This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/6NIaTUJDouCrOz0JAuSF_NduOwA.roa File: 6NIaTUJDouCrOz0JAuSF_NduOwA.roa (raw, json) Hash identifier: hDytd6duXPNmzRp/8kY+LISu/ZM6ohz2sTIHpo5hKjg= Subject key identifier: E8:D2:1A:4D:42:43:A2:E0:AB:3B:3D:09:02:E4:85:FC:D7:6E:3B:00 Certificate issuer: /CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b Certificate serial: 019B7C112590E25F805E6424464C828ED898 Authority key identifier: 4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/6NIaTUJDouCrOz0JAuSF_NduOwA.roa Signing time: Fri 02 Jan 2026 00:17:37 +0000 ROA not before: Fri 02 Jan 2026 00:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213004 IP address blocks: 185.216.64.0/22 maxlen: 22 185.216.64.0/24 maxlen: 24 185.216.65.0/24 maxlen: 24 185.216.66.0/24 maxlen: 24 185.216.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.crl rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:25:90:e2:5f:80:5e:64:24:46:4c:82:8e:d8:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b Validity Not Before: Jan 2 00:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8d21a4d4243a2e0ab3b3d0902e485fcd76e3b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e6:52:d8:5a:4a:fb:b0:d1:1f:04:b4:9d:dd: 8d:63:e9:45:19:25:bd:a9:e4:d1:41:49:60:40:f5: 0a:e4:64:89:d1:51:b6:d0:f0:d4:7a:e3:56:25:44: a0:7c:aa:2f:fd:3f:23:14:dd:35:09:65:1c:56:ae: 70:88:af:13:bf:3f:63:09:26:4d:97:e8:aa:a7:3b: ad:15:a1:5c:be:40:97:4e:c7:5d:bc:e2:a9:31:d1: ad:8f:66:30:24:03:78:92:73:b5:99:13:cf:01:b1: af:2a:b3:56:7c:77:7b:ba:2b:8b:38:47:81:34:75: 41:25:49:f3:52:cf:5c:50:6f:b7:ba:ad:de:19:9a: c7:00:42:f1:d7:f6:22:7a:04:8a:8f:0a:d5:79:e0: 9e:8f:39:49:2e:b0:d0:6d:99:0d:7e:2a:d1:e4:05: 1d:c5:03:a8:aa:cd:4c:67:7b:32:4c:79:77:eb:e2: 96:1d:e4:bb:af:e9:6f:57:b8:42:a1:d2:54:cc:c5: 35:6a:48:9d:15:a8:17:43:ca:07:a9:f3:a4:16:44: 0e:fb:86:4a:bb:0a:cd:ec:0e:d9:96:63:ff:26:c5: 4f:72:a6:a0:ef:12:d9:30:56:7e:c8:f4:37:18:85: 75:8b:25:dc:2f:b7:94:da:5f:3f:93:8e:6f:a0:1b: cc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D2:1A:4D:42:43:A2:E0:AB:3B:3D:09:02:E4:85:FC:D7:6E:3B:00 X509v3 Authority Key Identifier: keyid:4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/6NIaTUJDouCrOz0JAuSF_NduOwA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.216.64.0/22 Signature Algorithm: sha256WithRSAEncryption 34:23:c9:88:32:0f:c8:86:1c:d2:1e:6c:b2:04:2a:07:bf:b5: 48:69:b4:7f:6c:c3:4f:c4:f4:a5:3a:84:56:cb:46:f4:5d:14: a9:3a:84:61:97:fc:e3:eb:93:d0:ee:3f:dd:e8:86:d1:c2:1d: 7b:5c:23:af:ad:14:b1:c0:f1:5b:8e:28:6b:27:f4:26:8f:76: 4c:74:20:8e:4d:9d:ad:4e:3b:88:e5:f5:8b:a5:7d:37:ca:a2: 38:ad:5f:10:a4:4b:e5:ea:d0:0c:60:e2:4b:44:20:b6:e4:f6: a8:7c:19:14:3e:7a:77:16:e2:8c:24:f5:e9:99:a3:7d:bc:8a: d5:2d:81:7d:a1:2e:ad:34:5e:dc:34:b9:f2:b5:75:53:2f:24: 64:3e:6d:6a:f4:d7:a2:d9:09:2b:1e:30:43:4d:ff:ee:a2:90: 8d:9c:88:5b:a2:8c:b3:30:92:81:a6:b6:61:ee:c3:7c:0f:35: c4:3f:34:86:39:f2:57:c8:23:29:50:92:90:6e:ef:b3:c8:c1: 29:72:85:0c:74:15:c1:05:87:10:b9:85:7f:4f:ed:88:1d:dd: 1b:55:cf:db:73:c6:49:a2:48:0c:85:b0:f5:1a:ef:67:b1:ff: ce:66:c4:84:50:c2:be:82:b2:0e:1e:ce:96:50:e8:35:36:19: 1d:4e:64:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ESWQ4l+AXmQkRkyCjtiYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNGZlODFmMzIzMTI2OGY3Y2UzYzMxNGE0OTZhODJjYzIy NzdjM2IwHhcNMjYwMTAyMDAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGQyMWE0ZDQyNDNhMmUwYWIzYjNkMDkwMmU0ODVmY2Q3NmUzYjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuZS2FpK+7DRHwS0nd2NY+lFGSW9 qeTRQUlgQPUK5GSJ0VG20PDUeuNWJUSgfKov/T8jFN01CWUcVq5wiK8Tvz9jCSZN l+iqpzutFaFcvkCXTsddvOKpMdGtj2YwJAN4knO1mRPPAbGvKrNWfHd7uiuLOEeB NHVBJUnzUs9cUG+3uq3eGZrHAELx1/YiegSKjwrVeeCejzlJLrDQbZkNfirR5AUd xQOoqs1MZ3syTHl36+KWHeS7r+lvV7hCodJUzMU1akidFagXQ8oHqfOkFkQO+4ZK uwrN7A7ZlmP/JsVPcqag7xLZMFZ+yPQ3GIV1iyXcL7eU2l8/k45voBvMeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOjSGk1CQ6Lgqzs9CQLkhfzXbjsAMB8GA1UdIwQY MBaAFE9P6B8yMSaPfOPDFKSWqCzCJ3w7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDBfb0h6SXhKbzk4NDhNVXBKYW9MTUluZkRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC84OTQ2MGMtMTMyZi00YzkxLWJkODEt Y2ZjMGZjYmE4M2EyLzEvNk5JYVRVSkRvdUNyT3owSkF1U0ZfTmR1T3dBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC84OTQ2MGMtMTMyZi00YzkxLWJkODEtY2ZjMGZjYmE4M2Ey LzEvVDBfb0h6SXhKbzk4NDhNVXBKYW9MTUluZkRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudhAMA0G CSqGSIb3DQEBCwUAA4IBAQA0I8mIMg/IhhzSHmyyBCoHv7VIabR/bMNPxPSlOoRW y0b0XRSpOoRhl/zj65PQ7j/d6IbRwh17XCOvrRSxwPFbjihrJ/Qmj3ZMdCCOTZ2t TjuI5fWLpX03yqI4rV8QpEvl6tAMYOJLRCC25PaofBkUPnp3FuKMJPXpmaN9vIrV LYF9oS6tNF7cNLnytXVTLyRkPm1q9Nei2QkrHjBDTf/uopCNnIhbooyzMJKBprZh 7sN8DzXEPzSGOfJXyCMpUJKQbu+zyMEpcoUMdBXBBYcQuYV/T+2IHd0bVc/bc8ZJ okgMhbD1Gu9nsf/OZsSEUMK+grIOHs6WUOg1NhkdTmRf -----END CERTIFICATE-----Generated at Tue Feb 10 01:43:59 2026 by rpki-client