This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/m6sGLj406qOvs-B7a8lFcbKeNeU.roa File: m6sGLj406qOvs-B7a8lFcbKeNeU.roa (raw, json) Hash identifier: ASVqS1lrRLqRqch7/XZOtlO/MWV6Jau0UM6Za5KHJnk= Subject key identifier: 9B:AB:06:2E:3E:34:EA:A3:AF:B3:E0:7B:6B:C9:45:71:B2:9E:35:E5 Certificate issuer: /CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0 Certificate serial: 019B7AC8F3EA3A1819E66DD10BFFB7C9EAA1 Authority key identifier: 2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/m6sGLj406qOvs-B7a8lFcbKeNeU.roa Signing time: Thu 01 Jan 2026 18:19:08 +0000 ROA not before: Thu 01 Jan 2026 18:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59455 IP address blocks: 185.80.12.0/22 maxlen: 22 194.147.241.0/24 maxlen: 24 194.147.244.0/24 maxlen: 24 194.147.255.0/24 maxlen: 24 194.149.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.crl rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:f3:ea:3a:18:19:e6:6d:d1:0b:ff:b7:c9:ea:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0 Validity Not Before: Jan 1 18:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bab062e3e34eaa3afb3e07b6bc94571b29e35e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:d5:88:37:1a:b7:f2:b6:4f:4a:d8:a8:1f:d1: 36:0f:01:e1:73:76:8a:94:99:62:6b:7b:5c:dc:87: de:a8:36:9b:16:11:b2:2c:a6:f1:81:16:b5:09:86: b4:05:8d:6b:38:44:08:fc:4b:d2:1d:8d:d7:7a:a3: f7:29:f7:77:fe:34:d0:7d:e0:47:a1:4c:b0:e6:9c: 62:1d:09:94:48:5d:46:72:79:88:18:e0:45:17:e9: 2b:e0:93:9f:75:7b:57:80:9f:c8:ac:71:cc:df:45: dc:41:36:1a:e2:8a:09:31:75:5e:73:23:df:a0:d2: ec:9d:c6:87:dd:1d:29:7b:29:9d:d1:52:e9:29:6c: 0d:17:2e:a4:b3:54:41:f6:9d:65:15:66:38:9b:f8: b3:70:c1:ca:08:ed:f2:5b:b7:80:81:13:cc:65:75: a9:f4:2e:ed:37:7a:07:98:d8:bd:2b:24:8d:b4:d1: 30:70:55:19:dd:27:12:c3:68:e7:26:47:ad:d4:51: d7:22:93:b2:6c:fa:c7:05:3f:28:99:5c:b1:55:89: a2:43:fc:6e:e6:16:e8:e5:28:94:d6:17:28:07:e7: 54:71:04:5e:e1:9e:fb:c7:69:54:3c:93:22:fa:77: 27:70:f8:c8:ab:65:02:6a:67:db:79:13:12:f7:89: 1a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AB:06:2E:3E:34:EA:A3:AF:B3:E0:7B:6B:C9:45:71:B2:9E:35:E5 X509v3 Authority Key Identifier: keyid:2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/m6sGLj406qOvs-B7a8lFcbKeNeU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.80.12.0/22 194.147.241.0/24 194.147.244.0/24 194.147.255.0/24 194.149.89.0/24 Signature Algorithm: sha256WithRSAEncryption 31:65:ff:7e:be:4e:e7:11:dc:a2:a3:55:ae:d3:33:f7:e2:1c: d1:a9:25:a7:09:c2:71:a5:44:b9:12:44:af:f2:6a:62:88:f1: 52:96:47:c2:f0:1a:ad:bd:ed:97:d3:73:02:6b:2d:16:dd:53: b1:fb:0b:c1:ed:92:87:5b:f9:82:74:7e:c3:65:1d:65:fa:27: 4c:a4:4f:b5:54:42:4a:35:25:29:e8:0c:04:24:97:f8:01:05: 5c:79:b6:45:1d:f2:9c:bc:75:49:26:3c:aa:e8:06:36:36:2f: d2:d9:df:46:e9:5d:e4:dd:18:5a:1d:27:f8:20:e6:59:f4:72: 98:d4:0e:24:5f:b2:38:46:06:ce:bf:0b:9b:de:08:8b:f3:72: 3f:ac:5c:3f:a3:8d:38:35:3b:1c:44:7c:a1:69:b7:51:ef:49: 90:97:66:76:3d:6b:f0:07:25:4a:1b:15:94:a9:26:60:23:82: 10:d8:2d:8a:ec:ed:37:ae:8a:4f:6a:4c:4f:7f:e5:61:a0:cf: 8e:2b:d2:0e:59:80:5e:b2:e3:ec:1a:5e:c9:1e:61:5c:35:84: b2:cb:d3:6b:42:51:53:1f:7c:07:32:55:fe:f5:aa:bf:28:c4: 75:25:2d:2d:34:46:2a:f6:f9:84:46:58:22:41:72:cf:58:2c: 89:e4:b0:fe -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt6yPPqOhgZ5m3RC/+3yeqhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZjhjZjc1NjFmY2Q2ZDc2NmI3YWFkMzFkYmY3ODVmMDI5 MTQ5ZjAwHhcNMjYwMTAxMTgxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmFiMDYyZTNlMzRlYWEzYWZiM2UwN2I2YmM5NDU3MWIyOWUzNWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/dWINxq38rZPStioH9E2DwHhc3aK lJlia3tc3IfeqDabFhGyLKbxgRa1CYa0BY1rOEQI/EvSHY3XeqP3Kfd3/jTQfeBH oUyw5pxiHQmUSF1GcnmIGOBFF+kr4JOfdXtXgJ/IrHHM30XcQTYa4ooJMXVecyPf oNLsncaH3R0peymd0VLpKWwNFy6ks1RB9p1lFWY4m/izcMHKCO3yW7eAgRPMZXWp 9C7tN3oHmNi9KySNtNEwcFUZ3ScSw2jnJket1FHXIpOybPrHBT8omVyxVYmiQ/xu 5hbo5SiU1hcoB+dUcQRe4Z77x2lUPJMi+ncncPjIq2UCamfbeRMS94ka/QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFJurBi4+NOqjr7Pge2vJRXGynjXlMB8GA1UdIwQY MBaAFC/4z3Vh/NbXZreq0x2/eF8CkUnwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTF9qUGRXSDgxdGRtdDZyVEhiOTRYd0tSU2ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mNzdhY2EtYWQ5MS00MDNmLWI5OGQt ZGU3M2E4MWUzNTdkLzEvbTZzR0xqNDA2cU92cy1CN2E4bEZjYktlTmVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9mNzdhY2EtYWQ5MS00MDNmLWI5OGQtZGU3M2E4MWUzNTdk LzEvTF9qUGRXSDgxdGRtdDZyVEhiOTRYd0tSU2ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCuVAMAwQA wpPxAwQAwpP0AwQAwpP/AwQAwpVZMA0GCSqGSIb3DQEBCwUAA4IBAQAxZf9+vk7n Edyio1Wu0zP34hzRqSWnCcJxpUS5EkSv8mpiiPFSlkfC8Bqtve2X03MCay0W3VOx +wvB7ZKHW/mCdH7DZR1l+idMpE+1VEJKNSUp6AwEJJf4AQVcebZFHfKcvHVJJjyq 6AY2Ni/S2d9G6V3k3RhaHSf4IOZZ9HKY1A4kX7I4RgbOvwub3giL83I/rFw/o404 NTscRHyhabdR70mQl2Z2PWvwByVKGxWUqSZgI4IQ2C2K7O03ropPakxPf+VhoM+O K9IOWYBesuPsGl7JHmFcNYSyy9NrQlFTH3wHMlX+9aq/KMR1JS0tNEYq9vmERlgi QXLPWCyJ5LD+ -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:10 2026 by rpki-client