This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/K6bDf71UHtQxrhH1BLM2hnpBtqI.roa File: K6bDf71UHtQxrhH1BLM2hnpBtqI.roa (raw, json) Hash identifier: AsGB/9SfORjkXrYP9cBVkXw+EeQS48wH0rtdjTLtiZ8= Subject key identifier: 2B:A6:C3:7F:BD:54:1E:D4:31:AE:11:F5:04:B3:36:86:7A:41:B6:A2 Certificate issuer: /CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e Certificate serial: 019B7AC7A919C4270F31734D897ECADE1D2E Authority key identifier: E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/K6bDf71UHtQxrhH1BLM2hnpBtqI.roa Signing time: Thu 01 Jan 2026 18:17:43 +0000 ROA not before: Thu 01 Jan 2026 18:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53678 IP address blocks: 185.65.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:a9:19:c4:27:0f:31:73:4d:89:7e:ca:de:1d:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e Validity Not Before: Jan 1 18:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ba6c37fbd541ed431ae11f504b336867a41b6a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:76:3a:77:8a:67:eb:7d:5c:80:68:90:8b:31: dd:23:a9:3b:1d:6d:50:73:60:dc:d2:67:8a:29:5d: 0e:eb:8b:aa:7a:6a:b4:85:3d:15:12:8d:b2:ab:c9: 79:a4:19:58:dc:cc:93:c4:43:a7:7e:7b:f7:99:79: c3:e2:aa:b4:3a:5e:7b:94:5c:69:b5:99:7c:fd:90: 3f:97:f0:7b:d0:05:6d:76:53:58:1e:59:de:c4:1e: 2a:2f:ce:2e:21:33:56:c0:7f:83:b9:ff:c0:87:fc: 85:74:0b:72:1e:16:c5:35:d1:4d:46:fa:db:5c:29: 4a:2f:6d:6a:0c:20:3d:f1:e5:ca:84:b0:e2:e5:54: db:33:d3:65:8b:5f:a2:24:37:a1:8b:ea:7f:d2:8e: af:da:39:9e:90:02:52:71:5e:db:df:8f:b6:45:23: 10:26:e3:32:55:24:01:f2:01:a8:3f:09:9f:c7:a5: 8e:e7:1c:80:1a:8e:00:8a:d4:36:45:60:74:d8:d8: a7:dc:ac:11:2e:b4:42:9f:ca:98:c9:8d:47:99:e9: a8:26:1a:f9:9f:d3:ba:f0:99:a3:78:76:46:81:2b: 47:8d:7b:53:50:8b:32:d6:39:34:bd:f7:df:b7:8e: 93:2b:a7:3d:a9:d1:82:98:6b:8b:64:28:43:6a:2a: 97:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A6:C3:7F:BD:54:1E:D4:31:AE:11:F5:04:B3:36:86:7A:41:B6:A2 X509v3 Authority Key Identifier: keyid:E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/K6bDf71UHtQxrhH1BLM2hnpBtqI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.65.147.0/24 Signature Algorithm: sha256WithRSAEncryption 71:8d:9a:78:6b:ec:b9:55:6d:23:0e:c3:84:52:bb:d2:75:57: 50:47:27:94:d5:3e:d2:5f:44:78:57:61:91:7c:a9:8f:23:31: 4d:b5:9d:ed:b7:2c:7e:47:2b:21:89:48:53:1d:31:d1:60:60: e3:9d:ca:8d:9a:f0:fa:f0:0f:23:ca:ca:11:ab:b1:b9:c5:d1: 59:e8:78:73:a2:b0:aa:43:0e:da:d2:ef:70:3b:3a:e5:f0:96: 5d:0c:ab:a4:7b:f8:22:bf:85:ca:0d:d7:d5:b1:43:73:5d:69: a9:9a:65:38:40:1a:30:66:a9:e6:9f:d9:5e:00:ed:d6:b6:98: 0c:29:fb:c8:43:c5:1d:b2:cd:31:05:2f:09:9b:d2:87:1e:d3: 4c:b4:60:57:25:f0:0b:cd:7a:b0:d8:08:6a:72:4d:bf:e2:7e: 41:06:93:23:49:93:63:b8:5c:05:f1:4b:a9:85:e3:34:eb:64: 45:58:2f:a5:9f:fa:0a:45:52:d4:c3:bd:2f:a3:91:c6:1f:ca: b7:ad:22:af:be:1d:fb:07:0f:9b:bf:ec:15:7c:fa:46:3c:03: 8f:fa:0c:e3:de:84:57:fc:63:ba:ba:69:e2:21:2b:35:c8:2d: 56:16:4e:f0:29:39:6b:6f:65:f7:5b:b7:bd:f9:7d:c3:3e:c5: 54:8b:f3:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x6kZxCcPMXNNiX7K3h0uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNWQyOGYxNDk3OTNhM2Q3MmU4ZWYwNDFlOWM5ZTBkOWE2 NmIyMWUwHhcNMjYwMTAxMTgxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmE2YzM3ZmJkNTQxZWQ0MzFhZTExZjUwNGIzMzY4NjdhNDFiNmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXY6d4pn631cgGiQizHdI6k7HW1Q c2Dc0meKKV0O64uqemq0hT0VEo2yq8l5pBlY3MyTxEOnfnv3mXnD4qq0Ol57lFxp tZl8/ZA/l/B70AVtdlNYHlnexB4qL84uITNWwH+Duf/Ah/yFdAtyHhbFNdFNRvrb XClKL21qDCA98eXKhLDi5VTbM9Nli1+iJDehi+p/0o6v2jmekAJScV7b34+2RSMQ JuMyVSQB8gGoPwmfx6WO5xyAGo4AitQ2RWB02Nin3KwRLrRCn8qYyY1HmemoJhr5 n9O68JmjeHZGgStHjXtTUIsy1jk0vffft46TK6c9qdGCmGuLZChDaiqXMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCumw3+9VB7UMa4R9QSzNoZ6QbaiMB8GA1UdIwQY MBaAFOBdKPFJeTo9cujvBB6cng2aZrIeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEYwbzhVbDVPajF5Nk84RUhweWVEWnBtc2g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iNGM5N2ItZTAwNS00Y2Q2LTgzMzUt ODA5MWViY2UzYmJmLzEvSzZiRGY3MVVIdFF4cmhIMUJMTTJobnBCdHFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9iNGM5N2ItZTAwNS00Y2Q2LTgzMzUtODA5MWViY2UzYmJm LzEvNEYwbzhVbDVPajF5Nk84RUhweWVEWnBtc2g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUGTMA0G CSqGSIb3DQEBCwUAA4IBAQBxjZp4a+y5VW0jDsOEUrvSdVdQRyeU1T7SX0R4V2GR fKmPIzFNtZ3ttyx+RyshiUhTHTHRYGDjncqNmvD68A8jysoRq7G5xdFZ6HhzorCq Qw7a0u9wOzrl8JZdDKuke/giv4XKDdfVsUNzXWmpmmU4QBowZqnmn9leAO3WtpgM KfvIQ8Udss0xBS8Jm9KHHtNMtGBXJfALzXqw2Ahqck2/4n5BBpMjSZNjuFwF8Uup heM062RFWC+ln/oKRVLUw70vo5HGH8q3rSKvvh37Bw+bv+wVfPpGPAOP+gzj3oRX /GO6umniISs1yC1WFk7wKTlrb2X3W7e9+X3DPsVUi/Mg -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:02 2026 by rpki-client