This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/6VFxjGZ8bOih2br-G1vsbpV4A1k.roa File: 6VFxjGZ8bOih2br-G1vsbpV4A1k.roa (raw, json) Hash identifier: Bf69rzBJpwQt9lR7pHLJHrwn+ppr7MyMbshU+Z/vpy4= Subject key identifier: E9:51:71:8C:66:7C:6C:E8:A1:D9:BA:FE:1B:5B:EC:6E:95:78:03:59 Certificate issuer: /CN=394c6f73b3c83881ffc8e6603a6b64f45365acf1 Certificate serial: 019B7758B24261A9BEDA89175141185FCAE9 Authority key identifier: 39:4C:6F:73:B3:C8:38:81:FF:C8:E6:60:3A:6B:64:F4:53:65:AC:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/6VFxjGZ8bOih2br-G1vsbpV4A1k.roa Signing time: Thu 01 Jan 2026 02:17:40 +0000 ROA not before: Thu 01 Jan 2026 02:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197060 IP address blocks: 185.155.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:b2:42:61:a9:be:da:89:17:51:41:18:5f:ca:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=394c6f73b3c83881ffc8e6603a6b64f45365acf1 Validity Not Before: Jan 1 02:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e951718c667c6ce8a1d9bafe1b5bec6e95780359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:38:5b:04:df:cf:e3:07:73:ce:24:ae:17:96: e2:57:31:31:7c:3f:df:b8:80:6d:cb:7b:58:6f:0f: 02:c9:b0:fc:ff:19:7b:74:2d:fc:c6:64:d1:4a:48: 3f:27:78:de:77:e7:b5:c8:2e:ee:19:69:e5:d4:c9: b3:bc:dc:78:70:9b:3f:3b:70:9a:2b:0c:49:d0:e4: 89:0d:56:50:59:8a:04:ac:c7:22:5c:45:36:f6:d7: 32:8d:20:19:4f:11:92:ce:dc:9b:7e:5b:9d:97:42: 58:f9:7e:63:b3:84:2a:53:6e:ab:3b:8d:24:a6:d5: 21:97:aa:56:27:93:ea:cd:c6:e6:19:4d:4d:71:40: bd:e8:de:11:78:fe:e2:ce:02:8c:e8:e7:42:17:c9: ce:12:2e:37:8e:0f:3e:12:85:3f:ae:e9:dd:6b:59: 5c:3c:8f:10:40:a6:28:f1:6a:8d:7c:b7:16:12:9a: d1:a0:2b:56:a8:81:92:b6:ef:c9:0e:1f:5c:eb:4c: 41:c6:ee:57:2a:60:fc:9e:b6:a3:c6:3a:38:9a:38: 40:6e:26:00:44:35:c2:5f:69:63:ae:6d:33:63:d9: a9:f9:54:11:dd:e9:16:50:10:fc:7c:ed:d6:12:7b: 58:36:4b:fb:7b:85:3c:64:c2:85:06:d9:1a:72:c0: 7e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:51:71:8C:66:7C:6C:E8:A1:D9:BA:FE:1B:5B:EC:6E:95:78:03:59 X509v3 Authority Key Identifier: keyid:39:4C:6F:73:B3:C8:38:81:FF:C8:E6:60:3A:6B:64:F4:53:65:AC:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/6VFxjGZ8bOih2br-G1vsbpV4A1k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.252.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:7a:e9:19:4e:7c:99:8a:62:d5:a6:f9:0f:41:b5:34:18:fb: 05:8d:ab:1a:db:04:8e:d5:99:a0:36:da:eb:a4:da:78:f4:63: 5d:c0:3e:ed:69:f4:b5:a6:bb:0b:20:61:f2:01:37:f8:ac:30: 84:85:50:a3:37:7d:54:9a:18:28:41:b3:3d:19:6c:6c:46:5d: 61:ad:3c:c3:ff:b1:d7:d1:36:ea:00:84:a5:36:cd:3a:f6:b1: 27:8f:41:50:3f:1b:97:29:59:a9:06:0e:62:c6:d6:98:73:ae: 67:c7:5c:ee:40:eb:d3:59:b0:aa:0f:76:8a:70:9e:ef:39:da: 7f:15:3f:02:16:7a:25:b0:18:c3:37:3c:e6:b9:ab:53:c4:3c: 99:1f:e3:73:ec:9f:53:2a:e8:fa:93:6a:63:46:d5:67:a6:8e: 95:db:fe:17:6f:a8:3b:c7:a0:81:14:e8:7f:7a:4b:78:fc:da: d6:9d:d1:63:85:4f:bb:71:58:87:2e:a8:9a:d2:a4:0f:71:02: 78:27:ff:d9:1a:37:03:42:6e:ee:e9:74:e8:7b:1c:d2:b0:ea: b1:3e:30:98:a2:dc:83:8f:37:e3:66:0b:51:63:ec:95:cb:e4: 3b:92:16:9c:09:6c:47:85:5d:8b:ea:73:f4:8b:c0:ce:60:91: 7d:c7:df:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WLJCYam+2okXUUEYX8rpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NGM2ZjczYjNjODM4ODFmZmM4ZTY2MDNhNmI2NGY0NTM2 NWFjZjEwHhcNMjYwMTAxMDIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTUxNzE4YzY2N2M2Y2U4YTFkOWJhZmUxYjViZWM2ZTk1NzgwMzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuThbBN/P4wdzziSuF5biVzExfD/f uIBty3tYbw8CybD8/xl7dC38xmTRSkg/J3jed+e1yC7uGWnl1MmzvNx4cJs/O3Ca KwxJ0OSJDVZQWYoErMciXEU29tcyjSAZTxGSztybfludl0JY+X5js4QqU26rO40k ptUhl6pWJ5PqzcbmGU1NcUC96N4ReP7izgKM6OdCF8nOEi43jg8+EoU/runda1lc PI8QQKYo8WqNfLcWEprRoCtWqIGStu/JDh9c60xBxu5XKmD8nrajxjo4mjhAbiYA RDXCX2ljrm0zY9mp+VQR3ekWUBD8fO3WEntYNkv7e4U8ZMKFBtkacsB+3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOlRcYxmfGzoodm6/htb7G6VeANZMB8GA1UdIwQY MBaAFDlMb3OzyDiB/8jmYDprZPRTZazxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1V4dmM3UElPSUhfeU9aZ09tdGs5Rk5sclBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wYzNkMmEtYWRiNy00OWU5LWFkZmEt Njk2OGUyZDgxODI2LzEvNlZGeGpHWjhiT2loMmJyLUcxdnNicFY0QTFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8wYzNkMmEtYWRiNy00OWU5LWFkZmEtNjk2OGUyZDgxODI2 LzEvT1V4dmM3UElPSUhfeU9aZ09tdGs5Rk5sclBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZv8MA0G CSqGSIb3DQEBCwUAA4IBAQA7eukZTnyZimLVpvkPQbU0GPsFjasa2wSO1ZmgNtrr pNp49GNdwD7tafS1prsLIGHyATf4rDCEhVCjN31UmhgoQbM9GWxsRl1hrTzD/7HX 0TbqAISlNs069rEnj0FQPxuXKVmpBg5ixtaYc65nx1zuQOvTWbCqD3aKcJ7vOdp/ FT8CFnolsBjDNzzmuatTxDyZH+Nz7J9TKuj6k2pjRtVnpo6V2/4Xb6g7x6CBFOh/ ekt4/NrWndFjhU+7cViHLqia0qQPcQJ4J//ZGjcDQm7u6XToexzSsOqxPjCYotyD jzfjZgtRY+yVy+Q7khacCWxHhV2L6nP0i8DOYJF9x996 -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:25 2026 by rpki-client