This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/0Dg7ApkC7AP2Avn6x1J-1flmrKg.roa File: 0Dg7ApkC7AP2Avn6x1J-1flmrKg.roa (raw, json) Hash identifier: qG/3sEaE6hIKkBZX7yiUf0VUZdejvNknPMp0eVon50w= Subject key identifier: D0:38:3B:02:99:02:EC:03:F6:02:F9:FA:C7:52:7E:D5:F9:66:AC:A8 Certificate issuer: /CN=6b57c5dff70ebfe67a400d55f259db2c37192196 Certificate serial: 019B77C6B8FCBD2B6A42226083B9B2E52B72 Authority key identifier: 6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/0Dg7ApkC7AP2Avn6x1J-1flmrKg.roa Signing time: Thu 01 Jan 2026 04:17:50 +0000 ROA not before: Thu 01 Jan 2026 04:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12844 IP address blocks: 185.183.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b8:fc:bd:2b:6a:42:22:60:83:b9:b2:e5:2b:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b57c5dff70ebfe67a400d55f259db2c37192196 Validity Not Before: Jan 1 04:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0383b029902ec03f602f9fac7527ed5f966aca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e8:70:c5:94:4e:6a:aa:c1:89:93:5c:f7:81: 14:bc:e4:a8:d9:31:5d:b8:66:ff:2c:e8:b5:04:ce: 7e:b5:6a:a4:63:2e:d4:5a:f5:c3:1a:18:ff:fc:f6: b9:45:7e:04:f1:e8:af:da:65:a3:ed:4c:0c:83:c8: 14:f4:78:74:cc:09:8b:54:1d:a1:ce:2d:b2:bf:96: 78:1b:30:aa:69:19:b2:31:9b:a4:52:46:53:20:f6: 7b:ae:27:1a:8d:17:30:86:25:12:ae:1b:29:1e:1f: 1b:91:65:96:6b:41:5c:cd:96:7f:78:2e:e5:34:fa: b8:3c:70:0a:93:f7:b0:a8:33:99:94:6a:8f:f2:27: cd:eb:a2:6b:81:c0:72:9b:9b:6e:49:97:3c:36:a4: e1:29:56:10:b3:79:da:81:c9:db:a4:1d:58:93:56: f8:48:90:68:00:22:8c:42:b9:18:26:2e:59:8a:2f: b8:d5:37:3d:59:1f:92:02:8f:e6:43:c4:e2:37:a1: fb:0e:9e:e6:e2:15:67:9f:63:7f:95:37:ad:5e:fc: dd:11:35:d4:80:39:c6:91:d8:d9:57:d9:d1:07:35: fd:96:2c:fa:65:5d:4e:97:a9:2e:bc:7e:c5:f2:d4: 23:be:d5:14:b1:b2:b6:96:79:e8:df:9f:0d:03:9a: c6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:38:3B:02:99:02:EC:03:F6:02:F9:FA:C7:52:7E:D5:F9:66:AC:A8 X509v3 Authority Key Identifier: keyid:6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/0Dg7ApkC7AP2Avn6x1J-1flmrKg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.183.0.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:98:18:d2:14:b7:0e:77:04:d0:1e:8e:71:41:0b:f1:dc:10: c2:8b:7a:69:d0:cc:5f:b9:aa:a3:22:32:a4:70:02:58:32:8c: dc:5a:a7:c7:a1:7f:a5:2d:e7:ce:a9:0e:a6:19:c9:eb:54:8f: e8:5a:82:60:8e:49:ae:0c:bb:ca:4b:ae:ef:36:e2:1c:81:c8: 21:84:1f:8f:83:f4:e9:ac:a3:53:da:2b:95:7f:4a:e0:2f:90: cc:4e:ff:ad:c1:df:04:0b:1d:57:13:aa:4c:c1:3c:06:cb:5b: 75:e2:ed:d4:eb:de:77:28:e2:64:5a:56:a7:c7:7c:48:04:a4: 35:53:09:aa:8a:47:d4:7a:a0:10:8a:92:94:12:35:a7:c4:45: ca:34:ea:8f:80:c9:d6:87:6b:b9:4a:4b:0f:f1:64:b4:7c:69: 0a:2f:54:0e:6d:79:00:a1:30:e2:98:05:0a:2f:dc:eb:08:8e: b4:12:32:7a:c6:4b:7a:34:8c:92:ea:d7:dd:4a:12:ab:76:0d: 0c:62:8e:ad:fd:ec:7f:31:c0:08:cc:47:46:ae:eb:3e:85:82: 72:39:97:24:5d:f4:79:a3:a4:23:22:d6:32:60:49:6b:7b:03: d5:43:da:fe:2f:6e:dd:3d:c8:7b:7f:10:1b:09:70:ca:af:34: 02:f2:fe:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xrj8vStqQiJgg7my5StyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNTdjNWRmZjcwZWJmZTY3YTQwMGQ1NWYyNTlkYjJjMzcx OTIxOTYwHhcNMjYwMTAxMDQxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDM4M2IwMjk5MDJlYzAzZjYwMmY5ZmFjNzUyN2VkNWY5NjZhY2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uhwxZROaqrBiZNc94EUvOSo2TFd uGb/LOi1BM5+tWqkYy7UWvXDGhj//Pa5RX4E8eiv2mWj7UwMg8gU9Hh0zAmLVB2h zi2yv5Z4GzCqaRmyMZukUkZTIPZ7ricajRcwhiUSrhspHh8bkWWWa0FczZZ/eC7l NPq4PHAKk/ewqDOZlGqP8ifN66JrgcBym5tuSZc8NqThKVYQs3nagcnbpB1Yk1b4 SJBoACKMQrkYJi5Zii+41Tc9WR+SAo/mQ8TiN6H7Dp7m4hVnn2N/lTetXvzdETXU gDnGkdjZV9nRBzX9liz6ZV1Ol6kuvH7F8tQjvtUUsbK2lnno358NA5rGDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNA4OwKZAuwD9gL5+sdSftX5ZqyoMB8GA1UdIwQY MBaAFGtXxd/3Dr/mekANVfJZ2yw3GSGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFmRjNfY092LVo2UUExVjhsbmJMRGNaSVpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82YWU1OGMtNzYxOC00MWJhLWEzNDMt YzQ2ZDdiYWMwMmZjLzEvMERnN0Fwa0M3QVAyQXZuNngxSi0xZmxtcktnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS82YWU1OGMtNzYxOC00MWJhLWEzNDMtYzQ2ZDdiYWMwMmZj LzEvYTFmRjNfY092LVo2UUExVjhsbmJMRGNaSVpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubcAMA0G CSqGSIb3DQEBCwUAA4IBAQCOmBjSFLcOdwTQHo5xQQvx3BDCi3pp0MxfuaqjIjKk cAJYMozcWqfHoX+lLefOqQ6mGcnrVI/oWoJgjkmuDLvKS67vNuIcgcghhB+Pg/Tp rKNT2iuVf0rgL5DMTv+twd8ECx1XE6pMwTwGy1t14u3U6953KOJkWlanx3xIBKQ1 UwmqikfUeqAQipKUEjWnxEXKNOqPgMnWh2u5SksP8WS0fGkKL1QObXkAoTDimAUK L9zrCI60EjJ6xkt6NIyS6tfdShKrdg0MYo6t/ex/McAIzEdGrus+hYJyOZckXfR5 o6QjItYyYElrewPVQ9r+L27dPch7fxAbCXDKrzQC8v54 -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:46 2026 by rpki-client