This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/k6BAsgY_7U_KIwQG-JQSaHDxB9c.roa File: k6BAsgY_7U_KIwQG-JQSaHDxB9c.roa (raw, json) Hash identifier: mykJoSrib037xaFcqg06p/Ay95dFVkUOY6oQwzMXt3Y= Subject key identifier: 93:A0:40:B2:06:3F:ED:4F:CA:23:04:06:F8:94:12:68:70:F1:07:D7 Certificate issuer: /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16 Certificate serial: 019B79ED2327663E580A2360188D3C43EA6C Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/k6BAsgY_7U_KIwQG-JQSaHDxB9c.roa Signing time: Thu 01 Jan 2026 14:19:02 +0000 ROA not before: Thu 01 Jan 2026 14:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59989 IP address blocks: 185.22.32.0/22 maxlen: 22 185.22.32.0/24 maxlen: 24 185.22.33.0/24 maxlen: 24 185.22.34.0/24 maxlen: 24 185.22.35.0/24 maxlen: 24 185.100.200.0/22 maxlen: 22 185.100.200.0/24 maxlen: 24 185.100.201.0/24 maxlen: 24 185.100.202.0/24 maxlen: 24 185.100.203.0/24 maxlen: 24 2a00:5e60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:23:27:66:3e:58:0a:23:60:18:8d:3c:43:ea:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16 Validity Not Before: Jan 1 14:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93a040b2063fed4fca230406f894126870f107d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:7f:fc:5a:7c:50:9c:6a:28:54:2f:89:a8:10: 21:70:4d:09:e6:3a:8c:74:8a:97:8d:d1:c3:45:38: 68:7c:a0:ce:39:7c:aa:4d:b5:a0:30:ce:29:a7:7e: 54:b1:b7:2d:39:5c:42:fe:ab:a1:47:d7:71:da:a7: ec:5c:08:a4:d4:02:0a:9c:65:b9:87:96:41:c8:69: 79:1d:0f:2b:a4:bd:0b:02:35:53:53:b1:16:64:4b: ff:98:28:a3:bb:21:4e:1b:7a:ba:18:87:14:ab:8f: d0:b3:b8:48:71:d6:5f:ae:03:0c:ed:30:1c:71:f6: a6:20:0b:86:ab:0b:fe:cc:7b:ea:cf:ce:2d:04:f3: c8:5f:ea:c5:48:b3:1c:18:92:1d:6d:6a:cf:f4:4e: 56:43:7e:b5:1c:9f:e6:44:18:dc:72:ee:6b:b3:16: ae:b2:f7:44:02:65:1e:95:a7:4a:de:f4:0f:58:38: e1:81:46:99:07:c9:32:44:b6:0e:5b:c7:8f:a5:ef: 17:7a:5c:74:f9:20:1c:05:a6:d9:e0:b3:2b:98:3c: 81:cc:73:53:46:5c:04:7b:05:fe:d2:e4:8a:82:27: d5:db:06:62:55:b8:19:57:f7:01:d2:e6:95:b7:74: e7:b0:e4:cc:8a:ef:76:d8:13:38:cd:df:32:5e:74: 40:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A0:40:B2:06:3F:ED:4F:CA:23:04:06:F8:94:12:68:70:F1:07:D7 X509v3 Authority Key Identifier: keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/k6BAsgY_7U_KIwQG-JQSaHDxB9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.22.32.0/22 185.100.200.0/22 IPv6: 2a00:5e60::/32 Signature Algorithm: sha256WithRSAEncryption 3c:d3:a9:2c:76:9b:44:23:9a:d1:48:65:ec:54:63:45:88:ce: ee:41:d8:e1:c2:69:c7:50:c2:c1:59:29:16:08:50:aa:2e:c4: 6e:11:3f:df:69:db:a7:de:7d:0b:13:c8:94:6f:6a:c1:a5:9b: 88:77:5e:f7:94:61:c7:cb:84:25:43:67:53:56:1a:9d:bf:7c: 80:0a:52:f1:6e:24:1d:c0:1b:37:e2:cd:b9:64:ff:16:bc:28: 19:39:fe:56:75:cd:d3:ce:6f:e4:c7:ac:53:c4:4f:5f:6e:f3: 0e:f3:00:d9:b7:a9:89:c9:a8:c2:b0:d2:16:ca:18:bb:de:1d: 2c:95:11:ba:1f:07:2b:2d:a0:4e:7b:6b:10:8f:1b:49:04:2f: 2b:36:23:1a:3c:3e:98:21:b6:05:20:ff:a3:bf:99:ce:ee:4f: 2a:5b:b9:0e:09:81:20:db:e0:5d:bf:7d:75:dc:83:3b:df:7f: 6a:c3:58:49:8a:44:ba:e1:e2:b2:54:c0:09:9e:35:13:de:2f: ac:d1:e4:52:a1:d6:86:e6:d8:0f:e6:9e:b8:1a:36:a2:cd:80: f3:f5:cf:b9:e0:73:76:ad:ae:1a:06:b0:6f:b3:ec:cf:7d:a9: 76:f9:18:cd:0a:1c:c6:18:5c:e1:1a:d8:da:90:4a:6d:f6:70: 0f:51:da:45 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57SMnZj5YCiNgGI08Q+psMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MWE2Y2JiMmRmNmU3ZmFjY2M1ODUzYmE1NDAwZjFmNDcw ZWFiMTYwHhcNMjYwMTAxMTQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2EwNDBiMjA2M2ZlZDRmY2EyMzA0MDZmODk0MTI2ODcwZjEwN2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73/8WnxQnGooVC+JqBAhcE0J5jqM dIqXjdHDRThofKDOOXyqTbWgMM4pp35UsbctOVxC/quhR9dx2qfsXAik1AIKnGW5 h5ZByGl5HQ8rpL0LAjVTU7EWZEv/mCijuyFOG3q6GIcUq4/Qs7hIcdZfrgMM7TAc cfamIAuGqwv+zHvqz84tBPPIX+rFSLMcGJIdbWrP9E5WQ361HJ/mRBjccu5rsxau svdEAmUeladK3vQPWDjhgUaZB8kyRLYOW8ePpe8Xelx0+SAcBabZ4LMrmDyBzHNT RlwEewX+0uSKgifV2wZiVbgZV/cB0uaVt3TnsOTMiu922BM4zd8yXnRARQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJOgQLIGP+1PyiMEBviUEmhw8QfXMB8GA1UdIwQY MBaAFJcabLst9uf6zMWFO6VADx9HDqsWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHhwc3V5MzI1X3JNeFlVN3BVQVBIMGNPcXhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS83ZDNmMDAtZDQ4Yy00MTZmLTkxOWUt ZGMwMzg5ZjkxNjdkLzEvazZCQXNnWV83VV9LSXdRRy1KUVNhSER4QjljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS83ZDNmMDAtZDQ4Yy00MTZmLTkxOWUtZGMwMzg5ZjkxNjdk LzEvbHhwc3V5MzI1X3JNeFlVN3BVQVBIMGNPcXhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuRYgAwQC uWTIMA0EAgACMAcDBQAqAF5gMA0GCSqGSIb3DQEBCwUAA4IBAQA806ksdptEI5rR SGXsVGNFiM7uQdjhwmnHUMLBWSkWCFCqLsRuET/fadun3n0LE8iUb2rBpZuId173 lGHHy4QlQ2dTVhqdv3yAClLxbiQdwBs34s25ZP8WvCgZOf5Wdc3Tzm/kx6xTxE9f bvMO8wDZt6mJyajCsNIWyhi73h0slRG6HwcrLaBOe2sQjxtJBC8rNiMaPD6YIbYF IP+jv5nO7k8qW7kOCYEg2+Bdv3113IM7339qw1hJikS64eKyVMAJnjUT3i+s0eRS odaG5tgP5p64GjaizYDz9c+54HN2ra4aBrBvs+zPfal2+RjNChzGGFzhGtjakEpt 9nAPUdpF -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:56 2026 by rpki-client