This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/6rPz8igkyZRlNFZsutLMqabI34I.roa File: 6rPz8igkyZRlNFZsutLMqabI34I.roa (raw, json) Hash identifier: Z2BW3rAqZoeVlHqBJzAMivNjITmnHOwFnbfJtV0fFqY= Subject key identifier: EA:B3:F3:F2:28:24:C9:94:65:34:56:6C:BA:D2:CC:A9:A6:C8:DF:82 Certificate issuer: /CN=dffc49195a439d5b9d7112b336015eee2c944d89 Certificate serial: 019B7F8193512475C9D5C507EED7F1D53A3F Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/6rPz8igkyZRlNFZsutLMqabI34I.roa Signing time: Fri 02 Jan 2026 16:19:16 +0000 ROA not before: Fri 02 Jan 2026 16:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206098 IP address blocks: 185.193.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:93:51:24:75:c9:d5:c5:07:ee:d7:f1:d5:3a:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89 Validity Not Before: Jan 2 16:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eab3f3f22824c9946534566cbad2cca9a6c8df82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9d:6b:20:b3:c4:19:ee:d8:ec:2d:1d:b3:13: 19:d7:8a:05:d4:0e:bd:ec:9a:28:6e:86:ad:d0:02: d0:db:96:97:47:82:53:f9:20:8e:7a:20:82:b1:35: be:ea:ac:94:81:98:3e:f5:23:16:b9:fd:48:4f:fb: 35:6f:03:74:4c:e2:2c:2a:b2:d3:b9:e4:3d:97:92: 62:8f:31:98:1d:f5:84:c3:ed:23:76:be:41:f8:da: c5:f0:ca:c3:e0:33:d4:57:be:10:86:51:e3:19:27: ed:dc:3e:e1:83:66:e9:b5:21:15:a2:2d:c3:68:f8: f0:83:ea:65:26:9c:bc:a9:67:bc:fa:ea:f1:46:c4: 55:2d:51:86:df:27:e8:1b:6f:22:c8:ce:39:b8:2e: fb:79:d8:d3:3b:7c:46:cb:ec:7a:52:57:a2:40:fa: 4c:6f:28:5c:fa:e8:0c:f0:7f:6d:01:c9:0a:b8:fa: 6a:bb:1d:05:12:ad:8d:f7:0d:23:6d:76:f5:68:1d: 5b:5a:0e:55:62:d8:f6:0d:d8:fe:8a:57:d6:bb:9c: bf:d6:89:51:59:03:9d:dd:18:4d:09:ba:25:ad:44: 7d:c6:d5:15:11:f0:90:79:50:52:28:06:6c:fa:47: 49:82:6c:90:47:be:44:69:bf:bc:79:50:6a:3f:cb: c3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B3:F3:F2:28:24:C9:94:65:34:56:6C:BA:D2:CC:A9:A6:C8:DF:82 X509v3 Authority Key Identifier: keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/6rPz8igkyZRlNFZsutLMqabI34I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.193.58.0/24 Signature Algorithm: sha256WithRSAEncryption 58:e5:4a:17:bc:48:19:fc:98:c3:89:39:67:f9:1a:98:01:9a: f6:2c:f5:8c:f4:86:97:9c:0f:f0:a5:8d:c9:a9:4b:f2:7d:14: 30:7f:ee:74:0f:f5:93:85:02:67:33:82:dd:75:39:8b:8f:d7: f7:38:68:dd:9b:2e:3c:51:02:b0:ef:a1:a9:e8:5b:09:00:01: d3:3d:27:d5:d4:f2:33:a6:c9:11:d1:a6:eb:bf:aa:8a:d6:98: a9:1a:c9:c4:17:ab:86:f9:7d:f4:3d:3b:07:0c:d3:e9:1e:01: 39:1b:9a:76:29:e4:37:0c:b9:43:6f:1d:61:38:46:f6:d3:ff: 07:41:64:ed:fe:ab:cd:35:a1:26:63:61:75:83:d9:7d:1d:cd: d1:0c:83:88:b1:e7:01:3a:b1:bf:ab:dc:10:4c:cb:9d:30:d5: c0:20:a2:10:ff:6d:41:03:06:d4:10:f3:db:80:c2:f3:ae:cf: bc:fb:43:f2:b9:55:3b:b9:52:74:da:a3:5d:84:56:d4:4f:90: 9e:c0:a0:71:4b:e0:15:00:e6:d5:32:6f:dc:89:b1:d7:e2:15: b6:15:56:2b:a8:42:1c:b0:c8:f2:74:47:f1:0b:1e:1d:0a:0f: 50:37:95:95:99:99:d2:b1:91:b2:ed:65:58:86:6d:35:cf:d7: e8:08:d2:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gZNRJHXJ1cUH7tfx1To/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZmM0OTE5NWE0MzlkNWI5ZDcxMTJiMzM2MDE1ZWVlMmM5 NDRkODkwHhcNMjYwMTAyMTYxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWIzZjNmMjI4MjRjOTk0NjUzNDU2NmNiYWQyY2NhOWE2YzhkZjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Z1rILPEGe7Y7C0dsxMZ14oF1A69 7Jooboat0ALQ25aXR4JT+SCOeiCCsTW+6qyUgZg+9SMWuf1IT/s1bwN0TOIsKrLT ueQ9l5JijzGYHfWEw+0jdr5B+NrF8MrD4DPUV74QhlHjGSft3D7hg2bptSEVoi3D aPjwg+plJpy8qWe8+urxRsRVLVGG3yfoG28iyM45uC77edjTO3xGy+x6UleiQPpM byhc+ugM8H9tAckKuPpqux0FEq2N9w0jbXb1aB1bWg5VYtj2Ddj+ilfWu5y/1olR WQOd3RhNCbolrUR9xtUVEfCQeVBSKAZs+kdJgmyQR75Eab+8eVBqP8vDxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOqz8/IoJMmUZTRWbLrSzKmmyN+CMB8GA1UdIwQY MBaAFN/8SRlaQ51bnXESszYBXu4slE2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM194SkdWcERuVnVkY1JLek5nRmU3aXlVVFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9iMjhkODktYjg5Yi00NjgyLWI4Yzct N2ViYjZiOWUzNjlkLzEvNnJQejhpZ2t5WlJsTkZac3V0TE1xYWJJMzRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9iMjhkODktYjg5Yi00NjgyLWI4YzctN2ViYjZiOWUzNjlk LzEvM194SkdWcERuVnVkY1JLek5nRmU3aXlVVFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucE6MA0G CSqGSIb3DQEBCwUAA4IBAQBY5UoXvEgZ/JjDiTln+RqYAZr2LPWM9IaXnA/wpY3J qUvyfRQwf+50D/WThQJnM4LddTmLj9f3OGjdmy48UQKw76Gp6FsJAAHTPSfV1PIz pskR0abrv6qK1pipGsnEF6uG+X30PTsHDNPpHgE5G5p2KeQ3DLlDbx1hOEb20/8H QWTt/qvNNaEmY2F1g9l9Hc3RDIOIsecBOrG/q9wQTMudMNXAIKIQ/21BAwbUEPPb gMLzrs+8+0PyuVU7uVJ02qNdhFbUT5CewKBxS+AVAObVMm/cibHX4hW2FVYrqEIc sMjydEfxCx4dCg9QN5WVmZnSsZGy7WVYhm01z9foCNJS -----END CERTIFICATE-----Generated at Tue Jan 20 00:27:46 2026 by rpki-client