This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/B6niRvNOCA4Qn9gjdIongaiMTD4.roa File: B6niRvNOCA4Qn9gjdIongaiMTD4.roa (raw, json) Hash identifier: z0N2FgYAwlcdBtKR3hMtzvunINWt5dfi0sM4cewXH/8= Subject key identifier: 07:A9:E2:46:F3:4E:08:0E:10:9F:D8:23:74:8A:27:81:A8:8C:4C:3E Certificate issuer: /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624 Certificate serial: 019B7D5CE80F546B94103542645799C9DCC3 Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/B6niRvNOCA4Qn9gjdIongaiMTD4.roa Signing time: Fri 02 Jan 2026 06:19:59 +0000 ROA not before: Fri 02 Jan 2026 06:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204834 IP address blocks: 185.237.84.0/24 maxlen: 24 185.237.86.0/23 maxlen: 23 185.237.86.0/24 maxlen: 24 185.237.87.0/24 maxlen: 24 2a0c:a700::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e8:0f:54:6b:94:10:35:42:64:57:99:c9:dc:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624 Validity Not Before: Jan 2 06:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07a9e246f34e080e109fd823748a2781a88c4c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1b:4e:7c:52:5b:f9:95:36:48:87:cf:e9:d5: 0a:34:09:b3:63:6d:48:72:16:50:56:d1:6f:89:00: 81:5b:e0:5a:bd:47:d2:0a:a0:ff:38:f7:47:5f:a9: 5e:4a:f0:c1:19:0a:4c:87:b1:ae:51:84:4a:6d:d0: 8e:85:d1:04:3a:7e:90:64:67:52:8a:c7:c7:60:25: 65:07:6a:53:d3:e2:0b:79:2f:30:92:55:7a:32:2d: 7a:05:c8:7a:b5:d7:b1:29:c8:ec:93:cc:ac:a9:6d: 53:5b:00:50:e7:39:e4:f3:e9:66:37:01:54:06:f4: 68:87:d2:cb:c0:86:b3:14:99:33:a8:4e:31:52:a8: e8:a7:d0:e4:74:be:ea:54:9f:5d:20:a0:e3:d5:4b: e5:8d:9c:48:8f:63:c0:fb:6e:eb:b1:e2:71:c2:a9: 96:bb:80:76:da:38:df:20:74:fe:93:50:5c:43:d1: 0a:36:fe:54:8a:24:c1:70:3e:d8:03:e1:64:05:a6: 34:f1:91:76:c8:1e:78:64:c9:57:84:89:53:00:9a: 68:89:8e:2e:cd:10:be:3d:7c:fb:5f:e4:c2:d7:d6: 5f:16:c0:a2:61:1b:d8:fe:cc:f3:d4:41:33:ff:2e: 13:80:42:0e:33:02:0c:6c:c0:47:19:7b:32:41:21: d2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A9:E2:46:F3:4E:08:0E:10:9F:D8:23:74:8A:27:81:A8:8C:4C:3E X509v3 Authority Key Identifier: keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/B6niRvNOCA4Qn9gjdIongaiMTD4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.237.84.0/24 185.237.86.0/23 IPv6: 2a0c:a700::/29 Signature Algorithm: sha256WithRSAEncryption 26:73:f4:b0:d0:29:2c:0e:b7:3a:91:9d:02:70:5d:33:b6:83: 6d:91:2c:2d:fd:17:9c:1f:33:46:7f:8f:73:a8:2c:42:d5:3b: c3:9d:7c:38:93:a7:82:a6:83:ce:f4:ca:56:55:09:cb:45:b3: 23:2d:89:f1:44:bd:09:e5:bb:2e:6d:24:9f:8b:bf:bf:54:46: 14:8e:b5:da:6f:0c:3f:90:c7:32:3a:f9:bd:15:bc:f4:36:12: 12:13:8c:c6:9d:d4:32:a8:b6:dd:83:07:24:71:54:2a:04:25: 33:f1:a7:82:a4:30:3d:00:92:9b:17:64:4e:96:8a:b7:af:94: f5:fc:23:23:01:89:fe:dc:38:58:ec:d8:b7:6f:b5:81:d1:e3: de:88:de:00:92:df:6b:17:cf:87:df:70:de:70:d4:2a:d2:80: 73:f4:40:3b:94:0a:81:6e:75:fa:0c:6e:16:05:8b:b1:cc:95: 96:08:84:ed:2e:a5:49:27:bf:1c:8b:1e:44:22:da:c8:53:2f: 79:05:6a:9f:4d:14:b4:45:eb:0c:59:e0:8b:96:10:90:06:01: f9:60:53:f0:1b:1e:44:8a:f6:ae:09:84:19:30:1e:db:5e:92: 2c:00:7f:18:e8:3d:35:bd:f0:93:e2:ba:8c:aa:f1:f4:90:be: e9:f4:e3:d7 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt9XOgPVGuUEDVCZFeZydzDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MDM3OWYzYWZkOTRjMGYyNmI2N2ZmZmEzNGQ2ZTk0NmMy OWQ2MjQwHhcNMjYwMTAyMDYxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2E5ZTI0NmYzNGUwODBlMTA5ZmQ4MjM3NDhhMjc4MWE4OGM0YzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhtOfFJb+ZU2SIfP6dUKNAmzY21I chZQVtFviQCBW+BavUfSCqD/OPdHX6leSvDBGQpMh7GuUYRKbdCOhdEEOn6QZGdS isfHYCVlB2pT0+ILeS8wklV6Mi16Bch6tdexKcjsk8ysqW1TWwBQ5znk8+lmNwFU BvRoh9LLwIazFJkzqE4xUqjop9DkdL7qVJ9dIKDj1UvljZxIj2PA+27rseJxwqmW u4B22jjfIHT+k1BcQ9EKNv5UiiTBcD7YA+FkBaY08ZF2yB54ZMlXhIlTAJpoiY4u zRC+PXz7X+TC19ZfFsCiYRvY/szz1EEz/y4TgEIOMwIMbMBHGXsyQSHSLQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFAep4kbzTggOEJ/YI3SKJ4GojEw+MB8GA1UdIwQY MBaAFPkDefOv2UwPJrZ//6NNbpRsKdYkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1RTjU4Nl9aVEE4bXRuX19vMDF1bEd3cDFpUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvZGU3ZWY2LWJkYWUtNDcxNy1iMDYx LTZmMjA3OTUxYzRiMi8xL0I2bmlSdk5PQ0E0UW45Z2pkSW9uZ2FpTVRENC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDYvZGU3ZWY2LWJkYWUtNDcxNy1iMDYxLTZmMjA3OTUxYzRi Mi8xLzEtUU41ODZfWlRBOG10bl9fbzAxdWxHd3AxaVEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAC57VQD BAG57VYwDQQCAAIwBwMFAyoMpwAwDQYJKoZIhvcNAQELBQADggEBACZz9LDQKSwO tzqRnQJwXTO2g22RLC39F5wfM0Z/j3OoLELVO8OdfDiTp4Kmg870ylZVCctFsyMt ifFEvQnluy5tJJ+Lv79URhSOtdpvDD+QxzI6+b0VvPQ2EhITjMad1DKott2DByRx VCoEJTPxp4KkMD0AkpsXZE6WirevlPX8IyMBif7cOFjs2LdvtYHR496I3gCS32sX z4ffcN5w1CrSgHP0QDuUCoFudfoMbhYFi7HMlZYIhO0upUknvxyLHkQi2shTL3kF ap9NFLRF6wxZ4IuWEJAGAflgU/AbHkSK9q4JhBkwHttekiwAfxjoPTW98JPiuoyq 8fSQvun049c= -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:14 2026 by rpki-client