This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/t68PaVgCijxanI1ZnBXLGgKWMwY.roa File: t68PaVgCijxanI1ZnBXLGgKWMwY.roa (raw, json) Hash identifier: NonEiwqsXehqa61rUVSJ3dOIH5hw7UnRoo74fb5b55U= Subject key identifier: B7:AF:0F:69:58:02:8A:3C:5A:9C:8D:59:9C:15:CB:1A:02:96:33:06 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C138D2A40122AACF5A8BC3E80FFDCF7 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/t68PaVgCijxanI1ZnBXLGgKWMwY.roa Signing time: Fri 02 Jan 2026 00:20:14 +0000 ROA not before: Fri 02 Jan 2026 00:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209043 IP address blocks: 185.194.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:8d:2a:40:12:2a:ac:f5:a8:bc:3e:80:ff:dc:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7af0f6958028a3c5a9c8d599c15cb1a02963306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:de:ab:e8:ed:f6:63:e9:5f:ef:6a:70:71:4d: 89:1e:1f:cc:a6:88:78:49:0d:33:52:7f:ab:6f:60: 56:6b:a0:51:65:cb:d8:e5:8a:e1:58:dc:4d:48:8b: ac:25:6e:47:d6:9c:ad:8a:99:47:8c:54:07:3f:9f: ce:5f:79:43:a8:0e:ad:2f:8e:c4:da:fe:55:b9:1a: 7b:7c:64:14:55:0a:c3:64:f5:a1:07:da:cd:7a:63: 06:1d:50:f5:78:9e:93:c0:6c:fb:27:4e:f9:61:41: 7d:a6:f1:51:14:4c:3d:ce:0f:ff:65:e6:ea:9b:79: 55:7a:77:de:ef:05:60:ca:1d:13:be:2a:11:a4:99: c7:27:aa:0c:9e:ac:68:b9:65:48:db:6a:2d:81:49: 1b:24:56:83:c0:8a:df:50:ac:5d:06:1b:7d:d0:79: c5:d2:a0:11:13:cd:98:7a:20:3c:e2:b8:54:98:aa: ca:9e:f1:06:33:58:0f:99:8d:5e:9d:e1:81:4c:70: d3:1f:5a:cb:f7:f0:38:e3:79:30:c0:33:5e:b5:28: f7:68:0a:c8:9e:f0:38:a1:1c:9e:c6:9e:7c:d2:95: 4d:88:65:df:9c:6f:40:44:ee:8f:61:91:8a:52:8f: 71:f4:ac:75:37:33:40:9e:45:d8:56:ec:b6:f4:26: 42:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:AF:0F:69:58:02:8A:3C:5A:9C:8D:59:9C:15:CB:1A:02:96:33:06 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/t68PaVgCijxanI1ZnBXLGgKWMwY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.194.176.0/24 Signature Algorithm: sha256WithRSAEncryption 31:2c:44:ca:51:80:87:a3:96:53:b6:09:7e:d9:81:2c:a0:a5: 40:69:18:4b:27:a3:fd:d5:d7:a1:2c:e3:5e:24:5a:82:8c:38: b3:5f:27:5f:03:2f:08:51:db:df:6f:94:9b:77:13:6b:05:6e: b0:4f:f5:7f:85:aa:b1:e4:76:12:b8:d4:4b:9f:d2:ff:83:e9: 27:4e:1f:6c:6c:8f:0e:6d:bf:9a:3a:26:4b:20:d3:69:bf:80: c2:6d:c7:95:80:34:74:87:25:6b:ac:46:8f:cb:ee:b4:96:bf: 08:68:69:ba:11:40:17:e2:27:3f:81:77:08:0e:a4:fa:58:91: 1c:96:3f:06:a9:86:e1:19:ef:01:e9:b7:a8:7d:72:f9:89:4f: c6:f2:97:85:90:8c:63:8b:c6:9e:01:77:e5:35:55:9f:a7:38: b4:a9:2f:b7:75:47:8f:0e:93:0e:9e:ef:76:6d:10:df:cf:f8: 5a:e5:44:a0:7b:46:67:c2:7f:e7:ad:24:12:13:26:99:69:7e: 95:e8:b1:4d:72:a9:04:fa:98:33:02:db:9e:2a:d6:61:e3:57: 90:c8:8f:c8:45:dc:61:ae:d4:ec:d2:97:5f:1b:08:8f:13:58: fc:d9:6a:a0:9a:2d:27:85:19:fb:0a:65:3f:52:28:22:7b:5d: 56:81:2c:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E40qQBIqrPWovD6A/9z3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2FmMGY2OTU4MDI4YTNjNWE5YzhkNTk5YzE1Y2IxYTAyOTYzMzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5t6r6O32Y+lf72pwcU2JHh/Mpoh4 SQ0zUn+rb2BWa6BRZcvY5YrhWNxNSIusJW5H1pytiplHjFQHP5/OX3lDqA6tL47E 2v5VuRp7fGQUVQrDZPWhB9rNemMGHVD1eJ6TwGz7J075YUF9pvFRFEw9zg//Zebq m3lVenfe7wVgyh0TvioRpJnHJ6oMnqxouWVI22otgUkbJFaDwIrfUKxdBht90HnF 0qARE82YeiA84rhUmKrKnvEGM1gPmY1eneGBTHDTH1rL9/A443kwwDNetSj3aArI nvA4oRyexp580pVNiGXfnG9ARO6PYZGKUo9x9Kx1NzNAnkXYVuy29CZCGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLevD2lYAoo8WpyNWZwVyxoCljMGMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvdDY4UGFWZ0NpanhhbkkxWm5CWExHZ0tXTXdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucKwMA0G CSqGSIb3DQEBCwUAA4IBAQAxLETKUYCHo5ZTtgl+2YEsoKVAaRhLJ6P91dehLONe JFqCjDizXydfAy8IUdvfb5SbdxNrBW6wT/V/haqx5HYSuNRLn9L/g+knTh9sbI8O bb+aOiZLINNpv4DCbceVgDR0hyVrrEaPy+60lr8IaGm6EUAX4ic/gXcIDqT6WJEc lj8GqYbhGe8B6beofXL5iU/G8peFkIxji8aeAXflNVWfpzi0qS+3dUePDpMOnu92 bRDfz/ha5USge0Znwn/nrSQSEyaZaX6V6LFNcqkE+pgzAtueKtZh41eQyI/IRdxh rtTs0pdfGwiPE1j82Wqgmi0nhRn7CmU/Uigie11WgSwk -----END CERTIFICATE-----Generated at Sun Jan 25 13:08:50 2026 by rpki-client