This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/6zRBHnGYCjW1GgPGlQ07uvCgLBQ.roa File: 6zRBHnGYCjW1GgPGlQ07uvCgLBQ.roa (raw, json) Hash identifier: 5/u7LzyuZK95evqy+CqsMW0BICKYqwQdO0i+wUB3s5k= Subject key identifier: EB:34:41:1E:71:98:0A:35:B5:1A:03:C6:95:0D:3B:BA:F0:A0:2C:14 Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F83BA64D7BE2FA5F5D361FE98191F73 Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/6zRBHnGYCjW1GgPGlQ07uvCgLBQ.roa Signing time: Fri 02 Jan 2026 16:21:37 +0000 ROA not before: Fri 02 Jan 2026 16:21:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208864 IP address blocks: 46.243.188.0/22 maxlen: 22 128.0.68.0/23 maxlen: 23 188.72.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:ba:64:d7:be:2f:a5:f5:d3:61:fe:98:19:1f:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb34411e71980a35b51a03c6950d3bbaf0a02c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:34:ee:83:7f:60:6d:83:ea:4e:e6:85:d0:83: 0c:20:60:43:6d:28:a6:56:b5:31:79:5a:5b:cb:00: 46:8a:90:97:2f:e3:c1:50:89:65:b9:1d:0a:f7:56: 3c:aa:00:0f:3e:a4:9a:98:0a:c0:34:81:0d:c1:38: 07:d4:ab:75:e6:85:eb:61:83:6f:6a:5f:ae:54:e7: 0e:bd:2d:76:9e:12:78:89:e5:81:80:fa:97:91:87: 41:6a:f5:6b:0f:db:6f:5f:eb:aa:63:1f:9f:02:58: ef:56:b3:24:3a:e4:77:1f:ad:bd:d5:60:46:08:72: 7c:eb:bb:b1:2c:8d:62:62:eb:5b:a2:49:87:3c:c8: ce:cc:57:9d:30:49:2b:e2:33:6b:d6:9e:7a:10:8d: a2:18:d4:c0:36:29:e3:39:83:1d:10:fe:7f:0f:45: b8:8e:7f:23:aa:cc:48:d5:a8:a3:da:c1:a8:03:36: 63:bc:66:d7:89:6d:d4:20:8f:4f:7b:a8:7c:dd:88: 40:b7:18:6e:9f:70:56:34:47:05:59:46:9b:3c:73: bc:8b:e9:35:4b:cd:0c:b4:fa:52:0a:3e:d5:cb:7f: 84:5d:02:6a:5b:5e:31:f6:58:c7:ad:d5:cc:ce:de: 7c:66:f9:c8:fb:dc:9b:01:58:65:ad:00:f1:57:e7: 8a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:34:41:1E:71:98:0A:35:B5:1A:03:C6:95:0D:3B:BA:F0:A0:2C:14 X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/6zRBHnGYCjW1GgPGlQ07uvCgLBQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.188.0/22 128.0.68.0/23 188.72.68.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:e1:29:98:04:d6:eb:48:d9:07:c8:f4:77:bb:2d:8f:5d:c9: 7a:5c:36:b0:dd:fc:58:ae:7c:27:f8:fa:a3:bc:27:dd:b2:f2: 2f:3c:8d:c5:97:b5:bf:94:1a:09:e7:55:fb:be:b6:bb:d2:d1: 51:c1:ba:95:b4:66:a6:77:34:35:f5:be:d5:86:61:70:54:50: 3d:5b:eb:f9:55:6a:09:78:4a:ee:02:bd:1d:90:03:de:e6:9a: 70:e1:1f:34:95:ca:e6:b9:b1:05:88:2e:a8:1c:d0:67:92:d6: 46:a1:58:64:b8:f6:21:fe:14:5c:78:8f:49:f8:25:0a:54:d5: 6b:cf:d4:83:22:93:e8:de:0e:dc:c7:26:01:98:6b:d3:4c:c3: f5:2a:05:ee:fe:ea:a6:af:40:f0:ca:5b:fc:fc:7b:70:aa:e2: d4:3a:9e:91:a1:69:47:70:31:42:fe:05:5a:21:f7:83:fe:7d: 2c:70:67:8f:ba:45:b1:47:86:9c:cb:75:35:d6:e6:69:67:a6: db:60:17:24:cd:fa:05:bf:97:ec:1e:5a:4b:0f:d9:4a:c4:9d: 7b:6a:b5:41:a0:a4:68:1d:53:e6:74:b3:02:ab:a6:0b:bc:9a: b7:1a:c3:3c:82:61:7a:9c:21:d1:14:33:43:a7:1b:97:f4:70: 5e:6b:ca:8b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/g7pk174vpfXTYf6YGR9zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjM0NDExZTcxOTgwYTM1YjUxYTAzYzY5NTBkM2JiYWYwYTAyYzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujTug39gbYPqTuaF0IMMIGBDbSim VrUxeVpbywBGipCXL+PBUIlluR0K91Y8qgAPPqSamArANIENwTgH1Kt15oXrYYNv al+uVOcOvS12nhJ4ieWBgPqXkYdBavVrD9tvX+uqYx+fAljvVrMkOuR3H6291WBG CHJ867uxLI1iYutbokmHPMjOzFedMEkr4jNr1p56EI2iGNTANinjOYMdEP5/D0W4 jn8jqsxI1aij2sGoAzZjvGbXiW3UII9Pe6h83YhAtxhun3BWNEcFWUabPHO8i+k1 S80MtPpSCj7Vy3+EXQJqW14x9ljHrdXMzt58ZvnI+9ybAVhlrQDxV+eK1wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOs0QR5xmAo1tRoDxpUNO7rwoCwUMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvNnpSQkhuR1lDalcxR2dQR2xRMDd1dkNnTEJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLvO8AwQB gABEAwQBvEhEMA0GCSqGSIb3DQEBCwUAA4IBAQAL4SmYBNbrSNkHyPR3uy2PXcl6 XDaw3fxYrnwn+PqjvCfdsvIvPI3Fl7W/lBoJ51X7vra70tFRwbqVtGamdzQ19b7V hmFwVFA9W+v5VWoJeEruAr0dkAPe5ppw4R80lcrmubEFiC6oHNBnktZGoVhkuPYh /hRceI9J+CUKVNVrz9SDIpPo3g7cxyYBmGvTTMP1KgXu/uqmr0Dwylv8/HtwquLU Op6RoWlHcDFC/gVaIfeD/n0scGePukWxR4acy3U11uZpZ6bbYBckzfoFv5fsHlpL D9lKxJ17arVBoKRoHVPmdLMCq6YLvJq3GsM8gmF6nCHRFDNDpxuX9HBea8qL -----END CERTIFICATE-----Generated at Sun Jan 25 12:28:05 2026 by rpki-client