This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/O6JDbaslrGOSZKrdtuCBt6ssF94.roa File: O6JDbaslrGOSZKrdtuCBt6ssF94.roa (raw, json) Hash identifier: 8ty72z4beTGAGlxyLGLA0AACx0Qa5f/MkundTg5sepM= Subject key identifier: 3B:A2:43:6D:AB:25:AC:63:92:64:AA:DD:B6:E0:81:B7:AB:2C:17:DE Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Certificate serial: 019B7CEDE535965D299D8E89F7715F30B6DC Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/O6JDbaslrGOSZKrdtuCBt6ssF94.roa Signing time: Fri 02 Jan 2026 04:18:43 +0000 ROA not before: Fri 02 Jan 2026 04:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203217 IP address blocks: 185.239.176.0/24 maxlen: 24 185.239.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:e5:35:96:5d:29:9d:8e:89:f7:71:5f:30:b6:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Validity Not Before: Jan 2 04:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ba2436dab25ac639264aaddb6e081b7ab2c17de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ab:ce:26:40:b2:92:17:36:ae:e9:85:65:19: 4a:ef:20:ea:ae:c6:b3:66:5e:8a:bc:c7:ae:26:10: 95:f3:e7:a6:7c:98:d5:c5:9c:00:67:a7:f6:a6:be: 4d:1b:7b:26:38:81:95:50:a5:1d:f5:71:7e:0c:88: 6b:0d:c1:42:d5:48:d6:58:40:5b:75:e6:28:58:a8: 97:20:b1:86:b5:f1:cd:de:cc:71:59:64:45:da:49: 3e:5d:1d:46:4c:48:0f:ce:db:53:bc:9f:1c:d4:8f: 90:a4:8b:d3:b2:92:f5:00:d6:5b:1b:d0:6f:6f:38: a5:ed:0a:bc:4f:c0:f3:e1:2d:42:99:d6:b2:a4:06: 09:b7:ea:2b:8a:a0:f3:5d:f8:98:77:ce:37:d9:be: 15:11:58:9d:1e:05:08:13:ec:f8:f3:c7:3a:11:90: 7f:b7:91:0a:12:a1:c6:3c:8c:e3:c4:97:96:ab:9b: b3:31:83:b8:46:04:30:c4:95:bd:48:16:ee:6f:60: 8b:e9:d0:95:e4:e1:af:17:41:0a:7e:ea:0b:84:05: 52:01:35:3d:9e:09:c1:18:df:ff:6d:d8:77:5e:f4: 12:b8:83:bf:03:63:45:d4:ce:c3:1d:53:ce:ec:b3: 0f:09:a7:88:9e:c9:14:eb:b9:ce:51:70:73:57:a4: d0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A2:43:6D:AB:25:AC:63:92:64:AA:DD:B6:E0:81:B7:AB:2C:17:DE X509v3 Authority Key Identifier: keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/O6JDbaslrGOSZKrdtuCBt6ssF94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.239.176.0/24 185.239.178.0/24 Signature Algorithm: sha256WithRSAEncryption 07:27:7a:c2:b6:eb:6f:b7:d7:e9:95:84:41:f3:1f:f2:a0:c1: 77:f3:4e:d2:08:86:fc:ba:9e:c9:f4:ad:aa:01:14:f2:d4:e5: 2e:6f:cb:77:8a:2f:d1:18:25:c5:13:31:57:5a:30:4b:51:a9: 06:bc:4c:55:b4:6f:ee:13:5b:c4:c3:3f:2c:f3:dd:7d:d1:30: 24:82:3d:ac:bf:02:0f:34:2e:7c:7d:19:ef:2d:b5:3d:ce:5a: 62:c4:4c:c5:81:82:fb:7b:58:66:ff:ed:a0:27:a4:2a:c3:b0: f6:bd:80:89:5e:a3:08:b8:9e:3c:69:95:76:7f:8a:60:ea:17: 66:ac:df:4d:11:1c:46:e9:bc:e9:3f:6c:bb:3b:e0:e2:e5:7f: 34:af:d5:ff:9b:e3:c7:ae:ab:d1:10:ee:44:6a:cf:17:ea:76: d6:64:3c:09:91:ce:b3:e9:00:cd:88:4c:d4:ae:48:3a:e3:63: b6:7a:e0:bc:ac:22:7a:ae:ec:65:66:90:f3:a1:fd:c9:f9:f4: 95:60:17:52:28:24:f2:32:56:fc:0b:92:b0:8e:92:cf:33:56: f8:87:1c:f9:7d:74:95:f8:ff:f2:b9:88:fa:3f:85:3c:4a:68: 06:fb:e1:f8:fa:f3:32:a9:64:86:36:d0:1b:8a:6b:c7:52:0e: a6:e3:f6:fc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87eU1ll0pnY6J93FfMLbcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Nzg1NzczZGYzMTNiOTE3MTFiZjZiYzViMTQ5ZWNjMjQ2 YjllODkwHhcNMjYwMTAyMDQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmEyNDM2ZGFiMjVhYzYzOTI2NGFhZGRiNmUwODFiN2FiMmMxN2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6vOJkCykhc2rumFZRlK7yDqrsaz Zl6KvMeuJhCV8+emfJjVxZwAZ6f2pr5NG3smOIGVUKUd9XF+DIhrDcFC1UjWWEBb deYoWKiXILGGtfHN3sxxWWRF2kk+XR1GTEgPzttTvJ8c1I+QpIvTspL1ANZbG9Bv bzil7Qq8T8Dz4S1CmdaypAYJt+oriqDzXfiYd8432b4VEVidHgUIE+z488c6EZB/ t5EKEqHGPIzjxJeWq5uzMYO4RgQwxJW9SBbub2CL6dCV5OGvF0EKfuoLhAVSATU9 ngnBGN//bdh3XvQSuIO/A2NF1M7DHVPO7LMPCaeInskU67nOUXBzV6TQwQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDuiQ22rJaxjkmSq3bbggberLBfeMB8GA1UdIwQY MBaAFKZ4V3PfMTuRcRv2vFsUnswka56JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEt ZDc1ODY5YzBjNzFlLzEvTzZKRGJhc2xyR09TWktyZHR1Q0J0NnNzRjk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEtZDc1ODY5YzBjNzFl LzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAue+wAwQA ue+yMA0GCSqGSIb3DQEBCwUAA4IBAQAHJ3rCtutvt9fplYRB8x/yoMF3807SCIb8 up7J9K2qARTy1OUub8t3ii/RGCXFEzFXWjBLUakGvExVtG/uE1vEwz8s89190TAk gj2svwIPNC58fRnvLbU9zlpixEzFgYL7e1hm/+2gJ6Qqw7D2vYCJXqMIuJ48aZV2 f4pg6hdmrN9NERxG6bzpP2y7O+Di5X80r9X/m+PHrqvREO5Eas8X6nbWZDwJkc6z 6QDNiEzUrkg642O2euC8rCJ6ruxlZpDzof3J+fSVYBdSKCTyMlb8C5KwjpLPM1b4 hxz5fXSV+P/yuYj6P4U8SmgG++H4+vMyqWSGNtAbimvHUg6m4/b8 -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:50 2026 by rpki-client