This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/Rohs0EQIAoIUkwGS6XtjnDouO8g.roa File: Rohs0EQIAoIUkwGS6XtjnDouO8g.roa (raw, json) Hash identifier: EcZk5ZFiNKSus0TYnUyIuUuGvRBAlAnVxdbmm6ttv7A= Subject key identifier: 46:88:6C:D0:44:08:02:82:14:93:01:92:E9:7B:63:9C:3A:2E:3B:C8 Certificate issuer: /CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a Certificate serial: 019B7D5CF6E650205D8113D1167F2804E760 Authority key identifier: AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/Rohs0EQIAoIUkwGS6XtjnDouO8g.roa Signing time: Fri 02 Jan 2026 06:20:03 +0000 ROA not before: Fri 02 Jan 2026 06:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21182 IP address blocks: 185.178.156.0/22 maxlen: 22 185.178.156.0/23 maxlen: 23 185.178.158.0/24 maxlen: 24 217.173.192.0/21 maxlen: 21 217.173.200.0/23 maxlen: 23 217.173.206.0/23 maxlen: 23 2a04:9440::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f6:e6:50:20:5d:81:13:d1:16:7f:28:04:e7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a Validity Not Before: Jan 2 06:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46886cd04408028214930192e97b639c3a2e3bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:88:7d:fc:4d:73:78:55:bb:61:d9:bd:22:fc: d4:e8:75:05:72:6a:af:db:60:20:ff:f0:2c:c9:01: ee:94:c4:01:25:7b:0d:09:87:7d:74:bf:c1:2e:5e: 01:43:b7:4c:2d:69:20:2f:73:76:77:65:02:f1:a1: 8d:d2:5a:31:7d:a7:4e:96:da:2e:d5:84:a8:1a:47: 4c:b4:bb:4f:61:5f:bd:21:47:65:09:2c:16:a5:e7: 41:be:4c:d4:9c:33:97:af:3b:07:5c:c3:e5:1e:a3: ce:d3:d1:aa:04:c2:ec:44:dc:a4:ad:c6:9d:d1:82: 3b:bb:0b:7d:f0:95:94:f4:6f:99:97:97:c2:b1:c3: f1:c9:60:ff:2d:8e:a8:91:6f:0e:44:b0:3d:23:65: e2:b1:d7:8c:e5:44:fb:45:a3:52:c0:48:da:e4:29: e0:f9:1d:67:3e:88:de:1b:3b:84:27:3b:3c:f1:7e: 59:08:12:0c:1a:a5:75:f7:2c:ca:2f:87:09:d9:37: 48:a8:1e:d7:b0:2a:b2:70:50:02:65:eb:73:7a:0b: bd:66:b4:55:2f:5e:1c:28:73:09:28:0e:40:e8:c5: 4c:1e:8e:8e:fb:46:7a:74:3c:e5:ca:38:d5:af:53: 7c:f7:c0:da:3f:64:39:7d:8b:51:54:05:1d:30:0d: 3f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:88:6C:D0:44:08:02:82:14:93:01:92:E9:7B:63:9C:3A:2E:3B:C8 X509v3 Authority Key Identifier: keyid:AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/Rohs0EQIAoIUkwGS6XtjnDouO8g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.178.156.0/22 217.173.192.0-217.173.201.255 217.173.206.0/23 IPv6: 2a04:9440::/30 Signature Algorithm: sha256WithRSAEncryption 7d:88:54:d3:28:99:cd:25:31:c4:04:34:9f:43:6c:eb:6c:58: a2:d7:47:5f:5a:c4:84:e6:25:f7:f8:0d:a6:81:3c:95:a0:6b: 4e:fe:ac:62:ab:05:03:ff:b0:a9:dd:3b:9a:d3:ca:4c:c1:66: 5f:bc:85:cc:57:00:d1:61:16:1e:30:a0:4f:95:eb:81:b1:15: 54:d1:1b:74:d0:82:bc:fa:ea:a1:aa:2c:c4:d0:79:48:6f:6a: 26:3f:c2:c3:9c:1a:dc:3f:7a:9d:ef:18:be:ba:10:89:9a:70: 7e:2e:6d:49:8d:7f:f1:96:a4:a2:39:cf:1f:cb:57:e9:29:41: 4d:88:cc:f3:16:b5:78:b7:cb:ea:6a:c5:9b:72:52:11:f1:79: 0e:ef:6e:9a:25:3a:16:8a:17:aa:3b:c9:00:4e:44:90:57:15: 8d:d5:80:c4:07:6f:3e:ad:4b:a4:43:90:f2:f3:e7:fb:77:54: 7d:a5:83:70:ac:af:30:22:aa:8a:77:ea:e2:64:83:7b:5c:de: 83:e8:22:40:58:c9:28:16:01:02:9a:c1:de:a7:72:ad:db:fb: 91:38:85:55:cf:ff:08:7b:86:9b:2f:94:7f:e5:71:83:0e:3d: 48:b4:3f:3b:96:b2:c6:67:03:21:3d:49:a8:dd:ed:0c:40:ef: dc:26:4d:1f -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt9XPbmUCBdgRPRFn8oBOdgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMWM4MDBhYTFiNzhhMTdhNDNlMTlmZDk5MzgzNTVkMDQx MWU5NGEwHhcNMjYwMTAyMDYyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Njg4NmNkMDQ0MDgwMjgyMTQ5MzAxOTJlOTdiNjM5YzNhMmUzYmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloh9/E1zeFW7Ydm9IvzU6HUFcmqv 22Ag//AsyQHulMQBJXsNCYd9dL/BLl4BQ7dMLWkgL3N2d2UC8aGN0loxfadOltou 1YSoGkdMtLtPYV+9IUdlCSwWpedBvkzUnDOXrzsHXMPlHqPO09GqBMLsRNykrcad 0YI7uwt98JWU9G+Zl5fCscPxyWD/LY6okW8ORLA9I2XisdeM5UT7RaNSwEja5Cng +R1nPojeGzuEJzs88X5ZCBIMGqV19yzKL4cJ2TdIqB7XsCqycFACZetzegu9ZrRV L14cKHMJKA5A6MVMHo6O+0Z6dDzlyjjVr1N898DaP2Q5fYtRVAUdMA0/1QIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFEaIbNBECAKCFJMBkul7Y5w6LjvIMB8GA1UdIwQY MBaAFKscgAqht4oXpD4Z/Zk4NV0EEelKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXh5QUNxRzNpaGVrUGhuOW1UZzFYUVFSNlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8xYjFjYTAtYmJmMi00NDE5LThhMGMt NTBjYmNiNWIxOWMyLzEvUm9oczBFUUlBb0lVa3dHUzZYdGpuRG91TzhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8xYjFjYTAtYmJmMi00NDE5LThhMGMtNTBjYmNiNWIxOWMy LzEvcXh5QUNxRzNpaGVrUGhuOW1UZzFYUVFSNlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQCubKcMAwD BAbZrcADBAHZrcgDBAHZrc4wDQQCAAIwBwMFAioElEAwDQYJKoZIhvcNAQELBQAD ggEBAH2IVNMomc0lMcQENJ9DbOtsWKLXR19axITmJff4DaaBPJWga07+rGKrBQP/ sKndO5rTykzBZl+8hcxXANFhFh4woE+V64GxFVTRG3TQgrz66qGqLMTQeUhvaiY/ wsOcGtw/ep3vGL66EImacH4ubUmNf/GWpKI5zx/LV+kpQU2IzPMWtXi3y+pqxZty UhHxeQ7vbpolOhaKF6o7yQBORJBXFY3VgMQHbz6tS6RDkPLz5/t3VH2lg3CsrzAi qop36uJkg3tc3oPoIkBYySgWAQKawd6ncq3b+5E4hVXP/wh7hpsvlH/lcYMOPUi0 PzuWssZnAyE9Sajd7QxA79wmTR8= -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:08 2026 by rpki-client