This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6T0s7B0ghZWApWW1-VP9z5x0PYM.roa File: 6T0s7B0ghZWApWW1-VP9z5x0PYM.roa (raw, json) Hash identifier: akwezQgHc2lC21kQEjcSJc8RH5Ak0ZVXPZZmsp7UZYw= Subject key identifier: E9:3D:2C:EC:1D:20:85:95:80:A5:65:B5:F9:53:FD:CF:9C:74:3D:83 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019BB7F79A6B2EE2EB0A17EBBCEF52A1AAF1 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6T0s7B0ghZWApWW1-VP9z5x0PYM.roa Signing time: Tue 13 Jan 2026 15:26:55 +0000 ROA not before: Tue 13 Jan 2026 15:26:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202326 IP address blocks: 146.120.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b7:f7:9a:6b:2e:e2:eb:0a:17:eb:bc:ef:52:a1:aa:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 13 15:26:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e93d2cec1d20859580a565b5f953fdcf9c743d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9f:0b:d5:2f:48:4c:b4:df:28:0a:ad:69:99: 44:ec:12:e3:4a:45:6b:2e:b1:52:79:28:3a:79:ff: d5:ee:79:f5:5d:97:aa:ea:ab:bd:1e:62:b0:1e:d9: 38:59:81:51:19:27:5d:57:cd:57:1b:b5:98:1a:9c: 3c:4d:12:fe:fe:ac:5f:70:13:81:53:76:87:dc:8e: 75:61:fb:97:89:9b:25:ba:01:d7:d3:9d:d6:cf:b7: 85:f6:32:bc:39:df:7e:8f:ce:d4:e8:a7:33:fc:43: ae:34:2e:94:6f:05:ba:8b:64:c6:6b:d9:01:50:f1: 5a:3f:55:63:0a:3a:fa:b4:3c:77:9c:95:cc:4d:b2: 8e:e1:69:b4:f6:a1:dc:c4:4f:02:40:47:3f:64:f3: b6:e1:08:58:85:0d:71:40:50:03:75:e1:ba:10:5e: cd:c9:a3:74:74:ee:3e:c2:81:33:ed:6d:16:a5:18: 0c:f6:53:88:e1:fc:a1:d7:10:0c:ae:c5:c5:e7:d5: ca:8c:3e:c4:88:52:67:4f:be:e8:f7:9e:4a:18:5f: 89:cd:41:e6:db:b2:dd:8b:73:b8:c7:bf:cc:1a:ad: 9a:f9:49:9c:d0:d4:dd:7f:e4:f2:cd:36:20:a9:5b: 1a:ee:6a:da:8d:c8:06:b6:d8:a2:5d:aa:94:53:dd: 49:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:3D:2C:EC:1D:20:85:95:80:A5:65:B5:F9:53:FD:CF:9C:74:3D:83 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6T0s7B0ghZWApWW1-VP9z5x0PYM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.120.108.0/24 Signature Algorithm: sha256WithRSAEncryption 61:05:d5:a4:aa:d5:6a:4d:1a:ad:11:43:d4:45:96:b8:9b:91: 82:08:47:8d:7d:16:78:d9:91:6e:3e:50:0d:d0:ca:e9:65:1d: 79:9a:db:96:ca:33:b9:48:54:fd:82:69:1e:03:c2:c3:68:3b: b7:c8:38:e6:19:0e:04:2b:78:66:8e:72:09:07:03:fc:ea:b6: ee:e7:b0:5a:c9:fd:d6:65:99:3f:00:20:b8:06:64:62:b3:90: 9e:9c:a9:88:3d:12:9f:74:1b:f4:74:6f:34:2c:58:8a:f5:ca: b8:ac:f0:13:b8:ac:40:d6:d2:86:74:8d:2a:59:2b:5c:0d:e0: be:3c:c1:9b:ad:6d:7e:b7:c0:f0:a1:ab:a9:aa:98:3f:21:89: b3:29:ec:9e:e6:ce:fb:5e:fd:ce:8f:bd:8c:42:ae:b4:fe:e4: d9:ca:33:20:b4:78:ba:5c:1d:bd:f9:94:62:42:20:45:d3:33: c0:4e:e0:97:8a:bc:07:c2:25:90:7d:3e:22:1f:da:1a:69:2b: c3:fc:df:61:35:ec:46:0c:74:67:3b:c8:ee:67:57:99:04:6c: 2e:76:45:a8:90:5b:b6:f0:5d:75:a4:8e:a8:49:e7:5b:68:33: 78:c6:60:68:d9:a4:1e:7b:37:05:aa:b9:9a:b2:32:68:10:7e: 85:a8:57:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu395prLuLrChfrvO9SoarxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTEzMTUyNjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTNkMmNlYzFkMjA4NTk1ODBhNTY1YjVmOTUzZmRjZjljNzQzZDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp8L1S9ITLTfKAqtaZlE7BLjSkVr LrFSeSg6ef/V7nn1XZeq6qu9HmKwHtk4WYFRGSddV81XG7WYGpw8TRL+/qxfcBOB U3aH3I51YfuXiZslugHX053Wz7eF9jK8Od9+j87U6Kcz/EOuNC6UbwW6i2TGa9kB UPFaP1VjCjr6tDx3nJXMTbKO4Wm09qHcxE8CQEc/ZPO24QhYhQ1xQFADdeG6EF7N yaN0dO4+woEz7W0WpRgM9lOI4fyh1xAMrsXF59XKjD7EiFJnT77o955KGF+JzUHm 27Ldi3O4x7/MGq2a+Umc0NTdf+TyzTYgqVsa7mrajcgGttiiXaqUU91JTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOk9LOwdIIWVgKVltflT/c+cdD2DMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvNlQwczdCMGdoWldBcFdXMS1WUDl6NXgwUFlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAknhsMA0G CSqGSIb3DQEBCwUAA4IBAQBhBdWkqtVqTRqtEUPURZa4m5GCCEeNfRZ42ZFuPlAN 0MrpZR15mtuWyjO5SFT9gmkeA8LDaDu3yDjmGQ4EK3hmjnIJBwP86rbu57Bayf3W ZZk/ACC4BmRis5CenKmIPRKfdBv0dG80LFiK9cq4rPATuKxA1tKGdI0qWStcDeC+ PMGbrW1+t8Dwoaupqpg/IYmzKeye5s77Xv3Oj72MQq60/uTZyjMgtHi6XB29+ZRi QiBF0zPATuCXirwHwiWQfT4iH9oaaSvD/N9hNexGDHRnO8juZ1eZBGwudkWokFu2 8F11pI6oSedbaDN4xmBo2aQeezcFqrmasjJoEH6FqFdo -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:38 2026 by rpki-client