This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/pq6V1IZy-9ZmY3yG58LAIoneZVU.roa File: pq6V1IZy-9ZmY3yG58LAIoneZVU.roa (raw, json) Hash identifier: Az7YHbsrPWtkI6VahaTJif6J6wTdzuZGNkht38V4VVA= Subject key identifier: A6:AE:95:D4:86:72:FB:D6:66:63:7C:86:E7:C2:C0:22:89:DE:65:55 Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019B7758B8062585D0822D77A0B3686601A7 Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/pq6V1IZy-9ZmY3yG58LAIoneZVU.roa Signing time: Thu 01 Jan 2026 02:17:41 +0000 ROA not before: Thu 01 Jan 2026 02:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209711 IP address blocks: 185.86.155.0/24 maxlen: 24 185.98.62.0/24 maxlen: 24 185.184.25.0/24 maxlen: 24 185.184.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:b8:06:25:85:d0:82:2d:77:a0:b3:68:66:01:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Jan 1 02:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6ae95d48672fbd666637c86e7c2c02289de6555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:79:83:5d:7e:63:51:62:f7:2f:c0:80:1e:57: a2:89:51:c9:e2:19:48:8a:bd:fd:27:95:c2:0c:9e: 06:1a:0d:47:b7:53:e8:2c:7b:f1:a0:21:8a:f4:cd: 2b:6e:f6:10:98:31:2a:78:bd:20:b0:ef:85:8f:94: 2a:c6:59:aa:dc:11:a3:bb:6b:ce:6d:4e:90:ec:fd: 11:64:67:dd:d6:0f:95:d1:2f:a5:07:5b:79:10:48: 84:83:4c:5c:fb:25:1b:db:21:b6:df:9c:39:81:ff: 71:ef:52:3e:b5:ef:58:7d:91:66:2c:4d:08:ba:c3: 4b:e6:6f:a1:87:61:84:e5:4c:24:e5:40:01:72:93: 77:39:89:84:f3:83:00:87:f6:c2:b0:b0:58:4b:eb: 87:53:5d:85:79:da:6d:8f:18:50:1d:60:da:01:9e: 17:75:9a:24:85:ab:83:be:d9:72:79:67:14:3f:1d: 67:20:7b:62:16:cb:0c:de:19:14:f8:65:08:fb:95: d1:70:6f:e7:6c:a2:7a:4e:ae:6d:a8:94:c4:b9:56: 41:4d:06:84:fe:64:b7:13:9c:c1:37:a8:d4:a0:c8: 65:04:ee:18:10:42:f0:a6:5b:6b:9b:9d:41:27:02: c6:91:a3:89:c3:3d:af:4f:dd:ef:aa:be:8b:d0:1a: 9c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:AE:95:D4:86:72:FB:D6:66:63:7C:86:E7:C2:C0:22:89:DE:65:55 X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/pq6V1IZy-9ZmY3yG58LAIoneZVU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.86.155.0/24 185.98.62.0/24 185.184.25.0-185.184.26.255 Signature Algorithm: sha256WithRSAEncryption 0e:dc:55:18:76:1b:03:fd:14:bb:f0:05:0c:f5:7b:82:da:16: b7:cf:9b:f0:9e:e7:47:4d:47:c0:eb:ce:1e:cd:96:4b:99:d4: 8d:01:74:1a:87:4d:c6:86:07:05:ef:23:fe:6a:dc:a4:23:bd: 94:a1:06:99:8c:63:16:a5:ff:d1:d4:a5:dc:e4:c7:ac:f0:65: c3:11:c0:f5:8e:db:b6:9e:8c:56:43:ed:4b:af:62:61:e5:16: 8e:05:be:8d:7a:11:56:05:ca:f4:eb:94:16:ca:00:4b:23:db: 50:62:49:af:0f:e8:05:42:31:cd:6c:1d:d4:7e:6a:d1:f4:b0: bf:03:40:0f:5c:b8:c5:69:6e:f6:95:ac:56:76:db:f4:9b:af: 91:d3:3d:03:86:e4:36:54:93:1c:b4:f4:a6:76:54:d7:97:30: 7a:a2:e9:ab:22:07:5c:08:f7:14:13:50:b3:dc:f6:db:b8:f1: 63:49:f2:d2:d7:bc:88:f3:87:e0:87:16:eb:28:38:2e:53:9f: d8:24:a8:cc:af:8c:03:2c:dc:0c:86:fd:9e:01:05:c9:c7:17: 60:b1:43:da:65:0a:1b:4e:c8:ff:68:0d:b8:b2:e0:c7:64:05: 84:a0:8a:97:bd:2d:a7:7a:1e:6f:55:ff:be:46:ac:e2:e8:39: eb:1a:db:06 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt3WLgGJYXQgi13oLNoZgGnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjYwMTAxMDIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmFlOTVkNDg2NzJmYmQ2NjY2MzdjODZlN2MyYzAyMjg5ZGU2NTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nmDXX5jUWL3L8CAHleiiVHJ4hlI ir39J5XCDJ4GGg1Ht1PoLHvxoCGK9M0rbvYQmDEqeL0gsO+Fj5Qqxlmq3BGju2vO bU6Q7P0RZGfd1g+V0S+lB1t5EEiEg0xc+yUb2yG235w5gf9x71I+te9YfZFmLE0I usNL5m+hh2GE5Uwk5UABcpN3OYmE84MAh/bCsLBYS+uHU12FedptjxhQHWDaAZ4X dZokhauDvtlyeWcUPx1nIHtiFssM3hkU+GUI+5XRcG/nbKJ6Tq5tqJTEuVZBTQaE /mS3E5zBN6jUoMhlBO4YEELwpltrm51BJwLGkaOJwz2vT93vqr6L0Bqc3wIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFKauldSGcvvWZmN8hufCwCKJ3mVVMB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEvcHE2VjFJWnktOVptWTN5RzU4TEFJb25lWlZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAuVabAwQA uWI+MAwDBAC5uBkDBAC5uBowDQYJKoZIhvcNAQELBQADggEBAA7cVRh2GwP9FLvw BQz1e4LaFrfPm/Ce50dNR8Drzh7NlkuZ1I0BdBqHTcaGBwXvI/5q3KQjvZShBpmM Yxal/9HUpdzkx6zwZcMRwPWO27aejFZD7UuvYmHlFo4Fvo16EVYFyvTrlBbKAEsj 21BiSa8P6AVCMc1sHdR+atH0sL8DQA9cuMVpbvaVrFZ22/Sbr5HTPQOG5DZUkxy0 9KZ2VNeXMHqi6asiB1wI9xQTULPc9tu48WNJ8tLXvIjzh+CHFusoOC5Tn9gkqMyv jAMs3AyG/Z4BBcnHF2CxQ9plChtOyP9oDbiy4MdkBYSgipe9Lad6Hm9V/75GrOLo Oesa2wY= -----END CERTIFICATE-----Generated at Wed Jan 21 14:12:43 2026 by rpki-client