This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/6wLeIQ39c0qgX0Vja7MdBYJAMn8.roa File: 6wLeIQ39c0qgX0Vja7MdBYJAMn8.roa (raw, json) Hash identifier: nC6rexnNHi4WNC4B4GVKP/4QaiD+SkPn2gOVHs21A7Y= Subject key identifier: EB:02:DE:21:0D:FD:73:4A:A0:5F:45:63:6B:B3:1D:05:82:40:32:7F Certificate issuer: /CN=85db83a8365a604476f282d24d327ad1ef0fde52 Certificate serial: 019B7D5D3918DB4B2D3132DD3C65560BF639 Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/6wLeIQ39c0qgX0Vja7MdBYJAMn8.roa Signing time: Fri 02 Jan 2026 06:20:20 +0000 ROA not before: Fri 02 Jan 2026 06:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41960 IP address blocks: 46.226.236.0/22 maxlen: 24 185.25.80.0/22 maxlen: 24 185.199.188.0/22 maxlen: 24 185.199.232.0/22 maxlen: 24 213.5.232.0/22 maxlen: 24 2a00:c600::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:39:18:db:4b:2d:31:32:dd:3c:65:56:0b:f6:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52 Validity Not Before: Jan 2 06:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb02de210dfd734aa05f45636bb31d058240327f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6f:78:52:be:63:08:7e:e9:ff:78:72:ec:4f: f8:a4:6e:31:9c:55:c2:ad:56:27:4b:46:5e:84:f0: 7d:0e:f2:83:1f:a6:a1:2f:c4:3a:15:fa:74:e6:f6: 32:82:5b:da:3a:62:94:3d:62:cf:22:d1:0f:ae:98: 12:34:4e:50:36:46:6e:84:62:41:a7:14:a5:e6:a4: e3:50:d9:f0:08:6d:cd:91:60:30:ef:a1:9d:13:b6: 6d:93:ee:3e:08:fd:62:34:c7:81:52:9b:3a:b3:98: 34:91:c9:14:e6:c2:42:b9:fa:86:f1:d2:89:ae:ba: c8:ec:b0:85:38:26:ae:70:c9:e8:9b:20:06:b7:b1: c6:4f:80:5f:37:b1:62:6f:2c:4d:95:48:eb:80:9c: fd:db:66:f8:1f:b9:c0:55:c1:f9:e5:b2:7c:b1:88: 54:eb:8f:e9:e6:e8:d3:9c:b4:fd:ff:1a:f9:10:0a: f5:4d:09:f5:e5:5c:6a:a6:00:4a:78:b5:b3:90:28: b1:fe:38:28:bf:ce:29:7e:60:3d:07:57:70:d3:b3: 4b:d5:ee:ed:e0:76:0a:f1:b5:22:df:f8:b9:0c:83: 44:3c:68:75:9b:b5:4e:30:d0:f3:6f:9f:84:e0:b9: ab:c2:a7:02:46:6a:83:6d:5d:b0:33:0d:98:03:e8: a9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:02:DE:21:0D:FD:73:4A:A0:5F:45:63:6B:B3:1D:05:82:40:32:7F X509v3 Authority Key Identifier: keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/6wLeIQ39c0qgX0Vja7MdBYJAMn8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.226.236.0/22 185.25.80.0/22 185.199.188.0/22 185.199.232.0/22 213.5.232.0/22 IPv6: 2a00:c600::/29 Signature Algorithm: sha256WithRSAEncryption 8e:6a:46:f8:a2:f1:ee:ea:bf:76:02:de:b2:a5:55:dd:a1:14: 72:fa:ee:d0:2c:34:31:c8:84:11:cd:bb:bb:6a:18:ae:49:23: d6:12:7b:7d:b9:ff:8a:71:78:8c:68:a6:59:5a:05:cc:64:cc: 5c:42:0c:53:a4:dc:cd:05:12:dc:ee:5e:0b:90:4a:dc:b5:58: 7c:05:55:5d:7e:6e:f0:d2:a2:2d:63:6f:44:cc:95:63:87:4a: f4:b5:56:b4:fa:0c:55:f7:b9:68:2f:5a:1e:66:6a:ca:81:0f: 41:dd:2c:8b:0a:17:6d:95:06:e3:c5:32:23:fd:cd:3e:6c:ce: b8:fd:fe:ca:ff:02:24:1b:18:26:47:25:bf:9f:a1:b2:7e:f9: 1e:3b:1a:31:a2:9c:88:76:69:b8:4a:0b:41:2c:84:00:de:1e: a1:54:87:06:57:cd:81:a5:b2:2b:bd:09:34:cc:6f:82:52:6b: 15:7a:df:d5:18:f6:36:31:e5:61:76:ea:9f:8f:c8:4f:03:8a: a7:38:01:45:4e:e3:c5:21:8f:b9:48:9c:bd:19:6e:5d:4a:99: ef:9e:9f:50:38:aa:1b:a2:ce:8e:47:76:1f:9f:4d:4b:5f:43: e3:b7:92:31:4b:34:c3:0f:48:92:2d:38:28:0d:14:65:bb:37: 5e:f0:df:00 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt9XTkY20stMTLdPGVWC/Y5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZGI4M2E4MzY1YTYwNDQ3NmYyODJkMjRkMzI3YWQxZWYw ZmRlNTIwHhcNMjYwMTAyMDYyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjAyZGUyMTBkZmQ3MzRhYTA1ZjQ1NjM2YmIzMWQwNTgyNDAzMjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW94Ur5jCH7p/3hy7E/4pG4xnFXC rVYnS0ZehPB9DvKDH6ahL8Q6Ffp05vYyglvaOmKUPWLPItEPrpgSNE5QNkZuhGJB pxSl5qTjUNnwCG3NkWAw76GdE7Ztk+4+CP1iNMeBUps6s5g0kckU5sJCufqG8dKJ rrrI7LCFOCaucMnomyAGt7HGT4BfN7FibyxNlUjrgJz922b4H7nAVcH55bJ8sYhU 64/p5ujTnLT9/xr5EAr1TQn15VxqpgBKeLWzkCix/jgov84pfmA9B1dw07NL1e7t 4HYK8bUi3/i5DINEPGh1m7VOMNDzb5+E4LmrwqcCRmqDbV2wMw2YA+ipLQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFOsC3iEN/XNKoF9FY2uzHQWCQDJ/MB8GA1UdIwQY MBaAFIXbg6g2WmBEdvKC0k0yetHvD95SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yYzhmMDgtZTU5OS00NGYzLWJiYzEt OGNiZWY5MTNlMzQyLzEvNndMZUlRMzljMHFnWDBWamE3TWRCWUpBTW44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8yYzhmMDgtZTU5OS00NGYzLWJiYzEtOGNiZWY5MTNlMzQy LzEvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCLuLsAwQC uRlQAwQCuce8AwQCucfoAwQC1QXoMA0EAgACMAcDBQMqAMYAMA0GCSqGSIb3DQEB CwUAA4IBAQCOakb4ovHu6r92At6ypVXdoRRy+u7QLDQxyIQRzbu7ahiuSSPWEnt9 uf+KcXiMaKZZWgXMZMxcQgxTpNzNBRLc7l4LkErctVh8BVVdfm7w0qItY29EzJVj h0r0tVa0+gxV97loL1oeZmrKgQ9B3SyLChdtlQbjxTIj/c0+bM64/f7K/wIkGxgm RyW/n6GyfvkeOxoxopyIdmm4SgtBLIQA3h6hVIcGV82BpbIrvQk0zG+CUmsVet/V GPY2MeVhduqfj8hPA4qnOAFFTuPFIY+5SJy9GW5dSpnvnp9QOKobos6OR3Yfn01L X0Pjt5IxSzTDD0iSLTgoDRRluzde8N8A -----END CERTIFICATE-----Generated at Mon Jan 26 23:42:51 2026 by rpki-client