This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/F6-tR7vg6L_c0tc5N_XzUYnc5Hs.roa File: F6-tR7vg6L_c0tc5N_XzUYnc5Hs.roa (raw, json) Hash identifier: 4XFHQlUZw+5vTRxUTYeT4+YjnJnMJyoXfBSAScrWHnE= Subject key identifier: 17:AF:AD:47:BB:E0:E8:BF:DC:D2:D7:39:37:F5:F3:51:89:DC:E4:7B Certificate issuer: /CN=d9e1019bbe11b55114874c961716eb238a11cd4e Certificate serial: 019B77C73479A648EDA8D95CF7A0674916B3 Authority key identifier: D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/F6-tR7vg6L_c0tc5N_XzUYnc5Hs.roa Signing time: Thu 01 Jan 2026 04:18:22 +0000 ROA not before: Thu 01 Jan 2026 04:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201133 IP address blocks: 185.148.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:34:79:a6:48:ed:a8:d9:5c:f7:a0:67:49:16:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9e1019bbe11b55114874c961716eb238a11cd4e Validity Not Before: Jan 1 04:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17afad47bbe0e8bfdcd2d73937f5f35189dce47b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:47:b4:98:54:31:d9:29:1c:b1:ee:b0:a1:09: 65:21:fb:15:37:22:7b:67:9b:f6:c1:ca:f4:7b:a3: 74:b4:db:3d:01:4f:d0:99:a6:d8:1b:9a:0f:9c:b7: 46:73:bb:af:6e:91:80:df:85:4d:22:55:66:78:42: b0:76:73:8e:20:66:35:61:20:a6:bd:86:a0:f4:09: c9:1f:49:15:23:a8:f4:07:5d:93:dd:19:3d:9e:f9: 53:bb:f8:29:a5:57:d0:34:ef:0c:1e:cf:d8:93:c7: c0:6f:a2:5b:2f:c4:1e:59:6f:dd:cb:e9:3c:69:52: c4:e1:7a:1e:41:9a:d7:57:cd:e9:bb:10:43:67:5b: 58:b6:04:ef:82:ed:95:56:4f:ce:50:1d:aa:00:f2: 95:73:7b:da:38:e2:95:c7:00:66:39:08:89:fe:4f: 74:67:ab:87:6b:a8:33:03:0b:dd:07:a2:bf:96:1e: 01:b5:fa:ad:26:15:42:79:58:dd:9d:6a:ed:ce:cc: b0:2f:35:c3:a0:9a:ff:94:f6:d4:43:df:56:fe:f0: 60:74:d3:99:1b:4c:f4:21:73:55:83:a7:75:de:48: b6:3d:e3:80:72:5d:d9:33:1c:6f:94:eb:2e:32:38: 91:9d:12:60:fe:ea:f8:e4:14:b6:af:b4:d9:06:dd: cc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AF:AD:47:BB:E0:E8:BF:DC:D2:D7:39:37:F5:F3:51:89:DC:E4:7B X509v3 Authority Key Identifier: keyid:D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/F6-tR7vg6L_c0tc5N_XzUYnc5Hs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.148.144.0/24 Signature Algorithm: sha256WithRSAEncryption 34:32:10:47:dd:9b:34:91:a9:72:4b:4e:85:dc:54:88:67:25: cb:ea:1b:14:85:1c:4f:79:11:db:09:a1:0f:12:35:0c:26:de: 1e:a0:c2:58:21:55:16:f9:1a:0f:d7:00:90:bc:b3:e8:0f:e0: 6f:1a:ad:90:d8:78:b9:ed:cf:7b:c7:97:95:79:12:fc:59:ac: 37:4b:d7:50:7f:d8:32:82:48:36:99:45:81:aa:61:fd:2b:41: 4b:8b:dd:69:b8:d1:dc:2c:c7:f8:30:8a:67:a0:ac:f8:ee:3d: d3:16:e4:89:86:58:03:c0:28:07:3f:ad:5d:e9:45:54:1b:00: 4c:c4:da:f8:11:f1:b1:64:b2:37:f0:d0:f6:36:3e:82:58:c2: da:b7:85:87:0b:b9:bf:3d:73:ae:27:14:5b:4f:5b:96:33:91: e4:fe:22:c0:02:0f:e5:61:3c:5d:c8:3f:bf:14:5d:46:83:af: 7a:33:7c:02:d3:74:89:85:9e:1e:4f:1f:47:16:14:c9:f0:98: ca:22:58:a1:53:6e:f9:a1:c6:38:d5:28:79:63:f8:04:25:1f: da:dd:65:32:c4:3c:51:cc:f2:a1:c8:46:df:b4:04:69:a7:8e: a5:1f:c7:e0:ca:6f:d7:3b:c6:88:c7:9a:67:fb:44:c5:09:4d: 5d:b2:66:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xzR5pkjtqNlc96BnSRazMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZTEwMTliYmUxMWI1NTExNDg3NGM5NjE3MTZlYjIzOGEx MWNkNGUwHhcNMjYwMTAxMDQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2FmYWQ0N2JiZTBlOGJmZGNkMmQ3MzkzN2Y1ZjM1MTg5ZGNlNDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEe0mFQx2Skcse6woQllIfsVNyJ7 Z5v2wcr0e6N0tNs9AU/QmabYG5oPnLdGc7uvbpGA34VNIlVmeEKwdnOOIGY1YSCm vYag9AnJH0kVI6j0B12T3Rk9nvlTu/gppVfQNO8MHs/Yk8fAb6JbL8QeWW/dy+k8 aVLE4XoeQZrXV83puxBDZ1tYtgTvgu2VVk/OUB2qAPKVc3vaOOKVxwBmOQiJ/k90 Z6uHa6gzAwvdB6K/lh4BtfqtJhVCeVjdnWrtzsywLzXDoJr/lPbUQ99W/vBgdNOZ G0z0IXNVg6d13ki2PeOAcl3ZMxxvlOsuMjiRnRJg/ur45BS2r7TZBt3M7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBevrUe74Oi/3NLXOTf181GJ3OR7MB8GA1UdIwQY MBaAFNnhAZu+EbVRFIdMlhcW6yOKEc1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmVFQm03NFJ0VkVVaDB5V0Z4YnJJNG9SelU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wZTE5ZmUtMGFkOS00OGUwLTliN2It NDUyNTYxOTM1MDMxLzEvRjYtdFI3dmc2TF9jMHRjNU5fWHpVWW5jNUhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8wZTE5ZmUtMGFkOS00OGUwLTliN2ItNDUyNTYxOTM1MDMx LzEvMmVFQm03NFJ0VkVVaDB5V0Z4YnJJNG9SelU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZSQMA0G CSqGSIb3DQEBCwUAA4IBAQA0MhBH3Zs0kalyS06F3FSIZyXL6hsUhRxPeRHbCaEP EjUMJt4eoMJYIVUW+RoP1wCQvLPoD+BvGq2Q2Hi57c97x5eVeRL8Waw3S9dQf9gy gkg2mUWBqmH9K0FLi91puNHcLMf4MIpnoKz47j3TFuSJhlgDwCgHP61d6UVUGwBM xNr4EfGxZLI38ND2Nj6CWMLat4WHC7m/PXOuJxRbT1uWM5Hk/iLAAg/lYTxdyD+/ FF1Gg696M3wC03SJhZ4eTx9HFhTJ8JjKIlihU275ocY41Sh5Y/gEJR/a3WUyxDxR zPKhyEbftARpp46lH8fgym/XO8aIx5pn+0TFCU1dsmY8 -----END CERTIFICATE-----Generated at Sun Jan 25 21:58:20 2026 by rpki-client