This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/c_6Pmgftz61lgDpNn-4wL9tzbqs.roa File: c_6Pmgftz61lgDpNn-4wL9tzbqs.roa (raw, json) Hash identifier: NTIy3UHMN/jx1VhZZAxObfFoWqP1QyV8jrTZzBr1PRQ= Subject key identifier: 73:FE:8F:9A:07:ED:CF:AD:65:80:3A:4D:9F:EE:30:2F:DB:73:6E:AB Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84A04A1D2404FDC00C7FE837CCEF38 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/c_6Pmgftz61lgDpNn-4wL9tzbqs.roa Signing time: Fri 02 Jan 2026 16:22:36 +0000 ROA not before: Fri 02 Jan 2026 16:22:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42518 IP address blocks: 146.120.64.0/20 maxlen: 24 146.120.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a0:4a:1d:24:04:fd:c0:0c:7f:e8:37:cc:ef:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73fe8f9a07edcfad65803a4d9fee302fdb736eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:36:15:b1:f3:de:ae:47:c0:3a:ca:90:4b:80: 2b:b9:87:68:07:bb:bd:78:ac:aa:63:71:44:68:21: 5a:89:a5:8f:3a:66:2f:93:06:d8:34:7b:0f:6f:5d: 72:e2:5f:9b:3c:a8:9e:9e:e3:da:42:53:94:66:3e: cd:45:67:fe:80:d3:c8:b4:38:8e:e0:79:67:d4:0a: e9:f6:c9:a2:5a:04:f1:9e:c9:43:34:48:b1:69:d1: 73:39:02:bd:65:d4:6b:2c:25:88:d5:51:5b:a2:b5: c7:3f:56:ef:3a:45:02:81:34:32:d6:a2:44:6b:de: 6b:d4:c9:3c:df:0b:39:85:4f:34:f8:ae:da:89:d6: 53:5e:39:64:eb:5d:cd:01:af:ec:4c:17:7e:b6:24: 1f:6a:f0:ae:e8:b6:ad:be:c9:8f:e2:43:7e:56:b1: 5d:f0:6a:d5:38:9c:80:4d:d3:c2:e2:36:b7:85:8d: b3:6b:b0:08:b0:5a:9d:83:dc:f6:b4:f1:c1:65:69: df:e5:d7:90:a1:65:2b:ef:3d:b3:25:58:d0:4e:37: 34:ac:1c:f4:af:44:fa:4f:d9:10:f3:79:90:81:44: 0a:ff:d8:90:3c:e6:13:51:1e:da:f1:d5:0d:68:fe: 11:1c:b2:03:98:71:ea:bc:62:2a:43:9c:06:09:b2: e5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:FE:8F:9A:07:ED:CF:AD:65:80:3A:4D:9F:EE:30:2F:DB:73:6E:AB X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/c_6Pmgftz61lgDpNn-4wL9tzbqs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.120.64.0-146.120.87.255 Signature Algorithm: sha256WithRSAEncryption 02:52:07:70:d2:b1:a5:8e:b3:2c:a2:42:34:b8:43:db:a3:9a: 62:ab:35:0d:33:e9:9b:0e:33:0f:44:25:c0:4f:74:05:31:e2: 19:8e:c3:db:43:1d:ef:58:0f:17:21:c9:af:78:6e:e5:97:52: 24:b4:94:d0:82:de:6c:07:8b:dc:68:2e:60:08:e5:55:51:f5: d0:68:ac:c2:fb:2d:79:4c:33:d8:69:88:b0:c0:f8:82:1f:22: 50:4d:e5:b7:45:24:07:0d:7d:cd:a2:5a:bb:40:f6:66:26:92: 27:ce:52:e8:3d:65:dc:d1:9b:4a:1f:d1:c2:f8:2b:36:ff:d0: b2:c5:19:1d:7f:ec:c6:f3:8e:a6:ad:a2:cc:f2:8f:08:30:98: 1e:68:e3:30:67:d5:f5:2a:ea:85:7a:5c:1b:85:21:c3:44:5b: 45:e2:8c:8b:40:19:b5:6e:87:f7:38:16:73:83:e2:5b:69:78: f4:3b:71:3b:ca:8e:7a:11:b2:ab:61:de:ea:9c:f6:4b:a7:09: 8b:b4:e3:80:28:d0:91:1c:3d:ae:9f:ed:3c:21:79:e0:90:87: 9c:c7:52:b9:86:a1:ea:19:77:8e:aa:7f:3b:da:fe:cd:38:a8: 68:33:63:57:86:28:2f:a7:5b:63:51:9b:be:8a:38:b9:37:55: ff:7a:d6:82 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/hKBKHSQE/cAMf+g3zO84MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2ZlOGY5YTA3ZWRjZmFkNjU4MDNhNGQ5ZmVlMzAyZmRiNzM2ZWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzYVsfPerkfAOsqQS4AruYdoB7u9 eKyqY3FEaCFaiaWPOmYvkwbYNHsPb11y4l+bPKienuPaQlOUZj7NRWf+gNPItDiO 4Hln1Arp9smiWgTxnslDNEixadFzOQK9ZdRrLCWI1VFborXHP1bvOkUCgTQy1qJE a95r1Mk83ws5hU80+K7aidZTXjlk613NAa/sTBd+tiQfavCu6LatvsmP4kN+VrFd 8GrVOJyATdPC4ja3hY2za7AIsFqdg9z2tPHBZWnf5deQoWUr7z2zJVjQTjc0rBz0 r0T6T9kQ83mQgUQK/9iQPOYTUR7a8dUNaP4RHLIDmHHqvGIqQ5wGCbLlpwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHP+j5oH7c+tZYA6TZ/uMC/bc26rMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvY182UG1nZnR6NjFsZ0RwTm4tNHdMOXR6YnFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAaSeEAD BAOSeFAwDQYJKoZIhvcNAQELBQADggEBAAJSB3DSsaWOsyyiQjS4Q9ujmmKrNQ0z 6ZsOMw9EJcBPdAUx4hmOw9tDHe9YDxchya94buWXUiS0lNCC3mwHi9xoLmAI5VVR 9dBorML7LXlMM9hpiLDA+IIfIlBN5bdFJAcNfc2iWrtA9mYmkifOUug9ZdzRm0of 0cL4Kzb/0LLFGR1/7MbzjqatoszyjwgwmB5o4zBn1fUq6oV6XBuFIcNEW0XijItA GbVuh/c4FnOD4ltpePQ7cTvKjnoRsqth3uqc9kunCYu044Ao0JEcPa6f7TwheeCQ h5zHUrmGoeoZd46qfzva/s04qGgzY1eGKC+nW2NRm76KOLk3Vf961oI= -----END CERTIFICATE-----Generated at Sun Jan 25 16:27:33 2026 by rpki-client