This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/6sIpurMyf7U7cVjfDtGf65yWDwA.roa File: 6sIpurMyf7U7cVjfDtGf65yWDwA.roa (raw, json) Hash identifier: cZnmgrrB6eUg5rHF2CdbgLHSyI5RnOe61koYU+5dDnA= Subject key identifier: EA:C2:29:BA:B3:32:7F:B5:3B:71:58:DF:0E:D1:9F:EB:9C:96:0F:00 Certificate issuer: /CN=d03046d16cfc391b028b88743773ce005cf97b1d Certificate serial: 019B7CED8F994994528E4249D7D83DDFB498 Authority key identifier: D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/6sIpurMyf7U7cVjfDtGf65yWDwA.roa Signing time: Fri 02 Jan 2026 04:18:22 +0000 ROA not before: Fri 02 Jan 2026 04:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58003 IP address blocks: 185.163.152.0/24 maxlen: 24 185.163.153.0/24 maxlen: 24 185.163.154.0/24 maxlen: 24 185.163.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:8f:99:49:94:52:8e:42:49:d7:d8:3d:df:b4:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d03046d16cfc391b028b88743773ce005cf97b1d Validity Not Before: Jan 2 04:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eac229bab3327fb53b7158df0ed19feb9c960f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b6:67:93:b9:0f:45:73:c0:db:e0:95:9e:e0: ee:cd:6e:f3:e4:be:72:37:67:fb:2d:4b:fc:43:c5: 22:df:2d:43:d0:d7:41:d0:ae:36:c3:30:3e:f2:20: 92:b7:12:0e:c8:39:2e:1c:2d:e2:e5:6a:03:45:5f: 36:9d:3c:d0:6f:01:77:33:f8:3e:56:46:44:ec:4d: 5d:74:80:41:93:0a:25:64:f5:07:a8:7c:d4:ea:14: 63:6a:c0:84:d7:30:36:c2:d9:2b:97:2a:28:22:c7: 06:bc:a7:dd:90:6c:66:a2:37:9f:9c:2a:a1:f8:df: c6:35:10:ad:81:35:b2:1e:04:a2:d6:7d:41:de:4c: fa:45:da:c2:eb:57:a2:e3:63:d8:43:0e:f3:cd:79: 33:15:d2:e7:79:33:43:67:74:40:ae:7c:29:f8:2a: 3e:35:bf:a4:41:aa:7a:49:bf:c6:99:1a:98:23:a3: c7:ce:fc:3d:11:4e:47:b3:cb:24:3f:f9:32:d9:67: 0e:8e:a1:7d:a8:1a:c7:b3:e8:87:34:fb:96:72:02: d7:0b:9c:6d:a1:26:14:c7:61:42:ea:74:1e:51:da: 93:63:03:31:4b:1a:c5:f8:43:12:8f:9d:af:b1:f3: 10:78:69:fe:41:b1:c3:91:3b:a1:92:15:5b:4f:57: a0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C2:29:BA:B3:32:7F:B5:3B:71:58:DF:0E:D1:9F:EB:9C:96:0F:00 X509v3 Authority Key Identifier: keyid:D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/6sIpurMyf7U7cVjfDtGf65yWDwA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.163.152.0/22 Signature Algorithm: sha256WithRSAEncryption b8:ec:1f:b7:6b:2f:76:40:b3:e2:96:8b:ee:8b:d1:5d:ad:08: 94:4f:b5:8b:97:be:21:fc:14:50:15:7e:d7:e3:86:03:59:59: f6:fc:0c:0a:7b:01:5a:74:9d:23:07:c6:9d:ed:8c:05:84:0b: 2b:6f:91:3a:1f:93:51:88:42:b9:04:c3:e0:3e:6f:d0:b1:80: 3f:48:ba:05:64:b5:54:32:b0:d5:ba:5a:be:46:35:fc:85:ca: 96:f7:38:2d:fe:28:0f:24:79:5c:82:ac:2a:56:56:ab:87:80: 28:94:3e:a9:05:35:c1:e8:bf:4f:90:28:77:42:78:51:42:a8: 47:c4:ee:03:75:88:7e:14:91:c6:06:d5:c0:35:15:09:5c:ae: 23:ab:91:83:da:a7:6b:3b:3e:63:3e:3c:22:12:f1:ed:2d:69: 37:d6:b0:2b:c7:26:cc:ab:f7:8c:5b:2e:01:db:66:ca:09:64: 3c:ce:ea:da:9b:7b:7c:43:1c:96:5d:b3:de:4b:40:d0:71:ca: 74:64:8f:bb:70:fc:8d:32:46:40:db:66:b1:bd:31:08:45:40: a9:57:86:8d:c4:a0:e2:1b:95:18:f7:29:1e:27:17:fb:3c:77: bf:37:de:1e:e1:34:38:77:28:a0:fb:a2:3c:42:54:94:f6:80: fe:a9:1d:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Y+ZSZRSjkJJ19g937SYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMzA0NmQxNmNmYzM5MWIwMjhiODg3NDM3NzNjZTAwNWNm OTdiMWQwHhcNMjYwMTAyMDQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWMyMjliYWIzMzI3ZmI1M2I3MTU4ZGYwZWQxOWZlYjljOTYwZjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLZnk7kPRXPA2+CVnuDuzW7z5L5y N2f7LUv8Q8Ui3y1D0NdB0K42wzA+8iCStxIOyDkuHC3i5WoDRV82nTzQbwF3M/g+ VkZE7E1ddIBBkwolZPUHqHzU6hRjasCE1zA2wtkrlyooIscGvKfdkGxmojefnCqh +N/GNRCtgTWyHgSi1n1B3kz6RdrC61ei42PYQw7zzXkzFdLneTNDZ3RArnwp+Co+ Nb+kQap6Sb/GmRqYI6PHzvw9EU5Hs8skP/ky2WcOjqF9qBrHs+iHNPuWcgLXC5xt oSYUx2FC6nQeUdqTYwMxSxrF+EMSj52vsfMQeGn+QbHDkTuhkhVbT1eg+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOrCKbqzMn+1O3FY3w7Rn+uclg8AMB8GA1UdIwQY MBaAFNAwRtFs/DkbAouIdDdzzgBc+XsdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMERCRzBXejhPUnNDaTRoME4zUE9BRno1ZXgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xOGQxMzItOTk1MS00MDU1LWI1YTYt ZGMwZTFhNzI1MjIxLzEvNnNJcHVyTXlmN1U3Y1ZqZkR0R2Y2NXlXRHdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xOGQxMzItOTk1MS00MDU1LWI1YTYtZGMwZTFhNzI1MjIx LzEvMERCRzBXejhPUnNDaTRoME4zUE9BRno1ZXgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaOYMA0G CSqGSIb3DQEBCwUAA4IBAQC47B+3ay92QLPilovui9FdrQiUT7WLl74h/BRQFX7X 44YDWVn2/AwKewFadJ0jB8ad7YwFhAsrb5E6H5NRiEK5BMPgPm/QsYA/SLoFZLVU MrDVulq+RjX8hcqW9zgt/igPJHlcgqwqVlarh4AolD6pBTXB6L9PkCh3QnhRQqhH xO4DdYh+FJHGBtXANRUJXK4jq5GD2qdrOz5jPjwiEvHtLWk31rArxybMq/eMWy4B 22bKCWQ8zuram3t8QxyWXbPeS0DQccp0ZI+7cPyNMkZA22axvTEIRUCpV4aNxKDi G5UY9ykeJxf7PHe/N94e4TQ4dyig+6I8QlSU9oD+qR3N -----END CERTIFICATE-----Generated at Sun Jan 25 11:02:05 2026 by rpki-client