This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/r6x-mCfX6y2HE8Fca-6L19rnZBI.roa File: r6x-mCfX6y2HE8Fca-6L19rnZBI.roa (raw, json) Hash identifier: uQHVblgOp1wekrgJVHdlCHMrkJ9aLpwbv/ZWjTHqqwM= Subject key identifier: AF:AC:7E:98:27:D7:EB:2D:87:13:C1:5C:6B:EE:8B:D7:DA:E7:64:12 Certificate issuer: /CN=ffb2627672877d0f6de9bc4e7e186eedd1356110 Certificate serial: 019B79100141D19AD11BBFD41B6994AA0D3A Authority key identifier: FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/r6x-mCfX6y2HE8Fca-6L19rnZBI.roa Signing time: Thu 01 Jan 2026 10:17:30 +0000 ROA not before: Thu 01 Jan 2026 10:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213861 IP address blocks: 185.147.124.0/24 maxlen: 24 185.147.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:01:41:d1:9a:d1:1b:bf:d4:1b:69:94:aa:0d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffb2627672877d0f6de9bc4e7e186eedd1356110 Validity Not Before: Jan 1 10:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afac7e9827d7eb2d8713c15c6bee8bd7dae76412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6d:9c:d6:07:91:3c:90:64:94:c3:77:c7:45: ac:71:8d:5b:ea:1b:08:22:e7:72:ae:31:f4:c1:3b: f8:5a:bd:03:82:6e:3e:8f:06:b2:ab:06:7f:2f:b7: a4:e8:e1:01:5a:43:3f:51:27:22:fa:d5:dd:62:16: da:52:ed:31:92:67:9f:ee:85:91:fc:c6:cf:75:8e: 56:41:07:c3:ec:d9:9c:18:f3:72:e3:69:a7:9c:1c: d0:d7:d2:38:f0:a0:ba:b0:59:bf:c1:ee:ec:d0:07: a8:3d:22:4d:9d:59:ab:08:25:68:66:86:ac:c9:82: 7e:d2:36:62:90:1a:8e:17:84:d6:76:f1:9c:27:a5: d1:b4:16:99:39:5b:18:98:c5:07:bc:dd:df:e7:b0: 4c:db:cc:7d:41:dd:fc:d9:7d:d4:91:0b:ca:97:a3: 93:42:66:b5:03:67:80:cf:b5:c0:1d:f7:ca:9b:ed: ac:fa:01:d5:8a:ab:30:cd:64:ed:23:a1:c2:5e:6d: 3a:1b:9e:d3:f9:86:b8:29:ba:b3:4e:d7:46:51:6c: 73:6c:9d:e1:5c:75:63:76:5b:f0:0c:f4:19:19:e4: ab:39:6f:8d:58:07:c9:81:2f:11:d2:8f:b8:02:0c: 55:16:c2:4a:c7:f0:06:9a:eb:d0:cb:06:4c:f0:24: 5b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AC:7E:98:27:D7:EB:2D:87:13:C1:5C:6B:EE:8B:D7:DA:E7:64:12 X509v3 Authority Key Identifier: keyid:FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/r6x-mCfX6y2HE8Fca-6L19rnZBI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.147.124.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:df:34:0d:fc:41:e1:c3:41:3e:fe:4d:74:7c:80:49:e3:cb: eb:1a:78:89:a6:8e:7e:bb:f9:e3:23:1a:ff:0d:66:c8:b1:10: a8:56:b7:7b:4c:a0:4d:5f:46:db:6f:82:5e:6f:49:8a:67:fa: 49:3e:01:2e:3a:93:ac:ab:3f:76:36:89:bc:8b:73:72:19:c3: 4a:9d:38:87:db:0a:84:dd:ec:c5:17:30:c5:8e:f5:c9:7c:a5: f9:db:88:55:3d:86:e2:85:0e:92:2d:94:7f:fc:5a:3a:5d:c8: cb:23:cf:00:2a:41:41:40:05:ea:cb:0b:59:ef:4a:99:d7:e7: 02:c1:8b:d5:f0:ae:ce:49:05:af:36:39:bd:a4:ee:e5:b0:5a: dc:32:b6:e3:51:3d:43:11:c6:6b:da:c3:d8:3c:26:92:65:a4: f1:72:1a:2e:d2:89:91:74:3f:fe:34:b9:e7:02:b4:c9:20:3c: 87:89:4e:22:15:0d:d2:7e:d6:32:50:f9:33:9d:b0:7d:11:22: 4c:f3:f2:69:87:07:56:37:a7:4b:84:4e:7e:55:a7:1d:fd:a4: ce:fc:c1:e3:8b:16:c8:73:2b:31:ba:4e:21:f7:f3:a2:a7:69: c6:ef:47:bd:cb:80:8f:f5:37:a1:0b:dd:fc:73:bf:c4:9d:00: 53:de:a5:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EAFB0ZrRG7/UG2mUqg06MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYjI2Mjc2NzI4NzdkMGY2ZGU5YmM0ZTdlMTg2ZWVkZDEz NTYxMTAwHhcNMjYwMTAxMTAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmFjN2U5ODI3ZDdlYjJkODcxM2MxNWM2YmVlOGJkN2RhZTc2NDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx22c1geRPJBklMN3x0WscY1b6hsI IudyrjH0wTv4Wr0Dgm4+jwayqwZ/L7ek6OEBWkM/USci+tXdYhbaUu0xkmef7oWR /MbPdY5WQQfD7NmcGPNy42mnnBzQ19I48KC6sFm/we7s0AeoPSJNnVmrCCVoZoas yYJ+0jZikBqOF4TWdvGcJ6XRtBaZOVsYmMUHvN3f57BM28x9Qd382X3UkQvKl6OT Qma1A2eAz7XAHffKm+2s+gHViqswzWTtI6HCXm06G57T+Ya4KbqzTtdGUWxzbJ3h XHVjdlvwDPQZGeSrOW+NWAfJgS8R0o+4AgxVFsJKx/AGmuvQywZM8CRbbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK+sfpgn1+sthxPBXGvui9fa52QSMB8GA1UdIwQY MBaAFP+yYnZyh30Pbem8Tn4Ybu3RNWEQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzdKaWRuS0hmUTl0NmJ4T2ZoaHU3ZEUxWVJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8yMmM1MTAtMzQ4MC00Y2UxLThkZDgt MTk3NDY5NDc1NThkLzEvcjZ4LW1DZlg2eTJIRThGY2EtNkwxOXJuWkJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8yMmM1MTAtMzQ4MC00Y2UxLThkZDgtMTk3NDY5NDc1NThk LzEvXzdKaWRuS0hmUTl0NmJ4T2ZoaHU3ZEUxWVJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuZN8MA0G CSqGSIb3DQEBCwUAA4IBAQCN3zQN/EHhw0E+/k10fIBJ48vrGniJpo5+u/njIxr/ DWbIsRCoVrd7TKBNX0bbb4Jeb0mKZ/pJPgEuOpOsqz92Nom8i3NyGcNKnTiH2wqE 3ezFFzDFjvXJfKX524hVPYbihQ6SLZR//Fo6XcjLI88AKkFBQAXqywtZ70qZ1+cC wYvV8K7OSQWvNjm9pO7lsFrcMrbjUT1DEcZr2sPYPCaSZaTxchou0omRdD/+NLnn ArTJIDyHiU4iFQ3SftYyUPkznbB9ESJM8/JphwdWN6dLhE5+Vacd/aTO/MHjixbI cysxuk4h9/Oip2nG70e9y4CP9TehC938c7/EnQBT3qXr -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:43 2026 by rpki-client