This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/6zhEBi2rGIO6yvp94BAc87oo8NE.roa File: 6zhEBi2rGIO6yvp94BAc87oo8NE.roa (raw, json) Hash identifier: buQwiuRKOBq+4oEs1t78Z05UhT+uvb28X3BhlGXBURY= Subject key identifier: EB:38:44:06:2D:AB:18:83:BA:CA:FA:7D:E0:10:1C:F3:BA:28:F0:D1 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019B7B36BF6192DE9F1C04446609B71BE32A Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/6zhEBi2rGIO6yvp94BAc87oo8NE.roa Signing time: Thu 01 Jan 2026 20:19:04 +0000 ROA not before: Thu 01 Jan 2026 20:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64267 IP address blocks: 79.98.245.0/24 maxlen: 24 185.221.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:bf:61:92:de:9f:1c:04:44:66:09:b7:1b:e3:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Jan 1 20:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb3844062dab1883bacafa7de0101cf3ba28f0d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:61:67:b3:6d:10:20:8f:ae:35:99:e0:f7:9a: df:4a:c9:99:1e:50:53:63:55:8d:fa:ba:aa:7c:bb: e3:d9:66:a0:3e:df:80:4e:a8:e6:f8:3b:91:ef:4a: 6b:17:55:33:fa:15:06:7a:7e:92:84:83:cb:ed:d9: 42:d2:c9:8f:1d:a5:20:a5:b4:c6:76:00:a2:35:1c: 04:0e:39:7f:1a:d9:f9:17:dc:14:ce:37:7e:d0:9a: f8:08:65:71:1e:ed:a5:bc:ae:02:cf:82:23:59:c0: 79:83:98:2d:c5:3b:1a:f6:59:c5:bf:03:7c:f1:9c: 79:c7:94:d8:19:f8:76:9b:91:3c:15:e7:b2:5b:cb: 7d:2f:74:6e:d1:b7:b8:4d:bf:20:94:c8:86:ea:2e: d0:c5:bc:50:d3:bc:08:af:17:7e:1e:33:ae:64:aa: 4f:42:07:db:b7:e7:74:b1:02:d1:1f:0b:3e:eb:53: 55:34:77:c0:d2:65:70:20:b9:02:60:59:8d:b0:b7: 79:fb:13:38:7a:a1:49:1c:fb:2c:03:ce:1d:23:eb: f8:8b:ea:95:bd:30:11:37:92:4c:ad:6d:65:02:36: 14:cd:a6:b8:29:d5:0c:d6:dc:f2:60:13:57:e8:01: b8:f1:58:42:90:2a:44:77:27:5d:f8:58:74:1f:89: 18:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:38:44:06:2D:AB:18:83:BA:CA:FA:7D:E0:10:1C:F3:BA:28:F0:D1 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/6zhEBi2rGIO6yvp94BAc87oo8NE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.98.245.0/24 185.221.24.0/24 Signature Algorithm: sha256WithRSAEncryption ac:02:09:82:6c:b9:18:ea:9f:fb:b6:15:d7:d3:a7:50:2e:26: 1a:db:01:f9:01:27:ee:79:29:90:03:c6:38:4d:1c:ff:04:20: 40:ef:74:df:5b:ec:9b:1c:8e:93:dc:89:69:99:5f:19:0c:b7: bf:b8:d5:f5:55:0f:25:67:5a:d7:b5:f7:82:dd:0a:b9:11:4a: 01:18:c8:c2:20:30:52:8d:78:9f:f4:68:3c:24:18:ca:6e:4a: 11:f8:e9:a3:a2:a8:b9:a3:c7:b0:d6:b8:12:80:ef:0c:4d:28: e6:43:e7:07:df:6d:8c:7e:4c:02:4c:59:36:6a:67:a5:31:1b: 96:22:00:99:e4:71:b8:09:fe:91:06:f7:82:1d:cb:8b:fb:92: 89:b4:e1:72:97:a2:fe:6d:50:b3:b3:45:cf:3f:88:5b:13:48: 50:3c:d4:0e:78:7c:04:fe:26:70:8b:bd:60:fd:ca:f9:75:1b: 68:e1:46:be:3f:00:c8:53:ba:78:31:4b:31:a9:53:f4:a4:1a: fb:9d:d2:94:2d:6a:f7:3f:49:ee:cf:5d:97:6b:4f:57:b6:8c: e7:3c:c4:45:9c:a6:1a:d4:30:28:83:fd:1c:0b:ad:ce:65:89: a1:ae:a3:5e:c8:5b:45:13:ed:eb:6c:9b:93:57:51:e2:c1:3d: b0:38:6d:36 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Nr9hkt6fHAREZgm3G+MqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwMTAxMjAxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjM4NDQwNjJkYWIxODgzYmFjYWZhN2RlMDEwMWNmM2JhMjhmMGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WFns20QII+uNZng95rfSsmZHlBT Y1WN+rqqfLvj2WagPt+ATqjm+DuR70prF1Uz+hUGen6ShIPL7dlC0smPHaUgpbTG dgCiNRwEDjl/Gtn5F9wUzjd+0Jr4CGVxHu2lvK4Cz4IjWcB5g5gtxTsa9lnFvwN8 8Zx5x5TYGfh2m5E8FeeyW8t9L3Ru0be4Tb8glMiG6i7QxbxQ07wIrxd+HjOuZKpP Qgfbt+d0sQLRHws+61NVNHfA0mVwILkCYFmNsLd5+xM4eqFJHPssA84dI+v4i+qV vTARN5JMrW1lAjYUzaa4KdUM1tzyYBNX6AG48VhCkCpEdydd+Fh0H4kYXQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOs4RAYtqxiDusr6feAQHPO6KPDRMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvNnpoRUJpMnJHSU82eXZwOTRCQWM4N29vOE5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT2L1AwQA ud0YMA0GCSqGSIb3DQEBCwUAA4IBAQCsAgmCbLkY6p/7thXX06dQLiYa2wH5ASfu eSmQA8Y4TRz/BCBA73TfW+ybHI6T3IlpmV8ZDLe/uNX1VQ8lZ1rXtfeC3Qq5EUoB GMjCIDBSjXif9Gg8JBjKbkoR+Omjoqi5o8ew1rgSgO8MTSjmQ+cH322MfkwCTFk2 amelMRuWIgCZ5HG4Cf6RBveCHcuL+5KJtOFyl6L+bVCzs0XPP4hbE0hQPNQOeHwE /iZwi71g/cr5dRto4Ua+PwDIU7p4MUsxqVP0pBr7ndKULWr3P0nuz12Xa09Xtozn PMRFnKYa1DAog/0cC63OZYmhrqNeyFtFE+3rbJuTV1HiwT2wOG02 -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:53 2026 by rpki-client