This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/n6aTPqlGJJGfkw2ndfd9kElHIUE.roa File: n6aTPqlGJJGfkw2ndfd9kElHIUE.roa (raw, json) Hash identifier: eTwfqmOJCDHZnlmX4vz/z/iYHX8NIjRLHjRN1ZBjk40= Subject key identifier: 9F:A6:93:3E:A9:46:24:91:9F:93:0D:A7:75:F7:7D:90:49:47:21:41 Certificate issuer: /CN=5ab1996515884434b87882b5b972a6e529ffb00b Certificate serial: 019B7EA5888AF884E199343FD5A8436B85B5 Authority key identifier: 5A:B1:99:65:15:88:44:34:B8:78:82:B5:B9:72:A6:E5:29:FF:B0:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/n6aTPqlGJJGfkw2ndfd9kElHIUE.roa Signing time: Fri 02 Jan 2026 12:18:56 +0000 ROA not before: Fri 02 Jan 2026 12:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56704 IP address blocks: 185.159.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.mft rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:88:8a:f8:84:e1:99:34:3f:d5:a8:43:6b:85:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ab1996515884434b87882b5b972a6e529ffb00b Validity Not Before: Jan 2 12:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fa6933ea94624919f930da775f77d9049472141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ec:8a:b3:e9:a9:45:da:4c:37:85:5c:e4:af: c9:00:42:48:ad:f1:9e:b8:21:ae:53:0b:9d:c0:b9: 25:b8:a4:8b:f4:b6:46:a7:f0:92:f3:c3:3e:26:b1: 95:22:0a:e9:fd:48:70:35:b9:18:da:7d:f9:04:02: 8a:ed:80:4c:ba:cf:25:7d:65:18:b7:4e:27:58:58: 65:03:e2:03:fc:c0:f0:81:8f:49:c4:18:80:a7:99: 86:01:6b:18:86:cd:7f:66:13:62:3d:8d:4a:59:ea: c7:08:74:91:16:2b:5c:20:38:1b:52:6a:2a:e2:95: 86:75:21:e6:65:15:a8:d9:cd:24:2d:19:12:35:c0: 08:31:72:d5:11:70:f0:92:a5:76:bf:72:b6:97:97: a3:b1:6e:90:e4:3f:49:f4:36:bf:42:4e:30:67:17: 83:9b:a9:e7:2a:d4:32:24:92:ac:e7:39:c1:a9:0b: 38:34:94:40:ae:84:73:8c:71:7d:e8:6f:07:b9:29: a3:db:ee:d6:36:fc:2e:95:28:70:2e:a1:0e:eb:20: 25:58:c2:60:0d:0f:45:f3:c2:fe:ab:8c:88:b1:f7: 14:3e:36:58:7b:3a:ae:23:d0:58:df:1f:28:a4:11: 6f:87:73:a2:3f:f4:3e:e6:fb:84:c5:31:73:c7:2c: 7c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A6:93:3E:A9:46:24:91:9F:93:0D:A7:75:F7:7D:90:49:47:21:41 X509v3 Authority Key Identifier: keyid:5A:B1:99:65:15:88:44:34:B8:78:82:B5:B9:72:A6:E5:29:FF:B0:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/n6aTPqlGJJGfkw2ndfd9kElHIUE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.159.158.0/24 Signature Algorithm: sha256WithRSAEncryption 74:7a:78:d1:d1:a3:c1:af:df:a9:49:d8:57:57:60:23:4b:34: d3:06:fc:a7:ab:9a:0f:f9:08:15:0e:ca:e1:f1:9d:1a:e9:1e: 45:a2:21:e0:6a:0a:6b:73:62:ba:2d:fb:60:66:3e:18:97:a2: 5a:8e:1e:fc:e0:17:18:28:4f:ba:19:64:a1:a2:66:8a:70:02: e0:49:7a:7a:75:6e:80:b2:c0:2f:ff:5e:4a:36:58:f6:54:cf: 86:b6:39:be:0f:ad:4d:37:b8:27:7e:cb:e0:0b:c4:62:75:bd: 38:bd:ee:bf:f1:a3:dd:ef:a9:92:67:39:66:25:79:b7:1d:e7: 8e:b8:86:18:e2:ef:72:d8:7f:0f:52:a8:a1:d7:7f:86:2e:d5: d1:e6:ec:75:5a:3c:5c:eb:d3:ff:07:fb:56:f5:39:3c:02:85: 3d:59:5a:a3:02:f2:09:ee:3c:c1:3b:d5:1a:10:df:dd:a1:70: 97:fa:c6:59:38:85:c8:14:e0:7b:6c:49:1f:97:45:c0:be:19: a3:51:bf:05:8d:6d:4f:84:ae:5e:de:5c:1c:03:c5:a5:d5:4e: 66:4c:69:4b:3b:83:50:fa:cd:f3:5c:f4:2a:c7:cc:d0:d8:f5: b1:86:92:cc:4f:18:72:99:63:0b:a1:d4:33:40:c2:04:5c:37: 5e:5e:eb:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pYiK+IThmTQ/1ahDa4W1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhYjE5OTY1MTU4ODQ0MzRiODc4ODJiNWI5NzJhNmU1Mjlm ZmIwMGIwHhcNMjYwMTAyMTIxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmE2OTMzZWE5NDYyNDkxOWY5MzBkYTc3NWY3N2Q5MDQ5NDcyMTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteyKs+mpRdpMN4Vc5K/JAEJIrfGe uCGuUwudwLkluKSL9LZGp/CS88M+JrGVIgrp/UhwNbkY2n35BAKK7YBMus8lfWUY t04nWFhlA+ID/MDwgY9JxBiAp5mGAWsYhs1/ZhNiPY1KWerHCHSRFitcIDgbUmoq 4pWGdSHmZRWo2c0kLRkSNcAIMXLVEXDwkqV2v3K2l5ejsW6Q5D9J9Da/Qk4wZxeD m6nnKtQyJJKs5znBqQs4NJRAroRzjHF96G8HuSmj2+7WNvwulShwLqEO6yAlWMJg DQ9F88L+q4yIsfcUPjZYezquI9BY3x8opBFvh3OiP/Q+5vuExTFzxyx8sQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ+mkz6pRiSRn5MNp3X3fZBJRyFBMB8GA1UdIwQY MBaAFFqxmWUViEQ0uHiCtblypuUp/7ALMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3JHWlpSV0lSRFM0ZUlLMXVYS201U25fc0FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85NGM5MTktZTZlYS00ZTE4LWFmMTIt ZWQ1YjAxZDI1MjhjLzEvbjZhVFBxbEdKSkdma3cybmRmZDlrRWxISVVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85NGM5MTktZTZlYS00ZTE4LWFmMTItZWQ1YjAxZDI1Mjhj LzEvV3JHWlpSV0lSRFM0ZUlLMXVYS201U25fc0FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZ+eMA0G CSqGSIb3DQEBCwUAA4IBAQB0enjR0aPBr9+pSdhXV2AjSzTTBvynq5oP+QgVDsrh 8Z0a6R5FoiHgagprc2K6LftgZj4Yl6Jajh784BcYKE+6GWShomaKcALgSXp6dW6A ssAv/15KNlj2VM+Gtjm+D61NN7gnfsvgC8Ridb04ve6/8aPd76mSZzlmJXm3HeeO uIYY4u9y2H8PUqih13+GLtXR5ux1Wjxc69P/B/tW9Tk8AoU9WVqjAvIJ7jzBO9Ua EN/doXCX+sZZOIXIFOB7bEkfl0XAvhmjUb8FjW1PhK5e3lwcA8Wl1U5mTGlLO4NQ +s3zXPQqx8zQ2PWxhpLMTxhymWMLodQzQMIEXDdeXutl -----END CERTIFICATE-----Generated at Mon Jan 26 06:18:00 2026 by rpki-client