This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/6mr_negPNHsR5J0MSqEp_ieYKiU.roa File: 6mr_negPNHsR5J0MSqEp_ieYKiU.roa (raw, json) Hash identifier: R2V3SBjHf1L7l3zp37riDQXw6pyaQxn29F6fxbrUIig= Subject key identifier: EA:6A:FF:9D:E8:0F:34:7B:11:E4:9D:0C:4A:A1:29:FE:27:98:2A:25 Certificate issuer: /CN=985ae6c59c35e460387daebcfb866f8a1ebb3686 Certificate serial: 019B7D5CE472FE316D4238FCC4ECDEE29ABA Authority key identifier: 98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/6mr_negPNHsR5J0MSqEp_ieYKiU.roa Signing time: Fri 02 Jan 2026 06:19:58 +0000 ROA not before: Fri 02 Jan 2026 06:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199487 IP address blocks: 185.9.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e4:72:fe:31:6d:42:38:fc:c4:ec:de:e2:9a:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=985ae6c59c35e460387daebcfb866f8a1ebb3686 Validity Not Before: Jan 2 06:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea6aff9de80f347b11e49d0c4aa129fe27982a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4e:bb:6a:ee:3a:bf:98:e2:17:0e:a6:86:76: 7e:5c:f1:e7:7b:3a:32:db:4e:63:73:8a:18:5f:8a: 86:13:a6:9e:3e:24:a0:83:5a:b3:e0:72:7e:32:e6: 44:87:b4:41:f3:9a:48:15:2e:e2:4a:c1:2c:3f:b6: 41:2b:2b:8a:90:b9:c5:90:ef:0f:ca:70:5b:81:cd: 2c:a1:f7:00:9b:86:00:62:d2:28:60:8e:ec:7f:0b: 36:a7:05:22:b3:ec:e1:c7:18:41:fa:bb:53:88:df: 01:16:c2:63:08:cb:c3:08:b1:c0:e4:e5:2f:07:fd: 02:63:e9:5a:94:c4:7f:15:34:6c:44:ed:28:e3:8c: 8f:d9:a3:70:81:5f:fa:2c:38:cb:8c:df:ed:40:56: 36:01:e9:d1:57:4a:35:80:7c:70:43:a3:c4:ad:65: 47:51:93:78:e0:78:40:28:0b:45:38:fc:24:ea:65: bb:fc:8d:e8:f9:4e:e5:d5:9f:8e:26:9a:47:6e:21: 8a:cb:14:cf:cb:91:c0:46:68:ed:c4:38:ce:4d:4f: f4:3c:81:12:2e:ce:9e:c3:a5:28:11:0a:9a:5b:d9: 9c:8a:67:a9:0b:98:40:45:0f:16:53:e4:7d:b2:db: 27:77:e8:43:97:17:7a:0b:43:2e:7e:bb:b9:f2:78: ab:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:6A:FF:9D:E8:0F:34:7B:11:E4:9D:0C:4A:A1:29:FE:27:98:2A:25 X509v3 Authority Key Identifier: keyid:98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/6mr_negPNHsR5J0MSqEp_ieYKiU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.9.21.0/24 Signature Algorithm: sha256WithRSAEncryption a3:85:a9:1d:5d:55:b0:c4:d6:86:a0:0c:15:db:fe:18:00:63: 16:be:28:15:85:6e:c5:81:ee:a9:52:68:19:13:a6:ad:c6:b2: bd:20:59:52:ba:fd:36:60:e3:db:b4:11:19:74:3b:82:9a:9b: d6:4d:70:82:3c:0a:81:11:f0:bc:6c:14:90:d7:89:53:8b:ae: 8c:1f:cf:05:bb:30:37:e3:04:01:17:fb:9b:3d:d0:88:e3:29: 39:af:1d:99:79:ec:6b:4f:c9:f0:70:79:29:8a:44:6e:11:2a: 86:f2:ad:18:fd:24:a8:1d:af:c8:8a:7b:22:b1:19:21:6c:56: 9c:5d:77:0f:a2:73:e7:5c:fc:3f:57:d6:aa:98:e8:16:28:7d: a8:31:90:59:69:16:da:24:1f:25:43:d7:d6:27:16:15:12:1c: 4c:6d:fc:64:58:ea:44:3f:ed:49:65:0f:34:ba:f2:3d:d5:0b: 62:9f:73:82:11:b1:c6:64:a5:d7:75:5e:62:2a:96:0a:88:2e: 07:7e:07:bd:59:7b:05:47:fe:eb:48:7a:ee:08:8f:d6:39:3e: 33:ce:c6:1f:fa:3b:cd:3c:2a:38:d9:43:e1:2a:44:2d:6f:a3: 29:7a:ee:62:0c:1a:b1:d6:6c:4a:55:6c:59:af:14:52:0d:a5: 39:45:f2:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XORy/jFtQjj8xOze4pq6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NWFlNmM1OWMzNWU0NjAzODdkYWViY2ZiODY2ZjhhMWVi YjM2ODYwHhcNMjYwMTAyMDYxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTZhZmY5ZGU4MGYzNDdiMTFlNDlkMGM0YWExMjlmZTI3OTgyYTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1k67au46v5jiFw6mhnZ+XPHnezoy 205jc4oYX4qGE6aePiSgg1qz4HJ+MuZEh7RB85pIFS7iSsEsP7ZBKyuKkLnFkO8P ynBbgc0sofcAm4YAYtIoYI7sfws2pwUis+zhxxhB+rtTiN8BFsJjCMvDCLHA5OUv B/0CY+lalMR/FTRsRO0o44yP2aNwgV/6LDjLjN/tQFY2AenRV0o1gHxwQ6PErWVH UZN44HhAKAtFOPwk6mW7/I3o+U7l1Z+OJppHbiGKyxTPy5HARmjtxDjOTU/0PIES Ls6ew6UoEQqaW9mcimepC5hARQ8WU+R9stsnd+hDlxd6C0Mufru58nirnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOpq/53oDzR7EeSdDEqhKf4nmColMB8GA1UdIwQY MBaAFJha5sWcNeRgOH2uvPuGb4oeuzaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUZybXhadzE1R0E0ZmE2OC00WnZpaDY3Tm9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84YjkwNmItOWMxZC00NWQ5LTg2YmEt YzdmZTYyMjI3ZGYzLzEvNm1yX25lZ1BOSHNSNUowTVNxRXBfaWVZS2lVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84YjkwNmItOWMxZC00NWQ5LTg2YmEtYzdmZTYyMjI3ZGYz LzEvbUZybXhadzE1R0E0ZmE2OC00WnZpaDY3Tm9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQkVMA0G CSqGSIb3DQEBCwUAA4IBAQCjhakdXVWwxNaGoAwV2/4YAGMWvigVhW7Fge6pUmgZ E6atxrK9IFlSuv02YOPbtBEZdDuCmpvWTXCCPAqBEfC8bBSQ14lTi66MH88FuzA3 4wQBF/ubPdCI4yk5rx2ZeexrT8nwcHkpikRuESqG8q0Y/SSoHa/IinsisRkhbFac XXcPonPnXPw/V9aqmOgWKH2oMZBZaRbaJB8lQ9fWJxYVEhxMbfxkWOpEP+1JZQ80 uvI91Qtin3OCEbHGZKXXdV5iKpYKiC4Hfge9WXsFR/7rSHruCI/WOT4zzsYf+jvN PCo42UPhKkQtb6Mpeu5iDBqx1mxKVWxZrxRSDaU5RfL8 -----END CERTIFICATE-----Generated at Sun Jan 25 19:02:18 2026 by rpki-client