This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/6-x6MjhIWmKkKN8PSvag3_NMayM.roa File: 6-x6MjhIWmKkKN8PSvag3_NMayM.roa (raw, json) Hash identifier: DJxqLKJWXBtl7f6AjOofGTskuyYrFGFq1UI9pHAp0p0= Subject key identifier: EB:EC:7A:32:38:48:5A:62:A4:28:DF:0F:4A:F6:A0:DF:F3:4C:6B:23 Certificate issuer: /CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7 Certificate serial: 019B7AC83504C9BF3E69A6360603CB431D7E Authority key identifier: D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/6-x6MjhIWmKkKN8PSvag3_NMayM.roa Signing time: Thu 01 Jan 2026 18:18:19 +0000 ROA not before: Thu 01 Jan 2026 18:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202393 IP address blocks: 185.249.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:35:04:c9:bf:3e:69:a6:36:06:03:cb:43:1d:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7 Validity Not Before: Jan 1 18:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ebec7a3238485a62a428df0f4af6a0dff34c6b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:cc:ea:15:a5:ad:c3:21:d3:02:53:80:d4:1a: 7d:e6:f0:2b:b4:07:da:de:cd:2d:aa:18:39:5e:c4: b0:f9:4d:09:dc:d5:4b:9b:c3:b7:f0:01:9b:bb:aa: 72:b3:73:5f:33:06:db:09:1c:f7:a6:b7:3f:55:3b: 27:ae:ad:fa:a5:59:21:9a:42:d9:a0:91:d6:60:7e: af:c1:ef:d3:4c:fe:0f:b5:7c:76:1e:9f:c3:0d:e2: 0e:d1:59:73:80:4e:0e:c8:b1:95:9e:32:97:45:03: c2:34:5b:c8:18:1e:c5:dd:d2:05:a8:3d:4f:28:9d: 79:27:54:1e:cd:7d:66:73:dd:cc:3f:2b:9b:b3:e5: f0:3a:10:be:61:ab:ad:01:ae:64:7c:68:ee:8e:f3: fe:98:14:fc:c1:ec:34:6d:ce:d1:45:0b:45:4f:34: 86:bc:cb:c4:ea:37:d9:63:f0:5b:3b:2b:52:50:b5: bc:a4:b7:bd:8f:d4:39:aa:b2:f4:4f:87:31:6d:f0: e5:77:a7:0c:2c:4e:28:b4:24:ce:1f:18:67:76:9f: 60:48:99:d0:b1:66:8b:92:9a:c1:48:45:07:61:d5: 28:cd:af:32:b4:47:1b:88:80:10:c5:7e:ee:0f:20: b6:07:89:0b:48:0c:c4:35:0f:43:f6:55:0a:b8:3e: 9a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:EC:7A:32:38:48:5A:62:A4:28:DF:0F:4A:F6:A0:DF:F3:4C:6B:23 X509v3 Authority Key Identifier: keyid:D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/6-x6MjhIWmKkKN8PSvag3_NMayM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.249.228.0/22 Signature Algorithm: sha256WithRSAEncryption 09:17:ec:3a:e9:bb:bc:20:9f:6b:48:ad:bc:f0:d7:8c:1b:54: 89:6a:a2:b9:5c:7e:4f:55:07:20:e6:66:07:1b:c3:e1:64:26: 22:37:2c:40:f9:3b:21:b7:26:4c:d4:14:ef:3f:c7:77:5b:50: 6d:ea:11:d7:0a:10:5a:98:27:ae:98:82:17:21:72:d3:ea:50: b9:39:ea:f8:77:d2:51:dd:61:54:4a:52:50:31:15:32:d5:e7: 07:eb:6d:9b:06:40:4c:70:59:ee:88:87:d7:cd:ac:86:d2:31: aa:71:a2:8a:95:65:4e:15:40:cf:76:24:d5:bc:99:89:dc:77: da:29:16:70:ea:d8:d1:a9:b6:5d:08:c5:38:52:9c:df:7d:a8: c1:cc:8b:54:0e:d8:ff:23:d3:3a:84:6e:da:19:89:61:bb:95: 63:26:46:35:f7:c4:de:98:d9:25:9f:72:a8:31:ed:ef:36:15: 85:c6:9a:66:12:68:66:1e:95:4a:4c:e3:bb:d8:e8:6e:e0:16: a5:33:a0:ae:51:8c:5f:fe:ec:5e:a5:51:93:d0:d5:50:56:e9: 13:1b:cd:16:6f:33:7f:6c:04:36:8d:22:e0:6b:64:5b:cd:9b: 29:b2:ca:9e:90:62:d1:10:a4:53:9b:86:67:79:7e:3f:92:87: 09:02:28:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yDUEyb8+aaY2BgPLQx1+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYzcwZjFmMzNjNTgxZGI3OGExNDliYzg2ZDczOWNkYzdj ZTI2YTcwHhcNMjYwMTAxMTgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmVjN2EzMjM4NDg1YTYyYTQyOGRmMGY0YWY2YTBkZmYzNGM2YjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+czqFaWtwyHTAlOA1Bp95vArtAfa 3s0tqhg5XsSw+U0J3NVLm8O38AGbu6pys3NfMwbbCRz3prc/VTsnrq36pVkhmkLZ oJHWYH6vwe/TTP4PtXx2Hp/DDeIO0VlzgE4OyLGVnjKXRQPCNFvIGB7F3dIFqD1P KJ15J1QezX1mc93MPyubs+XwOhC+YautAa5kfGjujvP+mBT8wew0bc7RRQtFTzSG vMvE6jfZY/BbOytSULW8pLe9j9Q5qrL0T4cxbfDld6cMLE4otCTOHxhndp9gSJnQ sWaLkprBSEUHYdUoza8ytEcbiIAQxX7uDyC2B4kLSAzENQ9D9lUKuD6aHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOvsejI4SFpipCjfD0r2oN/zTGsjMB8GA1UdIwQY MBaAFNHHDx8zxYHbeKFJvIbXOc3HzianMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGNjUEh6UEZnZHQ0b1VtOGh0YzV6Y2ZPSnFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9kM2QyNTctNmU0Yy00ZDYwLTljOTMt ZGZjYWUzNmEzZWY4LzEvNi14Nk1qaElXbUtrS044UFN2YWczX05NYXlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9kM2QyNTctNmU0Yy00ZDYwLTljOTMtZGZjYWUzNmEzZWY4 LzEvMGNjUEh6UEZnZHQ0b1VtOGh0YzV6Y2ZPSnFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufnkMA0G CSqGSIb3DQEBCwUAA4IBAQAJF+w66bu8IJ9rSK288NeMG1SJaqK5XH5PVQcg5mYH G8PhZCYiNyxA+TshtyZM1BTvP8d3W1Bt6hHXChBamCeumIIXIXLT6lC5Oer4d9JR 3WFUSlJQMRUy1ecH622bBkBMcFnuiIfXzayG0jGqcaKKlWVOFUDPdiTVvJmJ3Hfa KRZw6tjRqbZdCMU4UpzffajBzItUDtj/I9M6hG7aGYlhu5VjJkY198TemNkln3Ko Me3vNhWFxppmEmhmHpVKTOO72Ohu4BalM6CuUYxf/uxepVGT0NVQVukTG80WbzN/ bAQ2jSLga2RbzZspssqekGLREKRTm4ZneX4/kocJAigm -----END CERTIFICATE-----Generated at Tue Feb 10 03:02:18 2026 by rpki-client