This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/6OMId8qLq9FNz-0vxg5RBukY9zs.roa File: 6OMId8qLq9FNz-0vxg5RBukY9zs.roa (raw, json) Hash identifier: xe2yi3J7qtfn/452oWa5yO6AXTtiMtVrNox5id3Mshk= Subject key identifier: E8:E3:08:77:CA:8B:AB:D1:4D:CF:ED:2F:C6:0E:51:06:E9:18:F7:3B Certificate issuer: /CN=fdaf41d04bc687d0ff98ad7d407684751c46ca3e Certificate serial: 019B79ECE1B2C75CE6E1E7985AD543F10E56 Authority key identifier: FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/6OMId8qLq9FNz-0vxg5RBukY9zs.roa Signing time: Thu 01 Jan 2026 14:18:45 +0000 ROA not before: Thu 01 Jan 2026 14:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206268 IP address blocks: 185.190.176.0/24 maxlen: 24 185.190.177.0/24 maxlen: 24 2a0c:3fc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:e1:b2:c7:5c:e6:e1:e7:98:5a:d5:43:f1:0e:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdaf41d04bc687d0ff98ad7d407684751c46ca3e Validity Not Before: Jan 1 14:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8e30877ca8babd14dcfed2fc60e5106e918f73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:69:69:69:b6:da:8a:dd:58:08:65:3d:36:08: 8e:c1:c2:63:2a:0d:db:e3:9a:82:27:df:d2:42:71: 74:04:0d:cd:a3:62:dd:aa:d4:4e:2c:99:a5:c7:5e: 9b:9d:4b:76:8a:0e:e5:49:e0:c3:a5:e4:a4:8c:36: b6:29:d3:6f:c7:50:d6:cc:0b:6d:49:63:17:98:15: c9:fa:e4:a4:90:40:1a:dd:f1:e9:ee:73:4e:15:48: d4:10:f7:54:22:48:e8:20:0f:01:63:9a:30:8b:db: 34:e7:fb:41:a5:17:ef:00:8e:1a:3a:fb:36:26:af: b5:58:1e:19:fc:fe:eb:90:23:b5:f5:fe:37:ad:cd: 52:75:a9:23:11:4f:78:8c:a2:9d:26:ff:e8:ba:db: 00:8d:2f:29:37:09:70:02:0c:45:bf:cd:ef:98:b4: f8:a3:bb:87:c6:d8:9f:89:52:38:68:a7:f9:d6:a5: 04:1a:38:d1:ff:5a:b4:e9:26:df:68:a9:db:dd:c8: 11:80:a1:83:19:41:c4:25:4e:71:70:27:d4:62:7a: be:b9:47:bd:3c:b7:c4:aa:90:bb:d7:a9:f5:c6:cd: 7e:fb:73:eb:ce:da:6c:c7:10:e0:41:5b:a2:32:ef: 0e:4d:df:1a:93:48:48:70:85:27:61:09:ff:5c:f0: dc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E3:08:77:CA:8B:AB:D1:4D:CF:ED:2F:C6:0E:51:06:E9:18:F7:3B X509v3 Authority Key Identifier: keyid:FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/6OMId8qLq9FNz-0vxg5RBukY9zs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.190.176.0/23 IPv6: 2a0c:3fc0::/29 Signature Algorithm: sha256WithRSAEncryption 1a:ab:62:5a:87:e3:a2:48:cd:8a:38:f0:01:f8:74:0d:b3:de: 09:fd:73:89:d9:18:26:81:92:a9:f9:07:11:ad:a7:5d:0e:01: 7f:f2:40:c5:4e:74:8e:e5:8d:ee:73:9c:20:3a:c5:5f:b8:14: c0:76:7c:20:fb:4a:75:81:1d:68:2e:80:ad:dc:60:a9:5d:1a: 6f:71:8d:6d:59:57:4a:0f:70:68:20:59:e6:c2:61:9e:0d:95: 7d:dd:8e:a2:e6:a2:03:91:60:c7:b7:d6:66:dc:aa:cd:2b:22: 43:ec:85:4b:58:af:b4:d8:20:47:22:9d:1a:6f:00:69:5d:56: 78:e6:5e:8b:e7:ba:50:f9:b2:cf:6e:c7:bf:37:36:0e:73:17: 09:d1:94:e5:6a:18:48:33:60:99:f9:5a:52:46:3a:c1:1c:d9: 9e:82:93:ed:45:23:32:5e:5c:d6:65:2e:d0:89:c3:c7:7b:d3: e7:47:ac:a6:84:c6:82:66:27:68:31:31:9b:22:e2:b6:65:a1: 85:44:7c:3f:15:e6:a0:1b:b4:69:26:4f:b5:9b:39:23:ca:3c: ad:49:fd:98:14:cc:34:ce:26:db:2f:32:ca:ba:df:32:6f:54: de:6f:b2:f9:23:68:0e:95:6d:b0:fb:0c:d9:49:ad:ed:c3:dc: 81:9d:02:fe -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57OGyx1zm4eeYWtVD8Q5WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkYWY0MWQwNGJjNjg3ZDBmZjk4YWQ3ZDQwNzY4NDc1MWM0 NmNhM2UwHhcNMjYwMTAxMTQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGUzMDg3N2NhOGJhYmQxNGRjZmVkMmZjNjBlNTEwNmU5MThmNzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2lpabbait1YCGU9NgiOwcJjKg3b 45qCJ9/SQnF0BA3No2LdqtROLJmlx16bnUt2ig7lSeDDpeSkjDa2KdNvx1DWzAtt SWMXmBXJ+uSkkEAa3fHp7nNOFUjUEPdUIkjoIA8BY5owi9s05/tBpRfvAI4aOvs2 Jq+1WB4Z/P7rkCO19f43rc1SdakjEU94jKKdJv/outsAjS8pNwlwAgxFv83vmLT4 o7uHxtifiVI4aKf51qUEGjjR/1q06SbfaKnb3cgRgKGDGUHEJU5xcCfUYnq+uUe9 PLfEqpC716n1xs1++3PrztpsxxDgQVuiMu8OTd8ak0hIcIUnYQn/XPDcCwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOjjCHfKi6vRTc/tL8YOUQbpGPc7MB8GA1UdIwQY MBaAFP2vQdBLxofQ/5itfUB2hHUcRso+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2E5QjBFdkdoOURfbUsxOVFIYUVkUnhHeWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xNmNkZmEtNmFiOS00N2ZhLWI4NzEt ZWEyMDIxODAwMzQyLzEvNk9NSWQ4cUxxOUZOei0wdnhnNVJCdWtZOXpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8xNmNkZmEtNmFiOS00N2ZhLWI4NzEtZWEyMDIxODAwMzQy LzEvX2E5QjBFdkdoOURfbUsxOVFIYUVkUnhHeWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBub6wMA0E AgACMAcDBQMqDD/AMA0GCSqGSIb3DQEBCwUAA4IBAQAaq2Jah+OiSM2KOPAB+HQN s94J/XOJ2RgmgZKp+QcRraddDgF/8kDFTnSO5Y3uc5wgOsVfuBTAdnwg+0p1gR1o LoCt3GCpXRpvcY1tWVdKD3BoIFnmwmGeDZV93Y6i5qIDkWDHt9Zm3KrNKyJD7IVL WK+02CBHIp0abwBpXVZ45l6L57pQ+bLPbse/NzYOcxcJ0ZTlahhIM2CZ+VpSRjrB HNmegpPtRSMyXlzWZS7QicPHe9PnR6ymhMaCZidoMTGbIuK2ZaGFRHw/FeagG7Rp Jk+1mzkjyjytSf2YFMw0zibbLzLKut8yb1Teb7L5I2gOlW2w+wzZSa3tw9yBnQL+ -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:26 2026 by rpki-client