This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/6sl1QA3sSuaYTj_Hf-IVWFHdb3I.roa File: 6sl1QA3sSuaYTj_Hf-IVWFHdb3I.roa (raw, json) Hash identifier: L4J1WXXqopoGn75Rlv6PEAeVXiFveHZ3dIS9nhaDc3c= Subject key identifier: EA:C9:75:40:0D:EC:4A:E6:98:4E:3F:C7:7F:E2:15:58:51:DD:6F:72 Certificate issuer: /CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978 Certificate serial: 019B7F8500790E5075A12FBDF8A6EA31F5F5 Authority key identifier: 47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/6sl1QA3sSuaYTj_Hf-IVWFHdb3I.roa Signing time: Fri 02 Jan 2026 16:23:01 +0000 ROA not before: Fri 02 Jan 2026 16:23:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44652 IP address blocks: 185.147.164.0/22 maxlen: 22 2a07:59c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:00:79:0e:50:75:a1:2f:bd:f8:a6:ea:31:f5:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978 Validity Not Before: Jan 2 16:23:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eac975400dec4ae6984e3fc77fe2155851dd6f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:13:a0:6b:ef:0d:36:1b:44:72:00:b6:be:cb: ce:b5:90:37:65:5c:ab:0c:91:f6:c1:2a:d0:9c:32: b7:8a:44:4e:d2:75:87:77:45:d5:e7:01:b0:9f:b3: 54:3d:6b:b2:b1:42:3a:25:70:a8:1b:54:fa:a2:47: 9b:7f:ad:62:a1:53:38:98:f0:89:6b:60:c0:9a:12: 25:0e:8f:a2:27:ce:73:45:54:07:45:0e:95:ef:8a: 06:24:74:97:f9:8e:be:e8:0d:7e:b9:82:82:33:b1: e0:6b:95:2a:a3:ed:18:a9:8f:0a:40:20:67:1e:36: 5d:b9:71:d8:f1:06:87:f2:f8:dc:62:a8:10:4a:76: 60:7f:a3:72:e8:ce:0b:01:b0:9b:29:db:3b:19:11: ad:32:94:ac:91:81:6c:2e:aa:90:de:cf:11:51:9c: 18:2c:7c:dc:aa:29:90:ff:57:43:94:b8:2c:9d:00: 1a:ef:af:94:ef:62:05:8e:b7:7b:3f:96:24:dc:00: 6a:1b:88:9b:68:b1:e0:dd:d3:0a:56:1d:95:9e:40: 8b:4f:cf:2d:44:eb:b8:8e:58:ba:a3:f1:08:a3:33: 1e:e5:af:24:10:8a:85:1b:35:68:d2:1a:dc:69:8e: ca:78:e1:e2:cf:a2:1a:3b:b7:05:19:2d:54:ce:81: a5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C9:75:40:0D:EC:4A:E6:98:4E:3F:C7:7F:E2:15:58:51:DD:6F:72 X509v3 Authority Key Identifier: keyid:47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/6sl1QA3sSuaYTj_Hf-IVWFHdb3I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.147.164.0/22 IPv6: 2a07:59c0::/29 Signature Algorithm: sha256WithRSAEncryption 25:5b:e5:89:b5:c0:03:87:64:06:84:d5:79:f1:f5:9c:a2:20: f3:48:06:2a:50:5c:2e:8f:2c:a6:6f:11:3f:e9:b6:94:06:67: 3d:01:e5:d3:4b:01:fd:e1:97:6d:a5:70:bc:d3:2d:e0:3e:0e: 99:a2:a7:4a:2e:4d:82:a1:5c:e6:1a:e0:7f:dc:9c:79:b2:a6: 9c:bb:60:64:49:33:dd:57:93:2f:96:d1:4a:1e:79:26:83:ca: fe:6d:14:e5:c1:8d:9a:ee:8c:65:3f:18:d4:62:37:c2:07:d2: 19:03:3b:d0:ac:8e:b9:52:1d:1a:64:a6:af:9f:0b:47:2b:b6: 4b:ad:a7:28:c0:1d:b8:14:a2:43:88:68:d7:28:4a:c4:0d:96: 55:03:2b:b5:49:ae:76:f3:11:0c:35:a1:8b:fb:d0:fb:26:6d: 00:aa:22:49:99:01:6d:97:2c:f9:88:07:ae:4b:9d:2d:d5:e8: 0c:9c:61:e7:b2:4a:1d:44:ea:c2:3e:78:4c:a6:3d:15:c8:7f: fc:69:fd:18:64:3d:d7:40:cd:2e:64:b1:5f:2d:2f:c3:fb:c8: 26:bd:c5:10:93:f8:fb:e9:3c:40:1f:88:4e:c3:50:81:66:d5: bb:81:c6:71:ba:6f:01:e5:e1:c6:67:c0:83:d9:2d:8c:eb:ca: ca:70:80:cb -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/hQB5DlB1oS+9+KbqMfX1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NGU2ZDdjZWJiZDA4MjEyY2E4YzhkNTkxYWU1YTA2YmMw M2I5NzgwHhcNMjYwMTAyMTYyMzAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWM5NzU0MDBkZWM0YWU2OTg0ZTNmYzc3ZmUyMTU1ODUxZGQ2ZjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxOga+8NNhtEcgC2vsvOtZA3ZVyr DJH2wSrQnDK3ikRO0nWHd0XV5wGwn7NUPWuysUI6JXCoG1T6okebf61ioVM4mPCJ a2DAmhIlDo+iJ85zRVQHRQ6V74oGJHSX+Y6+6A1+uYKCM7Hga5Uqo+0YqY8KQCBn HjZduXHY8QaH8vjcYqgQSnZgf6Ny6M4LAbCbKds7GRGtMpSskYFsLqqQ3s8RUZwY LHzcqimQ/1dDlLgsnQAa76+U72IFjrd7P5Yk3ABqG4ibaLHg3dMKVh2VnkCLT88t ROu4jli6o/EIozMe5a8kEIqFGzVo0hrcaY7KeOHiz6IaO7cFGS1UzoGlqwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOrJdUAN7ErmmE4/x3/iFVhR3W9yMB8GA1UdIwQY MBaAFEdObXzrvQghLKjI1ZGuWga8A7l4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjA1dGZPdTlDQ0VzcU1qVmthNWFCcndEdVhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS80ZTJjNmUtZjc4MS00Mzk0LTk1NjUt MjljNzUyY2M1OTU2LzEvNnNsMVFBM3NTdWFZVGpfSGYtSVZXRkhkYjNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS80ZTJjNmUtZjc4MS00Mzk0LTk1NjUtMjljNzUyY2M1OTU2 LzEvUjA1dGZPdTlDQ0VzcU1qVmthNWFCcndEdVhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZOkMA0E AgACMAcDBQMqB1nAMA0GCSqGSIb3DQEBCwUAA4IBAQAlW+WJtcADh2QGhNV58fWc oiDzSAYqUFwujyymbxE/6baUBmc9AeXTSwH94ZdtpXC80y3gPg6ZoqdKLk2CoVzm GuB/3Jx5sqacu2BkSTPdV5MvltFKHnkmg8r+bRTlwY2a7oxlPxjUYjfCB9IZAzvQ rI65Uh0aZKavnwtHK7ZLracowB24FKJDiGjXKErEDZZVAyu1Sa528xEMNaGL+9D7 Jm0AqiJJmQFtlyz5iAeuS50t1egMnGHnskodROrCPnhMpj0VyH/8af0YZD3XQM0u ZLFfLS/D+8gmvcUQk/j76TxAH4hOw1CBZtW7gcZxum8B5eHGZ8CD2S2M68rKcIDL -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:20 2026 by rpki-client