This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/m6n5IdDCaj0-A-YgZFlUqaEncFY.roa File: m6n5IdDCaj0-A-YgZFlUqaEncFY.roa (raw, json) Hash identifier: cxBAKtW14WwE7esOxfQvIIjXHk/GahU8AilWvcmMPAA= Subject key identifier: 9B:A9:F9:21:D0:C2:6A:3D:3E:03:E6:20:64:59:54:A9:A1:27:70:56 Certificate issuer: /CN=ff0732a42328074701142221e3d46a29f296c29c Certificate serial: 019B7FF059555A81B0F246AABD70EDDB096E Authority key identifier: FF:07:32:A4:23:28:07:47:01:14:22:21:E3:D4:6A:29:F2:96:C2:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/m6n5IdDCaj0-A-YgZFlUqaEncFY.roa Signing time: Fri 02 Jan 2026 18:20:16 +0000 ROA not before: Fri 02 Jan 2026 18:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215668 IP address blocks: 185.196.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f0:59:55:5a:81:b0:f2:46:aa:bd:70:ed:db:09:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff0732a42328074701142221e3d46a29f296c29c Validity Not Before: Jan 2 18:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ba9f921d0c26a3d3e03e620645954a9a1277056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:82:ee:6b:bb:93:30:10:c2:5d:f5:e0:67:8e: 6b:b5:95:d9:cf:b7:bd:da:84:e1:48:41:c0:6d:85: a2:bc:ca:7f:25:a9:e4:c1:3c:72:86:98:f6:70:5a: ae:7f:4a:f3:5c:07:19:06:54:50:15:f3:ea:3d:63: 3e:fa:06:82:56:26:19:cd:60:f8:41:53:ff:ef:8d: 40:79:17:42:43:d4:dd:7d:dc:91:ac:91:3b:51:eb: a5:11:6a:09:11:c1:56:b7:ea:ec:9d:39:a2:ce:8f: 92:fd:a1:b3:11:a6:cb:bf:12:d9:65:1b:ae:7f:53: d5:0b:ff:bd:25:62:80:4c:e2:d3:db:cd:de:7d:a2: 29:f5:5b:df:2b:ff:99:33:a4:02:83:b5:68:1f:15: 38:3d:82:9e:e5:b7:87:07:58:1b:06:f1:2d:8e:d1: d8:dc:a9:2a:b9:2e:5c:7b:9d:13:48:df:73:e4:3c: 92:23:5e:9f:a5:3b:26:16:3b:10:5f:3a:62:c1:a8: 0d:8d:bd:da:e9:e1:0a:cc:88:17:0b:aa:bd:d3:bb: fe:bb:81:cd:5a:c8:b0:57:d4:ba:5a:77:30:fe:5d: 76:7a:33:47:e9:11:41:7a:b2:a9:4d:02:81:d5:be: ae:9d:1a:89:ab:4d:90:c8:67:0f:a3:58:5e:84:06: a3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A9:F9:21:D0:C2:6A:3D:3E:03:E6:20:64:59:54:A9:A1:27:70:56 X509v3 Authority Key Identifier: keyid:FF:07:32:A4:23:28:07:47:01:14:22:21:E3:D4:6A:29:F2:96:C2:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/m6n5IdDCaj0-A-YgZFlUqaEncFY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.47.0/24 Signature Algorithm: sha256WithRSAEncryption 27:fb:0d:d8:51:ba:6d:a4:27:66:6f:ac:17:ef:c9:3d:d6:7c: c0:35:8f:40:2d:e8:0c:e6:03:5e:31:00:1f:90:17:cd:5e:66: ce:2e:a3:16:47:a2:28:cf:7b:dc:77:32:dc:27:a5:2b:70:6a: 62:a4:1a:2c:fd:5b:7a:d0:eb:ba:c0:2b:af:e3:4b:51:35:33: 33:3a:08:56:7f:77:81:01:ed:3d:00:f2:d5:20:44:c7:fc:94: af:2f:18:a1:3a:13:65:c2:c6:b9:57:ed:8c:b9:bf:87:3a:f8: 82:aa:0b:1d:bf:99:96:49:15:1a:bf:72:ac:7e:f4:1f:c2:56: 69:0b:69:04:9e:bd:3b:0b:67:5f:af:d3:bf:dd:3e:90:52:04: 34:ab:30:9e:96:d7:2c:95:73:1b:d5:29:f2:ef:0d:4e:7e:31: 00:0e:2a:09:dc:bb:7b:53:97:c5:53:5e:5a:f0:0e:5a:dc:c7: 23:ba:b7:f8:a6:71:fc:61:bb:02:73:0a:e2:7e:3a:49:33:4d: 61:ec:28:17:4f:30:1c:61:1d:82:7d:26:63:2d:5f:14:00:27: 29:e6:36:e7:f2:37:3f:a4:2f:2d:c7:b6:45:70:7d:7b:bc:bb: 07:71:8b:fa:ca:6a:2e:a0:4e:b5:4d:73:54:1e:46:3a:69:c6: ab:75:19:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8FlVWoGw8kaqvXDt2wluMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMDczMmE0MjMyODA3NDcwMTE0MjIyMWUzZDQ2YTI5ZjI5 NmMyOWMwHhcNMjYwMTAyMTgyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmE5ZjkyMWQwYzI2YTNkM2UwM2U2MjA2NDU5NTRhOWExMjc3MDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4Lua7uTMBDCXfXgZ45rtZXZz7e9 2oThSEHAbYWivMp/JankwTxyhpj2cFquf0rzXAcZBlRQFfPqPWM++gaCViYZzWD4 QVP/741AeRdCQ9TdfdyRrJE7UeulEWoJEcFWt+rsnTmizo+S/aGzEabLvxLZZRuu f1PVC/+9JWKATOLT283efaIp9VvfK/+ZM6QCg7VoHxU4PYKe5beHB1gbBvEtjtHY 3KkquS5ce50TSN9z5DySI16fpTsmFjsQXzpiwagNjb3a6eEKzIgXC6q907v+u4HN WsiwV9S6Wncw/l12ejNH6RFBerKpTQKB1b6unRqJq02QyGcPo1hehAaj3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJup+SHQwmo9PgPmIGRZVKmhJ3BWMB8GA1UdIwQY MBaAFP8HMqQjKAdHARQiIePUainylsKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3djeXBDTW9CMGNCRkNJaDQ5UnFLZktXd3B3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jNDk3NWYtZWE5NC00M2E3LTkzMjYt N2NhMjJiYTE0MWIzLzEvbTZuNUlkRENhajAtQS1ZZ1pGbFVxYUVuY0ZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9jNDk3NWYtZWE5NC00M2E3LTkzMjYtN2NhMjJiYTE0MWIz LzEvX3djeXBDTW9CMGNCRkNJaDQ5UnFLZktXd3B3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucQvMA0G CSqGSIb3DQEBCwUAA4IBAQAn+w3YUbptpCdmb6wX78k91nzANY9ALegM5gNeMQAf kBfNXmbOLqMWR6Ioz3vcdzLcJ6UrcGpipBos/Vt60Ou6wCuv40tRNTMzOghWf3eB Ae09APLVIETH/JSvLxihOhNlwsa5V+2Mub+HOviCqgsdv5mWSRUav3KsfvQfwlZp C2kEnr07C2dfr9O/3T6QUgQ0qzCeltcslXMb1Sny7w1OfjEADioJ3Lt7U5fFU15a 8A5a3Mcjurf4pnH8YbsCcwrifjpJM01h7CgXTzAcYR2CfSZjLV8UACcp5jbn8jc/ pC8tx7ZFcH17vLsHcYv6ymouoE61TXNUHkY6acardRmM -----END CERTIFICATE-----Generated at Tue Feb 10 02:29:36 2026 by rpki-client