This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/6EZBeGxNf7QRr-7BKxfjk1mIV8I.roa File: 6EZBeGxNf7QRr-7BKxfjk1mIV8I.roa (raw, json) Hash identifier: WC0gwtiT4OCWAekCe2z7fiG7BMx8NcVUB2W69nAJWQM= Subject key identifier: E8:46:41:78:6C:4D:7F:B4:11:AF:EE:C1:2B:17:E3:93:59:88:57:C2 Certificate issuer: /CN=922e330b5879590abae81bf40a91a5101bc18fa0 Certificate serial: 019B79114A90DCAEC516CCC4E4377DF68E0F Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/6EZBeGxNf7QRr-7BKxfjk1mIV8I.roa Signing time: Thu 01 Jan 2026 10:18:54 +0000 ROA not before: Thu 01 Jan 2026 10:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8699 IP address blocks: 185.120.28.0/22 maxlen: 24 185.120.28.0/24 maxlen: 24 185.120.29.0/24 maxlen: 24 185.120.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:4a:90:dc:ae:c5:16:cc:c4:e4:37:7d:f6:8e:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0 Validity Not Before: Jan 1 10:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e84641786c4d7fb411afeec12b17e393598857c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0e:0b:52:8d:ab:7a:62:a2:77:14:37:e5:32: e7:75:03:44:a5:ac:55:61:cb:33:d1:b0:fd:75:f0: 75:18:d1:8c:a9:94:b5:9b:d9:e6:0f:7d:b9:b4:ea: 90:a4:d7:4e:9e:4d:b8:44:7d:2f:1a:67:1a:86:36: 6f:cd:13:cf:2e:15:a0:37:a9:78:57:e9:3d:d0:f3: 50:bc:79:a7:54:04:67:9b:d5:2d:3e:07:00:1c:6e: 7f:f8:f3:65:55:5d:89:d1:de:e7:a3:2b:2b:c3:96: 73:84:09:9c:d7:07:39:c9:2d:ac:1c:e1:58:9c:08: cb:f6:b3:69:84:cf:b7:67:8d:0a:a6:8a:f8:15:15: 13:16:4b:f5:6e:c5:b3:9b:c1:fd:20:e2:f8:8a:76: 95:23:be:e1:03:56:19:08:3d:d5:ec:a2:87:d5:80: 9f:d1:e9:23:6d:53:16:e0:b2:28:54:5f:bc:16:3c: f8:56:1e:38:53:36:d0:32:5f:0a:47:38:3a:0c:be: 0f:8b:24:7d:a6:58:5a:c6:87:a6:49:2d:81:9c:8b: 6f:42:83:49:45:34:3b:52:8c:97:f5:60:ee:ba:b1: 3b:cb:39:0d:e6:ed:8d:34:1b:08:b9:22:ec:4c:a5: 58:1d:42:86:f9:8c:bf:68:87:08:f9:ec:31:34:7f: 63:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:46:41:78:6C:4D:7F:B4:11:AF:EE:C1:2B:17:E3:93:59:88:57:C2 X509v3 Authority Key Identifier: keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/6EZBeGxNf7QRr-7BKxfjk1mIV8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.120.28.0/22 Signature Algorithm: sha256WithRSAEncryption 74:bc:74:34:67:e8:4d:3e:91:4b:9a:5c:58:40:38:b3:08:22: c5:09:50:07:26:d0:8e:1e:e6:54:c4:db:78:c7:98:55:28:da: cc:a1:8e:6c:86:84:12:30:56:ed:6e:a8:99:d0:b2:39:c0:74: 5b:b6:f8:8f:88:ac:c3:50:e4:7f:90:c6:5a:c3:e8:54:c9:19: 33:f4:4b:28:f0:7c:4a:6a:bf:e0:fa:5e:24:37:4c:07:7b:b9: da:b2:69:63:37:38:3a:63:98:8f:6a:c8:65:1b:e3:a0:65:64: 95:c2:25:9c:1f:c5:f0:cf:b1:cb:34:53:50:29:da:68:d5:ca: 57:0d:a0:95:a4:e6:14:54:b0:58:26:6a:89:a9:83:2a:d6:3d: b6:75:f2:b2:a8:25:f1:51:26:ad:d5:61:9d:1e:1e:97:8b:2d: 66:6d:17:a0:b6:ef:d1:8d:19:54:7b:0c:e3:75:29:5c:04:da: a3:22:83:10:5b:05:7e:72:85:14:c3:c8:5c:73:7e:c4:5c:27: 67:00:4a:b5:11:30:ec:22:b7:db:ba:07:33:37:12:f4:67:7a: ac:51:26:3f:b0:8e:53:fa:5a:5d:b5:02:f8:ed:5f:d2:74:b7: 1b:3f:87:83:6a:79:ac:0a:b5:0c:8a:5a:1f:67:a7:59:5e:51: de:dd:6c:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EUqQ3K7FFszE5Dd99o4PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMmUzMzBiNTg3OTU5MGFiYWU4MWJmNDBhOTFhNTEwMWJj MThmYTAwHhcNMjYwMTAxMTAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODQ2NDE3ODZjNGQ3ZmI0MTFhZmVlYzEyYjE3ZTM5MzU5ODg1N2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg4LUo2remKidxQ35TLndQNEpaxV Ycsz0bD9dfB1GNGMqZS1m9nmD325tOqQpNdOnk24RH0vGmcahjZvzRPPLhWgN6l4 V+k90PNQvHmnVARnm9UtPgcAHG5/+PNlVV2J0d7noysrw5ZzhAmc1wc5yS2sHOFY nAjL9rNphM+3Z40Kpor4FRUTFkv1bsWzm8H9IOL4inaVI77hA1YZCD3V7KKH1YCf 0ekjbVMW4LIoVF+8Fjz4Vh44UzbQMl8KRzg6DL4PiyR9plhaxoemSS2BnItvQoNJ RTQ7UoyX9WDuurE7yzkN5u2NNBsIuSLsTKVYHUKG+Yy/aIcI+ewxNH9jEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOhGQXhsTX+0Ea/uwSsX45NZiFfCMB8GA1UdIwQY MBaAFJIuMwtYeVkKuugb9AqRpRAbwY+gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2k0ekMxaDVXUXE2NkJ2MENwR2xFQnZCajZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mMTgwZmYtMzM2Yy00YjQ1LTkzNzgt NTY4NjcyYzI1Y2E4LzEvNkVaQmVHeE5mN1FSci03Qkt4ZmprMW1JVjhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9mMTgwZmYtMzM2Yy00YjQ1LTkzNzgtNTY4NjcyYzI1Y2E4 LzEva2k0ekMxaDVXUXE2NkJ2MENwR2xFQnZCajZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXgcMA0G CSqGSIb3DQEBCwUAA4IBAQB0vHQ0Z+hNPpFLmlxYQDizCCLFCVAHJtCOHuZUxNt4 x5hVKNrMoY5shoQSMFbtbqiZ0LI5wHRbtviPiKzDUOR/kMZaw+hUyRkz9Eso8HxK ar/g+l4kN0wHe7nasmljNzg6Y5iPashlG+OgZWSVwiWcH8Xwz7HLNFNQKdpo1cpX DaCVpOYUVLBYJmqJqYMq1j22dfKyqCXxUSat1WGdHh6Xiy1mbRegtu/RjRlUewzj dSlcBNqjIoMQWwV+coUUw8hcc37EXCdnAEq1ETDsIrfbugczNxL0Z3qsUSY/sI5T +lpdtQL47V/SdLcbP4eDanmsCrUMilofZ6dZXlHe3Wwa -----END CERTIFICATE-----Generated at Mon Feb 9 20:02:48 2026 by rpki-client