This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/arDSEArnZyqLs7jmsgT1tnPs8rc.roa File: arDSEArnZyqLs7jmsgT1tnPs8rc.roa (raw, json) Hash identifier: /Km/RAgR6E8ZdX77lmgH7Nk0dxMhyfy0FGDCtSzOc/w= Subject key identifier: 6A:B0:D2:10:0A:E7:67:2A:8B:B3:B8:E6:B2:04:F5:B6:73:EC:F2:B7 Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Certificate serial: 019B7B364D7CBB5A7718E72C5C7B80A7A079 Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/arDSEArnZyqLs7jmsgT1tnPs8rc.roa Signing time: Thu 01 Jan 2026 20:18:34 +0000 ROA not before: Thu 01 Jan 2026 20:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 185.198.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 19:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:4d:7c:bb:5a:77:18:e7:2c:5c:7b:80:a7:a0:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Validity Not Before: Jan 1 20:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ab0d2100ae7672a8bb3b8e6b204f5b673ecf2b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d0:0b:98:c8:59:11:96:f0:83:86:2f:d7:e3: c9:19:e7:82:5e:81:dc:6c:31:08:f6:f1:85:78:d1: 4b:c2:2d:05:51:ce:e8:b0:8a:f1:94:72:55:a2:1d: 48:d6:86:d8:00:79:08:76:65:be:0d:9b:33:b6:3c: 29:f9:50:fa:c1:0f:0a:a1:1e:26:bf:cf:2b:08:96: 1d:bc:08:15:df:2b:66:0b:fe:09:6c:ca:c7:1f:a8: f7:06:7e:b5:17:98:e5:e9:9d:4d:a2:86:81:ba:76: 6c:ef:cc:37:92:0d:15:b6:bf:f5:7b:ec:7c:42:ec: bb:f9:ed:64:01:a7:5b:2a:cd:7f:ae:1d:aa:cc:4e: 7f:db:40:48:66:70:8f:aa:89:de:0c:1e:94:e7:c2: 64:ef:92:49:eb:f0:16:42:d1:42:d6:43:93:2a:a0: ce:e1:b9:7f:9b:8f:5b:03:93:88:07:f8:e3:3b:f4: 4b:00:34:da:dc:d4:68:65:44:2a:d4:80:a3:7f:f1: f2:3d:95:9a:10:4a:c7:63:8f:10:1e:02:46:d1:9c: 8f:5b:28:f6:58:d9:c1:13:0f:95:7e:87:88:53:59: f3:09:b2:c3:7c:10:93:e5:fa:00:81:37:cb:07:6d: f3:40:20:fc:f8:c2:45:69:ae:fb:81:f4:27:6c:34: ac:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B0:D2:10:0A:E7:67:2A:8B:B3:B8:E6:B2:04:F5:B6:73:EC:F2:B7 X509v3 Authority Key Identifier: keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/arDSEArnZyqLs7jmsgT1tnPs8rc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.198.36.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:c9:48:10:4d:f3:4a:df:4f:e4:d5:11:30:13:2a:32:64:c8: d5:25:ee:03:e2:c8:5d:6e:79:6d:52:18:13:95:e8:49:cf:90: 6c:28:c6:ba:00:bf:d1:d7:61:7a:81:da:25:1f:d1:cd:15:8e: b2:cd:ad:e4:bc:2d:86:27:95:dd:55:d2:6b:98:e1:d2:35:6d: 1f:4c:1f:12:f6:c8:37:52:3d:8d:9f:7f:f8:f6:64:87:8f:2d: 6f:df:f6:f7:da:66:14:a4:b4:dd:34:6b:70:15:01:1b:97:50: df:ac:43:c2:60:dd:29:93:d8:77:9a:5a:e6:19:1b:cc:f2:f6: b2:1e:38:5b:00:c7:29:fd:e5:f5:1b:fe:a7:57:f9:f7:9a:5d: ce:cb:ca:e1:21:6b:e8:52:04:d0:2e:67:b6:27:73:b4:1d:c6: 03:81:a6:3c:df:0f:d0:c5:05:ba:f3:23:44:c5:41:68:7d:62: 22:8f:b8:96:ba:36:32:18:2c:ec:6c:b5:5c:1d:f3:d8:ed:b7: 03:16:23:ce:d6:88:33:95:a3:3a:49:29:b6:9b:e4:9c:76:30: 05:d8:b3:5e:48:63:23:e9:92:02:2d:d0:3e:ae:a8:41:3b:b7: 9b:74:89:d0:7a:96:34:9e:8d:16:5c:73:19:e5:68:ad:6c:d0: 6e:3f:0d:1d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nk18u1p3GOcsXHuAp6B5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTY0M2JiMzk5YzZkODdhZGM0YzdjYmE1ZDJiNzJmYmQw MGQwNDYwHhcNMjYwMTAxMjAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWIwZDIxMDBhZTc2NzJhOGJiM2I4ZTZiMjA0ZjViNjczZWNmMmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdALmMhZEZbwg4Yv1+PJGeeCXoHc bDEI9vGFeNFLwi0FUc7osIrxlHJVoh1I1obYAHkIdmW+DZsztjwp+VD6wQ8KoR4m v88rCJYdvAgV3ytmC/4JbMrHH6j3Bn61F5jl6Z1NooaBunZs78w3kg0Vtr/1e+x8 Quy7+e1kAadbKs1/rh2qzE5/20BIZnCPqoneDB6U58Jk75JJ6/AWQtFC1kOTKqDO 4bl/m49bA5OIB/jjO/RLADTa3NRoZUQq1ICjf/HyPZWaEErHY48QHgJG0ZyPWyj2 WNnBEw+VfoeIU1nzCbLDfBCT5foAgTfLB23zQCD8+MJFaa77gfQnbDSsYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGqw0hAK52cqi7O45rIE9bZz7PK3MB8GA1UdIwQY MBaAFHymQ7s5nG2HrcTHy6XSty+9ANBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMt NDRlYTY0NzIxYzllLzEvYXJEU0VBcm5aeXFMczdqbXNnVDF0blBzOHJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMtNDRlYTY0NzIxYzll LzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucYkMA0G CSqGSIb3DQEBCwUAA4IBAQCfyUgQTfNK30/k1REwEyoyZMjVJe4D4shdbnltUhgT lehJz5BsKMa6AL/R12F6gdolH9HNFY6yza3kvC2GJ5XdVdJrmOHSNW0fTB8S9sg3 Uj2Nn3/49mSHjy1v3/b32mYUpLTdNGtwFQEbl1DfrEPCYN0pk9h3mlrmGRvM8vay HjhbAMcp/eX1G/6nV/n3ml3Oy8rhIWvoUgTQLme2J3O0HcYDgaY83w/QxQW68yNE xUFofWIij7iWujYyGCzsbLVcHfPY7bcDFiPO1ogzlaM6SSm2m+ScdjAF2LNeSGMj 6ZICLdA+rqhBO7ebdInQepY0no0WXHMZ5WitbNBuPw0d -----END CERTIFICATE-----Generated at Sat Jan 24 00:27:41 2026 by rpki-client