This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/6DqggK820YyLRE6DOMeCn20OVq4.roa File: 6DqggK820YyLRE6DOMeCn20OVq4.roa (raw, json) Hash identifier: pO4LdGxPE7DhXdUOzjR/JAV9KPAcLjMaprACs346LHY= Subject key identifier: E8:3A:A0:80:AF:36:D1:8C:8B:44:4E:83:38:C7:82:9F:6D:0E:56:AE Certificate issuer: /CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9 Certificate serial: 019B79ECE39F615468A5C8A8AB736CA6A273 Authority key identifier: FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/6DqggK820YyLRE6DOMeCn20OVq4.roa Signing time: Thu 01 Jan 2026 14:18:46 +0000 ROA not before: Thu 01 Jan 2026 14:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34696 IP address blocks: 185.232.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:e3:9f:61:54:68:a5:c8:a8:ab:73:6c:a6:a2:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9 Validity Not Before: Jan 1 14:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e83aa080af36d18c8b444e8338c7829f6d0e56ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:71:87:34:1f:f1:3e:70:bd:53:cb:9d:d3:41: ab:23:03:35:bc:b0:68:c0:a4:ed:4a:0d:c5:6e:18: f0:10:dc:26:01:50:6c:63:ac:64:15:3a:08:ab:ec: 26:54:94:a8:87:28:b4:05:4b:e8:3f:c9:c7:fa:db: a3:35:08:fd:6b:34:28:7f:b6:8e:76:00:56:1b:21: 0c:63:85:45:b4:5d:0d:18:a3:8b:17:14:d9:91:6e: 09:31:29:22:9a:e4:25:69:21:8f:c0:d5:0e:81:9c: 45:d6:8a:3a:79:10:3c:79:ca:a0:ea:f3:7a:1a:eb: 54:3c:43:35:ef:db:de:fc:e0:60:92:60:0d:a5:e8: f4:2b:14:be:18:e6:14:ed:7e:60:40:2b:e4:e9:c5: 67:b9:6b:fb:9a:f7:f6:22:fb:88:96:5b:b4:5c:e6: 59:18:92:3f:f7:ce:b6:ba:b2:d6:c4:e7:33:1a:85: bc:7a:0f:90:9f:dc:26:36:2c:54:74:5a:92:ad:dc: 4d:90:58:2d:b0:73:72:21:86:4a:b1:e8:f3:05:6a: 14:92:d5:55:e3:c6:09:8a:54:0b:39:35:f3:6d:ae: 5a:fe:cf:07:d8:6a:ee:4d:93:4c:d2:2a:38:bb:e6: 0e:c8:c8:55:6a:b3:5b:a6:9f:ff:9b:10:6d:82:d4: b8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3A:A0:80:AF:36:D1:8C:8B:44:4E:83:38:C7:82:9F:6D:0E:56:AE X509v3 Authority Key Identifier: keyid:FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/6DqggK820YyLRE6DOMeCn20OVq4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.232.36.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:cc:c4:cb:3e:19:c0:7c:f5:32:10:0a:e1:71:a9:9a:fc:4c: ae:8a:3d:1c:5b:b0:73:1e:78:5b:f0:32:37:8d:22:6d:3f:f9: 55:bb:3e:4d:cc:22:e8:aa:f6:9f:6d:4d:d4:b3:fc:27:4d:43: 44:89:94:ea:9c:62:91:bb:37:19:11:3f:aa:e3:4b:c5:06:32: bc:d6:54:07:ff:9b:a6:62:5c:0f:e6:f3:fc:6f:a7:90:5d:dc: 54:03:b9:52:74:0f:f6:93:14:c4:65:95:9b:54:f0:0d:04:e0: 98:67:7a:e3:5f:ea:c0:fc:95:1f:7a:ac:b5:e3:14:a4:82:68: a4:a3:b4:39:dd:5f:3c:4d:4a:33:67:bd:a4:e1:43:da:ce:65: 87:60:b0:a2:0d:fc:08:53:1f:43:6e:ad:6b:55:50:d2:8e:e4: 2e:7d:91:d8:22:00:df:d0:4e:64:a3:0e:5d:69:c1:e9:d0:d3: 3e:91:37:da:54:7d:6a:a3:22:6e:a9:0d:d5:cd:ac:21:11:d3: b5:9e:89:d0:de:84:e9:b1:d6:db:fe:ab:a5:1d:33:01:aa:83: d8:56:82:e9:a1:79:77:c5:02:9d:59:82:db:70:0a:91:89:21: d3:ab:81:8a:82:79:f2:b3:c9:79:b6:22:ed:65:58:88:24:05: b9:96:34:19 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt57OOfYVRopcioq3NspqJzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiM2JiM2I0YWI2ZmZmNTg4ZGRiNGNmMmFmZTZkNWFjNDY1 NTdiYjkwHhcNMjYwMTAxMTQxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODNhYTA4MGFmMzZkMThjOGI0NDRlODMzOGM3ODI5ZjZkMGU1NmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHGHNB/xPnC9U8ud00GrIwM1vLBo wKTtSg3FbhjwENwmAVBsY6xkFToIq+wmVJSohyi0BUvoP8nH+tujNQj9azQof7aO dgBWGyEMY4VFtF0NGKOLFxTZkW4JMSkimuQlaSGPwNUOgZxF1oo6eRA8ecqg6vN6 GutUPEM179ve/OBgkmANpej0KxS+GOYU7X5gQCvk6cVnuWv7mvf2IvuIllu0XOZZ GJI/9862urLWxOczGoW8eg+Qn9wmNixUdFqSrdxNkFgtsHNyIYZKsejzBWoUktVV 48YJilQLOTXzba5a/s8H2GruTZNM0io4u+YOyMhVarNbpp//mxBtgtS49wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFOg6oICvNtGMi0ROgzjHgp9tDlauMB8GA1UdIwQY MBaAFPs7s7Srb/9YjdtM8q/m1axGVXu5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS16dXp0S3R2XzFpTjIwenlyLWJWckVaVmU3ay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYvNjhmYmFmLTQ1ZjEtNDk0Ni1hMzQ2 LTY4NmEwMTg4OGQyOS8xLzZEcWdnSzgyMFl5TFJFNkRPTWVDbjIwT1ZxNC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTYvNjhmYmFmLTQ1ZjEtNDk0Ni1hMzQ2LTY4NmEwMTg4OGQy OS8xLzEtenV6dEt0dl8xaU4yMHp5ci1iVnJFWlZlN2suY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK56CQw DQYJKoZIhvcNAQELBQADggEBAH/MxMs+GcB89TIQCuFxqZr8TK6KPRxbsHMeeFvw MjeNIm0/+VW7Pk3MIuiq9p9tTdSz/CdNQ0SJlOqcYpG7NxkRP6rjS8UGMrzWVAf/ m6ZiXA/m8/xvp5Bd3FQDuVJ0D/aTFMRllZtU8A0E4JhneuNf6sD8lR96rLXjFKSC aKSjtDndXzxNSjNnvaThQ9rOZYdgsKIN/AhTH0NurWtVUNKO5C59kdgiAN/QTmSj Dl1pwenQ0z6RN9pUfWqjIm6pDdXNrCER07WeidDehOmx1tv+q6UdMwGqg9hWgumh eXfFAp1ZgttwCpGJIdOrgYqCefKzyXm2Iu1lWIgkBbmWNBk= -----END CERTIFICATE-----Generated at Mon Jan 26 05:32:18 2026 by rpki-client