This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/asL1r6qErqGvz26qTmszVkMAoV8.roa File: asL1r6qErqGvz26qTmszVkMAoV8.roa (raw, json) Hash identifier: 00+w5KlcRsRK4WcH1P2pFYleqPyk0QU6HukME2Igpec= Subject key identifier: 6A:C2:F5:AF:AA:84:AE:A1:AF:CF:6E:AA:4E:6B:33:56:43:00:A1:5F Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C13AB069CB6CBE96745375D7C470B41 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/asL1r6qErqGvz26qTmszVkMAoV8.roa Signing time: Fri 02 Jan 2026 00:20:22 +0000 ROA not before: Fri 02 Jan 2026 00:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401838 IP address blocks: 185.194.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:ab:06:9c:b6:cb:e9:67:45:37:5d:7c:47:0b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ac2f5afaa84aea1afcf6eaa4e6b33564300a15f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2f:72:05:53:1b:b0:cc:63:a6:54:5a:48:32: 99:e9:02:b7:e1:dd:ea:c7:0e:52:6d:f7:5f:c6:a0: 36:5e:85:48:e3:52:4e:3e:3e:81:fb:66:db:c3:cc: 70:55:09:72:d3:83:a9:09:a3:58:d9:42:72:7f:1b: 9c:98:2e:5e:6c:6f:2b:aa:3b:8d:8d:5e:df:b5:b9: 61:ed:f8:52:24:4d:00:1a:60:34:b5:22:93:fa:03: 83:b7:bc:0b:42:ca:29:05:e6:ef:7f:70:b0:94:2d: a2:c3:3b:55:40:9b:8f:52:5e:d6:ba:30:9b:8e:b3: 2b:00:8a:89:b6:6c:f3:16:df:3e:2b:c9:6e:2e:fc: aa:02:1e:bd:3c:82:33:50:75:ec:75:86:88:d4:0f: bf:39:9c:84:e7:69:62:e7:c7:e1:b8:6f:13:e8:1d: c0:f7:8b:f1:0b:68:90:57:b1:0f:dc:20:b7:34:77: 44:15:8b:b3:a5:e8:b9:b8:fd:3c:9f:ec:19:55:be: f7:c2:ea:12:0e:bb:57:48:d2:f4:a0:24:5c:92:c1: ae:1c:49:f8:14:b5:87:bd:85:49:2a:25:17:19:c4: 99:eb:57:89:a3:e2:bc:b0:ad:65:41:19:bd:4a:32: ce:c0:2d:f1:3a:f5:f6:b6:86:74:42:b3:a9:b7:56: 55:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C2:F5:AF:AA:84:AE:A1:AF:CF:6E:AA:4E:6B:33:56:43:00:A1:5F X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/asL1r6qErqGvz26qTmszVkMAoV8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.194.29.0/24 Signature Algorithm: sha256WithRSAEncryption 99:43:cb:55:5e:14:b3:84:74:63:9e:82:73:ff:3c:5c:40:2d: 09:9c:e9:82:14:0f:da:73:b7:f0:ce:82:e5:02:f5:6a:21:5e: 92:70:b8:ad:ff:d6:1d:3f:c3:f3:6f:ce:05:e3:ae:ac:9d:ef: 9f:c4:9c:7b:d4:0d:ac:74:62:c9:fe:df:ce:14:78:a3:34:f7: 9b:eb:69:1f:5f:92:cc:c5:4c:e6:07:02:fa:d7:2d:cf:00:1a: 1a:5c:55:28:26:b5:fb:ad:47:2b:9c:e9:d1:44:d3:d7:84:d3: 96:e9:a1:2f:de:cb:70:a9:9b:61:28:fc:b1:ec:2e:95:08:5b: e8:a7:14:1c:86:d3:92:25:df:af:17:2c:b5:cd:fc:04:55:1a: 27:84:ba:94:da:42:0d:34:20:dc:ce:79:c6:48:df:5f:3f:9b: b3:e2:c3:42:39:36:f4:ef:8d:7a:a8:52:1f:d8:09:d1:35:6e: 98:2b:b0:6b:6c:dd:e4:fb:4f:ed:c1:3d:38:a1:5d:3a:ba:05: 25:90:d0:5c:ae:f8:76:36:71:4e:0e:63:3a:f9:9d:29:65:b3: 4e:3a:e3:5b:f4:55:0b:de:5c:a2:8a:3a:d9:21:64:42:c8:a0: ea:08:c3:75:5d:6b:7d:46:17:56:e1:98:b8:0d:63:f0:b5:85: 53:69:aa:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E6sGnLbL6WdFN118RwtBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWMyZjVhZmFhODRhZWExYWZjZjZlYWE0ZTZiMzM1NjQzMDBhMTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC9yBVMbsMxjplRaSDKZ6QK34d3q xw5SbfdfxqA2XoVI41JOPj6B+2bbw8xwVQly04OpCaNY2UJyfxucmC5ebG8rqjuN jV7ftblh7fhSJE0AGmA0tSKT+gODt7wLQsopBebvf3CwlC2iwztVQJuPUl7WujCb jrMrAIqJtmzzFt8+K8luLvyqAh69PIIzUHXsdYaI1A+/OZyE52li58fhuG8T6B3A 94vxC2iQV7EP3CC3NHdEFYuzpei5uP08n+wZVb73wuoSDrtXSNL0oCRcksGuHEn4 FLWHvYVJKiUXGcSZ61eJo+K8sK1lQRm9SjLOwC3xOvX2toZ0QrOpt1ZVswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGrC9a+qhK6hr89uqk5rM1ZDAKFfMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvYXNMMXI2cUVycUd2ejI2cVRtc3pWa01Bb1Y4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucIdMA0G CSqGSIb3DQEBCwUAA4IBAQCZQ8tVXhSzhHRjnoJz/zxcQC0JnOmCFA/ac7fwzoLl AvVqIV6ScLit/9YdP8Pzb84F466sne+fxJx71A2sdGLJ/t/OFHijNPeb62kfX5LM xUzmBwL61y3PABoaXFUoJrX7rUcrnOnRRNPXhNOW6aEv3stwqZthKPyx7C6VCFvo pxQchtOSJd+vFyy1zfwEVRonhLqU2kINNCDcznnGSN9fP5uz4sNCOTb07416qFIf 2AnRNW6YK7BrbN3k+0/twT04oV06ugUlkNBcrvh2NnFODmM6+Z0pZbNOOuNb9FUL 3lyiijrZIWRCyKDqCMN1XWt9RhdW4Zi4DWPwtYVTaaoT -----END CERTIFICATE-----Generated at Sun Jan 25 13:04:01 2026 by rpki-client