This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/c6NkDHPCpW4JPJaereYffQlGF5M.roa File: c6NkDHPCpW4JPJaereYffQlGF5M.roa (raw, json) Hash identifier: P8BVMnOkhDs4ef+b/iftf/xGBkTYtuqdSXKMIq09JeI= Subject key identifier: 73:A3:64:0C:73:C2:A5:6E:09:3C:96:9E:AD:E6:1F:7D:09:46:17:93 Certificate issuer: /CN=1e02b2489f4713962d105112b25276eb81f1ac90 Certificate serial: 019B7D5BFA3765A9606585FDDB0F13CFBCAE Authority key identifier: 1E:02:B2:48:9F:47:13:96:2D:10:51:12:B2:52:76:EB:81:F1:AC:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/c6NkDHPCpW4JPJaereYffQlGF5M.roa Signing time: Fri 02 Jan 2026 06:18:58 +0000 ROA not before: Fri 02 Jan 2026 06:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56650 IP address blocks: 85.208.64.0/22 maxlen: 22 85.208.64.0/24 maxlen: 24 85.208.65.0/24 maxlen: 24 85.208.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.crl rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:fa:37:65:a9:60:65:85:fd:db:0f:13:cf:bc:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e02b2489f4713962d105112b25276eb81f1ac90 Validity Not Before: Jan 2 06:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73a3640c73c2a56e093c969eade61f7d09461793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f8:c2:41:73:4c:01:40:d4:90:8b:b7:3b:e7: ea:8b:40:f3:88:a7:26:45:1a:a1:9c:37:4c:35:f0: 55:a6:96:1d:06:62:18:36:74:2f:86:aa:09:2c:c8: 40:e2:fa:e9:f8:2f:65:19:50:74:49:c4:8f:42:11: 59:7b:b8:a7:d0:86:4f:d2:18:a8:50:2c:1e:39:d3: 32:bb:21:53:05:63:9e:5a:a6:8d:b6:46:41:f7:25: dd:78:7f:62:7a:e6:09:9b:c3:62:20:ac:95:ea:5e: 42:1c:5c:4c:4c:34:2a:1a:8d:cb:69:fa:26:77:25: ee:97:8f:83:28:38:ca:88:df:21:6c:74:36:a5:dc: 9a:10:9f:67:e6:de:4d:95:35:cf:e8:05:1f:50:58: e1:6c:ca:8e:9f:9c:28:23:2c:1d:4e:14:bf:fe:6d: 93:9e:db:5d:eb:ba:0b:0a:1b:22:08:1c:5b:3c:85: 1a:85:e0:ce:ad:1d:bb:8c:55:62:d9:4f:85:1f:5c: f5:77:e6:0b:5b:d8:b0:eb:60:29:56:04:05:50:6f: cd:b4:d1:b1:a1:42:b8:76:3c:7c:ee:78:40:75:d0: fb:43:cb:79:95:d7:03:ee:69:ee:47:35:53:e9:03: 3a:eb:82:49:47:84:04:3f:32:96:29:a1:1f:f4:b1: e9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A3:64:0C:73:C2:A5:6E:09:3C:96:9E:AD:E6:1F:7D:09:46:17:93 X509v3 Authority Key Identifier: keyid:1E:02:B2:48:9F:47:13:96:2D:10:51:12:B2:52:76:EB:81:F1:AC:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/c6NkDHPCpW4JPJaereYffQlGF5M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.208.64.0/22 Signature Algorithm: sha256WithRSAEncryption 59:32:5c:2a:c0:5e:bc:fd:8a:82:c4:49:89:0c:94:2f:d6:3d: 71:69:0f:1f:b4:e6:c4:93:24:0a:70:da:c1:45:ec:ed:50:2a: be:e9:17:49:f9:40:b7:d7:21:8d:2f:50:c8:15:4f:18:5c:6a: 43:89:fe:a3:6a:22:93:db:9c:3e:cc:53:ff:df:e6:bc:99:5f: cb:ff:64:6a:64:65:83:16:65:a9:fa:89:24:c8:6c:cb:06:49: f7:b8:63:1d:2e:59:f8:ea:97:8f:25:4e:a9:1a:da:02:51:48: e9:17:1d:7a:9f:33:fc:60:bc:be:83:07:11:e8:6b:b2:6d:2f: 05:70:25:d2:b1:12:37:89:90:c0:14:2f:57:58:64:99:ae:56: 43:75:0c:ae:c0:a9:0a:62:02:b0:b6:ba:14:d5:57:22:38:da: ba:81:4b:df:d9:d9:94:56:9a:d7:0c:5e:29:e4:d4:1c:10:9a: ef:90:1b:b2:1b:a7:85:70:f7:e5:50:a1:1b:60:10:73:6d:8c: 93:80:73:8b:c3:7d:59:a2:f9:45:19:cd:a4:c6:32:28:73:ff: 0d:3d:15:4f:9b:92:9a:d4:c9:fe:de:4a:7d:ba:94:36:01:6f: d9:c0:f5:6a:17:98:7b:2d:3b:33:b6:50:23:8f:fa:cb:4a:77: 6b:55:0c:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W/o3ZalgZYX92w8Tz7yuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMDJiMjQ4OWY0NzEzOTYyZDEwNTExMmIyNTI3NmViODFm MWFjOTAwHhcNMjYwMTAyMDYxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2EzNjQwYzczYzJhNTZlMDkzYzk2OWVhZGU2MWY3ZDA5NDYxNzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPjCQXNMAUDUkIu3O+fqi0DziKcm RRqhnDdMNfBVppYdBmIYNnQvhqoJLMhA4vrp+C9lGVB0ScSPQhFZe7in0IZP0hio UCweOdMyuyFTBWOeWqaNtkZB9yXdeH9ieuYJm8NiIKyV6l5CHFxMTDQqGo3Lafom dyXul4+DKDjKiN8hbHQ2pdyaEJ9n5t5NlTXP6AUfUFjhbMqOn5woIywdThS//m2T nttd67oLChsiCBxbPIUaheDOrR27jFVi2U+FH1z1d+YLW9iw62ApVgQFUG/NtNGx oUK4djx87nhAddD7Q8t5ldcD7mnuRzVT6QM664JJR4QEPzKWKaEf9LHpoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHOjZAxzwqVuCTyWnq3mH30JRheTMB8GA1UdIwQY MBaAFB4CskifRxOWLRBRErJSduuB8ayQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGdLeVNKOUhFNVl0RUZFU3NsSjI2NEh4ckpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9jMGEzMjYtODhlMS00MmI0LTlkNTYt MDkyMWQxYmJmMzQ5LzEvYzZOa0RIUENwVzRKUEphZXJlWWZmUWxHRjVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9jMGEzMjYtODhlMS00MmI0LTlkNTYtMDkyMWQxYmJmMzQ5 LzEvSGdLeVNKOUhFNVl0RUZFU3NsSjI2NEh4ckpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVdBAMA0G CSqGSIb3DQEBCwUAA4IBAQBZMlwqwF68/YqCxEmJDJQv1j1xaQ8ftObEkyQKcNrB ReztUCq+6RdJ+UC31yGNL1DIFU8YXGpDif6jaiKT25w+zFP/3+a8mV/L/2RqZGWD FmWp+okkyGzLBkn3uGMdLln46pePJU6pGtoCUUjpFx16nzP8YLy+gwcR6GuybS8F cCXSsRI3iZDAFC9XWGSZrlZDdQyuwKkKYgKwtroU1VciONq6gUvf2dmUVprXDF4p 5NQcEJrvkBuyG6eFcPflUKEbYBBzbYyTgHOLw31ZovlFGc2kxjIoc/8NPRVPm5Ka 1Mn+3kp9upQ2AW/ZwPVqF5h7LTsztlAjj/rLSndrVQy0 -----END CERTIFICATE-----Generated at Mon Feb 9 21:24:21 2026 by rpki-client