This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/6OqYpjTrIpJEFTsBWA83LbKcJQ4.roa File: 6OqYpjTrIpJEFTsBWA83LbKcJQ4.roa (raw, json) Hash identifier: XXKKzvXUqSOAEvvL2Pf15G7qc8hgGL7KY3Js1JGQrFI= Subject key identifier: E8:EA:98:A6:34:EB:22:92:44:15:3B:01:58:0F:37:2D:B2:9C:25:0E Certificate issuer: /CN=3bed02136698701f74c49f8a2a9e73e84ec981b6 Certificate serial: 019B7AC87A10376B3520F85636FD0DC64E8A Authority key identifier: 3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/6OqYpjTrIpJEFTsBWA83LbKcJQ4.roa Signing time: Thu 01 Jan 2026 18:18:37 +0000 ROA not before: Thu 01 Jan 2026 18:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201273 IP address blocks: 185.161.249.0/24 maxlen: 24 2a12:8340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:7a:10:37:6b:35:20:f8:56:36:fd:0d:c6:4e:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bed02136698701f74c49f8a2a9e73e84ec981b6 Validity Not Before: Jan 1 18:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8ea98a634eb229244153b01580f372db29c250e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:76:85:90:d6:e3:79:39:9d:b4:40:85:39:cf: db:18:04:e4:d2:f5:25:a9:b1:62:11:72:f7:8d:1b: ff:53:c6:76:4e:bb:ea:bf:a9:97:49:06:2c:54:79: 9c:9d:fe:b9:5a:32:f8:15:13:5c:c0:d4:3d:f4:cc: c1:87:52:ef:f9:33:1a:52:92:32:84:69:5a:5d:24: 64:bb:3a:d2:85:5d:e2:69:26:21:2c:02:c2:db:28: 2c:88:fa:fd:af:8b:03:e5:3c:69:d4:88:bd:c4:78: 73:1a:5e:9c:47:67:4d:a8:18:14:e7:c9:db:73:58: a7:97:ef:89:dd:f9:f7:c0:07:5c:fd:e3:ed:68:e8: 6e:10:8f:93:53:70:b3:f8:1d:dc:31:a6:cf:9b:64: 56:7d:4e:fa:e4:b3:84:33:c2:d3:a5:3d:83:bf:99: be:8c:f9:22:25:39:89:22:44:76:57:c2:14:e6:22: 61:5b:9e:be:39:22:53:52:75:ce:76:11:b9:a8:d9: 4a:51:12:e1:ec:ef:c4:a7:a2:af:92:5f:de:40:52: 5f:03:6d:a1:d1:f9:b8:2e:db:21:eb:12:d2:4f:55: 32:bd:cc:ed:f7:45:ed:ed:b5:0f:1a:9e:42:5c:a7: 18:5c:f8:af:b5:f6:92:db:f9:a3:65:c0:8b:e2:f1: a5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:EA:98:A6:34:EB:22:92:44:15:3B:01:58:0F:37:2D:B2:9C:25:0E X509v3 Authority Key Identifier: keyid:3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/6OqYpjTrIpJEFTsBWA83LbKcJQ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.249.0/24 IPv6: 2a12:8340::/48 Signature Algorithm: sha256WithRSAEncryption 73:71:aa:85:66:e8:ff:9b:64:70:4b:a8:1c:fa:01:7c:d1:74: 4c:ef:15:a4:3d:4d:7a:fc:e3:67:c2:8d:33:ae:85:5c:85:6a: 92:36:04:22:a8:1f:15:89:44:7a:3b:7f:1a:a9:9d:73:f9:de: 3b:59:b3:2c:3f:82:0a:88:4d:43:2f:42:fb:35:6e:7c:91:87: 7b:8c:44:6f:4b:2b:a0:e4:a2:73:8d:20:c1:10:10:f0:25:5e: 53:ca:cb:6d:1f:79:85:eb:8e:6e:bc:f3:c7:89:23:b8:7a:77: 33:31:4e:d3:15:d7:ef:67:60:a2:83:13:c7:f9:65:b5:8e:c0: d7:4c:ec:74:71:22:ca:79:e5:4f:74:2f:a9:9f:02:48:a3:0f: e0:c4:c1:b8:1e:6c:f1:b6:30:cf:18:c2:c9:a5:c1:d0:d0:36: 8b:58:43:1a:2b:3f:22:7c:60:43:83:2a:d3:f1:3e:12:73:a0: 8b:75:cf:b2:8c:76:e6:95:ef:67:14:02:d2:4b:f8:70:8c:54: 1d:31:1c:d2:6a:31:27:be:35:d4:af:dd:8a:cc:69:1c:88:81: b1:57:0d:44:f7:9b:d0:cd:c5:be:a5:07:8d:8d:cb:f3:4f:56: e5:f2:85:5c:19:3f:5c:fa:98:76:2a:7e:00:57:c0:43:ae:df: 33:c7:ef:e0 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6yHoQN2s1IPhWNv0Nxk6KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZWQwMjEzNjY5ODcwMWY3NGM0OWY4YTJhOWU3M2U4NGVj OTgxYjYwHhcNMjYwMTAxMTgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGVhOThhNjM0ZWIyMjkyNDQxNTNiMDE1ODBmMzcyZGIyOWMyNTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1naFkNbjeTmdtECFOc/bGATk0vUl qbFiEXL3jRv/U8Z2Trvqv6mXSQYsVHmcnf65WjL4FRNcwNQ99MzBh1Lv+TMaUpIy hGlaXSRkuzrShV3iaSYhLALC2ygsiPr9r4sD5Txp1Ii9xHhzGl6cR2dNqBgU58nb c1inl++J3fn3wAdc/ePtaOhuEI+TU3Cz+B3cMabPm2RWfU765LOEM8LTpT2Dv5m+ jPkiJTmJIkR2V8IU5iJhW56+OSJTUnXOdhG5qNlKURLh7O/Ep6Kvkl/eQFJfA22h 0fm4Ltsh6xLST1Uyvczt90Xt7bUPGp5CXKcYXPivtfaS2/mjZcCL4vGlXQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOjqmKY06yKSRBU7AVgPNy2ynCUOMB8GA1UdIwQY MBaAFDvtAhNmmHAfdMSfiiqec+hOyYG2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTy0wQ0UyYVljQjkweEotS0twNXo2RTdKZ2JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85ZmFlZDEtZjY0Mi00ZTgyLThhNzMt ZWQ5OWVmNjRhZGJmLzEvNk9xWXBqVHJJcEpFRlRzQldBODNMYktjSlE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS85ZmFlZDEtZjY0Mi00ZTgyLThhNzMtZWQ5OWVmNjRhZGJm LzEvTy0wQ0UyYVljQjkweEotS0twNXo2RTdKZ2JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuaH5MA8E AgACMAkDBwAqEoNAAAAwDQYJKoZIhvcNAQELBQADggEBAHNxqoVm6P+bZHBLqBz6 AXzRdEzvFaQ9TXr842fCjTOuhVyFapI2BCKoHxWJRHo7fxqpnXP53jtZsyw/ggqI TUMvQvs1bnyRh3uMRG9LK6DkonONIMEQEPAlXlPKy20feYXrjm6888eJI7h6dzMx TtMV1+9nYKKDE8f5ZbWOwNdM7HRxIsp55U90L6mfAkijD+DEwbgebPG2MM8Ywsml wdDQNotYQxorPyJ8YEODKtPxPhJzoIt1z7KMduaV72cUAtJL+HCMVB0xHNJqMSe+ NdSv3YrMaRyIgbFXDUT3m9DNxb6lB42Ny/NPVuXyhVwZP1z6mHYqfgBXwEOu3zPH 7+A= -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:28 2026 by rpki-client