This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/6_lDwO9S-PZTwYR6rqeMkPI69T0.roa File: 6_lDwO9S-PZTwYR6rqeMkPI69T0.roa (raw, json) Hash identifier: neEGA+hYnP8CjWfiQmsokGNa6auT6dI2/F1+F88xPUc= Subject key identifier: EB:F9:43:C0:EF:52:F8:F6:53:C1:84:7A:AE:A7:8C:90:F2:3A:F5:3D Certificate issuer: /CN=fca396f1c344b079c5d2f27bfb313377febb2ec7 Certificate serial: 019B775922B63C59B6854EBC5F72BFAAAFB8 Authority key identifier: FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/6_lDwO9S-PZTwYR6rqeMkPI69T0.roa Signing time: Thu 01 Jan 2026 02:18:08 +0000 ROA not before: Thu 01 Jan 2026 02:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3356 IP address blocks: 185.168.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:22:b6:3c:59:b6:85:4e:bc:5f:72:bf:aa:af:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fca396f1c344b079c5d2f27bfb313377febb2ec7 Validity Not Before: Jan 1 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ebf943c0ef52f8f653c1847aaea78c90f23af53d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f4:7b:e2:51:31:92:ff:9c:3c:71:44:72:50: ee:ea:c5:5c:6d:d2:b8:57:ee:27:b5:6d:ed:af:1d: 52:bf:29:ff:fa:a4:63:36:b9:8e:ef:68:e1:1a:0b: dd:e9:f7:50:cc:4c:93:6a:e9:16:13:e3:8c:57:e3: 3f:56:60:99:d6:f1:1d:91:f2:d9:71:07:3e:87:7b: 7d:18:50:ff:43:44:9e:3c:0a:a3:c8:f1:34:3a:3e: 87:35:bc:c5:a5:f7:f0:90:0b:c8:8e:59:90:ac:c7: 65:6b:e8:98:41:c2:3f:d1:6e:28:a2:1c:c1:50:79: ff:79:4e:cc:47:26:89:0c:2c:7b:06:06:ab:95:8a: cd:94:c3:d1:4f:56:46:6d:ed:7d:f2:62:e1:01:a4: ca:f4:61:22:59:3a:ce:cf:69:8e:47:72:e5:b0:6a: a0:ee:03:2e:29:44:ed:94:28:a6:65:38:98:2f:05: e8:24:59:3a:27:e3:6c:20:5e:b4:93:bf:d0:b8:25: 80:30:e7:af:21:53:a3:23:d2:5c:19:5f:2c:76:95: d3:06:29:2f:7e:aa:85:e0:ac:c1:21:c5:c4:bb:e6: 72:ec:db:5f:da:42:5f:51:1f:7d:16:38:84:8e:f5: 07:81:1d:31:d7:63:27:6c:8c:18:73:21:2f:05:76: 3c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F9:43:C0:EF:52:F8:F6:53:C1:84:7A:AE:A7:8C:90:F2:3A:F5:3D X509v3 Authority Key Identifier: keyid:FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/6_lDwO9S-PZTwYR6rqeMkPI69T0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.168.10.0/24 Signature Algorithm: sha256WithRSAEncryption 02:48:5e:d2:1b:52:0a:03:40:90:66:b7:c4:3a:d4:aa:e5:39: 12:33:9b:6b:4b:44:e2:90:82:6e:ed:e4:67:67:1c:b0:ec:db: 5e:3b:88:8a:2b:c8:95:3d:83:28:ad:65:db:ef:ed:e4:c9:23: 5e:ad:05:f6:e0:e4:ac:7d:51:52:77:e1:d8:a3:63:0c:cd:53: f1:9f:cd:9f:18:7c:06:65:3d:a9:d8:cb:bf:3a:fe:7f:4f:af: 73:8d:83:ad:37:2e:6e:86:c8:52:2c:26:bc:73:d0:e7:dc:75: cc:a2:9c:0a:5d:a7:c6:43:ae:e6:62:d6:e0:4d:b4:bf:e5:7e: 2f:43:2e:35:2c:7f:43:ef:72:bb:bb:39:e2:7d:cf:ff:e7:00: de:e6:0c:9c:0f:45:43:48:62:55:bb:c1:8d:61:66:94:66:37: 8d:48:fb:21:c8:8e:e2:70:b2:7c:de:9d:58:38:13:5e:9f:7c: 06:c9:00:ae:a4:5d:26:6b:1c:74:3f:ab:84:cf:77:04:3b:cc: 79:2b:f7:e7:c4:bc:3d:c8:56:20:a1:90:08:76:f3:00:a6:01: fa:e2:eb:d7:a3:dc:b4:50:2c:97:1d:85:c2:b6:f3:35:06:3c: d4:6d:be:6d:ef:72:80:6b:96:76:00:a3:26:e5:d9:fb:10:72: dc:83:4c:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WSK2PFm2hU68X3K/qq+4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYTM5NmYxYzM0NGIwNzljNWQyZjI3YmZiMzEzMzc3ZmVi YjJlYzcwHhcNMjYwMTAxMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmY5NDNjMGVmNTJmOGY2NTNjMTg0N2FhZWE3OGM5MGYyM2FmNTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPR74lExkv+cPHFEclDu6sVcbdK4 V+4ntW3trx1Svyn/+qRjNrmO72jhGgvd6fdQzEyTaukWE+OMV+M/VmCZ1vEdkfLZ cQc+h3t9GFD/Q0SePAqjyPE0Oj6HNbzFpffwkAvIjlmQrMdla+iYQcI/0W4oohzB UHn/eU7MRyaJDCx7BgarlYrNlMPRT1ZGbe198mLhAaTK9GEiWTrOz2mOR3LlsGqg 7gMuKUTtlCimZTiYLwXoJFk6J+NsIF60k7/QuCWAMOevIVOjI9JcGV8sdpXTBikv fqqF4KzBIcXEu+Zy7Ntf2kJfUR99FjiEjvUHgR0x12MnbIwYcyEvBXY8TwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOv5Q8DvUvj2U8GEeq6njJDyOvU9MB8GA1UdIwQY MBaAFPyjlvHDRLB5xdLye/sxM3f+uy7HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0tPVzhjTkVzSG5GMHZKNy16RXpkXzY3THNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNGUxNDEtY2FhNS00MWZiLTk0NWIt ZmZiMTZlYmQxMTFmLzEvNl9sRHdPOVMtUFpUd1lSNnJxZU1rUEk2OVQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xNGUxNDEtY2FhNS00MWZiLTk0NWItZmZiMTZlYmQxMTFm LzEvX0tPVzhjTkVzSG5GMHZKNy16RXpkXzY3THNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuagKMA0G CSqGSIb3DQEBCwUAA4IBAQACSF7SG1IKA0CQZrfEOtSq5TkSM5trS0TikIJu7eRn Zxyw7NteO4iKK8iVPYMorWXb7+3kySNerQX24OSsfVFSd+HYo2MMzVPxn82fGHwG ZT2p2Mu/Ov5/T69zjYOtNy5uhshSLCa8c9Dn3HXMopwKXafGQ67mYtbgTbS/5X4v Qy41LH9D73K7uznifc//5wDe5gycD0VDSGJVu8GNYWaUZjeNSPshyI7icLJ83p1Y OBNen3wGyQCupF0maxx0P6uEz3cEO8x5K/fnxLw9yFYgoZAIdvMApgH64uvXo9y0 UCyXHYXCtvM1BjzUbb5t73KAa5Z2AKMm5dn7EHLcg0xA -----END CERTIFICATE-----Generated at Sun Jan 25 14:31:49 2026 by rpki-client