This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/f6Ax4OW8pptafrcB2Q3m_1jzDBI.roa File: f6Ax4OW8pptafrcB2Q3m_1jzDBI.roa (raw, json) Hash identifier: egPj0/WWhG1KzeeOZW9kIeKIxG162Clkej5fleUo7YA= Subject key identifier: 7F:A0:31:E0:E5:BC:A6:9B:5A:7E:B7:01:D9:0D:E6:FF:58:F3:0C:12 Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Certificate serial: 019B7A5BA2CDE455C5888F34B98E3B425557 Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/f6Ax4OW8pptafrcB2Q3m_1jzDBI.roa Signing time: Thu 01 Jan 2026 16:19:44 +0000 ROA not before: Thu 01 Jan 2026 16:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212520 IP address blocks: 185.177.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:a2:cd:e4:55:c5:88:8f:34:b9:8e:3b:42:55:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Validity Not Before: Jan 1 16:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fa031e0e5bca69b5a7eb701d90de6ff58f30c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:58:12:3c:31:5b:e1:51:12:4c:41:99:97:83: a3:40:93:4a:bd:5f:ac:18:fa:c5:c0:9c:a0:d6:d8: 40:a5:20:1c:cd:f6:6d:7f:2f:0d:d7:3f:d5:bf:ff: da:50:54:5a:5e:1e:cd:42:bf:ae:f9:38:5e:46:53: b9:d2:d6:47:c0:d0:0a:2f:02:d9:e6:b1:42:a9:aa: fc:d0:f5:4b:41:c4:3d:70:44:bd:46:00:8f:d7:80: d7:fa:1a:5f:18:17:3e:aa:dc:4f:56:0c:7c:25:1b: cf:f3:10:f2:4d:66:52:86:3d:2d:9d:fa:15:42:ca: d0:60:ff:5a:20:6c:2b:59:37:3d:8d:81:18:41:0f: 71:61:65:2d:17:54:79:77:c9:68:f0:39:77:39:50: 46:27:ba:af:42:cc:d5:38:5a:0e:fc:59:ef:40:db: c4:5b:23:11:b0:45:60:78:b7:91:97:92:f3:4a:3a: 53:44:d8:00:44:1b:bc:0d:fe:13:ee:7c:cc:c0:a4: 6e:7f:5d:e7:ab:c1:db:61:c0:c8:35:75:c7:a7:ff: 6c:87:5a:f9:4d:25:aa:db:bf:45:c3:5e:6d:80:cf: a7:5f:44:6a:5b:fa:8c:96:3f:11:21:d5:70:2c:b5: 44:bf:49:16:2b:61:3a:1b:bb:2d:70:7c:b6:07:65: 92:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A0:31:E0:E5:BC:A6:9B:5A:7E:B7:01:D9:0D:E6:FF:58:F3:0C:12 X509v3 Authority Key Identifier: keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/f6Ax4OW8pptafrcB2Q3m_1jzDBI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.177.206.0/24 Signature Algorithm: sha256WithRSAEncryption 59:93:be:b7:af:ec:da:2b:45:61:b9:69:6a:76:e2:ef:2f:ad: 6b:3f:16:6f:ff:95:5a:0f:9c:a0:ff:c3:db:2e:5a:70:df:82: f1:22:8c:f2:71:f3:b3:24:fd:ca:83:ad:c1:35:e2:74:5e:1a: 67:f5:4d:2f:d8:12:78:48:88:17:94:d9:ed:5e:bc:fc:a6:9a: 79:1e:07:90:ed:da:9b:31:3e:27:b3:3a:1a:a2:62:3b:b4:fe: b0:72:cb:e4:de:e1:af:e1:5b:fb:9b:14:66:3b:f5:28:c1:c2: 8a:b1:db:ae:b4:04:44:55:e7:4c:20:ef:b5:29:81:6e:30:74: e5:9f:26:c2:e4:d6:52:2a:9e:d5:a3:86:a7:b6:f8:c6:9c:76: 7a:c2:24:51:33:9c:56:0e:8c:2c:af:c9:08:d4:73:e2:ac:4b: 48:dd:4b:10:da:f9:bf:0f:69:e7:f2:48:08:c2:d7:88:35:4f: 09:ba:a1:f4:65:e7:d8:0c:3c:a8:18:cd:74:e6:05:f4:71:45: da:b1:44:ac:c9:47:11:a4:49:a5:5d:a9:69:00:0e:42:e2:89: 6c:ee:57:13:c8:26:e7:62:82:8d:17:b4:6d:20:4c:77:57:de: 41:a0:0f:35:2f:4c:23:1e:89:17:13:ef:b2:f6:5b:21:9c:4a: 92:9c:59:ea -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt6W6LN5FXFiI80uY47QlVXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTk2NjY2NGVjOTZlZGJkMTJlOGU4MmU5NDBiZmI5ZmFl YzEwNWUwHhcNMjYwMTAxMTYxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmEwMzFlMGU1YmNhNjliNWE3ZWI3MDFkOTBkZTZmZjU4ZjMwYzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlgSPDFb4VESTEGZl4OjQJNKvV+s GPrFwJyg1thApSAczfZtfy8N1z/Vv//aUFRaXh7NQr+u+TheRlO50tZHwNAKLwLZ 5rFCqar80PVLQcQ9cES9RgCP14DX+hpfGBc+qtxPVgx8JRvP8xDyTWZShj0tnfoV QsrQYP9aIGwrWTc9jYEYQQ9xYWUtF1R5d8lo8Dl3OVBGJ7qvQszVOFoO/FnvQNvE WyMRsEVgeLeRl5LzSjpTRNgARBu8Df4T7nzMwKRuf13nq8HbYcDINXXHp/9sh1r5 TSWq279Fw15tgM+nX0RqW/qMlj8RIdVwLLVEv0kWK2E6G7stcHy2B2WSrwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFH+gMeDlvKabWn63AdkN5v9Y8wwSMB8GA1UdIwQY MBaAFPipZmZOyW7b0S6OgulAv7n67BBeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LbG1aazdKYnR2UkxvNkM2VUNfdWZyc0VGNC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1 LTM4MjM1NWZjMmZmMS8xL2Y2QXg0T1c4cHB0YWZyY0IyUTNtXzFqekRCSS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1LTM4MjM1NWZjMmZm MS8xLzEtS2xtWms3SmJ0dlJMbzZDNlVDX3VmcnNFRjQuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5sc4w DQYJKoZIhvcNAQELBQADggEBAFmTvrev7NorRWG5aWp24u8vrWs/Fm//lVoPnKD/ w9suWnDfgvEijPJx87Mk/cqDrcE14nReGmf1TS/YEnhIiBeU2e1evPymmnkeB5Dt 2psxPiezOhqiYju0/rByy+Te4a/hW/ubFGY79SjBwoqx2660BERV50wg77UpgW4w dOWfJsLk1lIqntWjhqe2+MacdnrCJFEznFYOjCyvyQjUc+KsS0jdSxDa+b8Paefy SAjC14g1Twm6ofRl59gMPKgYzXTmBfRxRdqxRKzJRxGkSaVdqWkADkLiiWzuVxPI Judigo0XtG0gTHdX3kGgDzUvTCMeiRcT77L2WyGcSpKcWeo= -----END CERTIFICATE-----Generated at Sun Jan 25 17:33:57 2026 by rpki-client