This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/6e2vKhHmL-ZebC_h3M0uX9UQPQE.roa File: 6e2vKhHmL-ZebC_h3M0uX9UQPQE.roa (raw, json) Hash identifier: MuJkDaToFHy1onqOvnRia1v4P6X9FnZyEUR50zhW13E= Subject key identifier: E9:ED:AF:2A:11:E6:2F:E6:5E:6C:2F:E1:DC:CD:2E:5F:D5:10:3D:01 Certificate issuer: /CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a Certificate serial: 019B7DCA0E1C8DBB6A96D723242471CFC3DC Authority key identifier: FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/6e2vKhHmL-ZebC_h3M0uX9UQPQE.roa Signing time: Fri 02 Jan 2026 08:19:12 +0000 ROA not before: Fri 02 Jan 2026 08:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201080 IP address blocks: 185.167.16.0/22 maxlen: 22 2a0b:3200::/30 maxlen: 30 2a0b:3200::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:0e:1c:8d:bb:6a:96:d7:23:24:24:71:cf:c3:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a Validity Not Before: Jan 2 08:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9edaf2a11e62fe65e6c2fe1dccd2e5fd5103d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:88:26:ae:9e:6f:62:df:34:81:b0:1e:d5:63: 35:48:55:21:1e:01:d6:da:1b:98:75:8c:4a:f7:9d: ae:8a:3d:5c:6f:a6:62:27:ee:d9:3a:ca:a0:b3:36: 44:5f:ff:14:4a:4c:bb:3c:1e:cc:d8:94:89:38:5d: f3:c3:b6:7b:29:1e:90:2e:03:16:d6:1a:a6:c4:13: fa:d1:2e:81:e1:08:af:70:e3:c0:65:d0:7a:6b:94: 37:26:58:18:fb:4a:97:c1:20:ad:59:ef:5b:47:e7: d6:94:03:4a:40:d5:0a:1d:b3:a6:6f:6d:5e:12:c8: 5e:ad:be:ea:6f:c8:94:11:d2:99:01:81:fb:8f:1d: ae:4d:13:03:59:9c:d6:bf:d3:68:17:59:ab:b6:07: 06:36:13:b3:bf:9d:e9:90:4e:dc:57:64:42:59:89: eb:47:13:8e:15:d6:e3:69:8a:76:78:b4:d6:1d:dc: 24:a8:f8:4d:b8:bf:dd:b4:c2:60:29:5e:6d:67:42: 89:ff:57:fe:58:9b:46:a0:f3:95:4d:1e:41:15:e6: 5f:a6:97:64:6d:8b:fb:77:48:8e:e1:1e:b1:ee:bb: 33:3b:27:fc:3e:e1:35:9c:ef:88:b3:e8:00:33:c9: 9a:b5:37:39:8e:5e:45:e0:cb:72:b7:ff:6e:b4:f4: 0a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:ED:AF:2A:11:E6:2F:E6:5E:6C:2F:E1:DC:CD:2E:5F:D5:10:3D:01 X509v3 Authority Key Identifier: keyid:FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/6e2vKhHmL-ZebC_h3M0uX9UQPQE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.167.16.0/22 IPv6: 2a0b:3200::/30 Signature Algorithm: sha256WithRSAEncryption 4f:fd:d2:59:29:b2:ef:7f:92:87:fb:75:df:08:2d:49:2f:0b: 26:0f:a0:78:ad:bc:0a:d8:a6:a5:88:34:75:d9:9e:a0:54:94: 02:0a:16:c4:1c:77:8b:37:d8:2a:3e:9b:c3:66:20:ff:91:cd: ea:25:df:0b:bd:47:82:8e:8a:c5:4d:28:25:23:38:6b:aa:5a: 91:85:42:30:05:e4:f0:b7:92:da:6f:ff:f8:fa:1c:09:56:ff: 4d:97:3f:1a:ab:7c:c6:31:f8:dd:55:cf:35:be:61:81:ea:48: b5:1a:e9:ba:02:25:d5:65:24:c3:25:3f:8a:15:6e:f0:7d:ee: 35:ab:0a:55:a1:bd:94:ac:f8:c7:81:60:16:55:a7:5f:29:ae: bf:94:fb:01:43:97:39:5e:fc:26:75:c9:5e:7f:d7:29:32:34: 80:84:35:ea:34:59:c5:35:57:9f:bd:31:48:e5:62:79:54:96: 81:1f:06:f6:95:50:fe:36:bf:54:5a:6c:5e:5c:0f:87:bf:23: af:83:71:2f:db:61:15:4e:71:e0:71:e1:51:7d:86:c6:1c:5f: e6:5b:ec:ec:e6:98:fb:08:db:8e:4f:1b:b1:e5:5b:91:ef:ee: 28:d1:49:a4:4a:5b:56:a5:ad:96:36:ae:a9:2d:af:a9:9c:8b: 65:85:28:03 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9yg4cjbtqltcjJCRxz8PcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkY2I5NzZiYjYwMjkyMTZmN2EyYWQwNWI3OTMyZjRhNTVl MGNmOGEwHhcNMjYwMTAyMDgxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWVkYWYyYTExZTYyZmU2NWU2YzJmZTFkY2NkMmU1ZmQ1MTAzZDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYgmrp5vYt80gbAe1WM1SFUhHgHW 2huYdYxK952uij1cb6ZiJ+7ZOsqgszZEX/8USky7PB7M2JSJOF3zw7Z7KR6QLgMW 1hqmxBP60S6B4QivcOPAZdB6a5Q3JlgY+0qXwSCtWe9bR+fWlANKQNUKHbOmb21e Esherb7qb8iUEdKZAYH7jx2uTRMDWZzWv9NoF1mrtgcGNhOzv53pkE7cV2RCWYnr RxOOFdbjaYp2eLTWHdwkqPhNuL/dtMJgKV5tZ0KJ/1f+WJtGoPOVTR5BFeZfppdk bYv7d0iO4R6x7rszOyf8PuE1nO+Is+gAM8matTc5jl5F4Mtyt/9utPQKFQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOntryoR5i/mXmwv4dzNLl/VED0BMB8GA1UdIwQY MBaAFP3Ll2u2ApIW96KtBbeTL0pV4M+KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2N1WGE3WUNraGIzb3EwRnQ1TXZTbFhnejRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80OTRmMjctNGJiYy00YjM4LTg0OWIt ZDg4OGEwNjg5YzE5LzEvNmUydktoSG1MLVplYkNfaDNNMHVYOVVRUFFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80OTRmMjctNGJiYy00YjM4LTg0OWItZDg4OGEwNjg5YzE5 LzEvX2N1WGE3WUNraGIzb3EwRnQ1TXZTbFhnejRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuacQMA0E AgACMAcDBQIqCzIAMA0GCSqGSIb3DQEBCwUAA4IBAQBP/dJZKbLvf5KH+3XfCC1J LwsmD6B4rbwK2KaliDR12Z6gVJQCChbEHHeLN9gqPpvDZiD/kc3qJd8LvUeCjorF TSglIzhrqlqRhUIwBeTwt5Lab//4+hwJVv9Nlz8aq3zGMfjdVc81vmGB6ki1Gum6 AiXVZSTDJT+KFW7wfe41qwpVob2UrPjHgWAWVadfKa6/lPsBQ5c5Xvwmdclef9cp MjSAhDXqNFnFNVefvTFI5WJ5VJaBHwb2lVD+Nr9UWmxeXA+HvyOvg3Ev22EVTnHg ceFRfYbGHF/mW+zs5pj7CNuOTxux5VuR7+4o0UmkSltWpa2WNq6pLa+pnItlhSgD -----END CERTIFICATE-----Generated at Tue Feb 10 10:09:40 2026 by rpki-client