This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/fG6maQIYPuiZbXuoPZY5KDKmziI.roa File: fG6maQIYPuiZbXuoPZY5KDKmziI.roa (raw, json) Hash identifier: 86O5JcN57k2/HbjQtBdb8xSuus/b5Khba3p8Ebd34wc= Subject key identifier: 7C:6E:A6:69:02:18:3E:E8:99:6D:7B:A8:3D:96:39:28:32:A6:CE:22 Certificate issuer: /CN=a9480cf18fd7859df9ad997940013a99b8dee374 Certificate serial: 019B7D5BD8C225E71F3A53F06D98E8EE5778 Authority key identifier: A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/fG6maQIYPuiZbXuoPZY5KDKmziI.roa Signing time: Fri 02 Jan 2026 06:18:49 +0000 ROA not before: Fri 02 Jan 2026 06:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50304 IP address blocks: 185.91.64.0/22 maxlen: 24 2a05:e880::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 15:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:d8:c2:25:e7:1f:3a:53:f0:6d:98:e8:ee:57:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9480cf18fd7859df9ad997940013a99b8dee374 Validity Not Before: Jan 2 06:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c6ea66902183ee8996d7ba83d96392832a6ce22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:21:54:eb:9c:51:ba:18:4f:d8:0a:69:a4:5d: 80:c4:90:4c:d0:4e:24:95:3f:5a:5c:c0:5c:1b:0d: b1:65:b2:fb:ab:a2:19:77:13:32:7e:7a:9a:8c:52: 35:32:b0:80:b2:3e:e7:7b:f4:d0:6b:38:1a:75:b5: 46:1b:2a:20:0c:1a:b2:e8:f6:3b:07:b9:37:d0:f3: 08:6b:bc:30:5c:ae:f0:ad:8a:ad:98:e8:01:5e:28: 51:cb:fc:60:51:20:9e:db:54:14:cd:c3:f7:16:a0: 34:b0:48:b6:fb:f7:da:b0:86:ed:52:8d:96:51:1d: 16:ee:c7:53:0b:d8:0b:e1:4c:66:c3:d7:65:9e:00: 2f:38:95:34:93:87:12:82:45:d4:35:fb:97:96:2a: 93:54:18:18:44:ce:1e:c2:57:d9:07:59:12:ee:8a: 85:e4:4d:49:96:18:37:90:d4:29:24:06:ef:cf:68: d4:d8:fc:64:f1:ed:eb:fe:88:bb:3f:85:95:17:a3: da:dc:62:96:a4:ae:85:3a:ed:f7:49:3a:c1:cb:0e: d5:28:ca:1c:0a:34:ae:12:c5:3c:19:80:5a:d7:d8: b9:25:a9:17:53:ff:7a:15:65:06:14:3b:8a:bb:7c: d4:97:e3:a6:2b:bc:77:a5:4c:99:74:26:2a:6a:c8: 3e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:6E:A6:69:02:18:3E:E8:99:6D:7B:A8:3D:96:39:28:32:A6:CE:22 X509v3 Authority Key Identifier: keyid:A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/fG6maQIYPuiZbXuoPZY5KDKmziI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.91.64.0/22 IPv6: 2a05:e880::/29 Signature Algorithm: sha256WithRSAEncryption 79:b5:54:68:ca:9d:1a:a8:3b:53:13:60:64:bf:c4:e7:a9:ec: 28:4a:af:5b:28:17:55:76:ad:ff:dc:93:a7:5a:b3:9f:34:3c: 38:f5:16:5d:c5:5f:c9:14:1d:7d:af:d0:1b:9f:c7:87:db:84: 63:ef:e6:61:a1:30:26:2b:a7:93:02:3e:3f:56:f9:59:21:0a: 57:ea:e5:d7:b6:42:52:cf:65:9f:0c:c1:f2:d2:73:b4:41:2c: 3e:7b:58:fd:de:c8:26:27:e0:5c:1d:14:8d:bc:27:b3:06:78: ab:5a:4f:48:6e:e1:6a:ab:19:c1:31:e6:60:bf:48:9e:f3:0f: 91:9b:f5:58:a7:e0:3f:ed:58:78:12:57:2d:56:c8:df:f8:d3: 0e:0c:f6:90:9e:68:58:79:05:a8:d8:f7:1d:df:c8:a2:dd:0d: c3:15:78:d4:9a:f9:00:43:8f:a6:d2:4d:8c:d7:b1:fa:bd:9c: a2:53:dc:e3:88:d6:b7:ba:57:ad:f3:1c:99:01:97:f8:cf:29: 6c:04:c4:07:c0:f2:0e:35:34:77:9c:12:c3:13:26:00:e4:ce: 51:20:23:9a:51:63:1d:ab:56:82:10:02:c4:26:ad:cd:32:04: e5:28:73:4f:6f:b3:55:1d:ad:e5:97:5c:2d:2c:89:a6:a7:18: e3:e4:14:03 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9W9jCJecfOlPwbZjo7ld4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NDgwY2YxOGZkNzg1OWRmOWFkOTk3OTQwMDEzYTk5Yjhk ZWUzNzQwHhcNMjYwMTAyMDYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzZlYTY2OTAyMTgzZWU4OTk2ZDdiYTgzZDk2MzkyODMyYTZjZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiFU65xRuhhP2ApppF2AxJBM0E4k lT9aXMBcGw2xZbL7q6IZdxMyfnqajFI1MrCAsj7ne/TQazgadbVGGyogDBqy6PY7 B7k30PMIa7wwXK7wrYqtmOgBXihRy/xgUSCe21QUzcP3FqA0sEi2+/fasIbtUo2W UR0W7sdTC9gL4Uxmw9dlngAvOJU0k4cSgkXUNfuXliqTVBgYRM4ewlfZB1kS7oqF 5E1Jlhg3kNQpJAbvz2jU2Pxk8e3r/oi7P4WVF6Pa3GKWpK6FOu33STrByw7VKMoc CjSuEsU8GYBa19i5JakXU/96FWUGFDuKu3zUl+OmK7x3pUyZdCYqasg+CQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHxupmkCGD7omW17qD2WOSgyps4iMB8GA1UdIwQY MBaAFKlIDPGP14Wd+a2ZeUABOpm43uN0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVVnTThZX1hoWjM1clpsNVFBRTZtYmplNDNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9hMzkxMzgtZjRmMS00MjU5LWE0Yjkt YWNkODdjNTQ2MDQ4LzEvZkc2bWFRSVlQdWlaYlh1b1BaWTVLREttemlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9hMzkxMzgtZjRmMS00MjU5LWE0YjktYWNkODdjNTQ2MDQ4 LzEvcVVnTThZX1hoWjM1clpsNVFBRTZtYmplNDNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVtAMA0E AgACMAcDBQMqBeiAMA0GCSqGSIb3DQEBCwUAA4IBAQB5tVRoyp0aqDtTE2Bkv8Tn qewoSq9bKBdVdq3/3JOnWrOfNDw49RZdxV/JFB19r9Abn8eH24Rj7+ZhoTAmK6eT Aj4/VvlZIQpX6uXXtkJSz2WfDMHy0nO0QSw+e1j93sgmJ+BcHRSNvCezBnirWk9I buFqqxnBMeZgv0ie8w+Rm/VYp+A/7Vh4ElctVsjf+NMODPaQnmhYeQWo2Pcd38ii 3Q3DFXjUmvkAQ4+m0k2M17H6vZyiU9zjiNa3ulet8xyZAZf4zylsBMQHwPIONTR3 nBLDEyYA5M5RICOaUWMdq1aCEALEJq3NMgTlKHNPb7NVHa3ll1wtLImmpxjj5BQD -----END CERTIFICATE-----Generated at Fri Jan 23 21:39:55 2026 by rpki-client