This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/6Qo_0tvV-nF1V3290tyCPcyJh_o.roa File: 6Qo_0tvV-nF1V3290tyCPcyJh_o.roa (raw, json) Hash identifier: miQhI+W7erQXF0Elh5+jiDUej+PQhWgEiCLyU5iCciM= Subject key identifier: E9:0A:3F:D2:DB:D5:FA:71:75:57:7D:BD:D2:DC:82:3D:CC:89:87:FA Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad Certificate serial: 019B7C7FB5A2AED1B74C20737254F1212DB9 Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/6Qo_0tvV-nF1V3290tyCPcyJh_o.roa Signing time: Fri 02 Jan 2026 02:18:22 +0000 ROA not before: Fri 02 Jan 2026 02:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212761 IP address blocks: 185.41.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:b5:a2:ae:d1:b7:4c:20:73:72:54:f1:21:2d:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08af091858bb99651764399c6565df7a0834dbad Validity Not Before: Jan 2 02:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e90a3fd2dbd5fa7175577dbdd2dc823dcc8987fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:32:5d:3e:9a:bc:3b:61:9c:1f:a8:6e:fe:9d: 98:60:fa:ce:2a:1d:eb:ae:47:47:2e:58:3a:d5:da: f5:34:c0:e8:bf:f7:35:a5:ea:b9:ec:1a:e9:02:ad: 5c:aa:1e:7a:53:c2:1e:a1:30:fa:18:24:7e:ec:81: 40:43:c8:f7:d7:f2:14:57:14:eb:91:ff:29:fd:09: 68:c4:11:b8:03:c8:d3:46:3a:0a:86:20:b4:08:fe: 04:a4:fa:92:99:9b:52:b4:c0:ea:89:36:ac:ad:eb: bc:dc:0a:3b:35:6b:10:82:9c:34:32:d0:73:34:ef: 59:78:81:2e:15:0e:bb:c8:3f:a1:01:a5:72:4e:bc: 52:53:be:d3:f4:ab:61:00:2c:29:3b:bd:04:26:b6: cf:ce:bb:68:f9:d9:2f:73:31:56:6e:28:aa:ff:79: a5:fd:3c:4d:1f:85:81:8d:ba:49:ff:e7:71:f2:dc: 2c:3d:31:4f:8b:fb:40:10:05:eb:18:3f:c9:45:33: 43:3d:89:5b:59:f6:28:70:53:e8:24:ae:02:e4:44: 28:f2:b1:57:a7:d5:5c:88:f0:8b:c4:4c:84:b7:15: a3:eb:63:46:2a:53:00:cc:04:1b:17:21:97:7c:7e: 96:85:e0:16:59:17:bb:b3:e4:a3:c4:59:21:4d:f5: a9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:0A:3F:D2:DB:D5:FA:71:75:57:7D:BD:D2:DC:82:3D:CC:89:87:FA X509v3 Authority Key Identifier: keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/6Qo_0tvV-nF1V3290tyCPcyJh_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.41.23.0/24 Signature Algorithm: sha256WithRSAEncryption c9:72:f3:db:26:6e:c3:d6:0a:15:50:17:d7:e2:6f:27:e8:11: 45:0c:57:29:f3:68:f4:5c:23:a4:82:c6:01:58:41:b8:7f:58: e5:02:0b:bc:1c:6e:26:1e:d4:0e:5d:b8:2e:b6:4c:c2:e4:be: 95:cd:eb:d7:cc:7d:60:ee:9c:72:b3:06:84:ed:b0:44:2d:86: 6b:35:fb:2d:86:f3:a1:a6:2d:52:46:c5:c7:0c:bd:bd:63:dd: 88:17:ca:e6:8c:fe:16:32:e8:98:d6:f3:4a:66:8e:71:a6:66: ad:78:be:c9:7a:bb:4d:b3:fe:90:fe:3a:d3:ae:69:fb:56:cb: e7:55:32:e4:a0:06:0e:52:df:5d:dd:50:4f:a2:c4:54:66:9b: 34:d4:75:b6:f4:cb:af:b6:20:58:2a:40:ee:ea:d0:0a:63:16: 38:47:c5:ee:9a:de:f0:14:0e:02:63:8c:4d:07:c3:d4:f2:38: e5:86:5d:3e:44:3b:92:36:8d:b3:0a:29:d7:8b:f6:34:e5:84: 6b:57:c8:b1:8b:af:91:c7:5f:49:a3:ef:2f:b5:ab:ea:9a:92: 22:b9:84:a0:ea:1d:e6:5b:f1:35:19:9e:fd:f9:8b:da:b8:5a: fd:0e:dd:14:f4:fe:9f:49:9f:f7:1a:f1:79:04:26:0a:f3:13: d3:76:b0:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f7WirtG3TCBzclTxIS25MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YWYwOTE4NThiYjk5NjUxNzY0Mzk5YzY1NjVkZjdhMDgz NGRiYWQwHhcNMjYwMTAyMDIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTBhM2ZkMmRiZDVmYTcxNzU1NzdkYmRkMmRjODIzZGNjODk4N2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjJdPpq8O2GcH6hu/p2YYPrOKh3r rkdHLlg61dr1NMDov/c1peq57BrpAq1cqh56U8IeoTD6GCR+7IFAQ8j31/IUVxTr kf8p/QloxBG4A8jTRjoKhiC0CP4EpPqSmZtStMDqiTasreu83Ao7NWsQgpw0MtBz NO9ZeIEuFQ67yD+hAaVyTrxSU77T9KthACwpO70EJrbPzrto+dkvczFWbiiq/3ml /TxNH4WBjbpJ/+dx8twsPTFPi/tAEAXrGD/JRTNDPYlbWfYocFPoJK4C5EQo8rFX p9VciPCLxEyEtxWj62NGKlMAzAQbFyGXfH6WheAWWRe7s+SjxFkhTfWpDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOkKP9Lb1fpxdVd9vdLcgj3MiYf6MB8GA1UdIwQY MBaAFAivCRhYu5llF2Q5nGVl33oINNutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYt NTYxMjliN2RjMDE4LzEvNlFvXzB0dlYtbkYxVjMyOTB0eUNQY3lKaF9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYtNTYxMjliN2RjMDE4 LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSkXMA0G CSqGSIb3DQEBCwUAA4IBAQDJcvPbJm7D1goVUBfX4m8n6BFFDFcp82j0XCOkgsYB WEG4f1jlAgu8HG4mHtQOXbgutkzC5L6VzevXzH1g7pxyswaE7bBELYZrNfsthvOh pi1SRsXHDL29Y92IF8rmjP4WMuiY1vNKZo5xpmateL7JertNs/6Q/jrTrmn7Vsvn VTLkoAYOUt9d3VBPosRUZps01HW29MuvtiBYKkDu6tAKYxY4R8Xumt7wFA4CY4xN B8PU8jjlhl0+RDuSNo2zCinXi/Y05YRrV8ixi6+Rx19Jo+8vtavqmpIiuYSg6h3m W/E1GZ79+YvauFr9Dt0U9P6fSZ/3GvF5BCYK8xPTdrC6 -----END CERTIFICATE-----Generated at Mon Jan 26 05:32:14 2026 by rpki-client