This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/a6NDP_sdQRIyavB-C2u1iT6I1vI.roa File: a6NDP_sdQRIyavB-C2u1iT6I1vI.roa (raw, json) Hash identifier: 45VvDyynPZqMh80rBZVmGivQ3m/ZKBBtliCy4kfcaYA= Subject key identifier: 6B:A3:43:3F:FB:1D:41:12:32:6A:F0:7E:0B:6B:B5:89:3E:88:D6:F2 Certificate issuer: /CN=d283616f1362c25d82ec2a70c4b9750565b1197f Certificate serial: 019B79EBC69E9FFA0E89E62CBC3899B8890B Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/a6NDP_sdQRIyavB-C2u1iT6I1vI.roa Signing time: Thu 01 Jan 2026 14:17:33 +0000 ROA not before: Thu 01 Jan 2026 14:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.54.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 11:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:c6:9e:9f:fa:0e:89:e6:2c:bc:38:99:b8:89:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f Validity Not Before: Jan 1 14:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ba3433ffb1d4112326af07e0b6bb5893e88d6f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:39:c4:c8:2e:13:48:10:93:8f:97:65:0a:41: 37:0b:f5:54:99:78:b6:d5:02:3f:49:27:94:5d:3c: 5d:8c:02:fd:1d:df:c1:3c:ec:65:2d:44:85:2c:3c: d0:df:91:4c:23:a8:61:79:5c:1e:05:53:73:5e:50: 0f:62:a3:47:6c:e3:09:76:0e:98:ed:08:ab:f1:22: ae:8e:94:9b:64:73:66:fd:bc:d4:90:a5:68:cb:cf: 86:90:6c:ad:b3:08:b2:ed:be:09:d3:cb:b4:f3:40: 0d:7d:5e:11:9f:c9:11:d5:d9:39:3c:cf:7f:37:40: 3c:6b:b9:82:7e:dc:47:7a:97:d6:54:21:0a:1c:39: 58:e0:42:f5:ff:b0:f1:6d:58:11:fa:00:7d:30:f1: 4c:42:b8:65:26:4c:9b:a9:1f:bb:14:34:2d:ef:e6: e0:1f:ae:94:11:bb:65:8f:d9:28:8e:01:56:ea:fd: 27:3b:90:01:6a:98:0e:b1:29:77:e4:c2:93:48:a7: b1:a8:7f:5c:44:ac:87:41:c4:9e:6b:f6:cd:e7:45: 29:ee:9d:08:cd:75:6a:76:73:de:43:6d:eb:82:8c: 46:a2:65:3c:8b:da:ee:de:37:73:c1:f8:c4:7d:e7: 8c:71:74:56:7b:9d:b9:ae:e3:1d:22:31:45:ca:0b: 7b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A3:43:3F:FB:1D:41:12:32:6A:F0:7E:0B:6B:B5:89:3E:88:D6:F2 X509v3 Authority Key Identifier: keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/a6NDP_sdQRIyavB-C2u1iT6I1vI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.72.0/22 Signature Algorithm: sha256WithRSAEncryption 07:df:69:fe:87:9f:d1:53:68:f5:ef:2d:fc:b7:c0:8b:e1:bc: a9:ab:b1:bf:a1:f3:3f:45:2f:82:53:b8:d2:19:17:4c:eb:08: 1b:85:9a:b6:1c:27:50:54:9f:f3:33:13:1b:ac:13:0a:73:2c: d7:7b:11:55:57:a4:cf:f3:b3:16:4b:bb:72:d7:59:07:8b:5c: c9:78:64:a4:34:53:9d:c1:9c:7c:76:74:fe:42:c4:b6:b7:7b: 43:c8:d9:37:1e:62:23:ac:c9:a1:81:3f:fe:33:21:6b:e0:99: 56:9e:3e:6d:0d:76:93:8a:a6:6c:9e:e3:4d:83:10:64:05:f6: 79:a6:0f:b2:b1:a8:cb:18:c5:67:eb:b1:00:87:eb:76:9b:c7: 67:72:d7:a8:4e:d6:83:3e:6a:0e:9e:bc:0a:e1:ed:c1:19:f5: f9:3f:d2:57:c4:ad:8e:3f:1a:c1:33:5d:2e:9e:3b:fc:01:ca: f2:ec:a0:a4:4f:5a:81:7e:90:a9:2c:e0:5a:a9:24:5f:36:91: 4a:23:a7:e1:f6:1c:06:38:65:06:c6:00:28:15:89:03:51:a3: ef:25:e1:1b:26:1f:99:14:f0:9a:fb:87:0d:70:85:5a:e9:9f: 2a:1d:6f:8a:e5:5a:28:31:76:f5:de:e8:d2:a4:e8:6d:83:61: 68:64:d0:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt568aen/oOieYsvDiZuIkLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyODM2MTZmMTM2MmMyNWQ4MmVjMmE3MGM0Yjk3NTA1NjVi MTE5N2YwHhcNMjYwMTAxMTQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmEzNDMzZmZiMWQ0MTEyMzI2YWYwN2UwYjZiYjU4OTNlODhkNmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDnEyC4TSBCTj5dlCkE3C/VUmXi2 1QI/SSeUXTxdjAL9Hd/BPOxlLUSFLDzQ35FMI6hheVweBVNzXlAPYqNHbOMJdg6Y 7Qir8SKujpSbZHNm/bzUkKVoy8+GkGytswiy7b4J08u080ANfV4Rn8kR1dk5PM9/ N0A8a7mCftxHepfWVCEKHDlY4EL1/7DxbVgR+gB9MPFMQrhlJkybqR+7FDQt7+bg H66UEbtlj9kojgFW6v0nO5ABapgOsSl35MKTSKexqH9cRKyHQcSea/bN50Up7p0I zXVqdnPeQ23rgoxGomU8i9ru3jdzwfjEfeeMcXRWe525ruMdIjFFygt7iQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGujQz/7HUESMmrwfgtrtYk+iNbyMB8GA1UdIwQY MBaAFNKDYW8TYsJdguwqcMS5dQVlsRl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yZmJjY2MtNjRiNi00ZjY2LTg5Njkt YTZkMjdjNDMxODE4LzEvYTZORFBfc2RRUkl5YXZCLUMydTFpVDZJMXZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8yZmJjY2MtNjRiNi00ZjY2LTg5NjktYTZkMjdjNDMxODE4 LzEvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTZIMA0G CSqGSIb3DQEBCwUAA4IBAQAH32n+h5/RU2j17y38t8CL4bypq7G/ofM/RS+CU7jS GRdM6wgbhZq2HCdQVJ/zMxMbrBMKcyzXexFVV6TP87MWS7ty11kHi1zJeGSkNFOd wZx8dnT+QsS2t3tDyNk3HmIjrMmhgT/+MyFr4JlWnj5tDXaTiqZsnuNNgxBkBfZ5 pg+ysajLGMVn67EAh+t2m8dncteoTtaDPmoOnrwK4e3BGfX5P9JXxK2OPxrBM10u njv8Acry7KCkT1qBfpCpLOBaqSRfNpFKI6fh9hwGOGUGxgAoFYkDUaPvJeEbJh+Z FPCa+4cNcIVa6Z8qHW+K5VooMXb13ujSpOhtg2FoZNAD -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:59 2026 by rpki-client