This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/b6n89VnFa6q8VXBafEvSx4WopXw.roa File: b6n89VnFa6q8VXBafEvSx4WopXw.roa (raw, json) Hash identifier: 98DSxjPdzxUaiNoEdZnwgLFO2xgbZNgVeSk7tVbYXbA= Subject key identifier: 6F:A9:FC:F5:59:C5:6B:AA:BC:55:70:5A:7C:4B:D2:C7:85:A8:A5:7C Certificate issuer: /CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d Certificate serial: 019B77C71CD6151707390E1FFCB98739F656 Authority key identifier: DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/b6n89VnFa6q8VXBafEvSx4WopXw.roa Signing time: Thu 01 Jan 2026 04:18:16 +0000 ROA not before: Thu 01 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59887 IP address blocks: 185.48.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:1c:d6:15:17:07:39:0e:1f:fc:b9:87:39:f6:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d Validity Not Before: Jan 1 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fa9fcf559c56baabc55705a7c4bd2c785a8a57c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:04:6e:78:ef:73:6e:3a:ae:9e:a6:3d:f5:32: a0:98:93:92:37:2b:a6:0f:df:1e:4c:19:5b:b2:51: 40:b1:60:7b:6e:bb:51:19:be:a3:7a:98:ec:ab:be: f5:06:0f:22:de:20:5f:3c:3b:1d:ac:5a:05:85:cc: 65:23:7c:51:37:a4:40:ee:c0:ad:42:75:01:5e:f7: 03:78:5b:e1:02:0e:a8:c2:14:4c:1d:91:40:91:e7: 36:b0:f8:5c:e7:a3:b5:5a:8a:25:c9:26:6e:b8:1e: d3:4a:bd:0a:13:35:9e:b7:02:ad:eb:df:f2:5b:90: 0a:e6:02:01:3d:43:92:47:27:83:c5:9c:17:98:7a: 0c:6d:0f:b6:f4:55:0c:c3:a2:df:69:33:89:51:e4: 61:71:3a:e4:9b:07:fb:86:a2:d1:94:45:84:8b:e4: 5b:6d:ed:3a:d3:b1:9b:3d:a0:02:7b:18:b8:37:8d: d4:70:94:c1:45:f3:ab:43:5a:13:a2:db:6d:85:f5: 63:67:19:1e:92:ce:9a:eb:56:8a:92:aa:00:1d:84: 1d:85:d5:25:95:dc:25:21:80:11:38:b0:62:1a:0c: 6a:cb:68:df:78:8b:28:83:29:0f:a0:5a:44:98:9b: 92:0c:46:ae:0b:b8:0d:2f:3b:96:55:0b:b2:6b:ef: 05:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A9:FC:F5:59:C5:6B:AA:BC:55:70:5A:7C:4B:D2:C7:85:A8:A5:7C X509v3 Authority Key Identifier: keyid:DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/b6n89VnFa6q8VXBafEvSx4WopXw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.48.26.0/24 Signature Algorithm: sha256WithRSAEncryption 53:7b:49:72:fe:d8:4f:10:7b:3c:21:fe:2d:41:62:20:d5:13: b1:bc:5d:13:9b:4d:3c:3d:11:e5:ab:d1:d2:7d:3b:01:13:d7: 90:8d:61:4b:94:b0:7a:95:a9:8f:41:c9:ef:f1:e1:a5:41:51: b0:22:65:d3:eb:98:2b:cd:f2:f2:ce:ea:ae:7c:c2:96:99:8f: 3d:ef:cf:41:15:80:ee:46:d2:c4:d9:db:e7:78:74:d0:6d:3b: 09:9e:6e:62:ae:d5:d9:bd:16:23:91:5a:02:b1:44:f3:dc:8c: e0:73:57:7a:e1:6e:94:d9:56:bd:1f:e4:d0:11:e0:76:f4:d4: 57:84:05:92:4c:cd:9a:88:d0:2f:6e:fb:37:35:e6:ae:dc:46: d9:ee:d6:05:46:7c:78:60:ba:f8:57:82:b0:94:f2:5a:48:9d: f9:68:e0:b3:eb:55:1d:02:fa:3e:3f:e0:6a:07:e9:c3:ad:c8: cc:93:95:9e:9a:eb:dd:34:7c:58:a2:a0:c2:23:53:02:0b:1d: 48:ca:df:61:ca:4d:05:17:05:41:d2:11:fc:f2:b7:98:b4:c0: b2:e4:af:0a:2d:92:d8:b5:9b:09:be:23:30:0d:e5:ee:a5:60: 09:3c:e0:df:8b:49:90:47:6c:1c:f0:03:21:02:74:c2:95:5e: 9d:5a:86:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xxzWFRcHOQ4f/LmHOfZWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNmVkMDU3OWMzZmQyNTM1OTdlYzgyZjA5MzkxMTFiYTlk OGM4OGQwHhcNMjYwMTAxMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmE5ZmNmNTU5YzU2YmFhYmM1NTcwNWE3YzRiZDJjNzg1YThhNTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzARueO9zbjqunqY99TKgmJOSNyum D98eTBlbslFAsWB7brtRGb6jepjsq771Bg8i3iBfPDsdrFoFhcxlI3xRN6RA7sCt QnUBXvcDeFvhAg6owhRMHZFAkec2sPhc56O1WoolySZuuB7TSr0KEzWetwKt69/y W5AK5gIBPUOSRyeDxZwXmHoMbQ+29FUMw6LfaTOJUeRhcTrkmwf7hqLRlEWEi+Rb be0607GbPaACexi4N43UcJTBRfOrQ1oTottthfVjZxkeks6a61aKkqoAHYQdhdUl ldwlIYAROLBiGgxqy2jfeIsogykPoFpEmJuSDEauC7gNLzuWVQuya+8FuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG+p/PVZxWuqvFVwWnxL0seFqKV8MB8GA1UdIwQY MBaAFN5u0FecP9JTWX7ILwk5ERup2MiNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM203UVY1d18wbE5aZnNndkNUa1JHNm5ZeUkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9mMTNmOTgtNGU3YS00MzVkLWIxYjAt ODM4NmU3MGJkYzU4LzEvYjZuODlWbkZhNnE4VlhCYWZFdlN4NFdvcFh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9mMTNmOTgtNGU3YS00MzVkLWIxYjAtODM4NmU3MGJkYzU4 LzEvM203UVY1d18wbE5aZnNndkNUa1JHNm5ZeUkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTAaMA0G CSqGSIb3DQEBCwUAA4IBAQBTe0ly/thPEHs8If4tQWIg1ROxvF0Tm008PRHlq9HS fTsBE9eQjWFLlLB6lamPQcnv8eGlQVGwImXT65grzfLyzuqufMKWmY89789BFYDu RtLE2dvneHTQbTsJnm5irtXZvRYjkVoCsUTz3Izgc1d64W6U2Va9H+TQEeB29NRX hAWSTM2aiNAvbvs3Neau3EbZ7tYFRnx4YLr4V4KwlPJaSJ35aOCz61UdAvo+P+Bq B+nDrcjMk5WemuvdNHxYoqDCI1MCCx1Iyt9hyk0FFwVB0hH88reYtMCy5K8KLZLY tZsJviMwDeXupWAJPODfi0mQR2wc8AMhAnTClV6dWoZQ -----END CERTIFICATE-----Generated at Mon Jan 26 12:56:53 2026 by rpki-client