This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/A6gi-so3kFc6wSPDrN7dSs0W0Xw.roa File: A6gi-so3kFc6wSPDrN7dSs0W0Xw.roa (raw, json) Hash identifier: eMXdGzp0+E8BUJOejeN9hz+moObGIQrtjp1B5O+rfYQ= Subject key identifier: 03:A8:22:FA:CA:37:90:57:3A:C1:23:C3:AC:DE:DD:4A:CD:16:D1:7C Certificate issuer: /CN=4f8045ccf50977ebc3066a3ceed8fd32f1f023de Certificate serial: 019B7910274D8FECD14200A8F1008E2EC340 Authority key identifier: 4F:80:45:CC:F5:09:77:EB:C3:06:6A:3C:EE:D8:FD:32:F1:F0:23:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/A6gi-so3kFc6wSPDrN7dSs0W0Xw.roa Signing time: Thu 01 Jan 2026 10:17:40 +0000 ROA not before: Thu 01 Jan 2026 10:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35445 IP address blocks: 85.188.64.0/18 maxlen: 18 85.188.128.0/18 maxlen: 18 2001:67c:191c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:27:4d:8f:ec:d1:42:00:a8:f1:00:8e:2e:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8045ccf50977ebc3066a3ceed8fd32f1f023de Validity Not Before: Jan 1 10:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03a822faca3790573ac123c3acdedd4acd16d17c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c8:31:05:f4:43:dc:52:02:7e:78:92:a3:0d: 21:66:e2:eb:34:ec:9f:fb:ac:cd:bd:44:d8:a7:69: b0:b8:75:51:ee:df:7f:ca:82:e7:f4:72:56:37:ea: b7:84:d9:9b:c6:a7:13:62:ee:9c:1e:1f:47:7a:1a: 1d:97:35:e6:6c:43:af:7b:48:7d:7a:9f:23:e4:7a: 42:65:5d:ca:02:34:6b:98:14:d9:7b:d5:17:74:56: 1e:c0:d0:3d:ee:12:78:d9:07:d3:fb:63:98:ec:89: 44:b7:4c:89:87:6c:5b:d2:fd:ed:30:93:39:6a:05: 04:11:92:4b:45:85:98:49:2c:2b:a0:10:0b:7b:43: 3e:9c:49:54:a7:1b:d8:57:b8:ff:b8:5a:c0:c6:88: 81:08:b9:76:0b:17:8c:b0:09:d1:61:20:60:82:a4: b4:34:ad:5f:a9:90:5d:7f:01:d1:15:9f:03:2a:b6: ae:12:b4:6a:57:06:fe:75:67:a7:61:f0:74:5f:3f: e4:eb:48:76:aa:df:ad:75:e7:cf:fe:7b:b5:61:16: 23:67:78:5f:d4:03:b2:11:1a:91:ef:9f:5e:9a:19: a3:18:f4:3d:83:7a:4e:c5:4f:ad:ce:f0:84:50:bf: a2:1b:ce:e7:89:11:99:84:5c:e1:53:af:2f:6e:ad: 51:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A8:22:FA:CA:37:90:57:3A:C1:23:C3:AC:DE:DD:4A:CD:16:D1:7C X509v3 Authority Key Identifier: keyid:4F:80:45:CC:F5:09:77:EB:C3:06:6A:3C:EE:D8:FD:32:F1:F0:23:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/A6gi-so3kFc6wSPDrN7dSs0W0Xw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.188.64.0-85.188.191.255 IPv6: 2001:67c:191c::/48 Signature Algorithm: sha256WithRSAEncryption 70:de:01:fa:63:ef:42:55:bf:40:c6:e3:53:12:32:fb:a6:13: 3f:eb:37:af:42:71:a1:92:9f:b4:f2:2d:f9:91:9e:0f:c9:a6: e5:b3:14:6f:d5:c3:2b:62:cf:d8:e9:26:57:99:e7:f5:73:2b: 41:fd:8a:22:1b:2f:b9:17:7d:b0:74:19:e1:44:ba:1d:e4:dd: 24:52:79:bf:cc:47:41:a0:07:d1:31:32:70:65:33:e3:b7:a0: d4:8a:19:68:f6:3d:43:d3:4e:12:f5:17:28:ee:66:50:55:a7: d8:65:f0:36:16:61:47:5d:bb:b5:43:b0:6f:06:c0:fb:b7:49: fe:60:ba:58:71:2a:d7:9e:8f:29:82:ae:06:a3:56:56:bd:db: af:9e:90:95:39:15:91:10:8b:11:48:db:44:c0:4c:34:13:c7: 0f:fe:9b:f0:60:08:ca:6f:96:db:b6:b4:9b:3c:85:f0:65:fb: 0c:8d:5c:c1:18:e0:5c:85:d0:1c:58:00:55:86:c7:d3:a2:7e: aa:5a:80:c5:09:e6:bb:a5:f7:44:1b:62:06:fb:3e:0c:40:6b: 10:95:4b:6d:50:16:e3:f5:31:af:d9:f5:31:36:31:f1:87:d4: bb:6e:15:1f:dd:72:d3:d1:f8:3a:06:50:b4:5d:65:6d:a2:36: c2:06:7e:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5ECdNj+zRQgCo8QCOLsNAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmODA0NWNjZjUwOTc3ZWJjMzA2NmEzY2VlZDhmZDMyZjFm MDIzZGUwHhcNMjYwMTAxMTAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2E4MjJmYWNhMzc5MDU3M2FjMTIzYzNhY2RlZGQ0YWNkMTZkMTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosgxBfRD3FICfniSow0hZuLrNOyf +6zNvUTYp2mwuHVR7t9/yoLn9HJWN+q3hNmbxqcTYu6cHh9HehodlzXmbEOve0h9 ep8j5HpCZV3KAjRrmBTZe9UXdFYewNA97hJ42QfT+2OY7IlEt0yJh2xb0v3tMJM5 agUEEZJLRYWYSSwroBALe0M+nElUpxvYV7j/uFrAxoiBCLl2CxeMsAnRYSBggqS0 NK1fqZBdfwHRFZ8DKrauErRqVwb+dWenYfB0Xz/k60h2qt+tdefP/nu1YRYjZ3hf 1AOyERqR759emhmjGPQ9g3pOxU+tzvCEUL+iG87niRGZhFzhU68vbq1RwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAOoIvrKN5BXOsEjw6ze3UrNFtF8MB8GA1UdIwQY MBaAFE+ARcz1CXfrwwZqPO7Y/TLx8CPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRCRnpQVUpkLXZEQm1vODd0ajlNdkh3STk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83ZDllMTAtMmMxOS00ZGQ4LWE4MGYt NDBjODY5N2JiZGU5LzEvQTZnaS1zbzNrRmM2d1NQRHJON2RTczBXMFh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi83ZDllMTAtMmMxOS00ZGQ4LWE4MGYtNDBjODY5N2JiZGU5 LzEvVDRCRnpQVUpkLXZEQm1vODd0ajlNdkh3STk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAZVvEAD BAZVvIAwDwQCAAIwCQMHACABBnwZHDANBgkqhkiG9w0BAQsFAAOCAQEAcN4B+mPv QlW/QMbjUxIy+6YTP+s3r0JxoZKftPIt+ZGeD8mm5bMUb9XDK2LP2OkmV5nn9XMr Qf2KIhsvuRd9sHQZ4US6HeTdJFJ5v8xHQaAH0TEycGUz47eg1IoZaPY9Q9NOEvUX KO5mUFWn2GXwNhZhR127tUOwbwbA+7dJ/mC6WHEq156PKYKuBqNWVr3br56QlTkV kRCLEUjbRMBMNBPHD/6b8GAIym+W27a0mzyF8GX7DI1cwRjgXIXQHFgAVYbH06J+ qlqAxQnmu6X3RBtiBvs+DEBrEJVLbVAW4/Uxr9n1MTYx8YfUu24VH91y09H4OgZQ tF1lbaI2wgZ+8A== -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:30 2026 by rpki-client