This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6cSa_sL_zfeEW4tqbm_0LpGh7YQ.roa File: 6cSa_sL_zfeEW4tqbm_0LpGh7YQ.roa (raw, json) Hash identifier: jjo3CfqqV73DGrtKgHIkxz5yE5bxgtsWIxmAetQEk/k= Subject key identifier: E9:C4:9A:FE:C2:FF:CD:F7:84:5B:8B:6A:6E:6F:F4:2E:91:A1:ED:84 Certificate issuer: /CN=ea55dfd13021d5855ff194534933cd7d6cacd6cf Certificate serial: 019B7F152652B0693BE5FCF6FE422A6A05CC Authority key identifier: EA:55:DF:D1:30:21:D5:85:5F:F1:94:53:49:33:CD:7D:6C:AC:D6:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6cSa_sL_zfeEW4tqbm_0LpGh7YQ.roa Signing time: Fri 02 Jan 2026 14:20:51 +0000 ROA not before: Fri 02 Jan 2026 14:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42303 IP address blocks: 185.102.16.0/22 maxlen: 24 2a01:6300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.crl rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:26:52:b0:69:3b:e5:fc:f6:fe:42:2a:6a:05:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea55dfd13021d5855ff194534933cd7d6cacd6cf Validity Not Before: Jan 2 14:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9c49afec2ffcdf7845b8b6a6e6ff42e91a1ed84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ce:5b:ac:fe:a0:9b:3a:f3:2a:31:3c:16:d9: 52:28:f4:2f:ba:a6:3a:07:f5:39:62:d6:17:76:3a: 2a:08:71:b0:0c:49:c9:ca:c9:8d:ea:4b:30:1e:c2: 49:dd:ff:74:c9:ff:3f:74:ad:4c:2b:af:81:18:93: a5:bc:1e:de:49:c2:28:21:96:87:dd:3d:23:9e:1b: 6b:eb:2c:e1:3b:14:24:44:52:5b:6c:41:49:86:99: bd:3e:5c:74:ee:9d:96:32:7f:3d:f4:05:cf:93:d4: 5b:5a:52:79:b9:ab:16:57:a7:60:d2:ba:e6:11:ce: 58:9d:8e:07:08:3e:7c:46:53:ae:c5:85:16:ab:dc: 6d:4d:53:02:30:cd:47:5f:f6:06:4f:a2:70:cd:71: 67:73:19:47:f7:be:17:97:80:91:23:4e:18:3a:41: d9:33:4e:49:65:d8:b9:f2:a4:f3:64:c1:3d:be:83: 9c:12:3b:a6:d6:ad:62:d6:9d:66:0d:df:75:7e:0f: 6d:54:7c:26:e6:e8:fa:3b:2c:ae:b6:b5:14:f3:bc: 54:bd:ca:b1:95:de:be:58:a5:4b:b5:45:16:7a:c4: de:8c:af:87:5c:6e:82:52:97:ce:4e:59:43:4f:c2: 29:11:bf:08:ce:11:04:cb:df:ba:93:86:c7:4f:a9: 88:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C4:9A:FE:C2:FF:CD:F7:84:5B:8B:6A:6E:6F:F4:2E:91:A1:ED:84 X509v3 Authority Key Identifier: keyid:EA:55:DF:D1:30:21:D5:85:5F:F1:94:53:49:33:CD:7D:6C:AC:D6:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6cSa_sL_zfeEW4tqbm_0LpGh7YQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.102.16.0/22 IPv6: 2a01:6300::/32 Signature Algorithm: sha256WithRSAEncryption 6d:b4:f7:c9:62:10:d1:0c:89:93:06:0d:eb:a3:5b:ad:7e:5b: d2:b8:23:37:99:8f:ed:bf:dc:5a:ad:51:8f:0d:22:38:8e:17: b1:2e:c2:25:93:7f:2f:18:5e:df:1c:fe:cc:8f:99:ea:0d:30: 9b:9f:d4:3e:45:ad:70:64:7a:b1:e5:0c:f0:bf:a7:78:06:1e: b4:8e:c8:e3:c3:1d:57:a0:a0:6a:b4:4b:a2:86:48:b8:b6:ad: fe:98:93:b3:a6:68:e8:08:5c:16:95:fc:0d:e0:45:dc:4a:c8: 95:75:99:2d:2e:c9:62:64:10:5c:f6:25:e2:5d:b2:86:4c:07: 4e:a8:57:6a:d0:8c:4b:52:15:09:af:ac:00:36:b5:53:0a:29: c1:7e:43:2f:4f:aa:d7:2f:85:73:3f:f5:02:58:1c:ea:d3:ff: 46:0b:a9:3c:ee:69:e4:2f:c4:ac:4f:ba:7c:5c:5d:a3:16:29: 88:f2:b8:3e:90:b3:1f:1b:5a:21:a3:ba:c8:b6:79:2d:22:a7: e2:57:f8:30:cc:df:dd:1b:8c:09:7c:20:db:7e:bd:14:b1:a6: e5:60:34:c5:a6:75:45:3b:d1:cd:8a:cc:07:d0:92:a0:91:54: 8d:3a:8b:9c:42:34:b7:4f:89:1c:bb:8f:c5:fc:ed:7d:86:ac: 79:ba:d1:45 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FSZSsGk75fz2/kIqagXMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNTVkZmQxMzAyMWQ1ODU1ZmYxOTQ1MzQ5MzNjZDdkNmNh Y2Q2Y2YwHhcNMjYwMTAyMTQyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWM0OWFmZWMyZmZjZGY3ODQ1YjhiNmE2ZTZmZjQyZTkxYTFlZDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1M5brP6gmzrzKjE8FtlSKPQvuqY6 B/U5YtYXdjoqCHGwDEnJysmN6kswHsJJ3f90yf8/dK1MK6+BGJOlvB7eScIoIZaH 3T0jnhtr6yzhOxQkRFJbbEFJhpm9Plx07p2WMn899AXPk9RbWlJ5uasWV6dg0rrm Ec5YnY4HCD58RlOuxYUWq9xtTVMCMM1HX/YGT6JwzXFncxlH974Xl4CRI04YOkHZ M05JZdi58qTzZME9voOcEjum1q1i1p1mDd91fg9tVHwm5uj6OyyutrUU87xUvcqx ld6+WKVLtUUWesTejK+HXG6CUpfOTllDT8IpEb8IzhEEy9+6k4bHT6mI7QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOnEmv7C/833hFuLam5v9C6Roe2EMB8GA1UdIwQY MBaAFOpV39EwIdWFX/GUU0kzzX1srNbPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmxYZjBUQWgxWVZmOFpSVFNUUE5mV3lzMXM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS82ZjQzM2ItZGMzMi00NWEyLTk3OWUt ZmYxNDMzNjg3NTNmLzEvNmNTYV9zTF96ZmVFVzR0cWJtXzBMcEdoN1lRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS82ZjQzM2ItZGMzMi00NWEyLTk3OWUtZmYxNDMzNjg3NTNm LzEvNmxYZjBUQWgxWVZmOFpSVFNUUE5mV3lzMXM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWYQMA0E AgACMAcDBQAqAWMAMA0GCSqGSIb3DQEBCwUAA4IBAQBttPfJYhDRDImTBg3ro1ut flvSuCM3mY/tv9xarVGPDSI4jhexLsIlk38vGF7fHP7Mj5nqDTCbn9Q+Ra1wZHqx 5Qzwv6d4Bh60jsjjwx1XoKBqtEuihki4tq3+mJOzpmjoCFwWlfwN4EXcSsiVdZkt LsliZBBc9iXiXbKGTAdOqFdq0IxLUhUJr6wANrVTCinBfkMvT6rXL4VzP/UCWBzq 0/9GC6k87mnkL8SsT7p8XF2jFimI8rg+kLMfG1oho7rItnktIqfiV/gwzN/dG4wJ fCDbfr0UsablYDTFpnVFO9HNiswH0JKgkVSNOoucQjS3T4kcu4/F/O19hqx5utFF -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:30 2026 by rpki-client