This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/a6hZcTn-XqxdaZ2xZ2ZKKRGTeno.roa File: a6hZcTn-XqxdaZ2xZ2ZKKRGTeno.roa (raw, json) Hash identifier: ePG3wnShSG6k86StztGYRl/CsawQ81C9m+3zlwarufE= Subject key identifier: 6B:A8:59:71:39:FE:5E:AC:5D:69:9D:B1:67:66:4A:29:11:93:7A:7A Certificate issuer: /CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2 Certificate serial: 019B7C110B52EFA71B1280DA677FFE9F3BC5 Authority key identifier: 2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/a6hZcTn-XqxdaZ2xZ2ZKKRGTeno.roa Signing time: Fri 02 Jan 2026 00:17:30 +0000 ROA not before: Fri 02 Jan 2026 00:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31027 IP address blocks: 176.67.184.0/21 maxlen: 24 185.125.80.0/22 maxlen: 24 2a06:b740::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:0b:52:ef:a7:1b:12:80:da:67:7f:fe:9f:3b:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2 Validity Not Before: Jan 2 00:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ba8597139fe5eac5d699db167664a2911937a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:60:a2:4a:43:b3:c8:84:5f:a9:d5:aa:7e:45: 04:57:1f:dd:c1:ee:39:38:b3:00:a6:a7:f8:b1:7f: a9:25:40:d2:4f:75:f3:ef:2a:3d:14:c1:ed:0f:f4: 02:76:b1:fa:bd:83:eb:3b:47:40:7a:91:54:41:e6: a9:cb:c4:3f:d4:c0:2b:17:a5:2c:8f:dd:c5:90:01: 61:71:56:38:06:79:54:b3:a0:00:62:fb:a3:5c:df: 1f:a6:b6:08:f5:71:1d:14:00:90:3f:6b:68:29:42: 34:2e:0a:e7:4b:10:95:02:e5:61:d1:0b:15:63:20: 7a:e7:0c:bd:9f:a6:08:1a:48:2d:27:4e:76:f6:31: a1:f0:46:6b:48:73:74:0b:a0:3d:ed:b6:da:c2:b6: 50:59:e7:14:45:77:8c:f8:92:0d:9d:76:1e:85:43: 0b:c9:95:68:91:2f:51:c6:cd:7a:e9:d6:68:18:49: a2:06:1f:95:e1:10:5e:d6:56:6a:a1:b5:86:04:2b: 22:cf:c3:88:b2:8b:b4:47:ea:4c:fc:71:82:14:da: 71:d1:b6:da:a0:27:b8:55:46:d7:b8:e9:89:02:76: 57:a8:16:b9:33:45:be:b0:8f:1a:ee:3e:05:98:a1: 01:62:17:d8:d2:76:1f:57:8c:2e:02:96:85:13:ca: 0d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A8:59:71:39:FE:5E:AC:5D:69:9D:B1:67:66:4A:29:11:93:7A:7A X509v3 Authority Key Identifier: keyid:2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/a6hZcTn-XqxdaZ2xZ2ZKKRGTeno.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.67.184.0/21 185.125.80.0/22 IPv6: 2a06:b740::/29 Signature Algorithm: sha256WithRSAEncryption 49:41:65:60:70:f4:c4:82:a3:58:9e:fa:99:b9:25:e8:d8:d8: 32:42:5c:70:60:b5:a1:36:74:8f:01:3d:e4:17:b3:4f:f0:75: 0f:00:76:ec:64:5e:ce:b7:f7:4f:65:e6:8e:0f:13:2b:c0:e8: 1d:a8:f0:61:fe:78:cd:8a:44:53:ec:29:79:70:a7:aa:8b:7b: b3:a6:03:34:58:ae:9f:1c:d0:46:2a:2c:03:b6:c1:27:70:18: b2:54:09:67:bc:af:40:1d:c0:45:28:9c:aa:a8:77:ca:63:ba: ef:1c:74:06:55:19:47:df:f7:ba:74:43:61:7a:41:9e:ea:83: b5:16:87:9a:db:34:cf:38:6b:0d:ba:b4:66:ae:03:5a:9e:ff: de:cf:72:87:6d:97:29:9a:87:27:e1:48:d4:36:0a:b2:b9:d8: ae:e4:3c:da:8d:fb:16:fc:b6:ec:58:9c:14:e2:43:e3:41:1c: 90:83:8c:bc:09:4e:d1:bb:b4:91:b5:eb:45:51:42:6a:d1:69: 85:fe:d8:27:8b:02:50:17:fe:49:e8:65:a6:90:64:46:a4:6d: f2:27:73:35:70:28:7f:0a:e7:02:26:51:c7:b4:6e:02:c7:57: 22:75:49:1d:11:10:05:04:8e:bc:fe:a5:9b:59:4f:6a:a4:61: 2b:ac:05:07 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8EQtS76cbEoDaZ3/+nzvFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMjQ5NzkzZTU5MjRhOWYyNWYzYTBhOGRkOTk0YjM3NGVi OTM3ZDIwHhcNMjYwMTAyMDAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmE4NTk3MTM5ZmU1ZWFjNWQ2OTlkYjE2NzY2NGEyOTExOTM3YTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2CiSkOzyIRfqdWqfkUEVx/dwe45 OLMApqf4sX+pJUDST3Xz7yo9FMHtD/QCdrH6vYPrO0dAepFUQeapy8Q/1MArF6Us j93FkAFhcVY4BnlUs6AAYvujXN8fprYI9XEdFACQP2toKUI0LgrnSxCVAuVh0QsV YyB65wy9n6YIGkgtJ0529jGh8EZrSHN0C6A97bbawrZQWecURXeM+JINnXYehUML yZVokS9Rxs166dZoGEmiBh+V4RBe1lZqobWGBCsiz8OIsou0R+pM/HGCFNpx0bba oCe4VUbXuOmJAnZXqBa5M0W+sI8a7j4FmKEBYhfY0nYfV4wuApaFE8oNfQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGuoWXE5/l6sXWmdsWdmSikRk3p6MB8GA1UdIwQY MBaAFC4kl5PlkkqfJfOgqN2ZSzdOuTfSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGlTWGstV1NTcDhsODZDbzNabExOMDY1TjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iZmJjOGUtZWFiNS00ZjIwLThlZWEt OTZiZjE0M2ViNDUyLzEvYTZoWmNUbi1YcXhkYVoyeFoyWktLUkdUZW5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9iZmJjOGUtZWFiNS00ZjIwLThlZWEtOTZiZjE0M2ViNDUy LzEvTGlTWGstV1NTcDhsODZDbzNabExOMDY1TjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDsEO4AwQC uX1QMA0EAgACMAcDBQMqBrdAMA0GCSqGSIb3DQEBCwUAA4IBAQBJQWVgcPTEgqNY nvqZuSXo2NgyQlxwYLWhNnSPAT3kF7NP8HUPAHbsZF7Ot/dPZeaODxMrwOgdqPBh /njNikRT7Cl5cKeqi3uzpgM0WK6fHNBGKiwDtsEncBiyVAlnvK9AHcBFKJyqqHfK Y7rvHHQGVRlH3/e6dENhekGe6oO1Foea2zTPOGsNurRmrgNanv/ez3KHbZcpmocn 4UjUNgqyudiu5DzajfsW/LbsWJwU4kPjQRyQg4y8CU7Ru7SRtetFUUJq0WmF/tgn iwJQF/5J6GWmkGRGpG3yJ3M1cCh/CucCJlHHtG4Cx1cidUkdERAFBI68/qWbWU9q pGErrAUH -----END CERTIFICATE-----Generated at Mon Jan 26 00:24:35 2026 by rpki-client