This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/6hrkGNyyTTSVf_rqftzyJaZfZm8.roa File: 6hrkGNyyTTSVf_rqftzyJaZfZm8.roa (raw, json) Hash identifier: uZjY0XxhNwiqPz9+ZpU0AGGQSAkcGO0viC0E3iatgws= Subject key identifier: EA:1A:E4:18:DC:B2:4D:34:95:7F:FA:EA:7E:DC:F2:25:A6:5F:66:6F Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019B797EF8B451CEF33D822F9E31D3B2C95A Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/6hrkGNyyTTSVf_rqftzyJaZfZm8.roa Signing time: Thu 01 Jan 2026 12:18:42 +0000 ROA not before: Thu 01 Jan 2026 12:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 267507 IP address blocks: 185.21.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f8:b4:51:ce:f3:3d:82:2f:9e:31:d3:b2:c9:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Jan 1 12:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea1ae418dcb24d34957ffaea7edcf225a65f666f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:34:e4:49:5f:75:ab:e0:23:d6:59:3f:60:2e: a9:35:bc:7f:cd:c4:78:ce:de:50:c7:08:f3:7c:65: 0f:f7:f4:57:42:d8:ac:70:00:80:4b:01:6c:79:f2: 17:50:6c:29:13:f4:49:20:1d:d5:e7:84:97:88:91: 3e:fa:d5:42:ba:ad:72:a2:a6:03:8f:4e:df:d5:39: 61:d4:3f:83:df:8c:60:1a:35:13:2c:91:76:68:1a: ff:6f:f1:d2:26:07:fe:53:49:05:c8:2f:05:24:1f: 17:33:b7:3d:e1:6a:c8:40:ad:86:e4:24:73:1e:db: ff:81:7a:70:af:e6:8f:51:74:c6:cc:d5:0b:a0:fb: 13:ca:fe:fb:77:40:9c:be:c2:a6:6b:83:62:a8:58: fd:ad:2a:28:7b:39:a9:e5:41:1a:c9:6f:b7:02:2a: d3:0a:1a:41:4e:31:94:ec:39:5c:36:d4:c7:ff:eb: e7:ce:1b:d1:01:4e:9a:9b:17:f7:6d:97:8d:d2:fe: 16:a2:e3:e2:63:7b:0c:8d:8d:66:40:f3:c2:83:7f: 0e:01:6f:46:38:c0:6d:97:2b:b6:46:f3:d5:19:be: bc:be:37:12:2d:9d:b1:dc:77:74:1a:4d:4a:78:64: f8:f0:ca:bb:10:63:09:7c:7f:cd:55:e8:5d:32:c1: ef:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:1A:E4:18:DC:B2:4D:34:95:7F:FA:EA:7E:DC:F2:25:A6:5F:66:6F X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/6hrkGNyyTTSVf_rqftzyJaZfZm8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.21.252.0/24 Signature Algorithm: sha256WithRSAEncryption cd:14:3e:ae:7b:de:bf:cf:39:7f:f4:f7:e9:a6:cf:75:dc:73: 9b:12:9f:f7:a6:d0:e4:ea:20:b0:7c:26:3b:53:68:d8:90:e1: 33:0c:e6:f6:8e:bc:c5:71:92:81:56:07:88:3a:ef:d6:38:96: 1a:1f:7b:db:33:91:01:f6:53:45:c5:78:73:9d:a2:46:eb:b6: 33:41:0c:23:5d:a4:2b:ab:e4:2f:99:cf:7a:50:1e:0e:68:55: 48:53:c8:cc:b3:8a:10:39:19:26:a5:8a:5c:15:39:79:ab:da: f4:47:6c:09:42:73:46:e7:9a:24:05:fe:11:f7:70:05:57:ba: b3:24:52:94:0c:4f:33:87:c5:ec:80:8b:9e:26:08:bb:a4:58: 7f:3b:96:28:aa:95:79:d7:90:0c:15:fe:06:54:39:f9:a5:16: aa:b8:2a:6a:1b:89:2b:23:4d:d0:00:06:0d:b1:05:f3:25:4e: d7:99:a9:81:80:a8:30:f6:02:20:8e:97:55:b7:b4:09:c1:16: 86:cd:d7:cb:34:7f:2d:bb:35:d2:b0:07:48:4c:21:df:87:4a: dc:af:fb:45:19:d6:44:be:23:57:b8:df:65:c5:ed:d6:eb:42: 69:75:1c:42:1e:95:62:e5:90:51:01:02:43:bd:db:1d:7a:95: 1c:9c:ed:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fvi0Uc7zPYIvnjHTsslaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjYwMTAxMTIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTFhZTQxOGRjYjI0ZDM0OTU3ZmZhZWE3ZWRjZjIyNWE2NWY2NjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjTkSV91q+Aj1lk/YC6pNbx/zcR4 zt5QxwjzfGUP9/RXQtiscACASwFsefIXUGwpE/RJIB3V54SXiJE++tVCuq1yoqYD j07f1Tlh1D+D34xgGjUTLJF2aBr/b/HSJgf+U0kFyC8FJB8XM7c94WrIQK2G5CRz Htv/gXpwr+aPUXTGzNULoPsTyv77d0CcvsKma4NiqFj9rSooezmp5UEayW+3AirT ChpBTjGU7DlcNtTH/+vnzhvRAU6amxf3bZeN0v4WouPiY3sMjY1mQPPCg38OAW9G OMBtlyu2RvPVGb68vjcSLZ2x3Hd0Gk1KeGT48Mq7EGMJfH/NVehdMsHvKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOoa5Bjcsk00lX/66n7c8iWmX2ZvMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvNmhya0dOeXlUVFNWZl9ycWZ0enlKYVpmWm04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRX8MA0G CSqGSIb3DQEBCwUAA4IBAQDNFD6ue96/zzl/9Pfpps913HObEp/3ptDk6iCwfCY7 U2jYkOEzDOb2jrzFcZKBVgeIOu/WOJYaH3vbM5EB9lNFxXhznaJG67YzQQwjXaQr q+Qvmc96UB4OaFVIU8jMs4oQORkmpYpcFTl5q9r0R2wJQnNG55okBf4R93AFV7qz JFKUDE8zh8XsgIueJgi7pFh/O5YoqpV515AMFf4GVDn5pRaquCpqG4krI03QAAYN sQXzJU7XmamBgKgw9gIgjpdVt7QJwRaGzdfLNH8tuzXSsAdITCHfh0rcr/tFGdZE viNXuN9lxe3W60JpdRxCHpVi5ZBRAQJDvdsdepUcnO3b -----END CERTIFICATE-----Generated at Sat Jan 10 21:06:18 2026 by rpki-client