This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/K6IhTrUZclyMeBVpYLNDvb8TUbg.roa File: K6IhTrUZclyMeBVpYLNDvb8TUbg.roa (raw, json) Hash identifier: 72NmOOFBeGJuzIR1SE1cUuWu7D88rU3xoreFGRYXduw= Subject key identifier: 2B:A2:21:4E:B5:19:72:5C:8C:78:15:69:60:B3:43:BD:BF:13:51:B8 Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e Certificate serial: 019B7EA6A24AC09FD23A9A0AC20D4EC75EAB Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/K6IhTrUZclyMeBVpYLNDvb8TUbg.roa Signing time: Fri 02 Jan 2026 12:20:08 +0000 ROA not before: Fri 02 Jan 2026 12:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6823 IP address blocks: 213.146.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:a2:4a:c0:9f:d2:3a:9a:0a:c2:0d:4e:c7:5e:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e Validity Not Before: Jan 2 12:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ba2214eb519725c8c78156960b343bdbf1351b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a1:66:e8:c5:b7:a9:03:c0:c9:9b:be:49:92: 27:1e:7f:9b:b2:a6:28:43:1f:96:f9:72:96:90:8b: e4:36:a1:dc:e8:77:c1:b0:2a:11:2e:c3:1f:09:c5: aa:91:55:fa:63:ae:f7:1d:c6:b1:f3:3d:72:c2:17: b7:1f:fc:ae:ea:31:eb:3e:de:25:a9:58:5a:b3:3b: 85:0a:e8:9f:fc:51:5a:8e:59:a5:9a:ea:fe:25:dc: 63:cb:d5:35:5e:c6:42:63:41:63:5f:94:42:0c:f9: c9:1e:42:23:1f:f3:2c:59:aa:e3:16:f7:52:8f:37: 9a:3e:f0:b4:f2:d6:5a:5a:76:c5:c7:8a:b8:74:dc: 25:00:80:ff:5c:bd:32:02:ca:80:50:f9:14:01:1f: d7:6b:6d:6e:b3:c9:d7:88:04:fb:b5:7e:50:c3:cd: 30:22:09:01:c8:7e:a7:a2:7f:e3:35:ad:c1:0f:6f: 71:70:a6:28:d7:f9:d3:42:b4:dc:7b:4c:9a:49:f5: e4:bb:5e:97:bd:4e:af:b2:b7:41:c4:f2:03:0e:bd: 24:7b:2c:08:2a:be:fd:cc:04:5a:37:12:c9:a5:6a: d3:b4:da:fa:44:ad:52:a5:03:75:f1:50:13:71:4a: 0e:8f:48:6b:fd:eb:2a:37:56:3a:65:f3:07:9a:31: 3f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A2:21:4E:B5:19:72:5C:8C:78:15:69:60:B3:43:BD:BF:13:51:B8 X509v3 Authority Key Identifier: keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/K6IhTrUZclyMeBVpYLNDvb8TUbg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.146.190.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:aa:4f:8d:a1:b2:8f:f6:f7:59:8e:17:85:77:84:00:db:b7: f3:2f:08:69:1e:58:d8:f0:5a:ec:c7:ba:9c:8f:ae:4c:7d:d1: 50:ad:a1:65:cc:63:a3:71:23:56:05:5b:d2:61:9c:7c:a8:f1: 35:68:1a:82:ac:96:e5:12:7d:a6:3b:a3:cb:c5:27:d3:30:68: c8:a3:39:0d:65:28:a1:0d:45:8d:6b:cc:3e:f2:ca:b7:20:06: 92:c9:07:20:e4:21:83:03:08:e1:81:a4:e6:76:9f:28:d7:ed: 5b:9e:67:8e:7a:98:b0:f2:a3:48:79:df:0d:65:30:5f:64:9e: 21:3a:8c:40:c2:39:1e:8f:2f:1a:b2:98:22:6c:e7:f7:d6:df: 19:27:07:e8:c9:87:bf:55:7c:d9:84:d8:4f:87:cb:9f:41:3b: da:75:93:15:71:26:38:f8:cf:71:0b:50:79:34:1f:1f:21:52: 0a:03:08:31:0b:df:2c:aa:28:04:ea:20:dc:e1:53:0e:46:d1: 3a:51:cc:25:20:94:d0:d3:64:9b:ef:28:0b:2e:03:3e:8c:96: 6d:eb:79:5d:ff:d3:59:02:e2:85:4b:c1:13:58:3f:0f:f2:c2: 71:b1:08:9b:3a:43:12:88:fe:e2:91:d1:98:44:0b:4b:8d:e2: 2b:bf:17:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pqJKwJ/SOpoKwg1Ox16rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2 ZGI5OWUwHhcNMjYwMTAyMTIyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmEyMjE0ZWI1MTk3MjVjOGM3ODE1Njk2MGIzNDNiZGJmMTM1MWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaFm6MW3qQPAyZu+SZInHn+bsqYo Qx+W+XKWkIvkNqHc6HfBsCoRLsMfCcWqkVX6Y673Hcax8z1ywhe3H/yu6jHrPt4l qVhaszuFCuif/FFajlmlmur+Jdxjy9U1XsZCY0FjX5RCDPnJHkIjH/MsWarjFvdS jzeaPvC08tZaWnbFx4q4dNwlAID/XL0yAsqAUPkUAR/Xa21us8nXiAT7tX5Qw80w IgkByH6non/jNa3BD29xcKYo1/nTQrTce0yaSfXku16XvU6vsrdBxPIDDr0keywI Kr79zARaNxLJpWrTtNr6RK1SpQN18VATcUoOj0hr/esqN1Y6ZfMHmjE/UwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCuiIU61GXJcjHgVaWCzQ72/E1G4MB8GA1UdIwQY MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt OTU2ZjZiNWM2MTcwLzEvSzZJaFRyVVpjbHlNZUJWcFlMTkR2YjhUVWJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ZK+MA0G CSqGSIb3DQEBCwUAA4IBAQAvqk+NobKP9vdZjheFd4QA27fzLwhpHljY8Frsx7qc j65MfdFQraFlzGOjcSNWBVvSYZx8qPE1aBqCrJblEn2mO6PLxSfTMGjIozkNZSih DUWNa8w+8sq3IAaSyQcg5CGDAwjhgaTmdp8o1+1bnmeOepiw8qNIed8NZTBfZJ4h OoxAwjkejy8aspgibOf31t8ZJwfoyYe/VXzZhNhPh8ufQTvadZMVcSY4+M9xC1B5 NB8fIVIKAwgxC98sqigE6iDc4VMORtE6UcwlIJTQ02Sb7ygLLgM+jJZt63ld/9NZ AuKFS8ETWD8P8sJxsQibOkMSiP7ikdGYRAtLjeIrvxeY -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:48 2026 by rpki-client