This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/6MLGeDuttKLHmwjE_YPGG7vZqNI.roa File: 6MLGeDuttKLHmwjE_YPGG7vZqNI.roa (raw, json) Hash identifier: xpTof2JHX21v/k79XQ8lsV/BL0epT0Yvy5Nz69a9itI= Subject key identifier: E8:C2:C6:78:3B:AD:B4:A2:C7:9B:08:C4:FD:83:C6:1B:BB:D9:A8:D2 Certificate issuer: /CN=06c44b821ab5db542cc536c1f88b84baf0621654 Certificate serial: 019B7FF1492BB01FB33A9482A00B99E79F01 Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/6MLGeDuttKLHmwjE_YPGG7vZqNI.roa Signing time: Fri 02 Jan 2026 18:21:17 +0000 ROA not before: Fri 02 Jan 2026 18:21:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203409 IP address blocks: 185.128.36.0/24 maxlen: 24 185.128.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:49:2b:b0:1f:b3:3a:94:82:a0:0b:99:e7:9f:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654 Validity Not Before: Jan 2 18:21:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8c2c6783badb4a2c79b08c4fd83c61bbbd9a8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:60:ef:81:f1:8f:e3:46:78:38:da:f7:57:8d: bc:7b:d5:35:75:72:24:a2:e5:26:25:40:e6:06:0d: 2f:33:99:51:2b:23:43:e2:4f:6b:27:f1:35:30:ae: 6a:f6:4a:92:f9:87:1c:40:46:4e:09:d1:b6:dd:2b: 70:4a:8c:d2:e2:36:3e:12:2f:1f:8f:53:b2:91:ab: c4:ef:b4:33:49:93:33:5c:34:8d:cb:b6:08:36:2e: 94:6e:94:1b:56:19:17:8c:2a:fa:fb:b5:62:46:f0: 17:ff:46:0c:17:07:e0:bd:cc:12:17:72:78:0c:a6: b9:79:89:04:a9:f0:55:55:ba:3b:45:c4:1b:87:38: f1:f6:88:96:bd:47:a9:72:4e:dd:83:8f:4f:ce:cb: cf:12:5b:cc:b2:0e:a0:c6:1d:8b:e5:62:ed:64:a3: 10:91:40:bd:1d:36:09:d1:b2:62:7b:75:27:a9:e2: 4e:27:13:7b:f9:5d:45:85:de:59:cd:1e:05:23:1a: b3:0b:45:a0:3e:e3:2e:4b:e8:10:30:de:0d:27:c1: 98:77:85:5f:d7:25:86:5f:fc:41:4a:e1:dd:b3:61: fe:cf:59:a9:7b:3c:6b:43:34:a3:3a:82:29:f2:44: 5e:21:e8:0f:bd:f9:3a:f8:d4:e3:b8:b5:3b:cb:37: 3e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C2:C6:78:3B:AD:B4:A2:C7:9B:08:C4:FD:83:C6:1B:BB:D9:A8:D2 X509v3 Authority Key Identifier: keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/6MLGeDuttKLHmwjE_YPGG7vZqNI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.128.36.0/23 Signature Algorithm: sha256WithRSAEncryption 27:4f:cf:f6:c1:48:9e:a5:b6:48:4a:16:8c:85:e1:bd:d7:29: c1:37:46:ee:93:27:44:4c:2a:94:4b:1b:18:0e:0d:d2:c4:0a: 70:17:ca:15:11:c0:51:c7:8e:1f:9f:a6:6b:fd:79:70:40:6c: 53:1d:31:83:bb:ef:4d:bd:48:18:4a:f6:c3:0e:27:64:33:06: e2:78:06:54:af:d6:73:54:e8:1f:4e:9d:e2:32:ed:2e:5d:64: 90:f4:46:6f:02:51:8b:a0:0b:e8:10:83:8a:78:d9:3b:a1:6e: 45:68:6c:f3:37:1e:e4:d1:c5:b2:75:c1:28:71:89:6c:76:2d: 3c:71:9a:ef:78:70:28:cc:fd:47:1b:29:3d:53:3e:05:7d:39: c9:61:71:d0:0c:58:2b:2a:ba:97:7a:d6:8e:dc:1f:75:3a:87: 59:3b:b4:95:75:7d:5f:30:7e:e5:6c:87:0b:e0:d7:8e:aa:80: b9:9e:23:3f:1d:76:49:41:4b:58:49:16:e3:97:c1:91:9e:8b: c8:40:10:b6:1f:76:0c:2d:b2:89:93:d4:da:eb:2f:44:b4:0b: 68:f2:10:9f:77:a9:38:30:da:d4:f3:59:8c:dc:24:1e:ee:1c: 23:32:36:b5:f6:c2:0d:8c:67:92:aa:ce:ba:85:2b:3e:82:9e: a3:5f:a7:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8UkrsB+zOpSCoAuZ558BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YzQ0YjgyMWFiNWRiNTQyY2M1MzZjMWY4OGI4NGJhZjA2 MjE2NTQwHhcNMjYwMTAyMTgyMTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGMyYzY3ODNiYWRiNGEyYzc5YjA4YzRmZDgzYzYxYmJiZDlhOGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWDvgfGP40Z4ONr3V428e9U1dXIk ouUmJUDmBg0vM5lRKyND4k9rJ/E1MK5q9kqS+YccQEZOCdG23StwSozS4jY+Ei8f j1OykavE77QzSZMzXDSNy7YINi6UbpQbVhkXjCr6+7ViRvAX/0YMFwfgvcwSF3J4 DKa5eYkEqfBVVbo7RcQbhzjx9oiWvUepck7dg49PzsvPElvMsg6gxh2L5WLtZKMQ kUC9HTYJ0bJie3UnqeJOJxN7+V1Fhd5ZzR4FIxqzC0WgPuMuS+gQMN4NJ8GYd4Vf 1yWGX/xBSuHds2H+z1mpezxrQzSjOoIp8kReIegPvfk6+NTjuLU7yzc+KwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOjCxng7rbSix5sIxP2Dxhu72ajSMB8GA1UdIwQY MBaAFAbES4IatdtULMU2wfiLhLrwYhZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83OWNlZjgtNDNhMS00MDg5LTgwOWYt ZGM5ODQyNjU1NjdkLzEvNk1MR2VEdXR0S0xIbXdqRV9ZUEdHN3ZacU5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi83OWNlZjgtNDNhMS00MDg5LTgwOWYtZGM5ODQyNjU1Njdk LzEvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuYAkMA0G CSqGSIb3DQEBCwUAA4IBAQAnT8/2wUiepbZIShaMheG91ynBN0bukydETCqUSxsY Dg3SxApwF8oVEcBRx44fn6Zr/XlwQGxTHTGDu+9NvUgYSvbDDidkMwbieAZUr9Zz VOgfTp3iMu0uXWSQ9EZvAlGLoAvoEIOKeNk7oW5FaGzzNx7k0cWydcEocYlsdi08 cZrveHAozP1HGyk9Uz4FfTnJYXHQDFgrKrqXetaO3B91OodZO7SVdX1fMH7lbIcL 4NeOqoC5niM/HXZJQUtYSRbjl8GRnovIQBC2H3YMLbKJk9Ta6y9EtAto8hCfd6k4 MNrU81mM3CQe7hwjMja19sINjGeSqs66hSs+gp6jX6eW -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:48 2026 by rpki-client