This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/6jxLWgEtYzUcIeL5nZFYtWqCnfY.roa File: 6jxLWgEtYzUcIeL5nZFYtWqCnfY.roa (raw, json) Hash identifier: Lovb3G8X/XH3FBnrwcuSEwDdeXgPvRqXxr0SbNYBD+M= Subject key identifier: EA:3C:4B:5A:01:2D:63:35:1C:21:E2:F9:9D:91:58:B5:6A:82:9D:F6 Certificate issuer: /CN=09f93d62beb75bb4232dcd052d270276d36f8573 Certificate serial: 019B7C124C66998EFE85589AF083F6D39B72 Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/6jxLWgEtYzUcIeL5nZFYtWqCnfY.roa Signing time: Fri 02 Jan 2026 00:18:52 +0000 ROA not before: Fri 02 Jan 2026 00:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8544 IP address blocks: 185.141.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:4c:66:99:8e:fe:85:58:9a:f0:83:f6:d3:9b:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573 Validity Not Before: Jan 2 00:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea3c4b5a012d63351c21e2f99d9158b56a829df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f5:1f:c4:4f:73:af:4a:78:f5:f6:ec:98:b8: 16:a0:5e:e4:8e:df:01:d1:02:38:00:18:52:88:27: c6:54:6d:44:3e:bc:af:cf:56:0d:7e:5f:fe:27:b4: a8:16:98:f6:7e:6d:90:01:22:4e:b1:55:60:fd:09: b9:7e:aa:97:87:76:4f:c5:8b:0d:dc:0d:9c:8b:0c: 3c:c8:79:15:33:02:f6:26:7a:11:16:95:a7:33:0c: 14:5a:43:b4:8e:ae:ff:b9:24:a2:e6:ba:12:f5:46: 9d:e5:d8:69:bc:d7:ba:8b:57:1c:5e:ab:c2:60:5a: 44:50:2e:f8:40:ce:92:8c:48:ce:32:ba:4c:a1:0b: e1:ee:36:01:69:ee:4b:6b:c5:03:30:3e:b0:dc:16: e0:20:80:e3:76:ab:a5:fd:d8:a0:0c:92:e9:2f:b3: 07:18:86:99:4b:64:cf:a0:90:7e:81:3b:ab:d4:ed: 6f:be:21:6c:a3:45:9f:7e:11:22:67:05:b5:74:e8: 8b:07:e2:fe:45:fc:2f:62:05:ec:74:de:60:f7:f8: 26:36:89:2d:a9:38:d4:17:2d:f5:e3:61:66:c5:f6: 9b:91:98:9a:d8:f1:ef:3a:46:d1:80:b6:13:5c:69: 71:d8:37:84:38:61:57:ed:ad:2c:a0:26:b6:e8:72: 8f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:3C:4B:5A:01:2D:63:35:1C:21:E2:F9:9D:91:58:B5:6A:82:9D:F6 X509v3 Authority Key Identifier: keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/6jxLWgEtYzUcIeL5nZFYtWqCnfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.141.194.0/24 Signature Algorithm: sha256WithRSAEncryption 50:c4:aa:8f:ac:49:e1:ae:bf:a3:de:74:9c:92:52:0e:45:31: 2d:26:38:6d:58:a6:07:f0:72:51:9b:f9:59:54:ca:41:d9:0d: 14:ad:f4:98:74:28:aa:4d:5d:f9:3f:b6:04:61:c0:94:8f:ca: 91:6c:2a:f9:0a:09:45:44:07:74:8a:cf:f2:51:4a:29:52:b2: 79:e3:b1:7e:21:2e:27:28:84:2e:2d:64:ea:8a:67:d9:ac:bf: d9:df:5f:9f:b3:87:62:40:bb:7b:c0:c7:37:0c:b2:9e:a5:8f: 15:13:f5:9c:0d:0a:e6:d5:b6:82:bb:73:a3:bd:ff:b4:7b:3f: 38:8d:7b:e4:80:73:86:7b:75:b1:d7:e4:4f:3d:f4:da:8b:9f: a5:84:6e:60:1f:27:e6:4e:22:bc:9d:bc:a0:6d:6c:58:9b:d3: f6:86:2e:51:7e:85:96:1a:54:27:65:66:71:21:a6:b0:df:0f: 49:44:1f:a4:ec:85:53:f9:e8:5c:43:ed:73:2d:98:e8:22:41: 62:70:b6:aa:4c:0a:af:13:21:2a:1f:76:f6:c4:14:b7:3f:5c: 7b:09:91:f8:e6:d2:15:63:26:15:f9:24:49:65:2c:59:b9:6c: 4d:45:8a:e3:0d:22:70:fe:41:ef:be:2f:26:3e:6b:70:0a:d3: b6:e2:26:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EkxmmY7+hVia8IP205tyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZjkzZDYyYmViNzViYjQyMzJkY2QwNTJkMjcwMjc2ZDM2 Zjg1NzMwHhcNMjYwMTAyMDAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTNjNGI1YTAxMmQ2MzM1MWMyMWUyZjk5ZDkxNThiNTZhODI5ZGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfUfxE9zr0p49fbsmLgWoF7kjt8B 0QI4ABhSiCfGVG1EPryvz1YNfl/+J7SoFpj2fm2QASJOsVVg/Qm5fqqXh3ZPxYsN 3A2ciww8yHkVMwL2JnoRFpWnMwwUWkO0jq7/uSSi5roS9Uad5dhpvNe6i1ccXqvC YFpEUC74QM6SjEjOMrpMoQvh7jYBae5La8UDMD6w3BbgIIDjdqul/digDJLpL7MH GIaZS2TPoJB+gTur1O1vviFso0WffhEiZwW1dOiLB+L+RfwvYgXsdN5g9/gmNokt qTjUFy3142FmxfabkZia2PHvOkbRgLYTXGlx2DeEOGFX7a0soCa26HKPMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOo8S1oBLWM1HCHi+Z2RWLVqgp32MB8GA1UdIwQY MBaAFAn5PWK+t1u0Iy3NBS0nAnbTb4VzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2ZrOVlyNjNXN1FqTGMwRkxTY0NkdE52aFhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83MDVhYWQtNTliMi00NzRlLWEzZDgt YmYzNGQwMWY4YjBhLzEvNmp4TFdnRXRZelVjSWVMNW5aRll0V3FDbmZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny83MDVhYWQtNTliMi00NzRlLWEzZDgtYmYzNGQwMWY4YjBh LzEvQ2ZrOVlyNjNXN1FqTGMwRkxTY0NkdE52aFhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuY3CMA0G CSqGSIb3DQEBCwUAA4IBAQBQxKqPrEnhrr+j3nScklIORTEtJjhtWKYH8HJRm/lZ VMpB2Q0UrfSYdCiqTV35P7YEYcCUj8qRbCr5CglFRAd0is/yUUopUrJ547F+IS4n KIQuLWTqimfZrL/Z31+fs4diQLt7wMc3DLKepY8VE/WcDQrm1baCu3Ojvf+0ez84 jXvkgHOGe3Wx1+RPPfTai5+lhG5gHyfmTiK8nbygbWxYm9P2hi5RfoWWGlQnZWZx Iaaw3w9JRB+k7IVT+ehcQ+1zLZjoIkFicLaqTAqvEyEqH3b2xBS3P1x7CZH45tIV YyYV+SRJZSxZuWxNRYrjDSJw/kHvvi8mPmtwCtO24ib2 -----END CERTIFICATE-----Generated at Sun Jan 25 11:01:59 2026 by rpki-client