This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/H6GA7joAUfNPurokrgS1LJjNtfY.roa File: H6GA7joAUfNPurokrgS1LJjNtfY.roa (raw, json) Hash identifier: FKRThdMjAtwcwfUfR10ZtwzWVg2CFJr5Omg8dgAq7bQ= Subject key identifier: 1F:A1:80:EE:3A:00:51:F3:4F:BA:BA:24:AE:04:B5:2C:98:CD:B5:F6 Certificate issuer: /CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487 Certificate serial: 019B7AC7890E3E0D2E7A2B4AD7DBE3F7AD76 Authority key identifier: EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/H6GA7joAUfNPurokrgS1LJjNtfY.roa Signing time: Thu 01 Jan 2026 18:17:35 +0000 ROA not before: Thu 01 Jan 2026 18:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13030 IP address blocks: 185.198.204.0/23 maxlen: 23 2a00:f080::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:89:0e:3e:0d:2e:7a:2b:4a:d7:db:e3:f7:ad:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487 Validity Not Before: Jan 1 18:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fa180ee3a0051f34fbaba24ae04b52c98cdb5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fe:b4:1a:56:ed:63:82:5c:ba:b3:39:06:82: cd:89:6f:22:a9:31:96:03:99:cc:75:13:96:26:de: a2:55:f1:69:5a:99:94:16:a4:83:13:2f:20:12:24: 0a:74:0e:c4:6a:ee:ab:2c:b6:10:51:e8:77:69:8b: 30:3e:74:6b:73:8a:5f:a6:49:14:1c:5f:cf:1b:27: d7:3a:65:f3:ca:a3:4e:b8:54:d7:14:01:ed:e5:9f: f9:72:65:b9:af:21:dc:2b:f2:0f:91:8d:46:05:f7: 22:91:69:ca:b9:9d:3c:27:b4:0b:ee:99:a8:ee:21: cd:c5:2c:25:c6:3a:07:ac:1e:4c:26:15:38:c2:fa: 4b:39:62:d9:bd:39:7a:7a:8b:64:97:48:24:dd:a1: e9:b0:98:6c:19:5f:d1:77:1e:b3:80:0a:31:b7:67: f1:bb:90:9b:f0:f0:70:6d:53:31:f5:d5:40:ec:18: 05:cf:fe:e4:d5:3e:a7:8d:e0:1e:c5:14:9d:e9:7b: f5:59:30:31:b7:68:2d:38:0d:93:2c:3a:f8:db:4c: 85:aa:97:40:82:98:ef:c0:14:28:e8:cf:56:ea:ad: e3:0d:0a:a5:e7:92:61:69:d6:ec:bb:be:b9:27:a5: a3:1e:d3:33:bb:06:0a:f9:c8:8b:61:c6:01:fd:07: 70:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A1:80:EE:3A:00:51:F3:4F:BA:BA:24:AE:04:B5:2C:98:CD:B5:F6 X509v3 Authority Key Identifier: keyid:EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/H6GA7joAUfNPurokrgS1LJjNtfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.198.204.0/23 IPv6: 2a00:f080::/42 Signature Algorithm: sha256WithRSAEncryption 47:be:c6:ac:39:cd:20:8c:f6:f7:89:22:0a:f4:89:e6:fd:03: 98:f2:a9:f9:a9:a3:e4:2e:4b:6f:49:d6:dd:48:e9:45:b0:be: 37:d5:05:e5:45:f0:ca:56:27:8d:a7:ff:a0:d6:c3:35:c5:f7: 0f:0b:67:48:bb:7c:76:d8:ec:48:02:d0:62:f9:7d:56:02:99: f8:82:ab:36:99:bb:54:64:80:4f:f4:2e:51:e4:22:8c:d4:ce: e2:3d:2a:1c:5a:34:48:cc:aa:e8:da:c9:bf:c3:a6:d1:7d:aa: 0f:a3:d9:67:5a:9c:f6:ad:fb:d2:d4:42:0b:fb:ab:71:36:85: 43:35:ad:34:1e:f5:cd:31:77:78:0d:d4:68:08:b9:6a:82:21: 2f:d5:70:c4:61:90:67:2a:dc:5f:b5:54:24:0a:81:ec:ff:1e: 96:1a:3c:da:9a:e8:97:c8:a1:d2:82:17:2f:6f:75:97:e8:06: d6:2b:5d:98:7f:9e:33:30:60:a4:dc:91:3b:4b:de:7b:48:af: 9e:1d:83:59:7e:17:eb:b9:7d:9f:d1:2c:77:26:f7:65:7c:d9: 4f:01:fb:f1:21:3d:53:63:f7:eb:59:b6:52:74:de:ef:69:23: 86:72:d0:2e:b2:67:ca:30:0c:9a:7c:da:58:88:4d:ed:a5:e0: 46:fe:2d:81 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6x4kOPg0ueitK19vj9612MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZjRmOWRiMzBiMTljNzVlMzVhZTgwMzc5M2Y0ZTFiNGFh YTE0ODcwHhcNMjYwMTAxMTgxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmExODBlZTNhMDA1MWYzNGZiYWJhMjRhZTA0YjUyYzk4Y2RiNWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf60GlbtY4JcurM5BoLNiW8iqTGW A5nMdROWJt6iVfFpWpmUFqSDEy8gEiQKdA7Eau6rLLYQUeh3aYswPnRrc4pfpkkU HF/PGyfXOmXzyqNOuFTXFAHt5Z/5cmW5ryHcK/IPkY1GBfcikWnKuZ08J7QL7pmo 7iHNxSwlxjoHrB5MJhU4wvpLOWLZvTl6eotkl0gk3aHpsJhsGV/Rdx6zgAoxt2fx u5Cb8PBwbVMx9dVA7BgFz/7k1T6njeAexRSd6Xv1WTAxt2gtOA2TLDr420yFqpdA gpjvwBQo6M9W6q3jDQql55Jhadbsu765J6WjHtMzuwYK+ciLYcYB/QdwSwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFB+hgO46AFHzT7q6JK4EtSyYzbX2MB8GA1UdIwQY MBaAFOz0+dswsZx141roA3k/ThtKqhSHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1BUNTJ6Q3huSFhqV3VnRGVUOU9HMHFxRkljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81ZmVhOGItNTIyOC00MmY3LTgyNTYt YzgxNWU1MGVjNWU3LzEvSDZHQTdqb0FVZk5QdXJva3JnUzFMSmpOdGZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81ZmVhOGItNTIyOC00MmY3LTgyNTYtYzgxNWU1MGVjNWU3 LzEvN1BUNTJ6Q3huSFhqV3VnRGVUOU9HMHFxRkljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBucbMMA8E AgACMAkDBwYqAPCAAAAwDQYJKoZIhvcNAQELBQADggEBAEe+xqw5zSCM9veJIgr0 ieb9A5jyqfmpo+QuS29J1t1I6UWwvjfVBeVF8MpWJ42n/6DWwzXF9w8LZ0i7fHbY 7EgC0GL5fVYCmfiCqzaZu1RkgE/0LlHkIozUzuI9KhxaNEjMqujayb/DptF9qg+j 2WdanPat+9LUQgv7q3E2hUM1rTQe9c0xd3gN1GgIuWqCIS/VcMRhkGcq3F+1VCQK gez/HpYaPNqa6JfIodKCFy9vdZfoBtYrXZh/njMwYKTckTtL3ntIr54dg1l+F+u5 fZ/RLHcm92V82U8B+/EhPVNj9+tZtlJ03u9pI4Zy0C6yZ8owDJp82liITe2l4Eb+ LYE= -----END CERTIFICATE-----Generated at Mon Jan 26 01:02:04 2026 by rpki-client