This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/6XyzM7C6U0Eg9plO23xksot9cNE.roa File: 6XyzM7C6U0Eg9plO23xksot9cNE.roa (raw, json) Hash identifier: U0mBP+sO6b8RXHmP69AVtgeTMj6pgRFEww7l1hgISoc= Subject key identifier: E9:7C:B3:33:B0:BA:53:41:20:F6:99:4E:DB:7C:64:B2:8B:7D:70:D1 Certificate issuer: /CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1 Certificate serial: 019B7BA425AB2D8C9D3CDF70C0DE9D3E5B61 Authority key identifier: BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/6XyzM7C6U0Eg9plO23xksot9cNE.roa Signing time: Thu 01 Jan 2026 22:18:33 +0000 ROA not before: Thu 01 Jan 2026 22:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204007 IP address blocks: 185.185.216.0/24 maxlen: 24 185.185.217.0/24 maxlen: 24 185.185.218.0/24 maxlen: 24 185.185.219.0/24 maxlen: 24 185.190.89.0/24 maxlen: 24 185.194.12.0/24 maxlen: 24 2a0b:6580::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:25:ab:2d:8c:9d:3c:df:70:c0:de:9d:3e:5b:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1 Validity Not Before: Jan 1 22:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e97cb333b0ba534120f6994edb7c64b28b7d70d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1a:84:fc:45:7f:86:d4:91:b1:49:46:d9:84: 13:b7:b9:0e:bb:28:e4:48:db:da:66:5a:33:2c:65: a2:42:b4:75:ea:6a:b2:bf:84:8a:7e:58:cd:a7:91: 2e:ae:dc:b8:b3:b6:f9:87:ba:9e:c8:77:f1:c1:99: d9:1b:f8:62:7b:af:d6:d1:01:fc:a1:ce:82:12:2b: 65:47:d4:0d:43:75:1d:f3:bb:df:84:01:af:48:45: d9:ce:1c:71:df:5b:49:4b:ac:df:42:3f:a8:d8:66: b1:e8:9e:46:da:ea:52:9f:42:dc:40:cb:b5:59:df: 56:fc:0b:40:80:84:ed:37:aa:88:e3:a4:61:9b:94: 71:ad:e7:33:27:7d:5f:35:78:0f:6c:6a:f4:5b:d8: 83:8b:50:71:e6:91:ec:12:71:d8:99:5e:30:cf:da: b7:4e:a9:6d:7e:1f:d5:cd:7e:ce:55:57:30:8f:18: c7:03:11:9d:8a:e9:73:3c:cb:98:c0:36:cb:39:40: d2:c6:c9:7b:3a:45:20:31:0c:e8:ad:d6:30:c9:fc: 50:49:a0:33:08:51:83:53:8f:6e:64:a0:1d:72:6a: 0a:6c:39:c4:ea:44:7e:7e:f3:1a:81:47:46:4d:8c: ed:eb:8e:56:a2:b5:3e:62:32:b1:f5:db:70:3c:22: 67:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7C:B3:33:B0:BA:53:41:20:F6:99:4E:DB:7C:64:B2:8B:7D:70:D1 X509v3 Authority Key Identifier: keyid:BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/6XyzM7C6U0Eg9plO23xksot9cNE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.185.216.0/22 185.190.89.0/24 185.194.12.0/24 IPv6: 2a0b:6580::/29 Signature Algorithm: sha256WithRSAEncryption 5e:57:ce:a8:0f:95:2c:2a:9d:f9:95:39:8b:65:53:40:f6:be: c6:03:45:b0:58:61:b1:a5:c4:f0:10:05:f0:af:ca:d2:0b:7d: 2e:e0:ef:b8:9b:04:23:ce:80:21:8f:db:e3:0c:52:31:b7:26: 28:83:43:13:fc:98:e9:da:eb:68:73:91:52:42:e5:94:d1:d8: 62:8a:9a:45:65:95:ec:0d:e9:e0:56:08:58:61:ae:ea:eb:ad: 8b:04:76:f5:04:cc:ff:fa:af:aa:55:1b:ff:1a:d9:d1:8a:ec: 94:96:24:f4:18:47:b4:57:94:50:4a:52:fc:d6:0b:bd:f1:f0: 28:6d:13:90:66:c6:a6:53:3e:fb:e2:68:7a:5e:93:be:1e:79: e6:c5:7a:08:e1:d1:62:78:56:da:44:33:3c:8b:fc:d5:0c:8b: ac:54:1b:cb:95:59:d7:c8:74:27:74:ba:9e:0b:93:bf:e0:56: 4e:af:6b:da:57:01:5d:90:78:c5:ef:71:9a:e5:d9:cb:e6:80: ef:92:97:b0:24:31:49:fe:ba:fe:88:7b:f3:0b:ff:48:3c:33: e5:b6:de:8f:3c:63:9f:65:60:c6:34:e9:65:3a:ad:fd:95:4b: af:2e:78:57:a3:13:ed:93:8d:c9:8b:82:25:a1:43:b9:0e:ce: 8b:2b:18:5a -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt7pCWrLYydPN9wwN6dPlthMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNTRiNmU1ZmNjYTMwOGIzNmRjOGYxNjc2MDZiMmQ2NTk4 MzljZjEwHhcNMjYwMTAxMjIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTdjYjMzM2IwYmE1MzQxMjBmNjk5NGVkYjdjNjRiMjhiN2Q3MGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhqE/EV/htSRsUlG2YQTt7kOuyjk SNvaZlozLGWiQrR16mqyv4SKfljNp5Eurty4s7b5h7qeyHfxwZnZG/hie6/W0QH8 oc6CEitlR9QNQ3Ud87vfhAGvSEXZzhxx31tJS6zfQj+o2Gax6J5G2upSn0LcQMu1 Wd9W/AtAgITtN6qI46Rhm5RxreczJ31fNXgPbGr0W9iDi1Bx5pHsEnHYmV4wz9q3 Tqltfh/VzX7OVVcwjxjHAxGdiulzPMuYwDbLOUDSxsl7OkUgMQzordYwyfxQSaAz CFGDU49uZKAdcmoKbDnE6kR+fvMagUdGTYzt645WorU+YjKx9dtwPCJnKQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFOl8szOwulNBIPaZTtt8ZLKLfXDRMB8GA1UdIwQY MBaAFLpUtuX8yjCLNtyPFnYGstZZg5zxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWxTMjVmektNSXMyM0k4V2RnYXkxbG1EblBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi83OGIxOTAtOGEwMi00Y2I4LWI0ODQt NTI2ZjdjYzUyOWI3LzEvNlh5ek03QzZVMEVnOXBsTzIzeGtzb3Q5Y05FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi83OGIxOTAtOGEwMi00Y2I4LWI0ODQtNTI2ZjdjYzUyOWI3 LzEvdWxTMjVmektNSXMyM0k4V2RnYXkxbG1EblBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCubnYAwQA ub5ZAwQAucIMMA0EAgACMAcDBQMqC2WAMA0GCSqGSIb3DQEBCwUAA4IBAQBeV86o D5UsKp35lTmLZVNA9r7GA0WwWGGxpcTwEAXwr8rSC30u4O+4mwQjzoAhj9vjDFIx tyYog0MT/Jjp2utoc5FSQuWU0dhiippFZZXsDengVghYYa7q662LBHb1BMz/+q+q VRv/GtnRiuyUliT0GEe0V5RQSlL81gu98fAobROQZsamUz774mh6XpO+HnnmxXoI 4dFieFbaRDM8i/zVDIusVBvLlVnXyHQndLqeC5O/4FZOr2vaVwFdkHjF73Ga5dnL 5oDvkpewJDFJ/rr+iHvzC/9IPDPltt6PPGOfZWDGNOllOq39lUuvLnhXoxPtk43J i4IloUO5Ds6LKxha -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:56 2026 by rpki-client