This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/A6rxUEeDAXZKd2bfFtADSoZcC1o.roa File: A6rxUEeDAXZKd2bfFtADSoZcC1o.roa (raw, json) Hash identifier: +1AJC/T1uy51K3cG4QOtn84Jtoxq5VjE/ru2294aRv4= Subject key identifier: 03:AA:F1:50:47:83:01:76:4A:77:66:DF:16:D0:03:4A:86:5C:0B:5A Certificate issuer: /CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9 Certificate serial: 019B7A5B6C5D9D58546B90FDDDF7E032429E Authority key identifier: FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/A6rxUEeDAXZKd2bfFtADSoZcC1o.roa Signing time: Thu 01 Jan 2026 16:19:30 +0000 ROA not before: Thu 01 Jan 2026 16:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15576 IP address blocks: 185.187.120.0/23 maxlen: 23 2a0b:9e80::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:6c:5d:9d:58:54:6b:90:fd:dd:f7:e0:32:42:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9 Validity Not Before: Jan 1 16:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03aaf150478301764a7766df16d0034a865c0b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:74:da:84:51:7c:50:12:13:c2:3b:2a:7c:c7: 12:bb:db:3e:01:94:18:c3:fd:c9:63:92:af:72:9f: 33:88:b1:46:0a:f1:d6:b0:22:33:f5:a3:89:83:96: 1a:50:39:6e:7a:af:15:77:3e:67:3f:b7:6a:cf:2d: 6c:90:47:26:73:c1:7e:af:a4:31:82:de:37:9c:36: db:1f:21:92:18:4b:cf:b3:dc:49:22:a1:8b:7a:56: f4:d5:83:60:85:b3:1b:8e:34:23:51:63:69:32:30: 1c:cd:d4:05:46:6c:85:8a:0e:d3:a9:f4:0c:62:dd: 11:36:cb:86:67:2d:d6:7f:0a:cd:da:1c:62:c1:ab: 6f:fa:a6:78:3b:03:3b:c3:73:6c:4d:52:e7:74:45: e4:9f:84:70:c0:f2:c6:24:f4:73:d3:e1:c4:8f:d7: d9:1b:89:2e:20:4d:82:cb:92:10:7f:3e:fa:41:5e: 67:42:70:e0:03:f1:51:f9:b2:dd:14:ec:49:6d:18: e3:15:f7:2e:45:dc:32:2d:84:87:c4:91:c0:a8:b8: e1:c9:a9:03:20:48:96:00:0e:4a:d1:c9:09:a6:3d: c4:ca:f2:ba:5a:74:fd:9f:df:76:c6:36:1c:39:d8: 33:4a:e0:5c:4c:e2:d2:15:ca:de:d4:48:ec:58:b8: 22:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:AA:F1:50:47:83:01:76:4A:77:66:DF:16:D0:03:4A:86:5C:0B:5A X509v3 Authority Key Identifier: keyid:FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/A6rxUEeDAXZKd2bfFtADSoZcC1o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.187.120.0/23 IPv6: 2a0b:9e80::/36 Signature Algorithm: sha256WithRSAEncryption 54:06:bd:47:14:74:99:f3:68:b6:6a:1b:3f:9c:54:66:16:8d: fb:51:82:ed:d6:08:fa:cb:7e:a4:56:90:36:c0:ac:ef:90:ff: d4:49:76:11:3d:8d:63:c8:3a:20:1e:3b:1e:5a:9f:3c:44:fa: 11:13:24:c5:49:0c:24:12:93:cc:cf:65:24:ce:19:bf:8b:e9: d3:4e:08:a6:2c:f4:75:2b:da:88:a6:ff:c1:f7:ca:84:a0:fb: 4a:ff:1e:3f:80:0e:58:cc:11:30:ad:bc:43:75:d3:42:90:99: f5:c4:94:79:b6:1b:16:92:21:f2:b8:e6:17:ac:65:c9:87:0a: 5f:13:70:30:6e:a1:65:8d:7c:4e:0a:de:fb:c7:d1:19:e5:10: 35:85:05:13:60:05:91:ab:5c:3d:de:57:27:42:b8:bf:aa:28: 1a:4a:0c:72:53:9f:7d:9e:2d:fa:27:d6:4d:27:e8:46:b7:b3: 0f:21:aa:1d:27:5b:a7:7d:67:2d:ff:01:4e:43:96:e1:6e:52: 7c:4b:61:bc:c7:35:96:81:8b:62:ed:8b:80:75:0e:1f:1f:55: 92:05:c3:eb:45:a7:29:cb:35:26:3b:ad:19:61:7e:af:40:4e: 05:b6:d3:f5:c0:90:47:54:91:38:b3:65:00:e2:b4:d3:62:d4: 32:04:10:4f -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt6W2xdnVhUa5D93ffgMkKeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjI1NjJjYWU4NzNmNGZjNGEzMjMyYmY0OWRkNTM0M2I3 MDg0ZjkwHhcNMjYwMTAxMTYxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2FhZjE1MDQ3ODMwMTc2NGE3NzY2ZGYxNmQwMDM0YTg2NWMwYjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXTahFF8UBITwjsqfMcSu9s+AZQY w/3JY5Kvcp8ziLFGCvHWsCIz9aOJg5YaUDlueq8Vdz5nP7dqzy1skEcmc8F+r6Qx gt43nDbbHyGSGEvPs9xJIqGLelb01YNghbMbjjQjUWNpMjAczdQFRmyFig7TqfQM Yt0RNsuGZy3WfwrN2hxiwatv+qZ4OwM7w3NsTVLndEXkn4RwwPLGJPRz0+HEj9fZ G4kuIE2Cy5IQfz76QV5nQnDgA/FR+bLdFOxJbRjjFfcuRdwyLYSHxJHAqLjhyakD IEiWAA5K0ckJpj3EyvK6WnT9n992xjYcOdgzSuBcTOLSFcre1EjsWLgiQwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFAOq8VBHgwF2Sndm3xbQA0qGXAtaMB8GA1UdIwQY MBaAFP9iViyuhz9PxKMjK/Sd1TQ7cIT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJKV0xLNkhQMF9Fb3lNcjlKM1ZORHR3aFBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zZGMzYzQtOWM0OC00YTY0LThmYTEt ODhmN2I5MWI2ZTMyLzEvQTZyeFVFZURBWFpLZDJiZkZ0QURTb1pjQzFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8zZGMzYzQtOWM0OC00YTY0LThmYTEtODhmN2I5MWI2ZTMy LzEvXzJKV0xLNkhQMF9Fb3lNcjlKM1ZORHR3aFBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBubt4MA4E AgACMAgDBgQqC56AADANBgkqhkiG9w0BAQsFAAOCAQEAVAa9RxR0mfNotmobP5xU ZhaN+1GC7dYI+st+pFaQNsCs75D/1El2ET2NY8g6IB47HlqfPET6ERMkxUkMJBKT zM9lJM4Zv4vp004Ipiz0dSvaiKb/wffKhKD7Sv8eP4AOWMwRMK28Q3XTQpCZ9cSU ebYbFpIh8rjmF6xlyYcKXxNwMG6hZY18Tgre+8fRGeUQNYUFE2AFkatcPd5XJ0K4 v6ooGkoMclOffZ4t+ifWTSfoRrezDyGqHSdbp31nLf8BTkOW4W5SfEthvMc1loGL Yu2LgHUOHx9VkgXD60WnKcs1JjutGWF+r0BOBbbT9cCQR1SROLNlAOK002LUMgQQ Tw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:42:16 2026 by rpki-client