:fd: 87:a1:e5:db:75:e8:69:0d:82:5d:20:2e:17:6d:1b: 37:24:32:e6:7c:97:3c:08:01:0e:27:d4:71:22:e1: 8e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A1:A1:D4:25:84:2F:9B:AB:4F:B2:AA:95:37:90:66:60:E0:69:FC X509v3 Authority Key Identifier: keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/6qGh1CWEL5urT7KqlTeQZmDgafw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.136.206.0/24 Signature Algorithm: sha256WithRSAEncryption 36:86:e7:75:ae:91:d7:5c:be:30:16:9c:8c:e0:e1:ff:91:bd: 5e:5a:e6:6d:9a:f3:55:f2:f8:e4:1a:e6:2a:55:e7:38:f0:ed: 98:46:91:51:63:11:15:21:49:c6:05:c8:d9:32:74:f5:2e:f0: 67:da:36:9c:2e:1b:e3:b7:cb:72:1f:5a:eb:51:5c:91:05:59: 98:98:d8:7a:13:ac:52:57:d2:ba:fb:3d:99:69:a2:ec:c5:48: 56:77:a5:8a:ab:8f:56:fe:8b:61:26:81:0f:79:0c:69:dd:5d: e6:e7:96:72:e3:cc:60:c0:0a:7b:40:63:bc:8d:7c:71:83:dc: 97:9a:4d:ec:02:c2:3d:1a:63:d2:95:bc:d7:e2:87:d3:8f:51: 7d:f3:65:50:b6:86:77:7b:06:4f:1a:ba:5b:18:0f:24:99:a2: 54:1c:e1:e8:7c:6c:07:42:2c:bf:82:c9:1f:5d:ec:f9:fb:60: 1c:17:1d:07:8d:fa:73:9c:89:fc:38:f6:6a:4d:9d:27:fc:75: 3f:22:ba:7a:72:e0:bc:9e:4b:96:5e:ed:93:6d:35:01:ec:43: c5:b2:6a:d1:c1:65:ce:fe:37:97:2c:a5:3c:6a:61:81:a0:56: 15:4a:ff:43:a0:77:08:59:dc:93:85:ab:c9:1b:a0:0f:b3:10: 13:2c:2c:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6ySyfxy9bzZCGPHyLBf/tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ZmQ2NmU0M2ExMDQ2MzNiMjdiYWM1MzliOThiZGY4ZWJm YWM5YWUwHhcNMjYwMTAxMTgxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWExYTFkNDI1ODQyZjliYWI0ZmIyYWE5NTM3OTA2NjYwZTA2OWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnM6x7o2h7IFdXYv4wcebkhcXWYz oLzmd/0RiLDjMilSCjRwZU6dmssqXYiduCc5wvRst/i+HfNZdf44q+5hJ7PmT05e 4HOme/EQPlTKU5BCw0uZz8qCaDXv+Z8kIHiGmOO2uXfQfJFn43OVcL1uwqjYlJ0t Mk19fU2a3pDWiHvEStOoYfzU4BM82Y6noBtV/hro5hsSplzU16cExy62YTLYG8jo 8Jfzrj4Imyufr5zats+6AbZcGldJ+f2z92oBe8sZXkJYVGxQJVVgF2tzyGtOJirG 0NmfCilsAaSo7v2HoeXbdehpDYJdIC4XbRs3JDLmfJc8CAEOJ9RxIuGOpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOqhodQlhC+bq0+yqpU3kGZg4Gn8MB8GA1UdIwQY MBaAFCj9ZuQ6EEYzsnusU5uYvfjr+smuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84ZWQzYjctYmIyZC00ZjRkLTlkYjYt MjY3NjY5ZjM1NjQ4LzEvNnFHaDFDV0VMNXVyVDdLcWxUZVFabURnYWZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi84ZWQzYjctYmIyZC00ZjRkLTlkYjYtMjY3NjY5ZjM1NjQ4 LzEvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYjOMA0G CSqGSIb3DQEBCwUAA4IBAQA2hud1rpHXXL4wFpyM4OH/kb1eWuZtmvNV8vjkGuYq Vec48O2YRpFRYxEVIUnGBcjZMnT1LvBn2jacLhvjt8tyH1rrUVyRBVmYmNh6E6xS V9K6+z2ZaaLsxUhWd6WKq49W/othJoEPeQxp3V3m55Zy48xgwAp7QGO8jXxxg9yX mk3sAsI9GmPSlbzX4ofTj1F982VQtoZ3ewZPGrpbGA8kmaJUHOHofGwHQiy/gskf Xez5+2AcFx0HjfpznIn8OPZqTZ0n/HU/Irp6cuC8nkuWXu2TbTUB7EPFsmrRwWXO /jeXLKU8amGBoFYVSv9DoHcIWdyThavJG6APsxATLCzc -----END CERTIFICATE-----Generated at Sun Jan 25 16:11:19 2026 by rpki-client