This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/F6Ih8zJFZEO5QrsO7UxE6K63qP8.roa File: F6Ih8zJFZEO5QrsO7UxE6K63qP8.roa (raw, json) Hash identifier: o3HWTI0PQBnlxwZ0HTjSHPzc9P+I/nJ/EvAewhiwD4k= Subject key identifier: 17:A2:21:F3:32:45:64:43:B9:42:BB:0E:ED:4C:44:E8:AE:B7:A8:FF Certificate issuer: /CN=0b083808763c262541020d2e81da34aaa38283b7 Certificate serial: 019B78A22318346D51A9FAB2E71ABBA3D6F0 Authority key identifier: 0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/F6Ih8zJFZEO5QrsO7UxE6K63qP8.roa Signing time: Thu 01 Jan 2026 08:17:30 +0000 ROA not before: Thu 01 Jan 2026 08:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24749 IP address blocks: 86.106.188.0/22 maxlen: 22 185.70.148.0/22 maxlen: 22 2a03:35a0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:23:18:34:6d:51:a9:fa:b2:e7:1a:bb:a3:d6:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b083808763c262541020d2e81da34aaa38283b7 Validity Not Before: Jan 1 08:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17a221f332456443b942bb0eed4c44e8aeb7a8ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3d:6f:09:ac:df:ff:0b:28:fd:e2:be:97:05: 80:3c:66:3e:cf:28:67:58:00:31:1e:8d:08:09:6c: b4:b3:21:e5:cd:2c:4f:ef:4e:54:4a:b9:1e:c2:7d: 79:b5:ea:61:47:27:36:d4:30:75:be:67:58:86:ca: ee:e2:0b:37:7e:4b:75:17:6c:04:da:69:af:a4:fa: 3e:2d:a3:b3:31:d5:de:6d:cc:b9:67:fb:34:16:7b: 1d:a6:1e:bd:6e:e4:02:38:30:4d:cb:e7:9b:ed:41: 17:88:91:41:1b:a4:9f:8a:b8:2c:12:8d:0c:3d:b4: 40:6a:a8:7f:18:60:7d:d4:4c:30:47:12:58:a9:5c: b7:bc:11:f4:89:45:d9:10:04:b5:03:53:03:d4:bf: 7a:cf:88:4d:19:6f:8a:7e:08:50:a3:1e:88:47:fe: 28:e6:37:07:a4:d0:81:bb:30:a2:c4:1a:09:8d:b2: 91:5b:9d:c6:ac:0a:7c:c6:20:84:94:ee:e5:af:b3: 01:4c:94:1e:29:e8:05:4c:63:f6:20:82:d6:61:4e: 8c:5b:e6:88:4e:4d:85:11:8d:a1:ad:4c:f2:17:24: 96:79:61:99:fe:32:f5:82:a6:52:79:3e:d7:4c:f1: b3:bc:9f:7d:5b:d9:b5:d4:d5:10:b5:bc:30:60:46: ea:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A2:21:F3:32:45:64:43:B9:42:BB:0E:ED:4C:44:E8:AE:B7:A8:FF X509v3 Authority Key Identifier: keyid:0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/F6Ih8zJFZEO5QrsO7UxE6K63qP8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.106.188.0/22 185.70.148.0/22 IPv6: 2a03:35a0::/29 Signature Algorithm: sha256WithRSAEncryption 37:a2:dd:5f:3b:eb:3d:34:93:10:82:d2:f4:a3:62:25:1b:27: 9f:9e:44:04:93:2a:19:37:9c:a0:61:55:0a:e4:47:54:85:84: 18:37:8b:3a:1e:14:32:47:f4:fe:42:76:a0:b4:0f:8c:98:5e: 7f:1a:51:d8:dd:21:0e:59:6d:fa:f8:e1:a5:cf:81:36:06:78: 06:a1:5b:ad:34:4b:be:54:e6:96:56:08:d5:8c:f9:47:e8:14: 37:8a:91:b5:86:20:d9:b4:26:fb:77:17:0b:04:52:58:cf:39: f6:d1:2f:90:9d:de:54:8e:4d:96:f3:3d:55:57:36:a9:28:93: bb:95:09:da:09:a0:cf:e6:19:1f:b1:1e:1f:fb:4c:df:2b:b9: a2:43:20:28:09:5d:23:c0:ed:06:73:79:47:54:69:b0:c5:c9: ed:2d:d5:b8:de:28:4a:19:97:d6:09:c7:13:07:4c:e6:8e:10: 6f:59:f8:2f:63:03:9c:79:b1:71:fb:45:74:07:85:0c:6f:9e: 2e:c0:5e:8a:51:40:56:6b:d9:96:65:a0:a0:ad:53:be:a7:90: 4a:8f:ce:fc:d1:0b:a4:ec:29:3b:68:e0:da:3d:d5:da:77:97: dc:cb:c3:6c:80:f3:8a:f9:14:d5:3a:fd:e9:5a:eb:46:59:62: f3:da:0c:69 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4oiMYNG1Rqfqy5xq7o9bwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMDgzODA4NzYzYzI2MjU0MTAyMGQyZTgxZGEzNGFhYTM4 MjgzYjcwHhcNMjYwMTAxMDgxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2EyMjFmMzMyNDU2NDQzYjk0MmJiMGVlZDRjNDRlOGFlYjdhOGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD1vCazf/wso/eK+lwWAPGY+zyhn WAAxHo0ICWy0syHlzSxP705USrkewn15tephRyc21DB1vmdYhsru4gs3fkt1F2wE 2mmvpPo+LaOzMdXebcy5Z/s0Fnsdph69buQCODBNy+eb7UEXiJFBG6SfirgsEo0M PbRAaqh/GGB91EwwRxJYqVy3vBH0iUXZEAS1A1MD1L96z4hNGW+KfghQox6IR/4o 5jcHpNCBuzCixBoJjbKRW53GrAp8xiCElO7lr7MBTJQeKegFTGP2IILWYU6MW+aI Tk2FEY2hrUzyFySWeWGZ/jL1gqZSeT7XTPGzvJ99W9m11NUQtbwwYEbqzQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBeiIfMyRWRDuUK7Du1MROiut6j/MB8GA1UdIwQY MBaAFAsIOAh2PCYlQQINLoHaNKqjgoO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3dnNENIWThKaVZCQWcwdWdkbzBxcU9DZzdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni83ZTQ3ZDctNjEzNy00MzAwLTkzNmIt NDY5MjVjNTI0OWU2LzEvRjZJaDh6SkZaRU81UXJzTzdVeEU2SzYzcVA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni83ZTQ3ZDctNjEzNy00MzAwLTkzNmItNDY5MjVjNTI0OWU2 LzEvQ3dnNENIWThKaVZCQWcwdWdkbzBxcU9DZzdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCVmq8AwQC uUaUMA0EAgACMAcDBQMqAzWgMA0GCSqGSIb3DQEBCwUAA4IBAQA3ot1fO+s9NJMQ gtL0o2IlGyefnkQEkyoZN5ygYVUK5EdUhYQYN4s6HhQyR/T+QnagtA+MmF5/GlHY 3SEOWW36+OGlz4E2BngGoVutNEu+VOaWVgjVjPlH6BQ3ipG1hiDZtCb7dxcLBFJY zzn20S+Qnd5Ujk2W8z1VVzapKJO7lQnaCaDP5hkfsR4f+0zfK7miQyAoCV0jwO0G c3lHVGmwxcntLdW43ihKGZfWCccTB0zmjhBvWfgvYwOcebFx+0V0B4UMb54uwF6K UUBWa9mWZaCgrVO+p5BKj8780Quk7Ck7aODaPdXad5fcy8NsgPOK+RTVOv3pWutG WWLz2gxp -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:12 2026 by rpki-client