This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/06Cr8RrUW-YBGOEDpWiR6_6QPIo.roa File: 06Cr8RrUW-YBGOEDpWiR6_6QPIo.roa (raw, json) Hash identifier: FnV3E+psZ9RL4Wm0ZPwY8F8XZvQTXZZNm+8KVQlkwik= Subject key identifier: D3:A0:AB:F1:1A:D4:5B:E6:01:18:E1:03:A5:68:91:EB:FE:90:3C:8A Certificate issuer: /CN=3c1b83888696fc44478c693d6e7803e9516250e6 Certificate serial: 019B7B3652B2B583B54DFD73DD441CFF13D5 Authority key identifier: 3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/06Cr8RrUW-YBGOEDpWiR6_6QPIo.roa Signing time: Thu 01 Jan 2026 20:18:36 +0000 ROA not before: Thu 01 Jan 2026 20:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39326 IP address blocks: 185.51.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:52:b2:b5:83:b5:4d:fd:73:dd:44:1c:ff:13:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1b83888696fc44478c693d6e7803e9516250e6 Validity Not Before: Jan 1 20:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3a0abf11ad45be60118e103a56891ebfe903c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:eb:40:d1:72:59:42:14:9b:84:42:6d:9b:be: ad:56:c1:8a:a7:c9:7f:01:1e:ae:e2:c1:b3:90:49: 2e:9c:ac:ac:ad:cf:36:2a:4a:af:97:39:34:07:d2: 23:cd:1e:96:1c:ca:c0:69:26:c0:78:fd:1d:d0:da: f3:c9:ac:5e:9a:e0:92:0d:71:99:b8:1f:88:31:fb: b9:97:55:66:ca:44:1c:3c:0f:f7:ad:62:d5:84:10: 83:d9:8d:8a:4c:56:3a:89:ba:62:94:13:31:a8:b5: df:fc:68:ca:53:1a:ac:9a:9e:a6:69:48:83:e0:65: c9:29:3a:9d:9f:42:90:97:fe:ff:f8:fd:c2:bf:4c: e3:40:f0:6b:71:7d:a2:9b:3f:7e:a7:c3:d3:37:7b: 12:f9:ee:4b:5c:c7:48:19:b5:8d:c4:fb:71:5a:35: b7:5a:14:06:c2:56:39:e4:fa:d6:04:94:40:09:42: 22:b4:c9:b5:52:3c:2d:8b:c8:47:16:00:f3:05:08: 9a:6b:5d:79:f2:38:9d:e9:86:19:75:fe:c8:15:b8: b9:1f:98:ad:4d:85:92:ea:ab:f1:a2:6f:74:b9:13: cf:8b:33:ea:9e:79:1f:f0:07:63:49:6b:a9:eb:44: 9f:a2:76:f5:fb:bd:4e:53:a9:ee:e3:10:f3:e0:cb: 79:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A0:AB:F1:1A:D4:5B:E6:01:18:E1:03:A5:68:91:EB:FE:90:3C:8A X509v3 Authority Key Identifier: keyid:3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/06Cr8RrUW-YBGOEDpWiR6_6QPIo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.51.172.0/22 Signature Algorithm: sha256WithRSAEncryption bb:e3:08:a7:9d:78:ea:19:47:48:fe:29:4c:70:f0:08:7e:d6: 86:ee:5c:d8:6f:ed:19:65:ad:f2:2e:2b:d3:7f:af:8b:e2:75: e1:86:f5:59:7e:9c:80:9f:20:df:bf:6d:3b:1e:cc:f1:b9:f1: 59:3b:11:f8:95:91:ef:13:ff:d0:f8:b1:59:5a:0a:35:08:0e: 85:4c:a3:f0:86:8b:4a:2c:c4:ea:36:f1:85:a4:5d:b6:2a:ee: 93:50:24:56:98:07:f7:2c:9a:ff:80:b1:2c:3f:90:b2:3d:ee: 2c:f6:9c:71:b2:84:e7:e6:1b:d9:a4:db:3c:e2:c6:aa:90:97: 7c:f2:61:3b:f9:da:e0:2d:8f:cd:26:cb:27:9e:67:40:e4:5e: 7a:ae:74:a3:80:dd:7a:be:3b:ec:d4:23:0b:b9:94:06:0d:9e: 42:a2:7d:14:30:08:09:be:3e:9d:0b:e8:17:eb:5c:00:38:ef: 8f:e2:06:f4:c9:d7:47:91:93:e5:d7:84:d0:d7:e2:9a:0c:63: 03:f1:e8:6e:16:32:55:e0:7e:3a:2b:98:ed:7f:ae:3b:cc:d1: 7f:40:94:c9:fa:cf:51:6c:cb:42:a8:4b:e0:c0:6a:a2:aa:4c: 8a:48:02:39:21:c7:5d:06:17:fb:16:3a:71:16:c1:a6:6b:c1: 1a:bd:86:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NlKytYO1Tf1z3UQc/xPVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMWI4Mzg4ODY5NmZjNDQ0NzhjNjkzZDZlNzgwM2U5NTE2 MjUwZTYwHhcNMjYwMTAxMjAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2EwYWJmMTFhZDQ1YmU2MDExOGUxMDNhNTY4OTFlYmZlOTAzYzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+tA0XJZQhSbhEJtm76tVsGKp8l/ AR6u4sGzkEkunKysrc82Kkqvlzk0B9IjzR6WHMrAaSbAeP0d0NrzyaxemuCSDXGZ uB+IMfu5l1VmykQcPA/3rWLVhBCD2Y2KTFY6ibpilBMxqLXf/GjKUxqsmp6maUiD 4GXJKTqdn0KQl/7/+P3Cv0zjQPBrcX2imz9+p8PTN3sS+e5LXMdIGbWNxPtxWjW3 WhQGwlY55PrWBJRACUIitMm1Ujwti8hHFgDzBQiaa1158jid6YYZdf7IFbi5H5it TYWS6qvxom90uRPPizPqnnkf8AdjSWup60Sfonb1+71OU6nu4xDz4Mt5YwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNOgq/Ea1FvmARjhA6Vokev+kDyKMB8GA1UdIwQY MBaAFDwbg4iGlvxER4xpPW54A+lRYlDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEJ1RGlJYVdfRVJIakdrOWJuZ0Q2VkZpVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kNTU2ODMtZmVjMi00N2ZkLWFjNmUt OWU4MmRhNzMxNWNmLzEvMDZDcjhSclVXLVlCR09FRHBXaVI2XzZRUElvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9kNTU2ODMtZmVjMi00N2ZkLWFjNmUtOWU4MmRhNzMxNWNm LzEvUEJ1RGlJYVdfRVJIakdrOWJuZ0Q2VkZpVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTOsMA0G CSqGSIb3DQEBCwUAA4IBAQC74winnXjqGUdI/ilMcPAIftaG7lzYb+0ZZa3yLivT f6+L4nXhhvVZfpyAnyDfv207HszxufFZOxH4lZHvE//Q+LFZWgo1CA6FTKPwhotK LMTqNvGFpF22Ku6TUCRWmAf3LJr/gLEsP5CyPe4s9pxxsoTn5hvZpNs84saqkJd8 8mE7+drgLY/NJssnnmdA5F56rnSjgN16vjvs1CMLuZQGDZ5Con0UMAgJvj6dC+gX 61wAOO+P4gb0yddHkZPl14TQ1+KaDGMD8ehuFjJV4H46K5jtf647zNF/QJTJ+s9R bMtCqEvgwGqiqkyKSAI5IcddBhf7FjpxFsGma8EavYba -----END CERTIFICATE-----Generated at Sun Jan 25 16:38:56 2026 by rpki-client