This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/6jm1c5ao4TIq41DDCm24Gn-cCvM.roa File: 6jm1c5ao4TIq41DDCm24Gn-cCvM.roa (raw, json) Hash identifier: DHj5HqftZAg5kJDUChpZMa9puMwdu/NpQqmWhiH73fE= Subject key identifier: EA:39:B5:73:96:A8:E1:32:2A:E3:50:C3:0A:6D:B8:1A:7F:9C:0A:F3 Certificate issuer: /CN=dec0f14fac8ddb348037280076cc36614da305ec Certificate serial: 019B7BA50F91A5DB7FB4FBDC4CCC2314BE9B Authority key identifier: DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/6jm1c5ao4TIq41DDCm24Gn-cCvM.roa Signing time: Thu 01 Jan 2026 22:19:33 +0000 ROA not before: Thu 01 Jan 2026 22:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209793 IP address blocks: 185.127.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:0f:91:a5:db:7f:b4:fb:dc:4c:cc:23:14:be:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dec0f14fac8ddb348037280076cc36614da305ec Validity Not Before: Jan 1 22:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea39b57396a8e1322ae350c30a6db81a7f9c0af3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:84:b0:ba:44:0d:fc:a1:b3:97:35:3c:0d:49: 05:43:49:c9:ba:09:0f:6e:3a:83:89:11:57:9b:04: bf:ea:c7:41:50:f3:fb:06:f7:d8:82:6d:41:e6:71: 09:c6:5f:99:8d:09:4e:55:6c:66:f7:40:c6:e0:9f: 1a:da:60:2d:a2:e9:64:1a:ee:83:22:03:d7:9b:51: 23:a4:de:25:d1:2f:75:34:22:87:15:df:82:16:37: bc:98:d2:f8:20:93:58:b2:93:73:b7:48:eb:53:f2: bd:08:ec:40:0a:81:71:1b:f8:b2:b3:8e:23:b1:6d: 51:f1:32:ac:e3:77:b2:cb:44:9e:95:c9:f8:1b:cd: 41:d2:87:2e:bf:8b:68:a9:04:f9:ff:95:90:92:23: 86:7f:8f:93:bc:77:a8:64:c7:bb:65:46:34:78:dd: 2e:25:3b:e1:c5:4c:ac:c2:be:25:ba:82:64:6a:ec: cf:1f:bb:35:e7:85:3f:51:d9:b1:28:2c:ac:43:f1: 3f:db:4d:54:b0:28:d2:fd:be:6a:3a:ac:76:2a:68: b1:71:95:d7:1f:57:a0:38:47:47:dc:96:b5:b6:56: 18:b7:10:c1:5c:4e:23:2c:6a:63:0b:16:61:0a:54: 89:11:44:f4:66:dd:9b:9c:6a:e3:b2:1a:40:c2:26: e9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:39:B5:73:96:A8:E1:32:2A:E3:50:C3:0A:6D:B8:1A:7F:9C:0A:F3 X509v3 Authority Key Identifier: keyid:DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/6jm1c5ao4TIq41DDCm24Gn-cCvM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.127.200.0/22 Signature Algorithm: sha256WithRSAEncryption b5:6a:4c:3a:db:44:63:73:6e:9f:34:6e:c1:d8:92:47:59:99: 4a:65:4c:a2:94:8b:d2:42:b1:17:cb:77:38:a7:1a:e3:b3:4f: 74:f8:a5:8b:4d:2f:93:9a:ed:63:e6:ba:03:7d:e5:4f:6b:6f: 36:14:fe:8f:dc:3e:a1:fc:ab:01:6f:d6:5e:7e:37:02:6c:b9: 98:46:f6:05:40:73:73:7a:5b:9c:38:59:0a:d2:7e:61:be:7f: a7:aa:f0:8a:04:81:e1:db:af:53:39:60:0e:cc:d1:36:a8:a2: 55:1f:85:f7:d8:2e:81:ef:87:a9:8e:31:b9:92:ec:f0:94:77: 4e:d5:bc:a9:34:00:5d:de:34:89:30:9d:df:58:eb:a8:a8:50: bc:97:a1:a2:29:cb:8f:18:e4:a4:7e:de:99:69:54:86:5a:0c: e9:e7:0e:83:1f:50:35:41:91:03:3d:06:77:9a:31:7b:94:17: 22:55:ef:fe:86:b1:0c:0e:c4:e0:4e:c7:d3:bf:75:3c:84:0a: ff:57:64:cb:98:f1:a8:ef:a5:e9:ad:bf:87:af:24:77:92:cc: fb:1b:00:37:49:d8:24:32:5f:ce:73:a3:70:b3:98:d5:a4:4f: e5:e5:78:e4:10:c2:7b:61:0b:26:52:c1:2b:7b:91:75:ba:3e: 88:ed:79:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pQ+Rpdt/tPvcTMwjFL6bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYzBmMTRmYWM4ZGRiMzQ4MDM3MjgwMDc2Y2MzNjYxNGRh MzA1ZWMwHhcNMjYwMTAxMjIxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTM5YjU3Mzk2YThlMTMyMmFlMzUwYzMwYTZkYjgxYTdmOWMwYWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoSwukQN/KGzlzU8DUkFQ0nJugkP bjqDiRFXmwS/6sdBUPP7BvfYgm1B5nEJxl+ZjQlOVWxm90DG4J8a2mAtoulkGu6D IgPXm1EjpN4l0S91NCKHFd+CFje8mNL4IJNYspNzt0jrU/K9COxACoFxG/iys44j sW1R8TKs43eyy0Selcn4G81B0ocuv4toqQT5/5WQkiOGf4+TvHeoZMe7ZUY0eN0u JTvhxUyswr4luoJkauzPH7s154U/UdmxKCysQ/E/201UsCjS/b5qOqx2KmixcZXX H1egOEdH3Ja1tlYYtxDBXE4jLGpjCxZhClSJEUT0Zt2bnGrjshpAwibpNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOo5tXOWqOEyKuNQwwptuBp/nArzMB8GA1UdIwQY MBaAFN7A8U+sjds0gDcoAHbMNmFNowXsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3NEeFQ2eU4yelNBTnlnQWRzdzJZVTJqQmV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wMGE5ZjktMTRhMS00Yzk2LTgyMjMt ZWViNmZkMzJlOTJmLzEvNmptMWM1YW80VElxNDFERENtMjRHbi1jQ3ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8wMGE5ZjktMTRhMS00Yzk2LTgyMjMtZWViNmZkMzJlOTJm LzEvM3NEeFQ2eU4yelNBTnlnQWRzdzJZVTJqQmV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuX/IMA0G CSqGSIb3DQEBCwUAA4IBAQC1akw620Rjc26fNG7B2JJHWZlKZUyilIvSQrEXy3c4 pxrjs090+KWLTS+Tmu1j5roDfeVPa282FP6P3D6h/KsBb9ZefjcCbLmYRvYFQHNz elucOFkK0n5hvn+nqvCKBIHh269TOWAOzNE2qKJVH4X32C6B74epjjG5kuzwlHdO 1bypNABd3jSJMJ3fWOuoqFC8l6GiKcuPGOSkft6ZaVSGWgzp5w6DH1A1QZEDPQZ3 mjF7lBciVe/+hrEMDsTgTsfTv3U8hAr/V2TLmPGo76Xprb+HryR3ksz7GwA3Sdgk Ml/Oc6Nws5jVpE/l5XjkEMJ7YQsmUsEre5F1uj6I7Xmq -----END CERTIFICATE-----Generated at Mon Feb 9 23:43:05 2026 by rpki-client