This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/06gNA3LV7YBXuhA1rKiMTeDxRoA.roa File: 06gNA3LV7YBXuhA1rKiMTeDxRoA.roa (raw, json) Hash identifier: d9wHD1t/r/V+XScUKTAXojVgXFDnOgiwl/ANGl0ElHU= Subject key identifier: D3:A8:0D:03:72:D5:ED:80:57:BA:10:35:AC:A8:8C:4D:E0:F1:46:80 Certificate issuer: /CN=6e83251661b0b774271c5cf526aab884b1fa7c7e Certificate serial: 019B7F151C5EEB1ABCAEADA0CF123CC3A08C Authority key identifier: 6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/06gNA3LV7YBXuhA1rKiMTeDxRoA.roa Signing time: Fri 02 Jan 2026 14:20:48 +0000 ROA not before: Fri 02 Jan 2026 14:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12874 IP address blocks: 185.43.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:1c:5e:eb:1a:bc:ae:ad:a0:cf:12:3c:c3:a0:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e83251661b0b774271c5cf526aab884b1fa7c7e Validity Not Before: Jan 2 14:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3a80d0372d5ed8057ba1035aca88c4de0f14680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0d:e2:99:21:93:42:c6:b6:c2:aa:17:6e:45: 4b:ea:a5:aa:37:70:d1:d0:4d:39:01:e1:51:5d:3e: c0:02:5d:19:c2:8d:97:77:d6:3e:34:ac:67:8d:cc: d8:74:45:0d:ba:74:77:f9:a0:c5:8b:99:71:cd:eb: 5b:b5:25:b2:a5:ad:e8:0a:29:e8:1c:9b:c9:85:0c: 88:4f:51:3e:7c:97:8d:71:50:67:40:17:0f:15:20: 53:16:dd:96:6c:fa:bf:df:c6:4f:49:48:65:be:7e: c4:38:c3:d6:62:74:fe:54:aa:4b:33:67:e3:8c:42: 90:e0:b4:34:b4:ee:10:2a:50:df:55:be:c0:29:46: a1:1e:d7:28:11:be:01:50:38:fa:45:5b:4d:42:66: 37:5a:ed:54:4c:31:80:13:5c:56:90:5b:68:19:55: 8a:ee:1f:82:a6:d1:b9:46:50:5c:57:f8:75:ec:fa: f8:b7:92:b0:c8:90:a0:78:c6:e4:53:72:17:42:51: 21:96:85:8d:8d:71:f8:24:ff:c7:9d:ae:9c:ab:be: b1:9d:74:18:75:65:3a:85:6b:df:55:43:bd:2c:eb: 25:48:42:ad:e6:68:3f:bb:d2:ef:d0:2a:1b:69:02: 2b:07:37:d3:7a:23:88:3f:f0:f2:b2:2e:7e:fc:e3: 5a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A8:0D:03:72:D5:ED:80:57:BA:10:35:AC:A8:8C:4D:E0:F1:46:80 X509v3 Authority Key Identifier: keyid:6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/06gNA3LV7YBXuhA1rKiMTeDxRoA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.43.19.0/24 Signature Algorithm: sha256WithRSAEncryption 05:c5:df:82:6b:60:77:9c:a5:b8:13:4c:01:95:9f:af:4f:08: bb:0d:b9:82:13:f3:05:16:58:e5:8a:1f:21:1a:c5:dc:46:ae: e4:47:2c:ca:a9:7a:f3:68:99:97:41:a6:f3:00:85:ec:b4:69: bb:7f:60:f2:6e:a9:e5:3c:65:1f:55:ab:ca:ae:fd:e1:c9:66: 87:45:1c:2c:95:b4:71:c4:6f:9d:7c:68:4a:56:2f:2d:86:e9: c3:d9:2e:a2:f3:99:ef:fa:5c:2f:72:9f:af:6f:9b:3f:68:0a: 11:61:2a:71:fe:af:12:a3:4c:9b:7f:66:01:93:2a:b2:65:2c: de:a7:8a:69:98:ac:dd:bd:bd:54:07:5e:1e:fe:73:b9:54:80: 0f:12:68:b9:1b:48:b6:f5:8c:fc:d7:ee:b1:71:85:e0:02:79: a0:af:7a:2e:3b:9c:3e:f0:29:b1:86:7d:b6:84:31:7c:a6:3e: 71:07:67:e8:47:9b:7c:2f:f6:7e:45:bb:38:e7:81:08:29:c9: e7:08:f3:32:b7:2f:59:af:9e:72:a5:0f:c0:06:fa:32:fb:c4: 53:57:33:04:f9:05:d9:ee:e5:c1:f1:a9:f2:d7:be:02:c9:45: c9:47:f1:ac:49:57:cb:12:28:94:da:05:2f:0f:42:ef:02:88: 68:a4:8c:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FRxe6xq8rq2gzxI8w6CMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODMyNTE2NjFiMGI3NzQyNzFjNWNmNTI2YWFiODg0YjFm YTdjN2UwHhcNMjYwMTAyMTQyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2E4MGQwMzcyZDVlZDgwNTdiYTEwMzVhY2E4OGM0ZGUwZjE0NjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3g3imSGTQsa2wqoXbkVL6qWqN3DR 0E05AeFRXT7AAl0Zwo2Xd9Y+NKxnjczYdEUNunR3+aDFi5lxzetbtSWypa3oCino HJvJhQyIT1E+fJeNcVBnQBcPFSBTFt2WbPq/38ZPSUhlvn7EOMPWYnT+VKpLM2fj jEKQ4LQ0tO4QKlDfVb7AKUahHtcoEb4BUDj6RVtNQmY3Wu1UTDGAE1xWkFtoGVWK 7h+CptG5RlBcV/h17Pr4t5KwyJCgeMbkU3IXQlEhloWNjXH4JP/Hna6cq76xnXQY dWU6hWvfVUO9LOslSEKt5mg/u9Lv0CobaQIrBzfTeiOIP/Dysi5+/ONaLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNOoDQNy1e2AV7oQNayojE3g8UaAMB8GA1UdIwQY MBaAFG6DJRZhsLd0Jxxc9SaquISx+nx+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9NbEZtR3d0M1FuSEZ6MUpxcTRoTEg2Zkg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jNjI2ZDUtZDQwNS00MDZlLThjODEt NWMwMTgxN2ZiODIyLzEvMDZnTkEzTFY3WUJYdWhBMXJLaU1UZUR4Um9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jNjI2ZDUtZDQwNS00MDZlLThjODEtNWMwMTgxN2ZiODIy LzEvYm9NbEZtR3d0M1FuSEZ6MUpxcTRoTEg2Zkg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSsTMA0G CSqGSIb3DQEBCwUAA4IBAQAFxd+Ca2B3nKW4E0wBlZ+vTwi7DbmCE/MFFljlih8h GsXcRq7kRyzKqXrzaJmXQabzAIXstGm7f2DybqnlPGUfVavKrv3hyWaHRRwslbRx xG+dfGhKVi8thunD2S6i85nv+lwvcp+vb5s/aAoRYSpx/q8So0ybf2YBkyqyZSze p4ppmKzdvb1UB14e/nO5VIAPEmi5G0i29Yz81+6xcYXgAnmgr3ouO5w+8Cmxhn22 hDF8pj5xB2foR5t8L/Z+Rbs454EIKcnnCPMyty9Zr55ypQ/ABvoy+8RTVzME+QXZ 7uXB8any174CyUXJR/GsSVfLEiiU2gUvD0LvAohopIyP -----END CERTIFICATE-----Generated at Mon Jan 26 01:17:29 2026 by rpki-client