This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/1-6zs2tFXXISIgFOlv5glBqi3Rng.roa File: 1-6zs2tFXXISIgFOlv5glBqi3Rng.roa (raw, json) Hash identifier: ir6ev4+OP/qbZnv/DV6VaazeZTLvFs2HPxmxvhdDnKM= Subject key identifier: FB:AC:EC:DA:D1:57:5C:84:88:80:53:A5:BF:98:25:06:A8:B7:46:78 Certificate issuer: /CN=6ffce16ffd6a9ba9c57314558a447fabf6c5c0da Certificate serial: 019B7AC806F022CA58789B217EBBF418EFCE Authority key identifier: 6F:FC:E1:6F:FD:6A:9B:A9:C5:73:14:55:8A:44:7F:AB:F6:C5:C0:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/1-6zs2tFXXISIgFOlv5glBqi3Rng.roa Signing time: Thu 01 Jan 2026 18:18:07 +0000 ROA not before: Thu 01 Jan 2026 18:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206694 IP address blocks: 185.122.120.0/24 maxlen: 24 185.122.121.0/24 maxlen: 24 185.122.122.0/24 maxlen: 24 185.122.123.0/24 maxlen: 24 193.53.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.crl rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:06:f0:22:ca:58:78:9b:21:7e:bb:f4:18:ef:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ffce16ffd6a9ba9c57314558a447fabf6c5c0da Validity Not Before: Jan 1 18:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbacecdad1575c84888053a5bf982506a8b74678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f5:ba:9f:d0:64:4e:77:3c:c1:b1:50:62:27: ad:8b:f5:8a:8e:99:7e:3c:40:f4:b6:4c:98:ba:3c: 66:59:1d:13:50:a4:e2:32:c4:64:72:7f:e6:73:e7: f5:28:3c:9b:a2:b4:48:1e:2a:98:b9:a3:38:33:4e: 28:be:a4:40:6a:a9:5d:d9:9e:b2:0c:09:95:d0:73: 61:1d:00:1b:10:80:cb:74:bb:b0:f0:23:e2:4a:5f: f6:69:26:0e:d2:73:6f:9c:d8:f1:23:85:5d:c1:14: 61:5f:13:c5:09:12:bb:27:2f:da:ad:94:01:a8:00: 19:b5:f8:95:a3:7a:78:b6:4e:17:02:c7:47:20:7f: 35:d8:05:8b:8a:a4:20:70:dd:62:66:9d:54:be:f6: 5e:39:ab:bb:07:80:b6:58:00:c0:52:36:f7:3b:ad: df:11:7a:25:cd:35:8e:73:09:cb:8a:ea:34:00:98: c2:41:63:f5:cf:74:57:26:a5:ae:85:d4:07:78:f8: 4e:ef:64:0f:63:9b:b1:30:d3:a1:7e:79:7a:f5:6b: f8:58:06:d7:90:0a:25:1e:b1:21:88:3c:73:0d:d0: 7a:bc:e8:d3:a3:e8:63:7c:ae:af:76:0b:f6:b0:68: 19:16:c7:e0:e0:f9:ef:04:33:ad:3d:4d:83:d1:b7: 43:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AC:EC:DA:D1:57:5C:84:88:80:53:A5:BF:98:25:06:A8:B7:46:78 X509v3 Authority Key Identifier: keyid:6F:FC:E1:6F:FD:6A:9B:A9:C5:73:14:55:8A:44:7F:AB:F6:C5:C0:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/1-6zs2tFXXISIgFOlv5glBqi3Rng.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.122.120.0/22 193.53.86.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:a9:f8:06:7d:18:c5:b1:90:96:4c:10:ef:01:39:39:0c:2c: 3d:a0:00:9d:05:6f:6c:39:cb:67:8f:e1:1a:cc:f3:ae:a2:40: e9:a5:ad:ca:b2:54:28:00:8d:39:0c:b9:26:e1:90:38:85:32: 18:ac:cd:cd:25:33:8b:e4:4d:da:49:fd:46:02:b9:58:4e:55: 6f:48:9a:8c:e1:9c:c5:d3:09:0b:3f:b7:f2:12:1a:4c:24:15: 6a:1e:6b:e5:16:9d:f5:5d:3b:83:a8:03:25:2c:28:3b:e8:27: 8d:df:67:61:2b:fc:ed:b0:5d:0e:48:57:0d:0a:70:1d:86:c1: 20:c8:97:bf:4b:c7:6d:61:e5:af:be:5e:19:1e:02:a8:a2:96: e9:e6:8b:c0:db:44:c6:e7:19:1c:9a:c2:4a:ff:35:bc:b7:ea: b3:26:7c:3e:c0:f5:29:bf:58:80:7a:ef:f9:c8:42:ad:53:24: 69:28:12:fa:f3:91:26:fc:24:d9:de:5b:87:39:cb:7f:40:8d: 83:7c:b1:91:01:39:be:72:5a:11:34:85:d1:91:6f:9a:2a:9f: a8:27:bc:2e:e2:7d:e7:ed:38:b6:74:58:5a:34:18:1d:12:5d: 80:4b:8c:df:3a:42:c3:cf:2d:22:e9:c3:b5:7f:05:7c:b5:86: 65:bf:0e:39 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt6yAbwIspYeJshfrv0GO/OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZmNlMTZmZmQ2YTliYTljNTczMTQ1NThhNDQ3ZmFiZjZj NWMwZGEwHhcNMjYwMTAxMTgxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmFjZWNkYWQxNTc1Yzg0ODg4MDUzYTViZjk4MjUwNmE4Yjc0Njc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufW6n9BkTnc8wbFQYieti/WKjpl+ PED0tkyYujxmWR0TUKTiMsRkcn/mc+f1KDyborRIHiqYuaM4M04ovqRAaqld2Z6y DAmV0HNhHQAbEIDLdLuw8CPiSl/2aSYO0nNvnNjxI4VdwRRhXxPFCRK7Jy/arZQB qAAZtfiVo3p4tk4XAsdHIH812AWLiqQgcN1iZp1UvvZeOau7B4C2WADAUjb3O63f EXolzTWOcwnLiuo0AJjCQWP1z3RXJqWuhdQHePhO72QPY5uxMNOhfnl69Wv4WAbX kAolHrEhiDxzDdB6vOjTo+hjfK6vdgv2sGgZFsfg4PnvBDOtPU2D0bdDKQIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPus7NrRV1yEiIBTpb+YJQaot0Z4MB8GA1UdIwQY MBaAFG/84W/9apupxXMUVYpEf6v2xcDaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYl96aGJfMXFtNm5GY3hSVmlrUl9xX2JGd05vLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81NDU2MGYtOWYzOS00NjlkLTgwY2Yt MTBkMDJhNzEwMjE2LzEvMS02enMydEZYWElTSWdGT2x2NWdsQnFpM1JuZy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjYvNTQ1NjBmLTlmMzktNDY5ZC04MGNmLTEwZDAyYTcxMDIx Ni8xL2JfemhiXzFxbTZuRmN4UlZpa1JfcV9iRndOby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEArl6eAME AME1VjANBgkqhkiG9w0BAQsFAAOCAQEAHKn4Bn0YxbGQlkwQ7wE5OQwsPaAAnQVv bDnLZ4/hGszzrqJA6aWtyrJUKACNOQy5JuGQOIUyGKzNzSUzi+RN2kn9RgK5WE5V b0iajOGcxdMJCz+38hIaTCQVah5r5Rad9V07g6gDJSwoO+gnjd9nYSv87bBdDkhX DQpwHYbBIMiXv0vHbWHlr75eGR4CqKKW6eaLwNtExucZHJrCSv81vLfqsyZ8PsD1 Kb9YgHrv+chCrVMkaSgS+vORJvwk2d5bhznLf0CNg3yxkQE5vnJaETSF0ZFvmiqf qCe8LuJ95+04tnRYWjQYHRJdgEuM3zpCw88tIunDtX8FfLWGZb8OOQ== -----END CERTIFICATE-----Generated at Tue Feb 10 02:48:01 2026 by rpki-client