This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/u6dKU2x8O3xV7S3OaviPva82180.roa File: u6dKU2x8O3xV7S3OaviPva82180.roa (raw, json) Hash identifier: 9A10Ud5zhJp6APcwr5M/hOCYfKIxkVszIE4bdVZOg/0= Subject key identifier: BB:A7:4A:53:6C:7C:3B:7C:55:ED:2D:CE:6A:F8:8F:BD:AF:36:D7:CD Certificate issuer: /CN=0c6fa156c57c4e885b9e6af8230b654d796a5611 Certificate serial: 019B7C8049B1E5AA0BDB45B2396F7C89EB67 Authority key identifier: 0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/u6dKU2x8O3xV7S3OaviPva82180.roa Signing time: Fri 02 Jan 2026 02:19:00 +0000 ROA not before: Fri 02 Jan 2026 02:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48391 IP address blocks: 185.23.128.0/24 maxlen: 24 185.23.129.0/24 maxlen: 24 185.23.130.0/24 maxlen: 24 185.23.131.0/24 maxlen: 24 185.115.168.0/24 maxlen: 24 185.115.169.0/24 maxlen: 24 185.115.170.0/24 maxlen: 24 185.115.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:49:b1:e5:aa:0b:db:45:b2:39:6f:7c:89:eb:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c6fa156c57c4e885b9e6af8230b654d796a5611 Validity Not Before: Jan 2 02:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bba74a536c7c3b7c55ed2dce6af88fbdaf36d7cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8b:c0:7a:49:67:12:03:40:d1:d1:42:0e:5b: 78:7a:7a:91:90:a3:c9:40:c8:08:e6:6e:10:a1:f3: fe:64:19:b1:77:b0:6e:16:21:0d:fe:6c:db:9d:ad: 90:a7:b9:12:73:c8:a0:bd:50:33:5a:30:fa:50:28: d5:dc:78:d2:9f:dc:c8:a0:5e:bc:6f:fd:b5:86:5a: 1d:a9:2f:2a:00:d5:20:74:1c:b5:80:47:06:c4:e2: 48:23:f8:ec:fa:42:98:1d:3f:f9:e9:5b:c9:aa:57: f8:15:ca:0b:b0:9e:a1:a2:24:86:4b:20:90:ee:04: 24:03:c8:9a:72:1f:8f:45:2c:a3:21:10:08:df:56: 26:45:29:a7:da:1a:3f:30:4b:41:cf:66:0d:14:ab: fc:95:08:e9:98:2c:c2:63:94:32:9a:2e:d0:a8:65: 64:ff:19:17:b5:48:03:c9:19:b6:ff:80:e7:1f:ca: 79:99:7a:1b:5a:0a:7f:44:e6:3b:10:03:67:de:9f: ed:3d:8c:ef:37:d3:13:76:ad:0e:19:56:77:19:da: 8a:39:10:3e:2c:b6:5e:3d:38:45:f5:b2:f8:85:25: 2f:94:e4:55:1b:ec:60:58:6b:77:85:fd:2a:57:97: fa:3e:5b:c5:83:bf:f3:67:8f:e5:01:16:98:89:de: a6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A7:4A:53:6C:7C:3B:7C:55:ED:2D:CE:6A:F8:8F:BD:AF:36:D7:CD X509v3 Authority Key Identifier: keyid:0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/u6dKU2x8O3xV7S3OaviPva82180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.23.128.0/22 185.115.168.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:cd:9f:0a:ca:51:71:19:69:08:50:88:25:67:0f:cd:60:24: ce:18:37:d5:e8:ce:98:4e:f6:9a:c1:e1:69:dc:f4:00:1e:e0: 34:71:e5:35:b6:a5:00:89:12:0c:01:32:57:d4:6e:7f:72:90: b2:a3:da:27:13:d0:99:c9:98:d7:02:d6:d5:d2:73:45:31:78: 84:7e:16:31:f2:68:b6:b3:27:3c:69:7c:f1:7c:2e:fc:9f:2c: 86:43:d7:ae:9a:48:b7:89:88:63:83:57:44:4b:3a:b2:38:4f: b4:af:48:dd:2a:7e:9e:d5:60:09:4d:63:7f:4e:47:33:86:7a: 76:7c:98:da:39:38:9f:e9:9b:66:ae:80:36:01:59:bc:63:a1: f7:85:11:06:47:ea:a8:82:1b:82:68:03:eb:87:ed:99:63:26: 74:ae:c4:87:36:d4:ee:df:b4:1f:99:78:2c:4c:02:a8:31:7f: ee:3f:dd:12:10:23:08:20:ef:43:6c:40:b3:c9:11:69:9e:8c: cb:52:95:72:6f:f5:74:c5:59:5c:1a:1c:d5:02:49:e0:e9:a6: 58:98:05:9b:f0:6a:ad:27:6f:e6:09:b6:15:e7:ce:29:7f:21: 84:48:e6:b4:85:e5:72:1f:2d:ff:31:ad:10:78:ae:a6:b4:34: de:49:59:70 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gEmx5aoL20WyOW98ietnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNmZhMTU2YzU3YzRlODg1YjllNmFmODIzMGI2NTRkNzk2 YTU2MTEwHhcNMjYwMTAyMDIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmE3NGE1MzZjN2MzYjdjNTVlZDJkY2U2YWY4OGZiZGFmMzZkN2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIvAeklnEgNA0dFCDlt4enqRkKPJ QMgI5m4QofP+ZBmxd7BuFiEN/mzbna2Qp7kSc8igvVAzWjD6UCjV3HjSn9zIoF68 b/21hlodqS8qANUgdBy1gEcGxOJII/js+kKYHT/56VvJqlf4FcoLsJ6hoiSGSyCQ 7gQkA8iach+PRSyjIRAI31YmRSmn2ho/MEtBz2YNFKv8lQjpmCzCY5Qymi7QqGVk /xkXtUgDyRm2/4DnH8p5mXobWgp/ROY7EANn3p/tPYzvN9MTdq0OGVZ3GdqKORA+ LLZePThF9bL4hSUvlORVG+xgWGt3hf0qV5f6PlvFg7/zZ4/lARaYid6mfQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLunSlNsfDt8Ve0tzmr4j72vNtfNMB8GA1UdIwQY MBaAFAxvoVbFfE6IW55q+CMLZU15alYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREctaFZzVjhUb2hibm1yNEl3dGxUWGxxVmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80OGM1NmQtNTcyNy00MmJhLTgwYzQt YjhjMzZlY2VkYWQ4LzEvdTZkS1UyeDhPM3hWN1MzT2F2aVB2YTgyMTgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS80OGM1NmQtNTcyNy00MmJhLTgwYzQtYjhjMzZlY2VkYWQ4 LzEvREctaFZzVjhUb2hibm1yNEl3dGxUWGxxVmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuReAAwQC uXOoMA0GCSqGSIb3DQEBCwUAA4IBAQBszZ8KylFxGWkIUIglZw/NYCTOGDfV6M6Y TvaaweFp3PQAHuA0ceU1tqUAiRIMATJX1G5/cpCyo9onE9CZyZjXAtbV0nNFMXiE fhYx8mi2syc8aXzxfC78nyyGQ9eumki3iYhjg1dESzqyOE+0r0jdKn6e1WAJTWN/ Tkczhnp2fJjaOTif6ZtmroA2AVm8Y6H3hREGR+qoghuCaAPrh+2ZYyZ0rsSHNtTu 37QfmXgsTAKoMX/uP90SECMIIO9DbECzyRFpnozLUpVyb/V0xVlcGhzVAkng6aZY mAWb8GqtJ2/mCbYV584pfyGESOa0heVyHy3/Ma0QeK6mtDTeSVlw -----END CERTIFICATE-----Generated at Mon Jan 26 15:01:44 2026 by rpki-client