This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/6NX7kHYLQEY_Fjy3vPy-MzWGuS0.roa File: 6NX7kHYLQEY_Fjy3vPy-MzWGuS0.roa (raw, json) Hash identifier: QMXJPUTLlHe/t5S4J5pRp03CHJgFFci+ULIf4qsBmK8= Subject key identifier: E8:D5:FB:90:76:0B:40:46:3F:16:3C:B7:BC:FC:BE:33:35:86:B9:2D Certificate issuer: /CN=09d1a634bbb7aefad87d121a5fe545648738c8c5 Certificate serial: 019B76EB376D46C00C2971E5278E2FAB487D Authority key identifier: 09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/6NX7kHYLQEY_Fjy3vPy-MzWGuS0.roa Signing time: Thu 01 Jan 2026 00:18:05 +0000 ROA not before: Thu 01 Jan 2026 00:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 185.40.184.0/24 maxlen: 24 185.40.185.0/24 maxlen: 24 185.40.186.0/24 maxlen: 24 185.40.187.0/24 maxlen: 24 185.118.118.0/24 maxlen: 24 185.121.28.0/24 maxlen: 24 185.121.29.0/24 maxlen: 24 185.121.30.0/24 maxlen: 24 185.121.31.0/24 maxlen: 24 185.254.132.0/24 maxlen: 24 185.254.133.0/24 maxlen: 24 185.254.134.0/24 maxlen: 24 185.254.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 21:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:37:6d:46:c0:0c:29:71:e5:27:8e:2f:ab:48:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09d1a634bbb7aefad87d121a5fe545648738c8c5 Validity Not Before: Jan 1 00:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8d5fb90760b40463f163cb7bcfcbe333586b92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d0:3b:ab:22:d0:8a:38:b4:82:8e:3d:6b:42: fd:9a:73:b3:43:ba:1c:5c:11:6a:52:1a:c4:5d:5d: bb:6c:77:8a:31:fa:c9:2c:d7:e9:7d:b7:6d:57:88: 47:fb:eb:99:4c:9f:a0:c3:a7:a9:fa:0f:f0:f7:54: 29:dc:bb:6f:a7:cd:e5:7f:ff:61:37:72:db:f6:87: 8b:41:d9:79:91:14:ea:ba:35:84:d2:19:f3:88:d9: 1b:68:4e:87:ea:08:f8:33:a0:9a:bd:f2:3c:28:70: bd:c4:74:02:97:52:20:80:d9:a1:f7:95:4f:19:be: 3d:2e:07:15:14:07:9d:a7:af:9e:9e:36:9e:a7:e4: 73:55:a1:db:ee:76:35:dc:3d:89:d1:7b:e4:7c:35: 9d:a6:28:b6:9d:22:91:8c:e0:e9:1e:78:ea:29:9d: 4a:93:18:78:69:1e:2a:fc:71:c5:a7:42:43:c0:33: 36:4a:3a:f4:b5:8e:a7:4e:8a:f2:37:ef:86:3f:ac: b6:d5:96:50:4a:aa:28:18:70:1e:67:81:47:c3:27: 38:3c:8a:ca:24:ac:cf:f2:ed:63:18:87:58:36:02: 94:32:08:ab:05:81:09:d5:ef:40:af:ef:a3:71:e2: 18:43:db:90:78:ef:f5:32:e7:25:73:70:17:9b:84: 33:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D5:FB:90:76:0B:40:46:3F:16:3C:B7:BC:FC:BE:33:35:86:B9:2D X509v3 Authority Key Identifier: keyid:09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/6NX7kHYLQEY_Fjy3vPy-MzWGuS0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.40.184.0/22 185.118.118.0/24 185.121.28.0/22 185.254.132.0/22 Signature Algorithm: sha256WithRSAEncryption 62:b5:e0:cf:de:95:37:9e:36:f1:55:d7:89:6c:ef:fd:49:57: 28:fa:5a:69:42:43:c5:c1:f4:3c:7b:86:9d:47:db:55:13:d3: 4d:d4:d0:7a:0d:b2:36:54:5c:33:d4:c5:e5:8e:fc:3f:70:6c: 9f:73:6b:2a:dd:ad:47:23:6b:b2:db:39:a4:c8:3a:a7:c9:3b: cf:22:11:59:c3:dc:19:bc:32:32:8c:af:d3:d7:e5:22:87:39: 21:f2:44:e0:a2:e7:9d:58:01:9e:6c:2b:f9:31:a7:18:30:d6: c0:48:14:9f:e8:14:b4:84:68:ab:c8:90:d8:76:39:93:37:32: a0:55:4e:30:9d:98:de:44:2b:93:45:38:3b:96:d9:5c:95:cc: ed:15:f2:a7:9b:ed:45:ed:f5:2a:0f:b9:75:17:01:6b:22:66: e8:ac:c6:2b:fc:5b:97:f6:85:49:6f:6d:07:fd:f3:b5:ed:f1: 06:ec:5e:41:57:5e:d1:83:a8:ad:a4:6e:d6:89:42:80:27:71: aa:b1:5a:16:a5:b9:2f:10:42:c2:41:5e:08:dd:94:90:ed:72: 01:f3:33:30:ee:05:89:ae:10:2e:02:9b:69:a6:a9:02:2f:1f: 0a:29:c5:2a:ea:c9:97:57:bf:b6:14:da:80:30:92:9c:68:36: 51:67:35:a1 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt26zdtRsAMKXHlJ44vq0h9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZDFhNjM0YmJiN2FlZmFkODdkMTIxYTVmZTU0NTY0ODcz OGM4YzUwHhcNMjYwMTAxMDAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGQ1ZmI5MDc2MGI0MDQ2M2YxNjNjYjdiY2ZjYmUzMzM1ODZiOTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNA7qyLQiji0go49a0L9mnOzQ7oc XBFqUhrEXV27bHeKMfrJLNfpfbdtV4hH++uZTJ+gw6ep+g/w91Qp3Ltvp83lf/9h N3Lb9oeLQdl5kRTqujWE0hnziNkbaE6H6gj4M6CavfI8KHC9xHQCl1IggNmh95VP Gb49LgcVFAedp6+enjaep+RzVaHb7nY13D2J0XvkfDWdpii2nSKRjODpHnjqKZ1K kxh4aR4q/HHFp0JDwDM2Sjr0tY6nToryN++GP6y21ZZQSqooGHAeZ4FHwyc4PIrK JKzP8u1jGIdYNgKUMgirBYEJ1e9Ar++jceIYQ9uQeO/1Muclc3AXm4QzGwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFOjV+5B2C0BGPxY8t7z8vjM1hrktMB8GA1UdIwQY MBaAFAnRpjS7t6762H0SGl/lRWSHOMjFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2RHbU5MdTNydnJZZlJJYVgtVkZaSWM0eU1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8yNjQwZGYtYjVkMS00YzAwLWIyZjIt NWU1YjhiMjgwNTlhLzEvNk5YN2tIWUxRRVlfRmp5M3ZQeS1NeldHdVMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8yNjQwZGYtYjVkMS00YzAwLWIyZjItNWU1YjhiMjgwNTlh LzEvQ2RHbU5MdTNydnJZZlJJYVgtVkZaSWM0eU1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCuSi4AwQA uXZ2AwQCuXkcAwQCuf6EMA0GCSqGSIb3DQEBCwUAA4IBAQBiteDP3pU3njbxVdeJ bO/9SVco+lppQkPFwfQ8e4adR9tVE9NN1NB6DbI2VFwz1MXljvw/cGyfc2sq3a1H I2uy2zmkyDqnyTvPIhFZw9wZvDIyjK/T1+Uihzkh8kTgouedWAGebCv5MacYMNbA SBSf6BS0hGiryJDYdjmTNzKgVU4wnZjeRCuTRTg7ltlclcztFfKnm+1F7fUqD7l1 FwFrImborMYr/FuX9oVJb20H/fO17fEG7F5BV17Rg6itpG7WiUKAJ3GqsVoWpbkv EELCQV4I3ZSQ7XIB8zMw7gWJrhAuAptppqkCLx8KKcUq6smXV7+2FNqAMJKcaDZR ZzWh -----END CERTIFICATE-----Generated at Wed Jan 21 07:21:56 2026 by rpki-client