This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/8iQ661sO1h4_GAngnW5MQPkJeg4.roa File: 8iQ661sO1h4_GAngnW5MQPkJeg4.roa (raw, json) Hash identifier: HGMy7zhWzM1IMnPtvqTIP43NuVw2eCxAO+Ul66i2hJA= Subject key identifier: F2:24:3A:EB:5B:0E:D6:1E:3F:18:09:E0:9D:6E:4C:40:F9:09:7A:0E Certificate issuer: /CN=69720a9103e1ae00cc788c5decfe0948c84bcd1b Certificate serial: 019B79ECC085085C5DB5F933FD9E8CF91E23 Authority key identifier: 69:72:0A:91:03:E1:AE:00:CC:78:8C:5D:EC:FE:09:48:C8:4B:CD:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/8iQ661sO1h4_GAngnW5MQPkJeg4.roa Signing time: Thu 01 Jan 2026 14:18:37 +0000 ROA not before: Thu 01 Jan 2026 14:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203908 IP address blocks: 185.150.240.0/22 maxlen: 24 2a03:ad60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 23:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c0:85:08:5c:5d:b5:f9:33:fd:9e:8c:f9:1e:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69720a9103e1ae00cc788c5decfe0948c84bcd1b Validity Not Before: Jan 1 14:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2243aeb5b0ed61e3f1809e09d6e4c40f9097a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2b:3e:75:f3:8e:8c:c3:51:f5:14:7e:7d:34: e8:51:fe:85:66:5f:e2:d5:14:20:b1:54:58:9a:44: b0:fa:a7:56:db:75:ff:61:9d:1e:28:40:d5:85:3d: 22:ce:fe:11:9f:93:7d:da:96:7f:57:1e:e2:bb:39: 1a:c4:ee:58:41:8c:31:e6:80:88:dd:8e:df:d8:05: 9f:4e:d5:cf:a2:2b:7b:07:0f:93:47:2f:a7:7c:6d: a5:8e:84:71:86:d8:d1:ec:e7:b6:1b:d5:dd:b3:89: 84:3b:ea:b2:cc:24:e2:0c:52:f3:50:ba:16:47:e1: 05:56:aa:1b:93:3b:3c:23:9d:76:56:85:1a:fa:e5: 09:88:0a:ba:36:74:54:6b:70:35:b6:96:6d:46:af: 7e:64:f9:34:c4:b9:3f:6f:fc:01:f3:60:8b:89:c6: 2f:9a:99:e0:6e:a2:d0:a8:ee:c7:71:68:e7:14:80: 64:55:0a:fd:f8:db:bb:62:93:ae:90:c4:22:85:92: e5:06:e4:56:96:64:f3:6a:4f:1d:76:71:b3:f4:98: 3f:9b:42:5f:06:9c:e6:74:d6:7c:11:35:e9:ea:e0: 5e:3b:e8:98:43:ec:01:a8:3e:00:3f:a6:4e:24:4a: 6d:25:12:35:e4:6f:76:80:7e:36:98:8d:40:1d:80: 21:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:24:3A:EB:5B:0E:D6:1E:3F:18:09:E0:9D:6E:4C:40:F9:09:7A:0E X509v3 Authority Key Identifier: keyid:69:72:0A:91:03:E1:AE:00:CC:78:8C:5D:EC:FE:09:48:C8:4B:CD:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/8iQ661sO1h4_GAngnW5MQPkJeg4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.150.240.0/22 IPv6: 2a03:ad60::/32 Signature Algorithm: sha256WithRSAEncryption d2:49:22:44:08:82:d8:dd:44:d2:5c:c9:09:c9:42:9d:9b:bc: 25:06:09:db:41:51:dc:05:3c:76:e5:b2:55:7c:1f:7b:56:9f: 9d:31:20:16:c6:bd:2a:f3:e7:fb:44:65:fc:a5:5f:87:b1:2b: a5:45:93:a6:7e:82:7d:9c:f1:e5:79:26:83:98:70:4d:25:c3: 3a:cc:bf:b0:bc:0a:dd:5b:08:cc:94:ab:73:ef:52:bc:aa:73: 53:f5:2e:2a:f7:d4:9d:44:9e:cc:b9:e7:1a:cb:c7:80:b2:ab: bd:da:6e:4e:46:30:ea:3a:99:45:ac:e7:42:bd:05:ea:c7:d9: 2c:08:51:4b:17:e7:66:0e:71:e4:b3:e3:1d:db:86:3d:ba:6c: d5:b9:d4:cc:96:e9:4a:f2:93:76:53:6a:4d:9a:d3:fe:fa:17: 03:60:ac:7d:87:2a:4a:cb:63:f6:81:2c:63:0c:72:f7:d5:e8: f6:83:ec:81:88:ee:fa:f3:a4:29:4c:3e:98:c9:71:67:1f:b5: 0d:f3:57:5f:a0:cd:51:02:72:db:02:de:13:d5:5a:b9:1a:37: 11:af:5e:65:31:43:07:5b:8b:60:eb:41:18:59:79:f2:5e:23: 03:e6:f9:56:f4:9f:83:82:7b:e4:87:d9:7d:9e:93:3e:8c:7b: 78:81:07:ee -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57MCFCFxdtfkz/Z6M+R4jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NzIwYTkxMDNlMWFlMDBjYzc4OGM1ZGVjZmUwOTQ4Yzg0 YmNkMWIwHhcNMjYwMTAxMTQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjI0M2FlYjViMGVkNjFlM2YxODA5ZTA5ZDZlNGM0MGY5MDk3YTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSs+dfOOjMNR9RR+fTToUf6FZl/i 1RQgsVRYmkSw+qdW23X/YZ0eKEDVhT0izv4Rn5N92pZ/Vx7iuzkaxO5YQYwx5oCI 3Y7f2AWfTtXPoit7Bw+TRy+nfG2ljoRxhtjR7Oe2G9Xds4mEO+qyzCTiDFLzULoW R+EFVqobkzs8I512VoUa+uUJiAq6NnRUa3A1tpZtRq9+ZPk0xLk/b/wB82CLicYv mpngbqLQqO7HcWjnFIBkVQr9+Nu7YpOukMQihZLlBuRWlmTzak8ddnGz9Jg/m0Jf BpzmdNZ8ETXp6uBeO+iYQ+wBqD4AP6ZOJEptJRI15G92gH42mI1AHYAhQwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPIkOutbDtYePxgJ4J1uTED5CXoOMB8GA1UdIwQY MBaAFGlyCpED4a4AzHiMXez+CUjIS80bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVhJS2tRUGhyZ0RNZUl4ZDdQNEpTTWhMelJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9kNTE2YTMtODk3NC00NWRiLTgyMjYt ODE3NGRkYWUzMWQzLzEvOGlRNjYxc08xaDRfR0FuZ25XNU1RUGtKZWc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9kNTE2YTMtODk3NC00NWRiLTgyMjYtODE3NGRkYWUzMWQz LzEvYVhJS2tRUGhyZ0RNZUl4ZDdQNEpTTWhMelJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZbwMA0E AgACMAcDBQAqA61gMA0GCSqGSIb3DQEBCwUAA4IBAQDSSSJECILY3UTSXMkJyUKd m7wlBgnbQVHcBTx25bJVfB97Vp+dMSAWxr0q8+f7RGX8pV+HsSulRZOmfoJ9nPHl eSaDmHBNJcM6zL+wvArdWwjMlKtz71K8qnNT9S4q99SdRJ7Muecay8eAsqu92m5O RjDqOplFrOdCvQXqx9ksCFFLF+dmDnHks+Md24Y9umzVudTMlulK8pN2U2pNmtP+ +hcDYKx9hypKy2P2gSxjDHL31ej2g+yBiO7686QpTD6YyXFnH7UN81dfoM1RAnLb At4T1Vq5GjcRr15lMUMHW4tg60EYWXnyXiMD5vlW9J+Dgnvkh9l9npM+jHt4gQfu -----END CERTIFICATE-----Generated at Tue Feb 10 08:39:16 2026 by rpki-client