This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/K6dmrbU49_IjvCVVpoSCda0DtfY.roa File: K6dmrbU49_IjvCVVpoSCda0DtfY.roa (raw, json) Hash identifier: UEb7+sC3OMpTg7SsyM1skPMy+THsMiYjl1kHjQRs2y8= Subject key identifier: 2B:A7:66:AD:B5:38:F7:F2:23:BC:25:55:A6:84:82:75:AD:03:B5:F6 Certificate issuer: /CN=b79220a805e4378547e43bac731ce86fe01145c7 Certificate serial: 019B7B368BAFFA05B7F191A08A122577DF23 Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/K6dmrbU49_IjvCVVpoSCda0DtfY.roa Signing time: Thu 01 Jan 2026 20:18:50 +0000 ROA not before: Thu 01 Jan 2026 20:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6707 IP address blocks: 185.92.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:8b:af:fa:05:b7:f1:91:a0:8a:12:25:77:df:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7 Validity Not Before: Jan 1 20:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ba766adb538f7f223bc2555a6848275ad03b5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e0:bc:50:ef:e3:a9:a6:cf:cd:ba:7f:23:4d: 25:6d:6e:5c:33:85:b0:6d:14:af:4d:33:de:02:5f: 92:45:08:8c:0a:ac:a9:47:41:13:3c:8e:4a:be:79: 5b:83:9d:3d:9d:86:06:5c:27:f9:c3:d8:04:a8:cc: 86:e9:63:49:ff:28:62:69:42:83:ed:26:f4:57:d4: b4:fc:00:f8:a0:4d:18:da:b0:14:4f:24:ac:e8:44: e3:9f:86:48:c7:f8:cb:6c:b6:cd:5a:35:49:a4:2c: 0a:c3:43:8b:19:af:47:3d:71:02:46:10:eb:90:5b: d5:cd:19:60:d0:e7:5d:64:48:56:06:26:17:58:ec: 53:3c:60:9b:3b:9e:53:fe:d5:62:83:84:7a:d9:a8: 03:7a:aa:38:c8:33:e8:a7:c5:b3:c7:c4:b0:1e:a3: e1:43:8b:fd:b7:be:a1:09:50:05:51:8d:9f:d3:2a: 3a:00:67:f8:75:42:02:b7:ac:46:8d:8a:7f:7d:b9: c3:2b:a0:b5:ae:d8:08:80:77:8c:c4:68:54:f8:1c: 60:66:30:ce:1c:d2:11:ee:e6:b7:6a:59:2d:43:35: 15:9c:02:51:bd:98:90:cb:6f:69:41:79:9d:ad:41: 79:69:1f:23:e8:08:47:ed:5e:09:5a:3e:68:4e:2f: 28:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A7:66:AD:B5:38:F7:F2:23:BC:25:55:A6:84:82:75:AD:03:B5:F6 X509v3 Authority Key Identifier: keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/K6dmrbU49_IjvCVVpoSCda0DtfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.92.213.0/24 Signature Algorithm: sha256WithRSAEncryption a5:75:9a:d5:e5:cc:00:53:94:93:40:1f:1f:12:40:1c:42:81: b0:df:98:5b:5a:70:9d:d8:f3:4a:62:0d:3f:25:4d:4c:f2:f7: 04:b2:15:66:63:cd:32:96:49:ee:20:3e:b8:aa:61:17:cd:ac: 33:4d:c6:93:2d:f3:55:59:37:58:cc:12:c1:31:f6:3b:bc:fc: fc:7a:45:1f:8f:79:b9:df:b6:53:0e:fd:0a:10:88:10:c3:47: 99:9c:9c:0f:ec:b1:85:a7:a3:a3:6e:ee:ca:55:b1:ef:6e:d1: bb:d2:6e:1b:56:29:93:0d:80:96:1c:9a:e4:00:c8:7a:55:84: 6f:1a:a4:d6:c9:34:31:73:7a:da:bd:13:e0:d0:ba:ed:b5:f3: 1b:2a:b5:48:15:b7:ba:51:6e:0e:55:c4:3b:35:79:e7:e1:05: b1:61:40:5c:ca:e4:59:42:f8:8c:c8:79:cb:ad:e6:21:bf:5a: 12:fd:2c:6d:ef:45:7e:fb:a5:5e:7a:5c:1b:ec:52:2c:0b:39: 56:50:e2:42:40:da:10:1d:d4:9e:c6:39:ce:50:9d:01:47:6a: a5:58:5c:f2:03:e9:80:c4:55:e0:be:f6:ed:b6:a5:6a:3b:80: 54:aa:f3:80:12:f7:97:3a:bb:3b:7e:a1:30:16:85:68:f1:4d: 90:37:b6:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nouv+gW38ZGgihIld98jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3OTIyMGE4MDVlNDM3ODU0N2U0M2JhYzczMWNlODZmZTAx MTQ1YzcwHhcNMjYwMTAxMjAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmE3NjZhZGI1MzhmN2YyMjNiYzI1NTVhNjg0ODI3NWFkMDNiNWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOC8UO/jqabPzbp/I00lbW5cM4Ww bRSvTTPeAl+SRQiMCqypR0ETPI5Kvnlbg509nYYGXCf5w9gEqMyG6WNJ/yhiaUKD 7Sb0V9S0/AD4oE0Y2rAUTySs6ETjn4ZIx/jLbLbNWjVJpCwKw0OLGa9HPXECRhDr kFvVzRlg0OddZEhWBiYXWOxTPGCbO55T/tVig4R62agDeqo4yDPop8Wzx8SwHqPh Q4v9t76hCVAFUY2f0yo6AGf4dUICt6xGjYp/fbnDK6C1rtgIgHeMxGhU+BxgZjDO HNIR7ua3alktQzUVnAJRvZiQy29pQXmdrUF5aR8j6AhH7V4JWj5oTi8ohQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCunZq21OPfyI7wlVaaEgnWtA7X2MB8GA1UdIwQY MBaAFLeSIKgF5DeFR+Q7rHMc6G/gEUXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9lN2Y4ODQtY2Y3Yi00OTFjLTllZDkt NDIzYWZjMmI2OGI4LzEvSzZkbXJiVTQ5X0lqdkNWVnBvU0NkYTBEdGZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9lN2Y4ODQtY2Y3Yi00OTFjLTllZDktNDIzYWZjMmI2OGI4 LzEvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVzVMA0G CSqGSIb3DQEBCwUAA4IBAQCldZrV5cwAU5STQB8fEkAcQoGw35hbWnCd2PNKYg0/ JU1M8vcEshVmY80ylknuID64qmEXzawzTcaTLfNVWTdYzBLBMfY7vPz8ekUfj3m5 37ZTDv0KEIgQw0eZnJwP7LGFp6Ojbu7KVbHvbtG70m4bVimTDYCWHJrkAMh6VYRv GqTWyTQxc3ravRPg0LrttfMbKrVIFbe6UW4OVcQ7NXnn4QWxYUBcyuRZQviMyHnL reYhv1oS/Sxt70V++6Veelwb7FIsCzlWUOJCQNoQHdSexjnOUJ0BR2qlWFzyA+mA xFXgvvbttqVqO4BUqvOAEveXOrs7fqEwFoVo8U2QN7bu -----END CERTIFICATE-----Generated at Mon Jan 26 14:08:01 2026 by rpki-client