This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/j6GSjngp4zBMa0A6Up3-vP_HpYA.roa File: j6GSjngp4zBMa0A6Up3-vP_HpYA.roa (raw, json) Hash identifier: eFIS08YcHeuG7OXuLasqB4hIQnIZETYTn/VjLjZa0pQ= Subject key identifier: 8F:A1:92:8E:78:29:E3:30:4C:6B:40:3A:52:9D:FE:BC:FF:C7:A5:80 Certificate issuer: /CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922 Certificate serial: 019B7834E301A5317C560DBD3740E33E0880 Authority key identifier: 3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/j6GSjngp4zBMa0A6Up3-vP_HpYA.roa Signing time: Thu 01 Jan 2026 06:18:10 +0000 ROA not before: Thu 01 Jan 2026 06:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206355 IP address blocks: 185.192.136.0/22 maxlen: 22 2a0a:2cc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:e3:01:a5:31:7c:56:0d:bd:37:40:e3:3e:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922 Validity Not Before: Jan 1 06:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fa1928e7829e3304c6b403a529dfebcffc7a580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:63:6b:aa:0b:19:9c:d6:25:a4:4b:08:b9:00: e4:67:58:bd:fe:af:1d:b6:a5:d7:53:5c:ca:86:47: 05:81:4c:0c:68:00:cb:ea:0d:99:4e:43:d6:9b:9b: 40:6b:55:8a:2d:a5:4f:b4:e6:3a:c5:f1:75:e9:5b: e6:9e:97:13:38:a2:a3:0b:8e:06:f2:31:3c:8b:75: 51:35:58:b9:15:24:23:85:44:e4:38:a1:de:1b:e3: 27:64:14:d2:31:7d:f6:d7:f4:bf:81:ad:f2:73:c9: 8f:e5:5c:b3:27:f9:e8:e8:80:f1:37:64:01:98:05: 70:13:d7:fb:d4:4a:ac:47:4c:a9:11:82:bb:41:d2: ca:0d:fa:b7:0f:f6:2a:b3:59:aa:c2:ed:43:79:d9: d2:6a:77:a2:33:26:a3:f7:c2:65:72:d9:02:15:02: fd:4a:ed:0c:ed:3c:d0:eb:cd:14:96:a8:fb:b0:4c: ec:32:ac:b3:b4:c9:e5:cc:9b:21:a9:ea:cd:7d:be: 0f:4d:5f:f5:10:5d:45:e3:72:29:3a:ae:05:26:20: 4e:25:43:08:0d:56:3e:60:b2:c4:44:c4:16:7a:29: 59:78:90:53:90:e0:23:b2:12:4e:d1:b9:76:82:0c: 13:52:4d:08:4d:92:bf:8a:93:51:9d:03:07:68:3f: a7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A1:92:8E:78:29:E3:30:4C:6B:40:3A:52:9D:FE:BC:FF:C7:A5:80 X509v3 Authority Key Identifier: keyid:3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/j6GSjngp4zBMa0A6Up3-vP_HpYA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.192.136.0/22 IPv6: 2a0a:2cc0::/29 Signature Algorithm: sha256WithRSAEncryption 3e:72:83:31:21:f5:d2:05:55:5b:26:f0:b7:d8:c1:fc:1d:d0: db:f1:f5:f5:e3:43:f1:26:e0:a4:8a:4c:0b:e0:cb:ce:20:91: 90:42:c8:20:c7:bc:41:b3:0b:26:a6:53:36:0c:07:88:8f:57: 01:b7:78:93:f6:05:31:27:81:ec:e1:a1:14:b3:1b:05:c6:bb: 92:5a:fe:c8:cc:dd:16:a1:11:fa:33:71:ee:52:26:10:5d:34: e5:90:c6:3c:41:46:93:fa:9c:6f:fc:17:88:5c:f3:55:5c:2b: 1f:fa:dc:ca:e6:38:0d:cd:32:3f:09:0d:3d:2c:59:8c:65:fb: a5:e1:57:ab:38:70:71:c7:ed:50:4b:af:6d:99:39:d6:22:10: 3e:24:eb:5c:f0:97:6d:b0:3a:75:ad:82:35:6b:a8:72:f2:bf: c6:82:4f:99:13:20:90:2e:fd:18:a7:0f:16:9b:39:b3:cb:7a: ac:7a:0b:41:9b:80:13:4f:25:45:46:5e:42:3c:3e:74:52:c6: 43:a3:16:99:6a:e3:ff:8a:8d:5c:bb:95:19:60:b9:63:35:b8: 28:45:4c:3c:97:69:34:da:1d:4a:a5:3d:50:f8:49:4e:04:27: dd:84:c2:a1:83:e3:62:a8:8f:23:4a:77:cb:76:b0:1e:bd:bb: 04:e4:61:9f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NOMBpTF8Vg29N0DjPgiAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMzM2M2U0N2U2OWViYzVkMWMyMjUxZGRkNWRhYzdjOTg5 ODk5MjIwHhcNMjYwMTAxMDYxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmExOTI4ZTc4MjllMzMwNGM2YjQwM2E1MjlkZmViY2ZmYzdhNTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWNrqgsZnNYlpEsIuQDkZ1i9/q8d tqXXU1zKhkcFgUwMaADL6g2ZTkPWm5tAa1WKLaVPtOY6xfF16VvmnpcTOKKjC44G 8jE8i3VRNVi5FSQjhUTkOKHeG+MnZBTSMX321/S/ga3yc8mP5VyzJ/no6IDxN2QB mAVwE9f71EqsR0ypEYK7QdLKDfq3D/Yqs1mqwu1DednSaneiMyaj98JlctkCFQL9 Su0M7TzQ680Ulqj7sEzsMqyztMnlzJshqerNfb4PTV/1EF1F43IpOq4FJiBOJUMI DVY+YLLERMQWeilZeJBTkOAjshJO0bl2ggwTUk0ITZK/ipNRnQMHaD+nSwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFI+hko54KeMwTGtAOlKd/rz/x6WAMB8GA1UdIwQY MBaAFDszY+R+aevF0cIlHd1drHyYmJkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3pOajVINXA2OFhSd2lVZDNWMnNmSmlZbVNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9kMzJjZDQtYmE5My00ZjE2LTg5OWMt Y2NkYWRmN2Y2NWYyLzEvajZHU2puZ3A0ekJNYTBBNlVwMy12UF9IcFlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9kMzJjZDQtYmE5My00ZjE2LTg5OWMtY2NkYWRmN2Y2NWYy LzEvT3pOajVINXA2OFhSd2lVZDNWMnNmSmlZbVNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCucCIMA0E AgACMAcDBQMqCizAMA0GCSqGSIb3DQEBCwUAA4IBAQA+coMxIfXSBVVbJvC32MH8 HdDb8fX140PxJuCkikwL4MvOIJGQQsggx7xBswsmplM2DAeIj1cBt3iT9gUxJ4Hs 4aEUsxsFxruSWv7IzN0WoRH6M3HuUiYQXTTlkMY8QUaT+pxv/BeIXPNVXCsf+tzK 5jgNzTI/CQ09LFmMZful4VerOHBxx+1QS69tmTnWIhA+JOtc8JdtsDp1rYI1a6hy 8r/Ggk+ZEyCQLv0Ypw8Wmzmzy3qsegtBm4ATTyVFRl5CPD50UsZDoxaZauP/io1c u5UZYLljNbgoRUw8l2k02h1KpT1Q+ElOBCfdhMKhg+NiqI8jSnfLdrAevbsE5GGf -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:44 2026 by rpki-client