This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/6UQvTm-p-AULXjJ2sPlCABLy3UY.roa File: 6UQvTm-p-AULXjJ2sPlCABLy3UY.roa (raw, json) Hash identifier: hqsZROMAccooHoGzPeYowKbva3PrskfKoo1cegdKytE= Subject key identifier: E9:44:2F:4E:6F:A9:F8:05:0B:5E:32:76:B0:F9:42:00:12:F2:DD:46 Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 019BCC706F5A4E545ACFAF6EE63180CB370A Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/6UQvTm-p-AULXjJ2sPlCABLy3UY.roa Signing time: Sat 17 Jan 2026 14:51:19 +0000 ROA not before: Sat 17 Jan 2026 14:51:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61254 IP address blocks: 185.143.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cc:70:6f:5a:4e:54:5a:cf:af:6e:e6:31:80:cb:37:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Jan 17 14:51:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9442f4e6fa9f8050b5e3276b0f9420012f2dd46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:61:39:86:cf:c6:a7:72:ad:fb:1a:6a:ca:55: f6:4e:22:1b:e1:0f:04:86:ed:8d:af:9d:f2:ac:68: 14:b3:aa:83:69:3f:d0:7a:aa:db:57:0c:01:fb:df: b9:f9:c4:5e:c7:a7:2e:ba:9b:a5:4a:49:e4:6c:fc: 2f:20:d7:3c:aa:10:79:fd:f4:91:50:33:ea:89:30: bf:37:fa:aa:6d:88:87:b9:46:3e:00:94:71:49:51: 7a:d7:8a:28:3a:ab:09:bc:01:f4:66:8e:6e:83:fe: 26:e8:c3:a4:f2:d6:5b:ea:ac:f1:fb:6f:48:8a:56: 72:7f:98:a2:e6:5c:b8:95:a2:b7:4f:f4:e9:a8:c9: 81:b7:eb:03:a4:45:d6:53:cc:d6:76:e0:7b:80:e8: 23:a1:ae:a1:e0:4c:42:94:6d:4d:f8:c2:c6:37:3f: 71:28:7d:9b:f1:1e:69:2f:f3:24:58:ca:79:a0:35: ad:c3:0c:88:9d:c3:5e:66:1c:8f:9d:99:18:a5:23: 90:a3:83:b6:3d:10:d3:36:12:c5:33:9a:d4:9c:b7: 77:8c:b4:86:12:dc:57:02:bd:f5:c1:fd:d4:31:83: 84:2e:c9:aa:8b:70:93:df:ec:63:98:39:38:46:64: b4:54:24:ca:8c:c9:b7:b7:5a:41:3b:0e:c6:cb:36: c1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:44:2F:4E:6F:A9:F8:05:0B:5E:32:76:B0:F9:42:00:12:F2:DD:46 X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/6UQvTm-p-AULXjJ2sPlCABLy3UY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.143.72.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:a7:40:61:d5:dd:e8:61:b2:f5:9d:e3:b0:55:4f:67:25:29: bf:88:a8:93:97:18:fd:6a:7a:3d:4c:65:bc:7b:5e:d1:f4:32: 75:a3:aa:85:47:ec:14:bc:54:f5:a6:56:2a:68:ab:7b:e5:1d: 05:6e:15:6b:ff:fe:14:bd:05:95:80:78:4a:36:4f:0a:ab:40: 32:e6:f7:e6:58:14:6f:37:32:1b:aa:63:07:97:00:e5:27:13: 4a:a2:60:b5:67:20:ca:f4:cf:61:3d:9f:c1:0b:28:80:10:e1: b7:c1:49:63:b7:bf:92:55:73:b0:1a:10:08:47:6b:b2:1c:82: 6e:90:04:7b:a5:80:e7:05:f0:9c:ff:46:da:b8:ac:0d:79:e8: 36:39:db:1c:70:5b:53:0f:4a:c0:78:1c:f2:02:96:65:7d:b6: 62:a4:08:52:57:00:36:11:8d:09:46:c6:1e:85:51:c0:ff:b0: b4:94:0e:91:6c:5c:9f:e7:e8:6c:b3:02:ee:30:26:46:be:35: 4a:00:88:89:b7:55:76:26:2e:e9:b4:77:1b:af:73:41:3f:b3: 0f:bd:1d:aa:e7:95:3b:01:43:04:9f:4f:06:4a:70:c0:c4:95: d0:bf:5a:91:ce:f0:10:aa:0f:e6:8a:f8:2d:38:ed:b3:ec:d1: fa:f1:89:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvMcG9aTlRaz69u5jGAyzcKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjYwMTE3MTQ1MTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTQ0MmY0ZTZmYTlmODA1MGI1ZTMyNzZiMGY5NDIwMDEyZjJkZDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2E5hs/Gp3Kt+xpqylX2TiIb4Q8E hu2Nr53yrGgUs6qDaT/QeqrbVwwB+9+5+cRex6cuupulSknkbPwvINc8qhB5/fSR UDPqiTC/N/qqbYiHuUY+AJRxSVF614ooOqsJvAH0Zo5ug/4m6MOk8tZb6qzx+29I ilZyf5ii5ly4laK3T/TpqMmBt+sDpEXWU8zWduB7gOgjoa6h4ExClG1N+MLGNz9x KH2b8R5pL/MkWMp5oDWtwwyIncNeZhyPnZkYpSOQo4O2PRDTNhLFM5rUnLd3jLSG EtxXAr31wf3UMYOELsmqi3CT3+xjmDk4RmS0VCTKjMm3t1pBOw7GyzbBzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOlEL05vqfgFC14ydrD5QgAS8t1GMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvNlVRdlRtLXAtQVVMWGpKMnNQbENBQkx5M1VZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuY9IMA0G CSqGSIb3DQEBCwUAA4IBAQBdp0Bh1d3oYbL1neOwVU9nJSm/iKiTlxj9ano9TGW8 e17R9DJ1o6qFR+wUvFT1plYqaKt75R0FbhVr//4UvQWVgHhKNk8Kq0Ay5vfmWBRv NzIbqmMHlwDlJxNKomC1ZyDK9M9hPZ/BCyiAEOG3wUljt7+SVXOwGhAIR2uyHIJu kAR7pYDnBfCc/0bauKwNeeg2OdsccFtTD0rAeBzyApZlfbZipAhSVwA2EY0JRsYe hVHA/7C0lA6RbFyf5+hsswLuMCZGvjVKAIiJt1V2Ji7ptHcbr3NBP7MPvR2q55U7 AUMEn08GSnDAxJXQv1qRzvAQqg/mivgtOO2z7NH68YmL -----END CERTIFICATE-----Generated at Wed Jan 21 04:04:11 2026 by rpki-client