This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/6H-9AoNqSrBI_cHU_8jwycSpvuQ.roa File: 6H-9AoNqSrBI_cHU_8jwycSpvuQ.roa (raw, json) Hash identifier: KiQDrwuKHeqxHDHuFUTDtaD1ZiwMGGrMOy/IRx+eThE= Subject key identifier: E8:7F:BD:02:83:6A:4A:B0:48:FD:C1:D4:FF:C8:F0:C9:C4:A9:BE:E4 Certificate issuer: /CN=27d8640c305107766a646fbf8ec81db45ce1f249 Certificate serial: 019B7B35DADCFF2376BC03DCAF11F513754F Authority key identifier: 27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/6H-9AoNqSrBI_cHU_8jwycSpvuQ.roa Signing time: Thu 01 Jan 2026 20:18:05 +0000 ROA not before: Thu 01 Jan 2026 20:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196755 IP address blocks: 85.119.188.0/22 maxlen: 22 185.164.156.0/22 maxlen: 22 188.66.8.0/21 maxlen: 21 2a0c:10c0::/29 maxlen: 40 2a0c:10c0::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:da:dc:ff:23:76:bc:03:dc:af:11:f5:13:75:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27d8640c305107766a646fbf8ec81db45ce1f249 Validity Not Before: Jan 1 20:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e87fbd02836a4ab048fdc1d4ffc8f0c9c4a9bee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:54:68:49:58:24:3f:4d:3b:79:0f:63:98:f8: c5:82:0a:6f:31:c4:2d:8d:34:50:d9:76:78:76:06: e3:41:1c:88:ae:8d:b1:66:bf:6a:de:2e:b0:9a:c7: e7:1b:75:70:ad:97:cd:74:11:da:60:ab:6e:a9:2c: f8:fe:72:ed:09:e4:7f:ce:ff:57:16:0a:59:d9:39: d1:65:6c:93:e5:54:0a:e2:17:e8:e1:bb:dc:73:f3: fc:39:6c:85:06:51:20:77:e0:72:3e:f1:18:ea:31: 47:34:38:a7:5f:d0:b6:26:b4:b6:67:be:1a:8c:7b: 83:f0:0b:7b:a0:ef:25:53:72:6a:bf:6c:42:f1:13: 00:94:63:28:69:6a:69:ab:70:4a:77:24:6c:88:6c: d6:e8:ab:45:97:27:1a:d9:d6:bb:e7:f8:58:dd:49: 97:9e:dc:c6:f2:ca:62:55:eb:ea:c7:b0:1d:a6:fc: d6:66:10:0f:fa:34:e0:4a:c6:f4:27:ae:37:c4:27: 11:18:47:c2:dc:90:e2:5c:f7:b1:87:4e:cc:d0:b2: b3:f9:a9:9b:74:68:23:4e:1b:13:43:d4:d3:19:17: 06:a5:7c:56:fd:7c:a5:03:b9:ef:77:08:3c:f1:c2: 69:dc:8f:4f:36:94:24:a8:3e:d9:4f:88:70:46:04: 6c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:7F:BD:02:83:6A:4A:B0:48:FD:C1:D4:FF:C8:F0:C9:C4:A9:BE:E4 X509v3 Authority Key Identifier: keyid:27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/6H-9AoNqSrBI_cHU_8jwycSpvuQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.119.188.0/22 185.164.156.0/22 188.66.8.0/21 IPv6: 2a0c:10c0::/29 Signature Algorithm: sha256WithRSAEncryption 3b:6a:e8:c3:54:2d:c1:ea:64:95:24:e9:73:ec:2b:cd:2a:82: a5:b1:2e:20:c7:96:b9:cd:5e:94:59:92:74:e9:ec:b7:d4:f9: 04:fe:3e:ed:f8:2a:cc:c6:18:11:22:93:21:92:3b:b2:4f:3a: aa:2e:d5:17:b5:ed:c7:fe:d5:5d:5b:78:7d:c9:95:88:59:2d: 83:63:39:d2:87:1c:9f:99:ab:9c:5f:5b:c6:b1:2d:3c:0b:ec: ab:70:a7:2f:a5:68:3c:78:10:49:55:95:61:d4:0c:2f:d0:13: 08:72:b4:db:a9:75:11:22:21:24:d4:1e:d7:1a:c2:18:50:ae: 74:e1:42:8a:81:d4:bc:22:56:df:5d:6a:1f:d5:7d:6c:70:92: 68:2a:0c:f2:e4:7a:6b:13:1b:4c:07:ce:e0:d0:a2:c9:e1:5a: 28:c9:90:03:e0:14:17:a2:0f:14:71:65:35:ab:46:19:0b:7d: 39:c9:00:c4:ed:2c:48:69:48:69:94:87:f4:5f:4c:06:d6:82: 73:b7:9d:b7:5d:7a:62:f2:24:01:c5:db:a4:d8:97:1b:0a:e0: 55:a0:9a:41:77:a9:4f:22:6e:ac:14:f6:4b:36:2f:30:52:a0: 83:31:3c:80:93:f8:79:2e:25:4c:a3:41:6f:3b:33:c9:b7:9f: 5f:7b:78:bf -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt7Ndrc/yN2vAPcrxH1E3VPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZDg2NDBjMzA1MTA3NzY2YTY0NmZiZjhlYzgxZGI0NWNl MWYyNDkwHhcNMjYwMTAxMjAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODdmYmQwMjgzNmE0YWIwNDhmZGMxZDRmZmM4ZjBjOWM0YTliZWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lRoSVgkP007eQ9jmPjFggpvMcQt jTRQ2XZ4dgbjQRyIro2xZr9q3i6wmsfnG3VwrZfNdBHaYKtuqSz4/nLtCeR/zv9X FgpZ2TnRZWyT5VQK4hfo4bvcc/P8OWyFBlEgd+ByPvEY6jFHNDinX9C2JrS2Z74a jHuD8At7oO8lU3Jqv2xC8RMAlGMoaWppq3BKdyRsiGzW6KtFlyca2da75/hY3UmX ntzG8spiVevqx7AdpvzWZhAP+jTgSsb0J643xCcRGEfC3JDiXPexh07M0LKz+amb dGgjThsTQ9TTGRcGpXxW/XylA7nvdwg88cJp3I9PNpQkqD7ZT4hwRgRsiQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFOh/vQKDakqwSP3B1P/I8MnEqb7kMB8GA1UdIwQY MBaAFCfYZAwwUQd2amRvv47IHbRc4fJJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjloa0REQlJCM1pxWkctX2pzZ2R0RnpoOGtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ODE3NWEtMTJjOC00NTkwLTgyZTAt M2M2Zjg4YzkxNGIxLzEvNkgtOUFvTnFTckJJX2NIVV84and5Y1NwdnVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ODE3NWEtMTJjOC00NTkwLTgyZTAtM2M2Zjg4YzkxNGIx LzEvSjloa0REQlJCM1pxWkctX2pzZ2R0RnpoOGtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCVXe8AwQC uaScAwQDvEIIMA0EAgACMAcDBQMqDBDAMA0GCSqGSIb3DQEBCwUAA4IBAQA7aujD VC3B6mSVJOlz7CvNKoKlsS4gx5a5zV6UWZJ06ey31PkE/j7t+CrMxhgRIpMhkjuy TzqqLtUXte3H/tVdW3h9yZWIWS2DYznShxyfmaucX1vGsS08C+yrcKcvpWg8eBBJ VZVh1Awv0BMIcrTbqXURIiEk1B7XGsIYUK504UKKgdS8IlbfXWof1X1scJJoKgzy 5HprExtMB87g0KLJ4VooyZAD4BQXog8UcWU1q0YZC305yQDE7SxIaUhplIf0X0wG 1oJzt523XXpi8iQBxduk2JcbCuBVoJpBd6lPIm6sFPZLNi8wUqCDMTyAk/h5LiVM o0FvOzPJt59fe3i/ -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:11 2026 by rpki-client