This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6YPDPg5eSMNhyW8S69tHApMIT7k.roa File: 6YPDPg5eSMNhyW8S69tHApMIT7k.roa (raw, json) Hash identifier: pQGpxiXiSqJDKLVpULkhebJ1pti3BCCFizk+pDfvwOE= Subject key identifier: E9:83:C3:3E:0E:5E:48:C3:61:C9:6F:12:EB:DB:47:02:93:08:4F:B9 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A33B1801A1672C58794D2A4E4EB2D4 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6YPDPg5eSMNhyW8S69tHApMIT7k.roa Signing time: Thu 01 Jan 2026 08:18:42 +0000 ROA not before: Thu 01 Jan 2026 08:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210624 IP address blocks: 85.217.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3b:18:01:a1:67:2c:58:79:4d:2a:4e:4e:b2:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e983c33e0e5e48c361c96f12ebdb470293084fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b6:eb:62:61:2c:9c:e6:f4:5b:d6:cc:ad:23: 2e:a5:53:02:50:96:04:2c:28:08:d6:fc:ce:39:90: eb:c0:ba:91:3a:e5:e8:73:3d:25:0e:f9:ea:ab:f3: 77:fb:9a:9f:d2:4d:3c:93:da:2e:11:78:31:f7:46: f0:65:fa:05:f5:d9:11:f2:86:88:d4:e0:8d:d2:1c: 63:31:8b:ad:9d:b7:9a:b7:2e:80:5a:12:63:81:3b: 5a:18:ed:32:96:33:7a:c5:bb:d7:ac:50:22:ee:5a: 7e:10:1b:56:f7:c5:d1:4c:b0:bc:16:93:37:02:2f: f3:1b:16:60:d4:db:84:87:93:d0:4d:9a:43:2f:62: df:43:f8:81:57:e0:ca:9b:df:97:73:62:9c:4e:7e: e1:2a:f1:da:94:a6:d1:f1:ee:00:26:36:b3:64:5a: a6:66:4f:05:43:6e:f8:58:85:6b:a3:54:d1:fa:11: 19:9a:31:c7:f4:c6:89:c1:9f:f1:e0:97:8b:01:76: 6b:30:99:89:2b:36:f3:65:67:5c:4f:26:51:d2:9e: e3:fa:26:84:8f:bf:f2:4f:9c:90:a3:8f:a4:d9:dd: df:bc:e6:e2:04:f1:e6:8b:8e:e2:bd:e2:0b:2e:1e: 5d:a7:ae:6c:09:64:a4:83:bb:e3:b3:e7:a9:64:e7: a9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:83:C3:3E:0E:5E:48:C3:61:C9:6F:12:EB:DB:47:02:93:08:4F:B9 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6YPDPg5eSMNhyW8S69tHApMIT7k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.217.189.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:12:41:e5:81:36:56:a1:d0:f1:54:64:4b:92:6a:3d:bc:05: a8:26:95:b7:c8:18:64:3d:db:10:a3:03:e8:64:fd:dc:5b:74: ed:f5:bb:af:2a:b0:ba:9e:11:0c:0f:df:40:dd:a7:73:be:35: 2e:81:ac:15:96:b0:dc:26:58:b3:fe:75:65:6d:8a:c0:f8:c1: a0:40:c5:4d:c6:05:2a:dc:e3:f8:41:81:ee:83:09:90:eb:7d: ad:9c:a2:d1:8e:f3:18:7d:bf:a3:71:01:f6:1f:21:36:22:ef: 93:44:5f:43:93:8b:be:33:e2:09:66:e8:ee:ec:52:11:43:f1: 32:d2:4e:34:22:54:bf:13:48:2c:bb:af:c6:a2:e5:55:a9:a8: 7e:c7:b2:f8:c4:21:a1:01:fe:db:ab:69:b5:e8:3b:cf:2e:42: f8:36:0d:cb:0b:74:26:a7:f2:a0:1b:a2:4d:87:89:89:02:98: 34:6a:aa:bc:5f:dd:f1:f0:77:6b:e2:f2:17:c4:60:e6:db:11: da:a1:7a:43:9a:a1:f0:5e:ec:b0:54:37:16:d7:cc:78:56:af: a3:33:63:60:58:9b:fc:8e:bc:7a:b3:82:7a:85:ad:13:25:b3: 8f:5a:eb:53:99:15:8a:77:4b:03:6f:51:e7:60:ec:9b:ef:d5: a6:e2:bf:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ozsYAaFnLFh5TSpOTrLUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTgzYzMzZTBlNWU0OGMzNjFjOTZmMTJlYmRiNDcwMjkzMDg0ZmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7brYmEsnOb0W9bMrSMupVMCUJYE LCgI1vzOOZDrwLqROuXocz0lDvnqq/N3+5qf0k08k9ouEXgx90bwZfoF9dkR8oaI 1OCN0hxjMYutnbeaty6AWhJjgTtaGO0yljN6xbvXrFAi7lp+EBtW98XRTLC8FpM3 Ai/zGxZg1NuEh5PQTZpDL2LfQ/iBV+DKm9+Xc2KcTn7hKvHalKbR8e4AJjazZFqm Zk8FQ274WIVro1TR+hEZmjHH9MaJwZ/x4JeLAXZrMJmJKzbzZWdcTyZR0p7j+iaE j7/yT5yQo4+k2d3fvObiBPHmi47iveILLh5dp65sCWSkg7vjs+epZOepRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOmDwz4OXkjDYclvEuvbRwKTCE+5MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvNllQRFBnNWVTTU5oeVc4UzY5dEhBcE1JVDdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdm9MA0G CSqGSIb3DQEBCwUAA4IBAQAuEkHlgTZWodDxVGRLkmo9vAWoJpW3yBhkPdsQowPo ZP3cW3Tt9buvKrC6nhEMD99A3adzvjUugawVlrDcJliz/nVlbYrA+MGgQMVNxgUq 3OP4QYHugwmQ632tnKLRjvMYfb+jcQH2HyE2Iu+TRF9Dk4u+M+IJZuju7FIRQ/Ey 0k40IlS/E0gsu6/GouVVqah+x7L4xCGhAf7bq2m16DvPLkL4Ng3LC3Qmp/KgG6JN h4mJApg0aqq8X93x8Hdr4vIXxGDm2xHaoXpDmqHwXuywVDcW18x4Vq+jM2NgWJv8 jrx6s4J6ha0TJbOPWutTmRWKd0sDb1HnYOyb79Wm4r+j -----END CERTIFICATE-----Generated at Fri Jan 2 12:02:57 2026 by rpki-client