This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/6TxN43R2n4f6_lmQ2Hpf5ACYWTA.roa File: 6TxN43R2n4f6_lmQ2Hpf5ACYWTA.roa (raw, json) Hash identifier: H1Tpf8B6yk+21S4AcVHmhmY0uxxPu+V39L+M+Ee8RSU= Subject key identifier: E9:3C:4D:E3:74:76:9F:87:FA:FE:59:90:D8:7A:5F:E4:00:98:59:30 Certificate issuer: /CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda Certificate serial: 019B7BA3CDE2066BDB14BA8EA5B792541488 Authority key identifier: 97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/6TxN43R2n4f6_lmQ2Hpf5ACYWTA.roa Signing time: Thu 01 Jan 2026 22:18:11 +0000 ROA not before: Thu 01 Jan 2026 22:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207255 IP address blocks: 185.161.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:cd:e2:06:6b:db:14:ba:8e:a5:b7:92:54:14:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda Validity Not Before: Jan 1 22:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e93c4de374769f87fafe5990d87a5fe400985930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6f:dd:59:6d:77:5b:7c:3c:ad:d4:47:aa:2c: 87:d2:6f:d8:f6:5a:4f:45:da:c5:ca:74:83:5c:dc: ff:3b:a9:09:a6:a8:ec:62:27:07:7e:a9:63:de:9e: f8:f9:c5:12:64:33:8f:83:d1:7f:d7:cd:2a:4e:b6: ec:71:19:c6:b2:9a:d2:92:e3:28:2e:56:e8:3f:13: ff:3f:17:15:cd:cd:f0:cb:cb:71:12:ab:42:83:9c: d8:cb:b9:1c:3c:d3:18:c3:87:8a:e9:d2:1f:ca:7c: 79:bc:9b:58:e3:77:0c:78:44:15:3f:10:bd:be:05: 9c:b2:c2:c7:d5:43:49:ec:bf:5c:49:41:98:5a:44: 1e:f3:e1:cf:75:9a:d0:f1:6a:e5:a8:7f:58:11:76: 62:61:2e:4e:3a:d0:87:3f:2e:43:2a:dc:65:da:a8: c9:5e:55:2f:fc:d1:b3:8e:92:53:f6:0c:00:a7:79: 9f:25:81:12:03:18:3d:31:03:58:82:e1:f6:37:bc: 20:92:03:7d:f9:b0:32:36:a3:c6:bf:78:fc:f8:92: 91:74:05:b7:76:88:87:7e:bb:95:94:cc:5e:d9:a9: a2:22:ce:8b:bb:85:62:5e:06:8f:db:63:e4:de:ac: 6b:6d:41:0e:29:ed:64:00:98:fd:1d:67:67:5d:e7: 6e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:3C:4D:E3:74:76:9F:87:FA:FE:59:90:D8:7A:5F:E4:00:98:59:30 X509v3 Authority Key Identifier: keyid:97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/6TxN43R2n4f6_lmQ2Hpf5ACYWTA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.204.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:c6:8a:cf:aa:82:24:78:7a:f1:40:37:13:c7:0a:3c:dd:b4: 52:42:44:b1:bb:a8:66:5e:75:b5:73:8b:45:dd:f2:44:ce:8b: 96:35:f4:8b:8d:f9:0e:e8:6b:d4:aa:f8:93:9d:6e:8d:ad:69: d1:75:4d:fa:95:1e:f6:2b:b1:32:ae:40:e4:1d:3e:02:f0:5d: 89:04:dc:cc:f7:b4:e4:c4:73:57:6c:c9:0e:42:55:ac:8b:30: c2:d7:a0:c9:b9:78:00:8e:2e:3a:02:50:6f:75:16:35:a3:2f: ee:cd:1b:43:be:f0:73:e0:91:fb:06:d6:c9:89:e8:b9:54:d2: 80:03:73:60:39:ff:2a:c6:21:a6:36:bc:b8:9e:19:6d:82:a5: 7f:3e:d8:91:16:3e:df:81:20:ec:a3:93:84:fd:5f:0b:61:ed: 17:f9:e5:a0:94:3e:5a:ec:25:6e:e8:38:57:ce:9e:2f:e9:e5: a1:71:79:8e:63:ca:ec:37:26:41:3c:fc:a9:d9:9e:5a:f3:62: 06:52:4a:7a:1f:09:89:d2:99:b0:e1:7b:a4:91:c8:bc:0b:30: 8e:46:47:7a:32:44:77:5d:18:5b:e6:05:55:47:42:d1:5d:07: 40:58:f8:5b:6a:a5:14:96:a9:21:f0:2e:c8:77:85:f1:3f:4c: e5:0a:65:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o83iBmvbFLqOpbeSVBSIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3YzRiY2RkNTMxMmY4YTdjMzNkZTRiN2Q3NWMxNWI0Y2Ji YzFkZGEwHhcNMjYwMTAxMjIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTNjNGRlMzc0NzY5Zjg3ZmFmZTU5OTBkODdhNWZlNDAwOTg1OTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm/dWW13W3w8rdRHqiyH0m/Y9lpP RdrFynSDXNz/O6kJpqjsYicHfqlj3p74+cUSZDOPg9F/180qTrbscRnGsprSkuMo LlboPxP/PxcVzc3wy8txEqtCg5zYy7kcPNMYw4eK6dIfynx5vJtY43cMeEQVPxC9 vgWcssLH1UNJ7L9cSUGYWkQe8+HPdZrQ8WrlqH9YEXZiYS5OOtCHPy5DKtxl2qjJ XlUv/NGzjpJT9gwAp3mfJYESAxg9MQNYguH2N7wgkgN9+bAyNqPGv3j8+JKRdAW3 doiHfruVlMxe2amiIs6Lu4ViXgaP22Pk3qxrbUEOKe1kAJj9HWdnXedu5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOk8TeN0dp+H+v5ZkNh6X+QAmFkwMB8GA1UdIwQY MBaAFJfEvN1TEvinwz3kt9dcFbTLvB3aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDhTODNWTVMtS2ZEUGVTMzExd1Z0TXU4SGRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80NDc3NWYtMzdhNi00YTg2LTlmZTUt ZTkzYmRiOGQ5Yzg1LzEvNlR4TjQzUjJuNGY2X2xtUTJIcGY1QUNZV1RBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80NDc3NWYtMzdhNi00YTg2LTlmZTUtZTkzYmRiOGQ5Yzg1 LzEvbDhTODNWTVMtS2ZEUGVTMzExd1Z0TXU4SGRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaHMMA0G CSqGSIb3DQEBCwUAA4IBAQAsxorPqoIkeHrxQDcTxwo83bRSQkSxu6hmXnW1c4tF 3fJEzouWNfSLjfkO6GvUqviTnW6NrWnRdU36lR72K7EyrkDkHT4C8F2JBNzM97Tk xHNXbMkOQlWsizDC16DJuXgAji46AlBvdRY1oy/uzRtDvvBz4JH7BtbJiei5VNKA A3NgOf8qxiGmNry4nhltgqV/PtiRFj7fgSDso5OE/V8LYe0X+eWglD5a7CVu6DhX zp4v6eWhcXmOY8rsNyZBPPyp2Z5a82IGUkp6HwmJ0pmw4Xukkci8CzCORkd6MkR3 XRhb5gVVR0LRXQdAWPhbaqUUlqkh8C7Id4XxP0zlCmWR -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:37 2026 by rpki-client