This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/6qtkp2qDEVEEIbbFxY_2i2rKW-0.roa File: 6qtkp2qDEVEEIbbFxY_2i2rKW-0.roa (raw, json) Hash identifier: 2a2iY/VwDxwMHTiCEWGU641Pb5rVRla6ASIylRtAZzE= Subject key identifier: EA:AB:64:A7:6A:83:11:51:04:21:B6:C5:C5:8F:F6:8B:6A:CA:5B:ED Certificate issuer: /CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b Certificate serial: 019B7B365D4D207829FF6EBC40094E95C70B Authority key identifier: 6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/6qtkp2qDEVEEIbbFxY_2i2rKW-0.roa Signing time: Thu 01 Jan 2026 20:18:38 +0000 ROA not before: Thu 01 Jan 2026 20:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 11042 IP address blocks: 185.157.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:5d:4d:20:78:29:ff:6e:bc:40:09:4e:95:c7:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b Validity Not Before: Jan 1 20:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eaab64a76a8311510421b6c5c58ff68b6aca5bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:08:46:7b:9d:d5:05:1a:ed:f1:26:bb:16:83: 4f:d6:16:70:17:a1:4a:95:b0:31:6c:91:6d:cd:bd: b5:b5:20:a2:6f:fc:cd:4c:ac:9b:be:91:db:5f:2d: 36:e1:ac:64:f9:e7:a1:c7:0e:fa:21:1d:9e:f1:c0: 59:08:1b:08:95:19:c2:e8:75:2d:84:e9:de:49:29: ae:fd:e0:29:00:4a:a0:95:60:0c:15:24:bd:80:57: 18:1f:b3:0e:8f:dc:17:d1:f2:a3:e7:5d:0f:fb:88: 38:a1:38:56:93:86:91:a9:9b:51:ff:6e:7a:b9:a0: 10:57:0f:b4:bc:35:bf:94:75:7d:cb:f7:1a:f9:86: a8:1a:7a:3a:4b:76:5b:9f:95:20:4d:9c:a7:2b:a1: 56:1b:93:cd:3f:96:6b:43:9a:18:4a:9f:88:66:a5: 8a:b4:ca:73:0f:bf:49:19:4c:85:b2:f8:d8:d1:9d: 2f:5c:01:d6:6b:cd:e1:5d:8c:be:f4:76:b8:c0:85: eb:ff:d5:87:86:5d:ef:b0:09:44:b1:f3:73:70:7b: 99:33:83:05:10:b3:3c:4c:bc:ea:ee:11:95:dd:5b: 09:5a:75:8d:c8:e7:1f:40:82:77:68:a5:27:0d:21: 09:bd:a6:d6:7d:1d:4d:aa:b2:31:a3:7b:cb:23:2e: 0c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AB:64:A7:6A:83:11:51:04:21:B6:C5:C5:8F:F6:8B:6A:CA:5B:ED X509v3 Authority Key Identifier: keyid:6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/6qtkp2qDEVEEIbbFxY_2i2rKW-0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.157.150.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:b2:57:a0:d2:df:e0:39:26:d3:ed:f6:24:92:77:93:de:8e: 26:56:66:0e:93:f4:9b:70:61:a7:01:57:b9:8c:72:01:7b:3b: d6:b2:27:04:a5:e8:d8:71:d8:a0:5c:dc:f5:5b:f8:8a:76:e0: d9:76:7a:79:4e:be:cf:0c:68:a6:f8:6f:77:b8:ff:8b:e2:b8: 05:09:8a:d3:87:f4:56:29:31:2a:9d:24:a3:ab:bd:a9:c4:74: bf:9d:4f:19:e3:dd:4c:ca:b5:67:8a:c3:b2:f2:ee:c2:49:b3: 05:55:03:4a:fc:60:24:5a:de:6e:63:ad:4b:8e:b5:ff:7d:3b: 06:a7:c0:4e:d2:44:41:c3:a1:4b:99:6f:ac:91:8f:ce:91:64: 71:79:53:db:bd:79:ba:2f:5f:24:f0:9c:31:e4:84:90:91:aa: 92:42:ad:b7:5d:d2:7c:8b:c0:98:39:e2:f4:fd:dd:3d:dd:ad: ed:87:e1:23:d0:df:1d:f3:18:fa:ac:07:3d:a2:e2:e5:a5:7a: e4:12:c7:03:50:44:fb:c5:63:12:ce:2a:bb:26:c3:2a:cc:dc: 8d:c7:c6:6a:29:82:1a:3a:3b:f4:18:4f:be:43:a4:f0:0d:6d: 62:0b:0d:43:6e:85:6c:1a:0a:9b:a3:cf:88:9a:81:47:a4:6f: 25:d4:b1:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nl1NIHgp/268QAlOlccLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlMzdhMTBhNGEwMjczZjQxZmFjZjc0NDBkNTlmMzlhZDVl YWY2NGIwHhcNMjYwMTAxMjAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWFiNjRhNzZhODMxMTUxMDQyMWI2YzVjNThmZjY4YjZhY2E1YmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqghGe53VBRrt8Sa7FoNP1hZwF6FK lbAxbJFtzb21tSCib/zNTKybvpHbXy024axk+eehxw76IR2e8cBZCBsIlRnC6HUt hOneSSmu/eApAEqglWAMFSS9gFcYH7MOj9wX0fKj510P+4g4oThWk4aRqZtR/256 uaAQVw+0vDW/lHV9y/ca+YaoGno6S3Zbn5UgTZynK6FWG5PNP5ZrQ5oYSp+IZqWK tMpzD79JGUyFsvjY0Z0vXAHWa83hXYy+9Ha4wIXr/9WHhl3vsAlEsfNzcHuZM4MF ELM8TLzq7hGV3VsJWnWNyOcfQIJ3aKUnDSEJvabWfR1NqrIxo3vLIy4MdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOqrZKdqgxFRBCG2xcWP9otqylvtMB8GA1UdIwQY MBaAFG43oQpKAnP0H6z3RA1Z85rV6vZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmplaENrb0NjX1FmclBkRURWbnptdFhxOWtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9mMGFlZjMtMjYzZC00ZjQxLTg4NTMt MThiN2ViOTIzYTk5LzEvNnF0a3AycURFVkVFSWJiRnhZXzJpMnJLVy0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9mMGFlZjMtMjYzZC00ZjQxLTg4NTMtMThiN2ViOTIzYTk5 LzEvYmplaENrb0NjX1FmclBkRURWbnptdFhxOWtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZ2WMA0G CSqGSIb3DQEBCwUAA4IBAQBcsleg0t/gOSbT7fYkkneT3o4mVmYOk/SbcGGnAVe5 jHIBezvWsicEpejYcdigXNz1W/iKduDZdnp5Tr7PDGim+G93uP+L4rgFCYrTh/RW KTEqnSSjq72pxHS/nU8Z491MyrVnisOy8u7CSbMFVQNK/GAkWt5uY61LjrX/fTsG p8BO0kRBw6FLmW+skY/OkWRxeVPbvXm6L18k8Jwx5ISQkaqSQq23XdJ8i8CYOeL0 /d093a3th+Ej0N8d8xj6rAc9ouLlpXrkEscDUET7xWMSziq7JsMqzNyNx8ZqKYIa Ojv0GE++Q6TwDW1iCw1DboVsGgqbo8+ImoFHpG8l1LHW -----END CERTIFICATE-----Generated at Wed Jan 21 11:57:21 2026 by rpki-client