This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/Dq6_iNtRHTOqFtnpD_FfUWdieAw.roa File: Dq6_iNtRHTOqFtnpD_FfUWdieAw.roa (raw, json) Hash identifier: IBQzY45WKqpczXTiPj5HpgwNmv+cq3rLH5Uc7T4ZlWM= Subject key identifier: 0E:AE:BF:88:DB:51:1D:33:AA:16:D9:E9:0F:F1:5F:51:67:62:78:0C Certificate issuer: /CN=521a30077223c25c6f37dcf59480778c0b5b1068 Certificate serial: 019B7F12F8F8682DF7F75D0155AE489C7E0E Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/Dq6_iNtRHTOqFtnpD_FfUWdieAw.roa Signing time: Fri 02 Jan 2026 14:18:28 +0000 ROA not before: Fri 02 Jan 2026 14:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206754 IP address blocks: 176.117.108.0/24 maxlen: 24 185.194.112.0/24 maxlen: 24 2a0a:4a40::/29 maxlen: 29 2a14:5340::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:12:f8:f8:68:2d:f7:f7:5d:01:55:ae:48:9c:7e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068 Validity Not Before: Jan 2 14:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0eaebf88db511d33aa16d9e90ff15f516762780c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3d:f1:a3:f7:43:42:49:fc:98:7c:1d:9b:0b: 31:59:df:c3:3a:9a:53:5c:ab:19:e5:ff:68:50:d0: d5:78:1d:f6:7e:78:e8:48:e3:8a:a6:b1:7a:52:54: d8:69:b7:31:b6:f4:c9:83:51:25:63:28:b7:f5:1b: 23:4b:6f:ea:d9:f0:c8:37:cc:cd:79:b9:f0:70:94: d8:b8:d5:28:9f:93:71:a7:77:1b:eb:6f:26:af:c4: 42:35:4f:63:f0:39:f8:76:27:e2:a4:fd:73:7a:51: 17:80:e1:e1:3e:0d:9d:d3:a7:a6:e6:12:9b:33:d3: 2d:ff:fc:13:28:39:94:3c:9e:97:74:76:e9:b2:6c: 62:4d:d4:a0:a6:cc:ec:16:82:aa:7c:01:c4:c6:3e: 5e:6d:54:63:5c:6b:61:da:c4:de:88:41:77:97:fc: 01:c1:36:97:c6:e9:71:29:61:14:75:6a:91:c7:6b: e9:94:92:ed:c9:bd:f1:92:22:a0:81:ab:a3:a1:50: 1b:1f:e4:d2:91:b1:02:13:99:b8:23:16:63:83:39: 3b:47:49:b6:66:5e:50:08:83:31:ea:a9:bf:4a:79: 6d:e0:83:dc:49:e9:1b:12:11:e7:8d:71:b7:ab:a2: 47:0c:7b:a4:b3:79:0b:c2:8f:cf:aa:15:88:9d:72: 3b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AE:BF:88:DB:51:1D:33:AA:16:D9:E9:0F:F1:5F:51:67:62:78:0C X509v3 Authority Key Identifier: keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/Dq6_iNtRHTOqFtnpD_FfUWdieAw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.117.108.0/24 185.194.112.0/24 IPv6: 2a0a:4a40::/29 2a14:5340::/29 Signature Algorithm: sha256WithRSAEncryption 6e:64:59:be:af:1a:61:28:a8:d5:8c:f1:dd:bd:00:fe:e1:71: 8a:d9:66:84:bb:b8:b4:56:e6:88:79:c6:b9:c7:50:4f:19:40: 35:f0:df:38:59:0d:b1:da:62:12:7e:12:ba:82:e6:93:7b:d0: 5d:74:30:bf:17:f7:c4:5d:4b:24:de:24:b0:9c:07:de:d2:a9: f6:0a:5a:1f:19:b3:10:a8:72:13:e3:b8:d6:1f:07:8e:02:87: 04:0b:be:f9:9c:c9:20:79:6b:9a:0f:ba:74:2b:20:31:9f:17: be:3e:55:d7:9d:a1:55:81:b8:7d:f7:36:03:24:f7:dc:b9:2a: c9:bf:c5:02:aa:c4:76:70:db:0d:10:9a:dc:71:0f:16:b7:ea: 5b:0f:4c:8d:ea:ca:34:fd:b1:6b:67:bc:25:1d:1a:db:43:d1: a6:de:d9:12:bf:74:c0:a4:27:e1:be:c3:b1:f5:4e:02:b6:ac: 67:f1:52:01:02:45:88:76:42:1b:0a:ba:af:65:88:7a:f2:fe: 55:09:5f:ed:7e:c3:3e:f4:d1:85:35:1a:6d:11:18:7a:4c:60: 8d:99:87:b3:8a:f5:1e:5d:4d:0a:74:62:7f:b1:9b:1a:50:f3: 82:2f:ec:9a:fc:c9:5c:49:04:73:37:ee:65:3e:76:e5:e9:b6: 75:6a:5a:44 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt/Evj4aC33910BVa5InH4OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMWEzMDA3NzIyM2MyNWM2ZjM3ZGNmNTk0ODA3NzhjMGI1 YjEwNjgwHhcNMjYwMTAyMTQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWFlYmY4OGRiNTExZDMzYWExNmQ5ZTkwZmYxNWY1MTY3NjI3ODBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD3xo/dDQkn8mHwdmwsxWd/DOppT XKsZ5f9oUNDVeB32fnjoSOOKprF6UlTYabcxtvTJg1ElYyi39RsjS2/q2fDIN8zN ebnwcJTYuNUon5Nxp3cb628mr8RCNU9j8Dn4difipP1zelEXgOHhPg2d06em5hKb M9Mt//wTKDmUPJ6XdHbpsmxiTdSgpszsFoKqfAHExj5ebVRjXGth2sTeiEF3l/wB wTaXxulxKWEUdWqRx2vplJLtyb3xkiKggaujoVAbH+TSkbECE5m4IxZjgzk7R0m2 Zl5QCIMx6qm/Snlt4IPcSekbEhHnjXG3q6JHDHuks3kLwo/PqhWInXI7qwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFA6uv4jbUR0zqhbZ6Q/xX1FnYngMMB8GA1UdIwQY MBaAFFIaMAdyI8Jcbzfc9ZSAd4wLWxBoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMt MGY1ZjA5YjJlYjE0LzEvRHE2X2lOdFJIVE9xRnRucERfRmZVV2RpZUF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMtMGY1ZjA5YjJlYjE0 LzEvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQAsHVsAwQA ucJwMBQEAgACMA4DBQMqCkpAAwUDKhRTQDANBgkqhkiG9w0BAQsFAAOCAQEAbmRZ vq8aYSio1Yzx3b0A/uFxitlmhLu4tFbmiHnGucdQTxlANfDfOFkNsdpiEn4SuoLm k3vQXXQwvxf3xF1LJN4ksJwH3tKp9gpaHxmzEKhyE+O41h8HjgKHBAu++ZzJIHlr mg+6dCsgMZ8Xvj5V152hVYG4ffc2AyT33Lkqyb/FAqrEdnDbDRCa3HEPFrfqWw9M jerKNP2xa2e8JR0a20PRpt7ZEr90wKQn4b7DsfVOArasZ/FSAQJFiHZCGwq6r2WI evL+VQlf7X7DPvTRhTUabREYekxgjZmHs4r1Hl1NCnRif7GbGlDzgi/smvzJXEkE czfuZT525em2dWpaRA== -----END CERTIFICATE-----Generated at Mon Jan 26 12:09:57 2026 by rpki-client