This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/6sa9q4Dov1lYR1zbGcSJqHuAACs.roa File: 6sa9q4Dov1lYR1zbGcSJqHuAACs.roa (raw, json) Hash identifier: dZJcWFj8zVWM8Kfo82Oh4jZ+RxNvw0lQ3GRg+Xs1t18= Subject key identifier: EA:C6:BD:AB:80:E8:BF:59:58:47:5C:DB:19:C4:89:A8:7B:80:00:2B Certificate issuer: /CN=a8e5148b399b53ba52fd68eabdbdf6ad99cc71f4 Certificate serial: 019B7E383E24039668ADA650D05CCBC113AF Authority key identifier: A8:E5:14:8B:39:9B:53:BA:52:FD:68:EA:BD:BD:F6:AD:99:CC:71:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/6sa9q4Dov1lYR1zbGcSJqHuAACs.roa Signing time: Fri 02 Jan 2026 10:19:33 +0000 ROA not before: Fri 02 Jan 2026 10:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214267 IP address blocks: 185.37.102.0/24 maxlen: 24 2a14:5a80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:3e:24:03:96:68:ad:a6:50:d0:5c:cb:c1:13:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8e5148b399b53ba52fd68eabdbdf6ad99cc71f4 Validity Not Before: Jan 2 10:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eac6bdab80e8bf5958475cdb19c489a87b80002b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cd:2f:d8:43:e0:29:4a:fe:8f:17:fd:4b:fc: b0:8a:1d:82:34:ac:af:f9:35:52:6f:09:fb:4d:57: 8e:c8:0f:29:5b:8c:81:0f:bb:8a:dd:c8:b3:d5:01: 93:04:14:2b:71:e8:05:84:6f:ec:8e:6e:09:bd:70: c4:52:be:00:04:67:ed:19:93:ea:18:9b:47:3f:31: dd:0e:f5:ce:f4:6a:22:7d:48:e1:8c:79:5a:ce:fe: 0e:e4:9f:bf:93:0f:bf:f7:5c:17:48:32:3e:1d:fa: d7:eb:fa:18:76:03:71:d5:a7:92:cb:70:65:9e:f6: 03:72:54:f1:78:7f:4d:b7:48:25:12:b6:23:bd:4d: c1:15:40:9f:98:70:e2:72:95:36:2f:c3:28:e3:e1: 92:42:09:66:b0:0f:ea:59:c7:f7:f7:70:c1:21:68: e4:83:90:fb:47:df:02:ae:53:ec:6d:00:68:c1:22: e4:dc:cc:f5:bf:c9:79:3e:b5:a1:73:ca:b0:7d:6b: d3:ca:76:f9:05:df:02:d1:01:fa:ce:43:46:fe:e9: 21:9d:29:92:66:11:62:a4:fa:c8:76:1a:fd:cb:23: 77:72:0c:a9:1d:90:48:d5:03:9d:aa:0c:d7:98:a3: 2f:2d:a4:e6:ea:f8:f4:1b:7f:9d:90:9a:cd:13:97: f2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C6:BD:AB:80:E8:BF:59:58:47:5C:DB:19:C4:89:A8:7B:80:00:2B X509v3 Authority Key Identifier: keyid:A8:E5:14:8B:39:9B:53:BA:52:FD:68:EA:BD:BD:F6:AD:99:CC:71:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/6sa9q4Dov1lYR1zbGcSJqHuAACs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.37.102.0/24 IPv6: 2a14:5a80::/29 Signature Algorithm: sha256WithRSAEncryption 33:fb:0e:3b:46:62:e2:c9:38:cd:90:87:d3:7b:ae:40:5c:69: b8:b6:31:a1:eb:ab:8a:02:64:e7:d7:1a:98:a9:f1:e9:04:5b: 0a:f9:ef:3c:d5:e3:f1:e3:01:9a:8d:9a:96:9b:f0:35:c2:c7: f8:77:ba:d2:15:50:e3:8b:95:46:e0:e6:79:19:8a:5d:2d:03: 6b:fc:25:ca:38:9a:12:02:03:bb:c4:66:7d:a5:1d:c8:b6:59: ef:32:c8:53:6f:95:b2:33:ab:9e:4d:58:f6:8f:35:42:ff:a9: 0c:45:f8:5b:7d:0a:e3:2e:19:06:9b:a0:94:0c:29:7e:3e:5b: e0:b1:df:19:46:23:56:c0:c6:18:c3:27:12:49:8f:42:6e:4d: 37:56:b7:1e:f0:6e:60:e4:bd:e2:24:22:3f:c1:18:ae:8a:bf: 4c:8d:32:0d:bd:97:f2:4c:6c:25:fb:2f:97:0f:d6:9b:2c:d6: 34:8e:6f:d0:04:b8:bd:9e:3b:e3:38:a4:34:61:cd:21:3d:21: 22:1b:8e:98:ab:11:26:42:bc:f9:bb:e7:0d:9c:04:4c:a1:67: 60:f6:72:71:79:d3:75:f9:bd:0f:c3:4f:22:ac:1a:d3:e1:bc: fe:f9:9f:f3:85:a3:ad:dc:a2:ed:d5:6b:2b:8b:ed:69:79:b2: ab:0f:2c:b6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OD4kA5ZoraZQ0FzLwROvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZTUxNDhiMzk5YjUzYmE1MmZkNjhlYWJkYmRmNmFkOTlj YzcxZjQwHhcNMjYwMTAyMTAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWM2YmRhYjgwZThiZjU5NTg0NzVjZGIxOWM0ODlhODdiODAwMDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM0v2EPgKUr+jxf9S/ywih2CNKyv +TVSbwn7TVeOyA8pW4yBD7uK3ciz1QGTBBQrcegFhG/sjm4JvXDEUr4ABGftGZPq GJtHPzHdDvXO9GoifUjhjHlazv4O5J+/kw+/91wXSDI+HfrX6/oYdgNx1aeSy3Bl nvYDclTxeH9Nt0glErYjvU3BFUCfmHDicpU2L8Mo4+GSQglmsA/qWcf393DBIWjk g5D7R98CrlPsbQBowSLk3Mz1v8l5PrWhc8qwfWvTynb5Bd8C0QH6zkNG/ukhnSmS ZhFipPrIdhr9yyN3cgypHZBI1QOdqgzXmKMvLaTm6vj0G3+dkJrNE5fyRwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOrGvauA6L9ZWEdc2xnEiah7gAArMB8GA1UdIwQY MBaAFKjlFIs5m1O6Uv1o6r299q2ZzHH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcU9VVWl6bWJVN3BTX1dqcXZiMzJyWm5NY2ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hMzJiMWMtZjg0MS00ZjVhLTljZTQt ZTczNDk5M2YxMWFjLzEvNnNhOXE0RG92MWxZUjF6YkdjU0pxSHVBQUNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9hMzJiMWMtZjg0MS00ZjVhLTljZTQtZTczNDk5M2YxMWFj LzEvcU9VVWl6bWJVN3BTX1dqcXZiMzJyWm5NY2ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuSVmMA0E AgACMAcDBQMqFFqAMA0GCSqGSIb3DQEBCwUAA4IBAQAz+w47RmLiyTjNkIfTe65A XGm4tjGh66uKAmTn1xqYqfHpBFsK+e881ePx4wGajZqWm/A1wsf4d7rSFVDji5VG 4OZ5GYpdLQNr/CXKOJoSAgO7xGZ9pR3ItlnvMshTb5WyM6ueTVj2jzVC/6kMRfhb fQrjLhkGm6CUDCl+Plvgsd8ZRiNWwMYYwycSSY9Cbk03Vrce8G5g5L3iJCI/wRiu ir9MjTINvZfyTGwl+y+XD9abLNY0jm/QBLi9njvjOKQ0Yc0hPSEiG46YqxEmQrz5 u+cNnARMoWdg9nJxedN1+b0Pw08irBrT4bz++Z/zhaOt3KLt1Wsri+1pebKrDyy2 -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:55 2026 by rpki-client