This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/Dg6-7OIm8vlGjBApMECeqWUjQD0.roa File: Dg6-7OIm8vlGjBApMECeqWUjQD0.roa (raw, json) Hash identifier: XL6k5VLIb0mGqKu2jEbLqy1HfJEl/tavDJoVTxIQkW4= Subject key identifier: 0E:0E:BE:EC:E2:26:F2:F9:46:8C:10:29:30:40:9E:A9:65:23:40:3D Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Certificate serial: 019B7BA5341D8BBC077FEB88617847E220E3 Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/Dg6-7OIm8vlGjBApMECeqWUjQD0.roa Signing time: Thu 01 Jan 2026 22:19:42 +0000 ROA not before: Thu 01 Jan 2026 22:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40676 IP address blocks: 185.244.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:34:1d:8b:bc:07:7f:eb:88:61:78:47:e2:20:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Validity Not Before: Jan 1 22:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e0ebeece226f2f9468c102930409ea96523403d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:30:f7:cd:36:2a:43:67:9d:1f:b0:0c:2d:2a: c0:48:b3:e1:79:6b:1e:09:41:a7:12:a0:b5:52:c7: aa:fd:14:fc:79:5b:35:6f:12:5c:08:e8:cc:55:24: 13:08:36:01:49:c5:78:db:43:25:10:c4:21:a7:d1: 01:d9:23:35:68:05:92:6a:ca:49:be:01:3f:0a:23: 34:6f:f6:4d:9f:eb:d3:44:eb:15:07:04:ff:aa:3b: 44:5c:95:88:1a:22:f7:fc:42:f3:25:0f:19:89:0d: d7:f4:ce:62:04:1a:05:91:83:cc:40:4b:35:12:3d: 7d:35:78:30:8c:c6:12:a0:94:e2:3a:5d:b7:51:6b: c5:c5:3e:a6:d7:1b:95:65:6e:20:c7:83:a8:e5:19: 16:43:8d:7f:7a:18:4d:e8:9e:6b:c5:af:59:c7:ac: 51:99:af:6c:47:f0:c8:71:d6:74:98:8c:07:0b:70: d6:6f:02:6b:56:1f:93:74:db:59:47:b6:19:2d:a9: 32:b4:56:a8:77:eb:20:08:6a:e6:19:f0:17:4a:db: dd:b0:75:ce:8d:e4:4e:ed:07:e7:93:21:f0:85:dd: d2:7c:e6:40:5a:77:98:a9:5c:38:23:05:8c:41:ba: 5d:4a:33:ad:aa:26:71:8b:cb:05:02:99:3d:dd:04: 6d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0E:BE:EC:E2:26:F2:F9:46:8C:10:29:30:40:9E:A9:65:23:40:3D X509v3 Authority Key Identifier: keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/Dg6-7OIm8vlGjBApMECeqWUjQD0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.244.3.0/24 Signature Algorithm: sha256WithRSAEncryption b3:fa:d6:e3:fa:5c:d2:20:c3:e8:f7:c6:57:ea:50:d0:32:0b: 6c:23:73:3f:21:4c:50:38:f7:de:ee:ca:20:86:23:85:e9:0c: 4c:f3:61:0e:9f:17:fb:80:fd:3c:39:ea:47:d7:a1:e1:39:0e: c5:92:dd:0d:57:ed:3d:c5:ae:d4:4f:1b:09:6e:60:12:6c:45: 81:2c:c4:bc:97:00:36:a3:39:cb:01:83:41:2b:8a:b6:4a:ba: 90:47:f7:80:93:37:00:17:19:79:64:67:11:db:e1:4f:c6:5b: 73:0c:fe:51:73:1e:07:fa:c0:c8:a3:bc:12:6c:76:71:52:01: 85:11:32:cf:37:d0:9b:55:e1:db:f2:77:c0:52:ff:de:5b:a4: ed:0c:87:2c:d7:7e:3e:0b:9b:46:c0:2e:64:17:9b:db:6f:73: 1b:cb:8b:ee:05:ad:98:11:95:28:15:ae:aa:9d:a7:c5:d4:35: 85:de:9d:61:f5:e1:fb:8b:a9:08:e0:bd:55:5c:c7:09:52:9a: f1:e5:68:93:51:ff:a5:71:4a:19:a8:66:e2:39:68:4e:a3:a5: 53:95:ce:57:d6:c3:c4:4e:ad:c7:b3:4d:53:8b:8f:70:41:c3: 90:0e:1a:82:54:89:4a:58:0b:d5:ae:51:9a:af:69:7d:b6:fd: fa:40:33:90 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pTQdi7wHf+uIYXhH4iDjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YWEzZmJjNzhlMzEyMjkxNTdjNzhiNmQyM2E2NWViMmUz NTNkY2UwHhcNMjYwMTAxMjIxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTBlYmVlY2UyMjZmMmY5NDY4YzEwMjkzMDQwOWVhOTY1MjM0MDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTD3zTYqQ2edH7AMLSrASLPheWse CUGnEqC1Useq/RT8eVs1bxJcCOjMVSQTCDYBScV420MlEMQhp9EB2SM1aAWSaspJ vgE/CiM0b/ZNn+vTROsVBwT/qjtEXJWIGiL3/ELzJQ8ZiQ3X9M5iBBoFkYPMQEs1 Ej19NXgwjMYSoJTiOl23UWvFxT6m1xuVZW4gx4Oo5RkWQ41/ehhN6J5rxa9Zx6xR ma9sR/DIcdZ0mIwHC3DWbwJrVh+TdNtZR7YZLakytFaod+sgCGrmGfAXStvdsHXO jeRO7QfnkyHwhd3SfOZAWneYqVw4IwWMQbpdSjOtqiZxi8sFApk93QRtgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA4OvuziJvL5RowQKTBAnqllI0A9MB8GA1UdIwQY MBaAFNaqP7x44xIpFXx4ttI6ZesuNT3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2Mt ODI3NmM4YWFjNTBlLzEvRGc2LTdPSW04dmxHakJBcE1FQ2VxV1VqUUQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2MtODI3NmM4YWFjNTBl LzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufQDMA0G CSqGSIb3DQEBCwUAA4IBAQCz+tbj+lzSIMPo98ZX6lDQMgtsI3M/IUxQOPfe7sog hiOF6QxM82EOnxf7gP08OepH16HhOQ7Fkt0NV+09xa7UTxsJbmASbEWBLMS8lwA2 oznLAYNBK4q2SrqQR/eAkzcAFxl5ZGcR2+FPxltzDP5Rcx4H+sDIo7wSbHZxUgGF ETLPN9CbVeHb8nfAUv/eW6TtDIcs134+C5tGwC5kF5vbb3Mby4vuBa2YEZUoFa6q nafF1DWF3p1h9eH7i6kI4L1VXMcJUprx5WiTUf+lcUoZqGbiOWhOo6VTlc5X1sPE Tq3Hs01Ti49wQcOQDhqCVIlKWAvVrlGar2l9tv36QDOQ -----END CERTIFICATE-----Generated at Fri Jan 23 02:00:10 2026 by rpki-client