This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/EXPtgF3pZHjNUJl2LJCVZFox4fI.roa File: EXPtgF3pZHjNUJl2LJCVZFox4fI.roa (raw, json) Hash identifier: eBmFuREOuZdP3B6dGKEKnHjrjSuhSyhM471vSjq0eBQ= Subject key identifier: 11:73:ED:80:5D:E9:64:78:CD:50:99:76:2C:90:95:64:5A:31:E1:F2 Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Certificate serial: 019B7E38F5A98100CDE3F9451D8CEAF0D340 Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/EXPtgF3pZHjNUJl2LJCVZFox4fI.roa Signing time: Fri 02 Jan 2026 10:20:20 +0000 ROA not before: Fri 02 Jan 2026 10:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209768 IP address blocks: 176.105.246.0/24 maxlen: 24 2a12:5840:1f0::/48 maxlen: 48 2a12:5840:1f1::/48 maxlen: 48 2a12:5840:1f2::/48 maxlen: 48 2a12:5840:2111::/48 maxlen: 48 2a12:5840:2113::/48 maxlen: 48 2a12:5844:100::/48 maxlen: 48 2a12:5844:1141::/48 maxlen: 48 2a12:5844:1212::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f5:a9:81:00:cd:e3:f9:45:1d:8c:ea:f0:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Validity Not Before: Jan 2 10:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1173ed805de96478cd5099762c9095645a31e1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:de:90:a4:a9:80:f4:05:a8:1d:74:1b:f7:1f: b7:50:02:4c:0f:8f:53:87:09:bd:89:76:e2:ff:76: 09:cc:b5:4b:3e:d8:b3:b9:e1:f5:ee:7c:fd:bc:04: 20:e4:8f:ed:89:b4:70:73:fd:cc:c2:6e:52:23:65: ad:d0:92:0e:e0:d3:4f:fc:5d:ce:9c:f9:59:3c:a0: 05:27:c0:d8:34:7f:37:e1:57:44:cf:9b:f8:7b:77: f4:15:5e:54:e0:ab:07:f3:5b:30:91:63:66:9f:db: f5:82:a0:de:12:9c:fb:f4:15:fd:75:f2:6e:5b:3c: 60:f3:f6:8e:88:25:2c:28:8c:77:e0:5f:a5:13:9b: 49:84:3f:5c:34:d4:56:61:d5:0d:6b:3b:85:ce:8d: 1b:f5:cd:06:5a:f7:b6:6a:fd:94:ad:f2:52:25:d7: 42:a8:85:91:a5:c1:f5:ed:05:ac:7b:cf:fe:7b:96: f7:4d:7a:b8:34:02:70:f4:a9:87:bf:41:3d:87:04: 11:bc:ff:e2:b1:66:0f:ed:7f:26:77:0f:26:34:66: cf:68:ec:ad:62:fe:33:5f:50:95:be:27:66:10:d4: 9f:1a:55:88:3a:b4:78:a2:16:98:7d:e5:10:56:b6: 46:c2:af:49:94:be:83:11:22:3d:61:76:32:3a:37: b6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:73:ED:80:5D:E9:64:78:CD:50:99:76:2C:90:95:64:5A:31:E1:F2 X509v3 Authority Key Identifier: keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/EXPtgF3pZHjNUJl2LJCVZFox4fI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.105.246.0/24 IPv6: 2a12:5840:1f0::-2a12:5840:1f2:ffff:ffff:ffff:ffff:ffff 2a12:5840:2111::/48 2a12:5840:2113::/48 2a12:5844:100::/48 2a12:5844:1141::/48 2a12:5844:1212::/48 Signature Algorithm: sha256WithRSAEncryption 37:eb:cd:9f:ed:63:78:09:0c:3e:3f:04:b1:7d:08:be:52:e6: 3b:61:ac:87:0f:c5:5d:9d:6f:d0:0a:55:4f:36:b4:0a:8d:a5: 42:7f:95:61:f8:bc:e2:09:33:7f:42:96:1f:71:33:d8:06:0c: 96:94:e5:14:ac:3f:e0:b3:47:9b:15:2c:2e:c3:f9:ee:82:bc: 2c:f5:be:24:c5:e1:32:b0:cc:67:bd:d1:5c:03:75:0a:45:cb: f9:a4:37:b6:4d:9e:da:34:c7:fa:80:68:df:fd:3e:a7:a1:3b: ef:5f:93:bf:8e:c5:57:49:70:e9:0c:e6:31:8b:ca:3f:ab:a7: 3e:56:18:2b:e5:e1:c6:a7:03:b3:ed:e6:f6:06:9c:fd:5a:80: ce:01:55:a4:d0:12:18:a4:4e:54:83:1e:8a:b9:83:7a:36:af: de:a3:03:69:3b:4f:4d:a9:1c:a9:d3:c9:22:35:af:4b:c6:71: 81:e7:24:ed:f8:14:32:2a:2e:4d:b4:9a:ff:ae:22:87:b8:08: 3e:8a:5d:dd:58:f0:9a:89:c7:8a:2b:ed:77:cd:5f:fe:65:7d: ed:77:4c:cb:c3:f6:91:f2:3c:ec:25:46:c5:79:4a:fa:89:3b: c9:87:ee:16:04:5b:18:0b:17:43:2f:11:17:da:13:ac:3d:d1: da:f1:35:00 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgISAZt+OPWpgQDN4/lFHYzq8NNAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YzNlMDI3ZDJkMWMyZDM2ZDdjOTU0ODY3MjI2YzgzYjY1 ZWI1NmYwHhcNMjYwMTAyMTAyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTczZWQ4MDVkZTk2NDc4Y2Q1MDk5NzYyYzkwOTU2NDVhMzFlMWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl96QpKmA9AWoHXQb9x+3UAJMD49T hwm9iXbi/3YJzLVLPtizueH17nz9vAQg5I/tibRwc/3Mwm5SI2Wt0JIO4NNP/F3O nPlZPKAFJ8DYNH834VdEz5v4e3f0FV5U4KsH81swkWNmn9v1gqDeEpz79BX9dfJu Wzxg8/aOiCUsKIx34F+lE5tJhD9cNNRWYdUNazuFzo0b9c0GWve2av2UrfJSJddC qIWRpcH17QWse8/+e5b3TXq4NAJw9KmHv0E9hwQRvP/isWYP7X8mdw8mNGbPaOyt Yv4zX1CVvidmENSfGlWIOrR4ohaYfeUQVrZGwq9JlL6DESI9YXYyOje2BQIDAQAB o4ICUjCCAk4wHQYDVR0OBBYEFBFz7YBd6WR4zVCZdiyQlWRaMeHyMB8GA1UdIwQY MBaAFPbD4CfS0cLTbXyVSGcibIO2XrVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUt MzU2YzRkN2JiNDUyLzEvRVhQdGdGM3BaSGpOVUpsMkxKQ1ZaRm94NGZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUtMzU2YzRkN2JiNDUy LzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzAMBAIAATAGAwQAsGn2MEcE AgACMEEwEgMHBCoSWEAB8AMHACoSWEAB8gMHACoSWEAhEQMHACoSWEAhEwMHACoS WEQBAAMHACoSWEQRQQMHACoSWEQSEjANBgkqhkiG9w0BAQsFAAOCAQEAN+vNn+1j eAkMPj8EsX0IvlLmO2Gshw/FXZ1v0ApVTza0Co2lQn+VYfi84gkzf0KWH3Ez2AYM lpTlFKw/4LNHmxUsLsP57oK8LPW+JMXhMrDMZ73RXAN1CkXL+aQ3tk2e2jTH+oBo 3/0+p6E771+Tv47FV0lw6QzmMYvKP6unPlYYK+XhxqcDs+3m9gac/VqAzgFVpNAS GKROVIMeirmDejav3qMDaTtPTakcqdPJIjWvS8Zxgeck7fgUMiouTbSa/64ih7gI Popd3VjwmonHiivtd81f/mV97XdMy8P2kfI87CVGxXlK+ok7yYfuFgRbGAsXQy8R F9oTrD3R2vE1AA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:36 2026 by rpki-client