This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/6UpG_F1kWIeHydezBRjRE7Ky1BE.roa File: 6UpG_F1kWIeHydezBRjRE7Ky1BE.roa (raw, json) Hash identifier: joKwBRYBakwu2eC6f2MC5kbClyUA9ADAh+5xxS7n05U= Subject key identifier: E9:4A:46:FC:5D:64:58:87:87:C9:D7:B3:05:18:D1:13:B2:B2:D4:11 Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094 Certificate serial: 019B7DCA78DDBDC6DA7F1EDF51BE2398E2D9 Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/6UpG_F1kWIeHydezBRjRE7Ky1BE.roa Signing time: Fri 02 Jan 2026 08:19:39 +0000 ROA not before: Fri 02 Jan 2026 08:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57043 IP address blocks: 185.233.184.0/24 maxlen: 24 185.244.48.0/24 maxlen: 24 185.244.49.0/24 maxlen: 24 185.250.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:78:dd:bd:c6:da:7f:1e:df:51:be:23:98:e2:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094 Validity Not Before: Jan 2 08:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e94a46fc5d64588787c9d7b30518d113b2b2d411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4e:f9:8d:e3:be:9b:c1:a0:42:96:0c:97:51: 7e:f1:0e:3e:82:89:ce:45:21:51:c3:19:f3:78:94: 23:80:6a:04:1b:66:5a:04:6d:c6:2b:e4:1d:b6:0f: d5:c4:e3:92:cc:ed:a4:09:2a:27:ed:62:87:79:3d: 8b:84:42:97:aa:7f:7f:09:51:1e:4f:dd:30:80:cf: e1:f9:0e:1e:ce:5d:05:e5:fd:2c:35:52:5a:cf:1a: 9c:66:a4:4a:73:5d:46:4b:a6:5f:d2:98:18:12:30: fa:be:36:c9:6e:bb:28:f8:d0:37:ad:fe:1f:d7:4a: cb:9f:ff:97:9a:a4:a5:16:49:7f:25:0d:6d:7c:f6: 6d:06:8f:0a:29:c7:8d:70:b3:9e:d5:37:7e:07:65: 80:fa:46:93:b6:9f:9e:d7:4e:64:ca:d1:2d:8c:9a: 55:a0:c2:ec:3e:27:90:71:7a:08:90:b9:34:f4:63: c7:42:c1:6b:5c:22:97:4b:fc:00:6e:b4:08:30:e4: 9d:cb:ce:24:73:60:20:03:3a:84:92:95:9a:ff:ee: fd:c1:07:14:f6:0d:e9:a2:2d:e5:e7:da:c9:b6:44: 11:74:da:6a:25:d8:95:60:e4:70:a3:16:82:60:af: 4a:df:c5:80:5b:fb:9f:fb:f4:46:4a:38:f0:e1:dd: 53:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:4A:46:FC:5D:64:58:87:87:C9:D7:B3:05:18:D1:13:B2:B2:D4:11 X509v3 Authority Key Identifier: keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/6UpG_F1kWIeHydezBRjRE7Ky1BE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.233.184.0/24 185.244.48.0/23 185.250.45.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:59:74:c5:32:17:81:83:4f:3e:e6:23:d5:83:38:4f:6a:aa: 7b:96:6b:74:70:5d:cb:96:5e:86:79:74:a5:ad:c0:6f:eb:b0: 97:c0:23:45:15:2e:be:24:46:a8:61:81:29:87:ef:96:0b:5c: 23:1d:4d:b8:64:16:7c:76:f0:ca:fb:e8:d8:f7:9d:69:f5:7b: 4c:1d:b9:ae:97:83:b5:ac:4e:83:a9:27:9f:0a:ff:0c:d2:54: f7:1f:88:b1:0a:f1:95:c7:42:bd:af:ae:9d:ab:cf:68:c4:dd: 9d:58:61:08:b6:4d:da:5a:60:47:a9:d7:92:f4:60:c6:de:2d: 57:ae:e3:bc:30:98:dd:44:37:ca:0b:cf:82:54:72:7a:a4:25: 6c:ca:a6:a7:8a:a9:d2:04:25:37:c3:78:03:ab:aa:26:62:3e: dc:52:48:bd:61:5e:a3:e9:f7:6e:07:e2:52:ef:01:fd:a1:45: d4:2c:96:a9:2a:69:63:b4:d7:55:d8:ec:d9:f5:2b:20:09:7e: f4:a5:29:86:08:48:bf:f9:23:c2:c7:ce:2a:53:b9:bb:d5:3a: f3:78:2c:8d:b7:34:83:63:22:22:cb:5f:91:b8:3d:64:26:d2: f3:56:c8:e6:bd:85:6d:98:13:fa:03:58:18:4d:e7:6d:cb:fa: 98:a9:b0:c3 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9ynjdvcbafx7fUb4jmOLZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYmU2NWFlMjNmMjA3ZmE2OTUyNTVmNTVhOTA3YWMxNjA4 YmUwOTQwHhcNMjYwMTAyMDgxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTRhNDZmYzVkNjQ1ODg3ODdjOWQ3YjMwNTE4ZDExM2IyYjJkNDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxE75jeO+m8GgQpYMl1F+8Q4+gonO RSFRwxnzeJQjgGoEG2ZaBG3GK+Qdtg/VxOOSzO2kCSon7WKHeT2LhEKXqn9/CVEe T90wgM/h+Q4ezl0F5f0sNVJazxqcZqRKc11GS6Zf0pgYEjD6vjbJbrso+NA3rf4f 10rLn/+XmqSlFkl/JQ1tfPZtBo8KKceNcLOe1Td+B2WA+kaTtp+e105kytEtjJpV oMLsPieQcXoIkLk09GPHQsFrXCKXS/wAbrQIMOSdy84kc2AgAzqEkpWa/+79wQcU 9g3poi3l59rJtkQRdNpqJdiVYORwoxaCYK9K38WAW/uf+/RGSjjw4d1TowIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOlKRvxdZFiHh8nXswUY0ROystQRMB8GA1UdIwQY MBaAFF++Za4j8gf6aVJV9VqQesFgi+CUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUt NDkyYWIzNzI2ODlkLzEvNlVwR19GMWtXSWVIeWRlekJSalJFN0t5MUJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUtNDkyYWIzNzI2ODlk LzEvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuem4AwQB ufQwAwQAufotMA0GCSqGSIb3DQEBCwUAA4IBAQAMWXTFMheBg08+5iPVgzhPaqp7 lmt0cF3Lll6GeXSlrcBv67CXwCNFFS6+JEaoYYEph++WC1wjHU24ZBZ8dvDK++jY 951p9XtMHbmul4O1rE6DqSefCv8M0lT3H4ixCvGVx0K9r66dq89oxN2dWGEItk3a WmBHqdeS9GDG3i1XruO8MJjdRDfKC8+CVHJ6pCVsyqaniqnSBCU3w3gDq6omYj7c Uki9YV6j6fduB+JS7wH9oUXULJapKmljtNdV2OzZ9SsgCX70pSmGCEi/+SPCx84q U7m71TrzeCyNtzSDYyIiy1+RuD1kJtLzVsjmvYVtmBP6A1gYTedty/qYqbDD -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:00 2026 by rpki-client