This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/6UmN9y_dGxk3f2bPNDV9-52tnk8.roa File: 6UmN9y_dGxk3f2bPNDV9-52tnk8.roa (raw, json) Hash identifier: V5OnlzxBvWPOU5x3iXhGrQf3yLTzDNB/C3jplNE0X7E= Subject key identifier: E9:49:8D:F7:2F:DD:1B:19:37:7F:66:CF:34:35:7D:FB:9D:AD:9E:4F Certificate issuer: /CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1 Certificate serial: 019B7C7F96B2C15D14D867110AAE67930E11 Authority key identifier: A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/6UmN9y_dGxk3f2bPNDV9-52tnk8.roa Signing time: Fri 02 Jan 2026 02:18:15 +0000 ROA not before: Fri 02 Jan 2026 02:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205816 IP address blocks: 185.245.20.0/24 maxlen: 24 2a0c:9b80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:96:b2:c1:5d:14:d8:67:11:0a:ae:67:93:0e:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1 Validity Not Before: Jan 2 02:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9498df72fdd1b19377f66cf34357dfb9dad9e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:66:4c:08:a5:c3:38:08:fc:5b:01:a3:d9:6e: 35:d3:62:18:f7:25:f5:1a:f8:66:7e:7c:3f:67:90: 0f:92:60:bc:ef:d9:5d:78:9d:83:e2:da:ad:d3:7b: d0:58:0e:87:7b:6c:bf:a8:73:20:fc:98:38:ed:ae: a3:86:0e:ab:f6:f8:5d:c0:8c:96:cb:d3:71:9d:75: 16:fe:f2:37:64:8d:ce:ab:94:e0:4f:42:fc:9c:11: dd:0a:2c:f4:3e:91:94:30:50:fb:b2:3f:4c:ec:15: a3:10:42:7d:05:44:66:fb:08:c9:bc:da:9a:18:a7: e9:04:6a:e1:7b:d9:ca:0a:91:35:83:0f:99:ff:b5: e8:2c:97:ca:2d:b9:89:c0:63:e3:1f:7d:6c:a9:58: 37:59:b2:be:12:a1:70:63:6d:0f:27:b2:c1:47:fb: 21:5c:8b:fa:80:7a:5e:ae:a9:2c:96:9c:e8:66:3f: ab:71:3b:48:66:2c:96:b3:f9:74:fd:74:5c:91:84: 8c:46:c9:39:0a:ef:11:41:46:b0:1e:5d:51:73:72: cc:0d:0a:9f:2a:87:e1:64:59:38:09:f0:f2:08:d1: 7d:79:5e:20:8a:64:51:25:68:0b:1d:5f:a1:3b:12: cf:ce:b4:00:17:c4:45:a5:44:10:8c:c3:22:fc:c2: a6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:49:8D:F7:2F:DD:1B:19:37:7F:66:CF:34:35:7D:FB:9D:AD:9E:4F X509v3 Authority Key Identifier: keyid:A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/6UmN9y_dGxk3f2bPNDV9-52tnk8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.245.20.0/24 IPv6: 2a0c:9b80::/29 Signature Algorithm: sha256WithRSAEncryption c3:e7:5d:d8:9a:61:14:32:22:d7:fa:9f:5c:6c:99:0d:45:50: 90:7a:55:1e:d6:9d:5a:d9:64:7a:a9:85:bf:ae:02:84:ed:b2: 74:eb:3b:8e:7d:99:da:6d:d7:87:ea:f7:6d:cc:92:ad:58:4f: 58:43:a3:b4:6e:50:54:f0:b8:da:b7:17:62:1c:00:d9:7d:ab: 4c:69:d2:2e:94:7c:51:ed:b6:a8:17:d1:6e:d0:21:51:7a:1b: 53:66:9e:c8:42:43:94:7f:a7:91:fc:49:21:2c:a2:7f:2d:76: b0:09:7f:6d:5e:df:2a:6c:52:cc:87:aa:36:9e:5a:42:ea:b7: 49:96:15:27:6d:f7:26:50:03:17:a1:d5:95:e1:70:ae:71:4b: 20:e2:60:c9:5a:c9:18:2e:5c:73:f3:29:87:d4:1a:da:7f:d6: 41:b8:67:9e:38:04:46:54:b6:80:ab:a0:9f:ce:63:67:d9:b4: fe:74:89:a5:f8:56:01:c3:a9:0c:c4:d8:89:b2:de:ec:84:6e: 9f:ff:73:74:a3:ee:84:0c:7c:62:15:ae:bc:03:b2:0a:e9:77: 24:3a:85:a7:e2:0e:64:f1:84:53:e0:46:53:6a:e7:09:cd:04: 59:1f:c3:40:e3:8c:94:7e:dd:e6:62:d4:2a:67:eb:fb:9c:f4: 9c:4f:b3:a6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8f5aywV0U2GcRCq5nkw4RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0NTAwMjAyMmI3YTNlNDc5MGI4YjRlMmY2ZDViN2EzZGFi ZGRjZTEwHhcNMjYwMTAyMDIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTQ5OGRmNzJmZGQxYjE5Mzc3ZjY2Y2YzNDM1N2RmYjlkYWQ5ZTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWZMCKXDOAj8WwGj2W4102IY9yX1 Gvhmfnw/Z5APkmC879ldeJ2D4tqt03vQWA6He2y/qHMg/Jg47a6jhg6r9vhdwIyW y9NxnXUW/vI3ZI3Oq5TgT0L8nBHdCiz0PpGUMFD7sj9M7BWjEEJ9BURm+wjJvNqa GKfpBGrhe9nKCpE1gw+Z/7XoLJfKLbmJwGPjH31sqVg3WbK+EqFwY20PJ7LBR/sh XIv6gHperqkslpzoZj+rcTtIZiyWs/l0/XRckYSMRsk5Cu8RQUawHl1Rc3LMDQqf KofhZFk4CfDyCNF9eV4gimRRJWgLHV+hOxLPzrQAF8RFpUQQjMMi/MKmRwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOlJjfcv3RsZN39mzzQ1ffudrZ5PMB8GA1UdIwQY MBaAFKRQAgIrej5HkLi04vbVt6PavdzhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kODA5YjMtMzY3NS00ZmQ4LTg4MjEt YjM2N2ViZGYzMDJiLzEvNlVtTjl5X2RHeGszZjJiUE5EVjktNTJ0bms4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9kODA5YjMtMzY3NS00ZmQ4LTg4MjEtYjM2N2ViZGYzMDJi LzEvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAufUUMA0E AgACMAcDBQMqDJuAMA0GCSqGSIb3DQEBCwUAA4IBAQDD513YmmEUMiLX+p9cbJkN RVCQelUe1p1a2WR6qYW/rgKE7bJ06zuOfZnabdeH6vdtzJKtWE9YQ6O0blBU8Lja txdiHADZfatMadIulHxR7baoF9Fu0CFRehtTZp7IQkOUf6eR/EkhLKJ/LXawCX9t Xt8qbFLMh6o2nlpC6rdJlhUnbfcmUAMXodWV4XCucUsg4mDJWskYLlxz8ymH1Bra f9ZBuGeeOARGVLaAq6CfzmNn2bT+dIml+FYBw6kMxNiJst7shG6f/3N0o+6EDHxi Fa68A7IK6XckOoWn4g5k8YRT4EZTaucJzQRZH8NA44yUft3mYtQqZ+v7nPScT7Om -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:58 2026 by rpki-client