This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/bSEi11QGpv6ZCGNkvTaTA0nGj1o.roa File: bSEi11QGpv6ZCGNkvTaTA0nGj1o.roa (raw, json) Hash identifier: Z9+IkuWLvnW+q2YB9eStWJlLP0RAjNBAv+KGegZ15sI= Subject key identifier: 6D:21:22:D7:54:06:A6:FE:99:08:63:64:BD:36:93:03:49:C6:8F:5A Certificate issuer: /CN=39469af33611b79084f575e95b13e66550edb383 Certificate serial: 019B79114271E7BC2740269B9B242077FB96 Authority key identifier: 39:46:9A:F3:36:11:B7:90:84:F5:75:E9:5B:13:E6:65:50:ED:B3:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/bSEi11QGpv6ZCGNkvTaTA0nGj1o.roa Signing time: Thu 01 Jan 2026 10:18:52 +0000 ROA not before: Thu 01 Jan 2026 10:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55081 IP address blocks: 185.83.68.0/22 maxlen: 22 185.83.68.0/24 maxlen: 24 185.83.69.0/24 maxlen: 24 185.83.70.0/24 maxlen: 24 185.83.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:42:71:e7:bc:27:40:26:9b:9b:24:20:77:fb:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39469af33611b79084f575e95b13e66550edb383 Validity Not Before: Jan 1 10:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d2122d75406a6fe99086364bd36930349c68f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:72:36:ec:86:50:71:f2:1e:40:2a:05:c0:44: 9e:79:4a:60:ab:b4:bc:bb:cf:ce:b0:ba:a0:cf:cc: 8c:fa:6e:e6:1e:83:b0:81:02:4c:a1:8e:0e:59:ea: 49:3c:b0:0f:e6:73:b7:ff:e5:d9:ad:ed:b5:3f:47: e9:a9:5a:c6:15:b6:1d:ca:61:41:a1:f6:40:d2:dc: 94:12:a6:be:b8:9f:77:1d:27:eb:4a:7f:fe:a0:53: ac:a2:72:85:45:ec:70:b3:f4:f5:b9:bd:9d:6f:0c: 39:e6:a0:ff:8b:79:f1:34:83:2f:97:0c:9d:48:f0: 8a:de:41:45:67:e2:6d:b1:b0:02:ab:5e:9a:43:aa: 25:82:ff:b5:27:13:47:22:fe:30:c8:e9:74:c7:70: 70:8a:1a:57:76:ca:15:b8:69:e2:ca:9a:05:b7:00: 51:cc:3a:cf:a9:60:33:c5:d2:74:4f:b3:16:ee:8b: 5f:c2:7d:e8:b6:2f:3d:e0:49:4c:b5:20:e3:8e:73: 36:4f:5f:36:6d:6a:dc:b3:f3:c0:0d:fb:3f:fe:54: 7d:3b:a6:9b:d8:7f:03:bd:f0:f8:50:93:da:3f:ab: 2b:75:ee:fa:2c:64:c3:bd:44:ce:c7:2e:1c:d3:3f: f2:1c:b8:6a:bb:b3:c7:26:67:b3:8e:51:3b:47:bb: 87:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:21:22:D7:54:06:A6:FE:99:08:63:64:BD:36:93:03:49:C6:8F:5A X509v3 Authority Key Identifier: keyid:39:46:9A:F3:36:11:B7:90:84:F5:75:E9:5B:13:E6:65:50:ED:B3:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/bSEi11QGpv6ZCGNkvTaTA0nGj1o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.83.68.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:a3:d4:2d:03:c9:4d:ec:7e:3a:ba:31:f1:c5:ef:3d:e5:50: 58:71:b4:c7:3d:de:88:59:bf:26:bc:20:96:ce:79:b4:63:44: d6:41:5a:f0:cc:9a:32:14:26:8e:fe:f3:10:31:77:4c:b3:b6: 8a:5a:a0:d6:ec:d3:38:60:ef:37:db:c7:c3:e1:62:67:78:73: a6:76:30:4a:17:92:84:58:a6:af:97:e3:b6:4d:52:23:50:b9: f6:86:f0:dd:91:41:7e:b5:e8:21:f7:0d:4d:fe:03:39:c7:4c: e5:b7:55:e6:85:88:34:1a:23:9d:22:a4:48:15:59:9b:2e:d4: 04:e6:e6:9b:73:6c:1b:e9:26:d0:75:17:6a:06:64:76:1a:ce: 79:6a:c8:a7:33:2f:b7:88:97:8f:e7:af:2b:d0:0b:d9:8d:7e: 3c:65:b5:11:b3:da:8a:5b:a4:0a:23:68:c5:2f:0c:79:fb:d6: a4:91:ac:ba:b0:f0:1e:15:1b:4e:08:41:fb:c8:ca:fc:3b:8c: a4:ae:3a:a3:5a:9f:b3:bd:7d:69:0c:d0:db:01:2f:bd:62:b4: 2b:ae:a5:e0:76:d8:b7:aa:cb:17:94:0c:1d:c7:8d:56:b2:b6: 8f:8e:63:7c:d2:02:30:ba:ee:da:bf:94:19:23:16:cf:dd:61: d1:de:df:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EUJx57wnQCabmyQgd/uWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NDY5YWYzMzYxMWI3OTA4NGY1NzVlOTViMTNlNjY1NTBl ZGIzODMwHhcNMjYwMTAxMTAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDIxMjJkNzU0MDZhNmZlOTkwODYzNjRiZDM2OTMwMzQ5YzY4ZjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HI27IZQcfIeQCoFwESeeUpgq7S8 u8/OsLqgz8yM+m7mHoOwgQJMoY4OWepJPLAP5nO3/+XZre21P0fpqVrGFbYdymFB ofZA0tyUEqa+uJ93HSfrSn/+oFOsonKFRexws/T1ub2dbww55qD/i3nxNIMvlwyd SPCK3kFFZ+JtsbACq16aQ6olgv+1JxNHIv4wyOl0x3BwihpXdsoVuGniypoFtwBR zDrPqWAzxdJ0T7MW7otfwn3oti894ElMtSDjjnM2T182bWrcs/PADfs//lR9O6ab 2H8DvfD4UJPaP6srde76LGTDvUTOxy4c0z/yHLhqu7PHJmezjlE7R7uHbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG0hItdUBqb+mQhjZL02kwNJxo9aMB8GA1UdIwQY MBaAFDlGmvM2EbeQhPV16VsT5mVQ7bODMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1VhYTh6WVJ0NUNFOVhYcFd4UG1aVkR0czRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yNWUzOGYtYTA5MS00ZTVjLWJmNjMt NjZkZDJhOTFmYWNhLzEvYlNFaTExUUdwdjZaQ0dOa3ZUYVRBMG5HajFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8yNWUzOGYtYTA5MS00ZTVjLWJmNjMtNjZkZDJhOTFmYWNh LzEvT1VhYTh6WVJ0NUNFOVhYcFd4UG1aVkR0czRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVNEMA0G CSqGSIb3DQEBCwUAA4IBAQBro9QtA8lN7H46ujHxxe895VBYcbTHPd6IWb8mvCCW znm0Y0TWQVrwzJoyFCaO/vMQMXdMs7aKWqDW7NM4YO8328fD4WJneHOmdjBKF5KE WKavl+O2TVIjULn2hvDdkUF+tegh9w1N/gM5x0zlt1XmhYg0GiOdIqRIFVmbLtQE 5uabc2wb6SbQdRdqBmR2Gs55asinMy+3iJeP568r0AvZjX48ZbURs9qKW6QKI2jF Lwx5+9akkay6sPAeFRtOCEH7yMr8O4ykrjqjWp+zvX1pDNDbAS+9YrQrrqXgdti3 qssXlAwdx41WsraPjmN80gIwuu7av5QZIxbP3WHR3t+e -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:43 2026 by rpki-client