This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/6ANG8OJh4OznV_DcZX5PWVtHheM.roa File: 6ANG8OJh4OznV_DcZX5PWVtHheM.roa (raw, json) Hash identifier: NqWuvD35Q6Kj2pzaFTf900GyG3MSTmGkmgkkAWcoTkE= Subject key identifier: E8:03:46:F0:E2:61:E0:EC:E7:57:F0:DC:65:7E:4F:59:5B:47:85:E3 Certificate issuer: /CN=a15e3f974b5f974656ccf4d45596caad1b9096d4 Certificate serial: 019B7B36461AA983BEC6FF11E7B7FBCFB848 Authority key identifier: A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/6ANG8OJh4OznV_DcZX5PWVtHheM.roa Signing time: Thu 01 Jan 2026 20:18:32 +0000 ROA not before: Thu 01 Jan 2026 20:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34549 IP address blocks: 185.220.149.0/24 maxlen: 24 2a0b:f841::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:46:1a:a9:83:be:c6:ff:11:e7:b7:fb:cf:b8:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15e3f974b5f974656ccf4d45596caad1b9096d4 Validity Not Before: Jan 1 20:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e80346f0e261e0ece757f0dc657e4f595b4785e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0c:f1:e2:b7:7f:9f:e0:3c:90:07:5b:ae:9d: 77:45:74:4c:e0:86:54:6a:6f:5a:c5:1e:7e:0b:29: 7d:a2:ab:9d:88:10:fb:4f:4a:41:c6:a8:72:a3:b6: 86:6e:72:24:69:27:72:b2:51:66:ab:e6:90:dd:ad: b8:fe:6a:94:a0:ac:17:a8:99:56:36:e4:c1:fe:18: 01:42:77:96:f0:a8:46:5b:9a:72:9f:f0:83:79:89: 95:e4:d5:5b:b1:ce:d0:de:11:9f:39:fc:de:2c:20: 20:1c:01:3c:d8:6b:a7:52:4f:b7:3c:44:9f:96:72: cf:09:3c:61:3d:e8:37:f9:5b:f3:7f:e9:1e:21:97: 62:7b:7f:a6:c4:c4:1e:86:4d:9f:38:43:2c:2b:d3: a3:a1:3b:9a:a8:6e:ec:d0:52:ed:d9:a8:2a:d0:58: 3d:a0:14:dc:25:a1:da:d5:e8:c9:53:b6:7b:8c:4d: 7a:e8:6c:62:f6:db:ea:dc:ba:43:62:e0:a8:93:51: b1:fe:64:79:42:59:a9:a7:c9:a4:75:8e:c1:f6:4c: 68:de:38:57:2b:9d:aa:ce:1f:60:14:c8:cd:29:73: 43:74:f3:cb:f4:6a:0b:2a:84:0d:65:7c:4c:82:ce: bc:1e:af:76:fc:a8:8d:a1:f9:a9:76:30:f4:8e:3a: 58:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:03:46:F0:E2:61:E0:EC:E7:57:F0:DC:65:7E:4F:59:5B:47:85:E3 X509v3 Authority Key Identifier: keyid:A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/6ANG8OJh4OznV_DcZX5PWVtHheM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.220.149.0/24 IPv6: 2a0b:f841::/32 Signature Algorithm: sha256WithRSAEncryption 3d:29:38:46:99:32:5a:93:58:c1:27:d7:c0:9d:41:f3:69:1c: 0d:39:f2:3a:c1:fb:22:77:6d:ad:72:16:2f:07:f5:fe:2f:48: 87:45:63:f9:80:72:4b:a8:3f:9c:c1:e5:d9:93:85:14:14:e5: 7f:d0:65:9f:eb:45:30:68:ea:58:66:e6:50:8c:f6:4f:8c:1d: 60:8b:b8:17:ac:6f:ad:0c:81:15:01:a9:b1:02:fe:42:06:a4: b2:db:cd:cc:ec:f8:73:22:00:a9:98:69:a3:1b:a6:1e:52:e6: 8b:db:aa:e0:73:b8:ac:fc:fa:1c:c1:49:ae:7a:ed:54:42:14: d0:14:2b:57:a3:00:39:0c:71:71:8d:a4:1e:04:e8:83:d3:7b: f6:56:96:98:dc:53:88:18:0e:62:9d:20:b4:26:08:ad:d6:d7: e3:b1:bf:6f:26:2c:14:52:83:1a:85:e5:fa:0a:b6:c7:bc:17: 8c:10:c7:d6:e1:68:00:d1:e9:9c:7d:b7:03:a3:8f:0f:3b:40: d6:d4:79:d8:17:00:0f:4f:89:a3:c1:3f:58:a1:e2:57:1d:30: 04:86:51:a3:08:e5:05:48:09:9c:9c:f8:d5:c0:a6:98:3c:96: 85:3a:78:ca:47:b3:51:4a:30:31:31:61:ee:cb:60:ca:29:d8: 5f:a6:aa:11 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NkYaqYO+xv8R57f7z7hIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNWUzZjk3NGI1Zjk3NDY1NmNjZjRkNDU1OTZjYWFkMWI5 MDk2ZDQwHhcNMjYwMTAxMjAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODAzNDZmMGUyNjFlMGVjZTc1N2YwZGM2NTdlNGY1OTViNDc4NWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wzx4rd/n+A8kAdbrp13RXRM4IZU am9axR5+Cyl9oqudiBD7T0pBxqhyo7aGbnIkaSdyslFmq+aQ3a24/mqUoKwXqJlW NuTB/hgBQneW8KhGW5pyn/CDeYmV5NVbsc7Q3hGfOfzeLCAgHAE82GunUk+3PESf lnLPCTxhPeg3+Vvzf+keIZdie3+mxMQehk2fOEMsK9OjoTuaqG7s0FLt2agq0Fg9 oBTcJaHa1ejJU7Z7jE166Gxi9tvq3LpDYuCok1Gx/mR5Qlmpp8mkdY7B9kxo3jhX K52qzh9gFMjNKXNDdPPL9GoLKoQNZXxMgs68Hq92/KiNofmpdjD0jjpYoQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOgDRvDiYeDs51fw3GV+T1lbR4XjMB8GA1UdIwQY MBaAFKFeP5dLX5dGVsz01FWWyq0bkJbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1Y0X2wwdGZsMFpXelBUVVZaYktyUnVRbHRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kNmE0MjItMzYxMi00NWFmLTgzYWIt ZDI0YjY4OTY2ZTBlLzEvNkFORzhPSmg0T3puVl9EY1pYNVBXVnRIaGVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9kNmE0MjItMzYxMi00NWFmLTgzYWItZDI0YjY4OTY2ZTBl LzEvb1Y0X2wwdGZsMFpXelBUVVZaYktyUnVRbHRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAudyVMA0E AgACMAcDBQAqC/hBMA0GCSqGSIb3DQEBCwUAA4IBAQA9KThGmTJak1jBJ9fAnUHz aRwNOfI6wfsid22tchYvB/X+L0iHRWP5gHJLqD+cweXZk4UUFOV/0GWf60UwaOpY ZuZQjPZPjB1gi7gXrG+tDIEVAamxAv5CBqSy283M7PhzIgCpmGmjG6YeUuaL26rg c7is/PocwUmueu1UQhTQFCtXowA5DHFxjaQeBOiD03v2VpaY3FOIGA5inSC0Jgit 1tfjsb9vJiwUUoMaheX6CrbHvBeMEMfW4WgA0emcfbcDo48PO0DW1HnYFwAPT4mj wT9YoeJXHTAEhlGjCOUFSAmcnPjVwKaYPJaFOnjKR7NRSjAxMWHuy2DKKdhfpqoR -----END CERTIFICATE-----Generated at Wed Jan 21 21:49:54 2026 by rpki-client