This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/06efRp_YLLMigOISh9p5zbfjQsU.roa File: 06efRp_YLLMigOISh9p5zbfjQsU.roa (raw, json) Hash identifier: wEc6I99DrGtZKsss8jbEP0QrNOCnTgf0xe2uQcvZ3B4= Subject key identifier: D3:A7:9F:46:9F:D8:2C:B3:22:80:E2:12:87:DA:79:CD:B7:E3:42:C5 Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5 Certificate serial: 019B7911182D8E7D3D26347FC9DDCE597605 Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/06efRp_YLLMigOISh9p5zbfjQsU.roa Signing time: Thu 01 Jan 2026 10:18:42 +0000 ROA not before: Thu 01 Jan 2026 10:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48716 IP address blocks: 90.156.230.0/24 maxlen: 24 185.247.17.0/24 maxlen: 24 188.225.31.0/24 maxlen: 24 217.151.230.0/24 maxlen: 24 2a03:6f06::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:18:2d:8e:7d:3d:26:34:7f:c9:dd:ce:59:76:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5 Validity Not Before: Jan 1 10:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3a79f469fd82cb32280e21287da79cdb7e342c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:12:c8:14:07:2b:d7:80:fa:6d:2f:c4:eb:b0: af:7a:c7:72:47:e0:c9:ed:83:38:56:b6:c7:5b:0e: ed:39:da:a5:66:39:51:a2:24:3d:fb:fe:b2:43:90: 1c:f4:dc:98:67:5f:00:9b:7d:97:47:68:9e:78:96: 7a:da:06:98:1a:b5:2f:0c:15:dc:6b:9a:ae:53:11: ee:c4:7b:18:37:5d:5e:f3:c4:03:da:50:67:83:f3: 8c:08:87:87:65:61:29:45:21:fc:46:0c:d4:33:26: b5:ff:1c:28:8d:34:b4:e6:70:e2:f8:4b:58:24:8c: 9f:f1:00:36:f6:a6:65:2d:a2:b7:f3:18:c7:fa:15: ed:68:b4:26:e3:49:21:e7:44:31:09:67:d5:f0:6c: f7:92:ea:de:e2:4a:8f:03:e4:19:d4:c4:62:b3:5f: a4:cb:70:a8:87:da:d7:b1:67:7b:b1:6b:bd:e9:aa: 2a:82:f7:b9:13:4c:71:bd:b6:7e:dc:32:e3:0d:a2: da:80:9f:aa:34:28:ce:e6:56:bc:63:6d:c3:d6:70: 0f:f6:c2:a0:1e:7d:a8:27:90:47:5e:8b:63:5e:01: 61:17:07:ae:bd:ee:c1:97:c2:45:53:ab:99:d1:6f: c3:65:e1:f3:1d:d5:8a:96:95:49:45:d7:3b:2d:ec: 60:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A7:9F:46:9F:D8:2C:B3:22:80:E2:12:87:DA:79:CD:B7:E3:42:C5 X509v3 Authority Key Identifier: keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/06efRp_YLLMigOISh9p5zbfjQsU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 90.156.230.0/24 185.247.17.0/24 188.225.31.0/24 217.151.230.0/24 IPv6: 2a03:6f06::/32 Signature Algorithm: sha256WithRSAEncryption 87:fd:06:c5:58:fa:78:2d:83:db:6f:46:34:9e:28:8e:df:f8: a7:1d:38:e7:31:0a:30:a7:bf:af:ee:79:f9:ff:81:3f:0e:9b: 82:fa:1d:83:b0:e9:df:fc:1b:a5:9c:d2:e4:89:bc:82:52:4d: 1c:79:ee:f1:3b:37:8f:04:96:b6:47:a9:c3:95:9a:c6:36:77: 84:41:cf:77:ac:74:b2:70:5a:ce:ca:fe:3b:58:bd:7f:ff:6c: 9f:a5:a3:cd:55:e9:f0:a2:93:4d:2e:c3:90:1c:cc:c1:18:4e: 96:0d:7d:d8:75:be:a3:f6:2f:4b:11:fa:28:8d:55:83:ad:be: 08:76:30:9c:4a:40:37:da:e7:4a:21:2c:f6:9f:55:1f:60:82: 42:bf:df:8a:b9:05:35:3d:a6:14:2e:b1:bb:d5:65:45:17:e5: c4:39:a3:8f:01:33:7f:43:1e:be:a3:5f:97:3c:ee:95:d9:af: c8:c0:16:13:da:a4:8d:e3:a6:1f:d1:1e:f7:59:f1:45:da:e4: ee:33:5b:e4:23:10:01:d2:4e:59:a4:d4:60:c7:3c:09:c5:5d: 6f:e8:5e:1a:c3:b6:c1:95:28:03:4e:ae:d8:6d:fb:67:b0:b3: 2c:79:02:a3:4d:09:87:e6:ad:58:f5:09:14:12:19:d2:99:0f: 69:1a:fa:7b -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt5ERgtjn09JjR/yd3OWXYFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNjBiMmIxYzgyOWQ4ODkzNmIxYWRhZWVjOTdmZGQxYjQw ZDQxZTUwHhcNMjYwMTAxMTAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2E3OWY0NjlmZDgyY2IzMjI4MGUyMTI4N2RhNzljZGI3ZTM0MmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhLIFAcr14D6bS/E67CvesdyR+DJ 7YM4VrbHWw7tOdqlZjlRoiQ9+/6yQ5Ac9NyYZ18Am32XR2ieeJZ62gaYGrUvDBXc a5quUxHuxHsYN11e88QD2lBng/OMCIeHZWEpRSH8RgzUMya1/xwojTS05nDi+EtY JIyf8QA29qZlLaK38xjH+hXtaLQm40kh50QxCWfV8Gz3kure4kqPA+QZ1MRis1+k y3Coh9rXsWd7sWu96aoqgve5E0xxvbZ+3DLjDaLagJ+qNCjO5la8Y23D1nAP9sKg Hn2oJ5BHXotjXgFhFweuve7Bl8JFU6uZ0W/DZeHzHdWKlpVJRdc7Lexg/QIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFNOnn0af2CyzIoDiEofaec2340LFMB8GA1UdIwQY MBaAFCFgsrHIKdiJNrGtruyX/dG0DUHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVdDeXNjZ3AySWsyc2EydTdKZjkwYlFOUWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kYjFlMjAtZGMzNi00ODhkLTkxYTEt M2RmN2ZhZjM1MzVkLzEvMDZlZlJwX1lMTE1pZ09JU2g5cDV6YmZqUXNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9kYjFlMjAtZGMzNi00ODhkLTkxYTEtM2RmN2ZhZjM1MzVk LzEvSVdDeXNjZ3AySWsyc2EydTdKZjkwYlFOUWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAWpzmAwQA ufcRAwQAvOEfAwQA2ZfmMA0EAgACMAcDBQAqA28GMA0GCSqGSIb3DQEBCwUAA4IB AQCH/QbFWPp4LYPbb0Y0niiO3/inHTjnMQowp7+v7nn5/4E/DpuC+h2DsOnf/Bul nNLkibyCUk0cee7xOzePBJa2R6nDlZrGNneEQc93rHSycFrOyv47WL1//2yfpaPN VenwopNNLsOQHMzBGE6WDX3Ydb6j9i9LEfoojVWDrb4IdjCcSkA32udKISz2n1Uf YIJCv9+KuQU1PaYULrG71WVFF+XEOaOPATN/Qx6+o1+XPO6V2a/IwBYT2qSN46Yf 0R73WfFF2uTuM1vkIxAB0k5ZpNRgxzwJxV1v6F4aw7bBlSgDTq7YbftnsLMseQKj TQmH5q1Y9QkUEhnSmQ9pGvp7 -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:30 2026 by rpki-client