This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/6MvEEf7_I3zO3ShtqYd8LKtfRq8.roa File: 6MvEEf7_I3zO3ShtqYd8LKtfRq8.roa (raw, json) Hash identifier: lIgvAYq1Ass4AfPtbYog1dJL/68LEdNig8uh3pGw9vM= Subject key identifier: E8:CB:C4:11:FE:FF:23:7C:CE:DD:28:6D:A9:87:7C:2C:AB:5F:46:AF Certificate issuer: /CN=25a879d628fe5ec8a761c4748679993f9c69f8b4 Certificate serial: 019B7910FC43FC4013349F8C2F10B6A4D2E6 Authority key identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/6MvEEf7_I3zO3ShtqYd8LKtfRq8.roa Signing time: Thu 01 Jan 2026 10:18:34 +0000 ROA not before: Thu 01 Jan 2026 10:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8437 IP address blocks: 185.245.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:fc:43:fc:40:13:34:9f:8c:2f:10:b6:a4:d2:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25a879d628fe5ec8a761c4748679993f9c69f8b4 Validity Not Before: Jan 1 10:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8cbc411feff237ccedd286da9877c2cab5f46af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:14:f7:e9:e9:2f:e5:bd:37:84:1a:93:61:10: 68:c0:a0:71:f8:9c:d4:b7:a6:de:13:c1:f1:59:dd: 8e:05:35:16:2a:29:3c:f6:18:7e:3c:00:c2:b8:33: f4:39:57:99:65:b5:5f:b7:15:31:a8:0c:f9:16:38: 0d:b1:73:de:81:dd:3a:d2:fb:f9:ff:7c:6a:df:8f: 4d:67:10:93:31:f0:f5:31:eb:6d:27:b7:97:69:59: 95:54:41:e6:c4:d9:1f:20:3e:ad:0e:84:1c:33:27: 1e:cb:42:a2:c7:d2:59:a0:a1:8a:8b:84:ed:9d:74: 3d:36:64:9c:c0:f3:8d:5b:fd:44:73:14:e8:83:ca: a9:a0:19:66:ad:11:62:07:ba:18:ad:17:9d:c6:a6: ec:96:f4:ff:79:7f:41:24:d1:fd:2d:b1:b6:a8:8f: b0:fd:e3:20:bb:8b:81:63:4a:4f:61:3d:6a:e1:9c: 7a:b5:41:39:f1:eb:8e:2f:c0:22:d3:90:a4:b8:28: e1:24:89:eb:f6:5d:ea:b4:21:6d:0d:c8:c7:67:b4: 5a:48:dc:c0:43:5e:ef:5f:b2:28:be:66:13:f7:3c: 1e:3a:8e:f2:7f:cc:5e:de:49:8f:46:f2:7e:16:c3: 3d:4d:c8:d4:a0:2f:61:28:89:5c:2e:f6:ba:db:20: 84:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:CB:C4:11:FE:FF:23:7C:CE:DD:28:6D:A9:87:7C:2C:AB:5F:46:AF X509v3 Authority Key Identifier: keyid:25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/6MvEEf7_I3zO3ShtqYd8LKtfRq8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.245.65.0/24 Signature Algorithm: sha256WithRSAEncryption 06:13:eb:64:7b:1a:6f:ff:7a:40:1a:df:e9:0b:0d:1b:53:97: d4:47:1f:f6:f4:aa:7d:a0:51:75:f1:9a:ad:c0:02:9d:ac:e3: 0c:43:f5:56:7d:b6:e4:c4:f7:71:3a:aa:3b:c5:da:ea:76:e6: ee:73:a9:9f:91:1b:0e:1d:0a:94:91:73:ad:99:74:d8:d4:98: 1a:56:fc:8c:0f:ec:c1:a2:32:5c:0f:71:e8:2d:af:68:65:0d: 19:66:af:6f:9f:bb:ee:63:88:a1:16:1a:45:29:d0:8f:62:02: 03:00:13:33:4f:dd:97:d8:e6:68:01:cb:67:83:57:fc:b1:79: dc:8a:78:c0:6b:3e:99:0e:33:06:82:52:85:ee:b8:fc:54:32: b4:95:cb:a4:13:9e:11:74:74:f6:4d:1c:70:c4:7e:2d:e4:80: 58:d0:df:c2:f2:59:8d:e0:5a:05:38:89:43:bd:e0:c0:2c:61: 37:23:1c:6e:ea:32:fd:5f:14:34:47:67:25:8d:5b:86:ad:41: 49:3a:d7:8c:d5:05:84:13:5c:26:f0:36:19:25:50:87:1f:20: 02:30:ec:57:9c:c6:85:75:1b:2b:21:5e:66:c2:d0:e6:a6:c8: b8:12:f1:21:61:20:25:3b:cf:9c:ea:12:42:8e:ed:02:55:15: c8:86:9d:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EPxD/EATNJ+MLxC2pNLmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YTg3OWQ2MjhmZTVlYzhhNzYxYzQ3NDg2Nzk5OTNmOWM2 OWY4YjQwHhcNMjYwMTAxMTAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGNiYzQxMWZlZmYyMzdjY2VkZDI4NmRhOTg3N2MyY2FiNWY0NmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9RT36ekv5b03hBqTYRBowKBx+JzU t6beE8HxWd2OBTUWKik89hh+PADCuDP0OVeZZbVftxUxqAz5FjgNsXPegd060vv5 /3xq349NZxCTMfD1MettJ7eXaVmVVEHmxNkfID6tDoQcMycey0Kix9JZoKGKi4Tt nXQ9NmScwPONW/1EcxTog8qpoBlmrRFiB7oYrRedxqbslvT/eX9BJNH9LbG2qI+w /eMgu4uBY0pPYT1q4Zx6tUE58euOL8Ai05CkuCjhJInr9l3qtCFtDcjHZ7RaSNzA Q17vX7IovmYT9zweOo7yf8xe3kmPRvJ+FsM9TcjUoC9hKIlcLva62yCEXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOjLxBH+/yN8zt0obamHfCyrX0avMB8GA1UdIwQY MBaAFCWoedYo/l7Ip2HEdIZ5mT+cafi0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yOGQ1YTctNDhmMS00NDE0LWE4NTMt ZDg2YjRjYWVkMTFkLzEvNk12RUVmN19JM3pPM1NodHFZZDhMS3RmUnE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8yOGQ1YTctNDhmMS00NDE0LWE4NTMtZDg2YjRjYWVkMTFk LzEvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufVBMA0G CSqGSIb3DQEBCwUAA4IBAQAGE+tkexpv/3pAGt/pCw0bU5fURx/29Kp9oFF18Zqt wAKdrOMMQ/VWfbbkxPdxOqo7xdrqdubuc6mfkRsOHQqUkXOtmXTY1JgaVvyMD+zB ojJcD3HoLa9oZQ0ZZq9vn7vuY4ihFhpFKdCPYgIDABMzT92X2OZoActng1f8sXnc injAaz6ZDjMGglKF7rj8VDK0lcukE54RdHT2TRxwxH4t5IBY0N/C8lmN4FoFOIlD veDALGE3Ixxu6jL9XxQ0R2cljVuGrUFJOteM1QWEE1wm8DYZJVCHHyACMOxXnMaF dRsrIV5mwtDmpsi4EvEhYSAlO8+c6hJCju0CVRXIhp1r -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:24 2026 by rpki-client