This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/23Zi6Py4gat9DXMFNsAI-_q8-4M.roa File: 23Zi6Py4gat9DXMFNsAI-_q8-4M.roa (raw, json) Hash identifier: JvpZNhbX4GuKh0NLAnQpWeYECOq74QqIFmrg5zgTOUo= Subject key identifier: DB:76:62:E8:FC:B8:81:AB:7D:0D:73:05:36:C0:08:FB:FA:BC:FB:83 Certificate issuer: /CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa Certificate serial: 019B7BA41484AB1BF260332FB4376DFD71C2 Authority key identifier: 6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/23Zi6Py4gat9DXMFNsAI-_q8-4M.roa Signing time: Thu 01 Jan 2026 22:18:29 +0000 ROA not before: Thu 01 Jan 2026 22:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204817 IP address blocks: 185.219.8.0/22 maxlen: 24 2a0b:dd40::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:14:84:ab:1b:f2:60:33:2f:b4:37:6d:fd:71:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa Validity Not Before: Jan 1 22:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db7662e8fcb881ab7d0d730536c008fbfabcfb83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7e:13:a8:b5:bf:0b:ba:c8:01:27:16:26:58: e2:fb:98:d3:28:6e:d9:ef:a2:20:83:35:51:78:6c: 10:fb:99:25:f0:36:70:e9:3f:32:05:d9:cc:0e:be: dc:69:83:d6:85:2e:b1:f8:31:3c:57:94:a5:94:03: d1:e2:dc:96:fe:1e:db:cf:6b:88:29:fc:fa:e1:76: 5d:4c:0e:7a:0f:a7:b4:e2:f5:b3:5d:be:a6:47:3a: 84:b4:8b:24:c3:a9:64:01:26:4e:05:7c:51:78:15: 1e:c5:66:4d:4b:fc:d7:cc:73:61:e5:7b:cd:15:6d: a9:b6:f0:24:f2:45:43:a3:c7:f4:06:2d:e4:33:e7: 31:07:7f:0a:23:21:78:3f:68:8e:52:0d:18:8d:96: 43:ca:97:23:e0:1c:ee:64:bc:40:cf:5b:c3:6b:da: da:75:14:dd:8e:05:db:f6:56:99:8d:ba:0b:96:68: 03:ad:a5:58:0f:db:d2:d2:e5:21:44:28:eb:b1:ad: 9b:ff:48:91:7e:72:a7:f0:1c:9b:8f:dd:df:cb:80: 25:21:9d:8a:fc:23:ef:7c:f0:32:c4:89:43:43:4a: 18:d6:9c:49:ed:6c:7a:0f:d3:6e:a1:c1:8e:d5:78: 21:22:5b:e6:d4:9b:4d:ff:b3:6a:bc:d7:56:ad:cc: 65:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:76:62:E8:FC:B8:81:AB:7D:0D:73:05:36:C0:08:FB:FA:BC:FB:83 X509v3 Authority Key Identifier: keyid:6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/23Zi6Py4gat9DXMFNsAI-_q8-4M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.219.8.0/22 IPv6: 2a0b:dd40::/29 Signature Algorithm: sha256WithRSAEncryption 78:0d:19:a8:32:fd:78:3c:55:ff:8a:ff:fc:43:2b:3f:42:b8: f4:c8:e6:a8:09:e1:5e:66:9a:99:d5:33:8c:3b:d3:ad:ed:b8: 8e:d4:96:e0:20:a6:15:4d:da:ae:b1:07:87:7d:7c:21:6c:ad: 98:5f:cb:1c:e2:f2:a0:25:25:52:cc:f8:8c:6e:8a:b1:0a:56: 9b:3e:bf:4f:c2:bc:38:a2:5b:d7:6b:3d:74:1c:fd:85:4f:d9: e2:3d:17:90:74:1d:bd:c5:dd:45:e1:49:bc:d6:bd:d9:f3:05: 8b:11:58:15:20:3a:5c:1b:2b:de:6f:18:7b:75:35:42:c3:da: b5:e4:93:e9:cc:5b:37:60:0e:62:31:0b:96:f8:1f:8f:ce:b0: 2e:00:04:ee:3e:52:b6:04:8a:e5:5d:5f:ff:b0:e9:15:87:00: 78:ae:c1:e2:ec:4b:06:dc:9a:b3:5a:16:19:f8:7b:e1:ba:96: 5d:10:17:04:e3:8e:58:43:16:3a:91:95:e6:08:e5:20:48:f1: 4c:43:9c:f6:37:8b:89:4a:b5:fd:12:80:04:3e:4b:e2:f8:26: b8:20:98:99:60:19:61:76:b2:a4:4a:3d:a2:24:84:f8:b2:25: a9:30:5e:17:10:da:1e:80:fa:b4:d4:8f:a6:8e:f9:e1:af:03: 39:db:01:7a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7pBSEqxvyYDMvtDdt/XHCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNjZjNTNiMTM1NjZkMDFjNGE4OTNhZGYxMzBiYmI0ZmEx NjUzYWEwHhcNMjYwMTAxMjIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjc2NjJlOGZjYjg4MWFiN2QwZDczMDUzNmMwMDhmYmZhYmNmYjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn4TqLW/C7rIAScWJlji+5jTKG7Z 76IggzVReGwQ+5kl8DZw6T8yBdnMDr7caYPWhS6x+DE8V5SllAPR4tyW/h7bz2uI Kfz64XZdTA56D6e04vWzXb6mRzqEtIskw6lkASZOBXxReBUexWZNS/zXzHNh5XvN FW2ptvAk8kVDo8f0Bi3kM+cxB38KIyF4P2iOUg0YjZZDypcj4BzuZLxAz1vDa9ra dRTdjgXb9laZjboLlmgDraVYD9vS0uUhRCjrsa2b/0iRfnKn8Bybj93fy4AlIZ2K /CPvfPAyxIlDQ0oY1pxJ7Wx6D9NuocGO1XghIlvm1JtN/7NqvNdWrcxlZQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNt2Yuj8uIGrfQ1zBTbACPv6vPuDMB8GA1UdIwQY MBaAFGtmxTsTVm0BxKiTrfEwu7T6FlOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC82ZTVmZjEtMzlmOS00NjZiLTgyN2Yt N2JjMjY4YTBiNTE3LzEvMjNaaTZQeTRnYXQ5RFhNRk5zQUktX3E4LTRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC82ZTVmZjEtMzlmOS00NjZiLTgyN2YtN2JjMjY4YTBiNTE3 LzEvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudsIMA0E AgACMAcDBQMqC91AMA0GCSqGSIb3DQEBCwUAA4IBAQB4DRmoMv14PFX/iv/8Qys/ Qrj0yOaoCeFeZpqZ1TOMO9Ot7biO1JbgIKYVTdqusQeHfXwhbK2YX8sc4vKgJSVS zPiMboqxClabPr9Pwrw4olvXaz10HP2FT9niPReQdB29xd1F4Um81r3Z8wWLEVgV IDpcGyvebxh7dTVCw9q15JPpzFs3YA5iMQuW+B+PzrAuAATuPlK2BIrlXV//sOkV hwB4rsHi7EsG3JqzWhYZ+HvhupZdEBcE445YQxY6kZXmCOUgSPFMQ5z2N4uJSrX9 EoAEPkvi+Ca4IJiZYBlhdrKkSj2iJIT4siWpMF4XENoegPq01I+mjvnhrwM52wF6 -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:08 2026 by rpki-client