This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/pG6KdtKifWBBYo7DL8JxMRs-nM0.roa File: pG6KdtKifWBBYo7DL8JxMRs-nM0.roa (raw, json) Hash identifier: gKlmdKh10IDFHdiA03gsTAC30YiWDq57ljKUq/ouYK0= Subject key identifier: A4:6E:8A:76:D2:A2:7D:60:41:62:8E:C3:2F:C2:71:31:1B:3E:9C:CD Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Certificate serial: 019B7A5B3E5081E95C9188ECE250E304E008 Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/pG6KdtKifWBBYo7DL8JxMRs-nM0.roa Signing time: Thu 01 Jan 2026 16:19:18 +0000 ROA not before: Thu 01 Jan 2026 16:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201713 IP address blocks: 185.233.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:3e:50:81:e9:5c:91:88:ec:e2:50:e3:04:e0:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Validity Not Before: Jan 1 16:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a46e8a76d2a27d6041628ec32fc271311b3e9ccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:18:52:d2:96:8d:6c:00:20:da:18:3a:93:f1: ca:d0:63:2a:bd:bf:ff:fd:ca:b0:42:5a:7d:56:4e: 69:0a:0c:2a:c5:c1:bd:fd:bc:79:ca:b3:d7:ed:5f: f4:b7:13:6d:29:39:2c:d5:e6:a8:8c:17:ce:f7:6e: 4f:ff:af:4c:8d:e0:50:2b:b1:54:c2:51:1e:96:c5: 9f:33:a6:91:95:32:4f:e9:b9:f4:7d:a5:12:bf:3a: c2:0c:d7:d2:b1:5a:ae:95:e5:cc:2e:e4:b3:81:64: 3b:ad:a3:76:b4:08:c6:fe:21:4a:21:85:fb:37:c9: d1:23:33:fe:7e:9d:45:e8:9e:3c:dd:54:62:43:f8: 1d:5d:dc:57:d0:8b:63:31:26:28:ba:b3:95:3f:78: 76:00:54:03:8b:d7:39:bb:df:64:2a:2e:6a:93:32: a1:66:e8:ff:94:03:d9:a1:d3:1c:cf:bd:e8:8f:30: ed:52:82:5a:14:29:06:9a:6a:9d:76:5e:98:c6:d6: 1f:69:ce:e1:38:38:5f:f2:99:6a:36:2d:e0:ea:c2: 8e:44:36:20:72:1e:5c:74:df:1b:8f:de:74:fa:cb: 9a:8a:b5:95:d2:01:67:72:90:29:c5:1d:fb:07:42: 02:69:8d:06:70:d2:23:39:73:5a:d4:2d:10:a0:f0: 04:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:6E:8A:76:D2:A2:7D:60:41:62:8E:C3:2F:C2:71:31:1B:3E:9C:CD X509v3 Authority Key Identifier: keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/pG6KdtKifWBBYo7DL8JxMRs-nM0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.233.244.0/24 Signature Algorithm: sha256WithRSAEncryption 75:3e:80:e2:71:00:99:3b:8b:ff:9b:a1:42:66:f9:3b:75:5f: 42:ae:0b:c3:22:64:18:55:6d:f2:cc:38:0d:6e:1a:c9:76:71: 54:e8:b8:68:a6:df:36:b7:b7:8c:90:0b:20:ce:32:cd:a9:7b: fd:37:1c:5f:fe:92:41:fa:b8:6a:73:d9:6c:c0:b5:81:0c:2e: a7:65:0d:73:84:58:c7:57:a9:d6:47:03:aa:53:bb:c4:0b:1e: 50:9e:92:3b:89:b1:a5:e8:0e:d1:3f:c0:d7:61:a5:70:2b:a2: c8:21:54:2f:cf:6d:2b:02:10:42:7d:56:6c:24:6d:bc:b5:99: cd:ce:10:9e:0d:31:63:03:d9:a8:34:6a:a7:73:91:40:03:07: ab:36:97:e2:ab:67:14:60:cc:cf:74:76:76:6a:2f:da:3c:ee: 0c:a3:2d:63:f4:5c:39:f7:3e:b7:2d:6e:43:d8:1f:4f:11:67: 0a:22:5a:33:90:93:96:c6:ee:b8:b7:42:14:65:fb:ea:85:af: 52:08:77:09:b4:42:7a:27:9b:c4:4a:e6:9c:3b:bb:01:a8:25: 8b:cc:15:2d:52:e7:98:38:8b:1e:75:13:9a:cb:9b:0f:8d:89: 28:7d:7b:39:71:91:32:5c:81:b1:50:d8:a8:4b:22:5b:eb:30: ae:ca:32:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wz5QgelckYjs4lDjBOAIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTUzMjAwNzc2OTY5NDRiMTYxM2MyZThjOWM2MDZhMWUw NmViNzkwHhcNMjYwMTAxMTYxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDZlOGE3NmQyYTI3ZDYwNDE2MjhlYzMyZmMyNzEzMTFiM2U5Y2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hhS0paNbAAg2hg6k/HK0GMqvb// /cqwQlp9Vk5pCgwqxcG9/bx5yrPX7V/0txNtKTks1eaojBfO925P/69MjeBQK7FU wlEelsWfM6aRlTJP6bn0faUSvzrCDNfSsVquleXMLuSzgWQ7raN2tAjG/iFKIYX7 N8nRIzP+fp1F6J483VRiQ/gdXdxX0ItjMSYourOVP3h2AFQDi9c5u99kKi5qkzKh Zuj/lAPZodMcz73ojzDtUoJaFCkGmmqddl6YxtYfac7hODhf8plqNi3g6sKORDYg ch5cdN8bj950+suairWV0gFncpApxR37B0ICaY0GcNIjOXNa1C0QoPAEvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKRuinbSon1gQWKOwy/CcTEbPpzNMB8GA1UdIwQY MBaAFJ5VMgB3aWlEsWE8LoycYGoeBut5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYt MWUwZThiOTA5ZTM0LzEvcEc2S2R0S2lmV0JCWW83REw4SnhNUnMtbk0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYtMWUwZThiOTA5ZTM0 LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuen0MA0G CSqGSIb3DQEBCwUAA4IBAQB1PoDicQCZO4v/m6FCZvk7dV9CrgvDImQYVW3yzDgN bhrJdnFU6Lhopt82t7eMkAsgzjLNqXv9Nxxf/pJB+rhqc9lswLWBDC6nZQ1zhFjH V6nWRwOqU7vECx5QnpI7ibGl6A7RP8DXYaVwK6LIIVQvz20rAhBCfVZsJG28tZnN zhCeDTFjA9moNGqnc5FAAwerNpfiq2cUYMzPdHZ2ai/aPO4Moy1j9Fw59z63LW5D 2B9PEWcKIlozkJOWxu64t0IUZfvqha9SCHcJtEJ6J5vESuacO7sBqCWLzBUtUueY OIsedROay5sPjYkofXs5cZEyXIGxUNioSyJb6zCuyjJx -----END CERTIFICATE-----Generated at Mon Feb 2 08:09:49 2026 by rpki-client