This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/6lZg39Dhr7zrxTLyXPcjt6cAvG4.roa File: 6lZg39Dhr7zrxTLyXPcjt6cAvG4.roa (raw, json) Hash identifier: Dz/xeXOlzGJEgfQFVOAk562cT1XbEmexi7bAid4Phqk= Subject key identifier: EA:56:60:DF:D0:E1:AF:BC:EB:C5:32:F2:5C:F7:23:B7:A7:00:BC:6E Certificate issuer: /CN=295b6a34a2109ba7c4d97f76c74466f14c3333e0 Certificate serial: 019B7F83CDC07D297C6A1AF28438404BDEE1 Authority key identifier: 29:5B:6A:34:A2:10:9B:A7:C4:D9:7F:76:C7:44:66:F1:4C:33:33:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/6lZg39Dhr7zrxTLyXPcjt6cAvG4.roa Signing time: Fri 02 Jan 2026 16:21:42 +0000 ROA not before: Fri 02 Jan 2026 16:21:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205371 IP address blocks: 185.220.112.0/24 maxlen: 24 185.220.113.0/24 maxlen: 24 185.220.114.0/24 maxlen: 24 185.220.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:cd:c0:7d:29:7c:6a:1a:f2:84:38:40:4b:de:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295b6a34a2109ba7c4d97f76c74466f14c3333e0 Validity Not Before: Jan 2 16:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea5660dfd0e1afbcebc532f25cf723b7a700bc6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:10:f2:51:33:85:9e:43:7b:35:41:05:da:c6: f0:39:25:30:7c:90:25:13:88:bd:eb:6f:d4:e4:c4: 89:02:bd:4c:4e:c9:7d:a7:5e:f1:07:65:5e:0c:1e: d2:9c:57:23:8f:97:d0:aa:b9:9f:97:15:34:72:7e: 60:66:96:d4:6a:9a:ef:74:72:45:01:e0:52:dd:3c: de:e5:76:bc:c9:95:93:78:33:08:28:5c:f9:e5:41: 40:bc:a3:12:87:e7:2d:87:84:14:1a:fd:0c:83:c6: 1f:1b:d9:28:7a:93:b1:80:01:a8:94:a5:2a:96:28: 8e:83:6e:e0:db:70:34:0f:45:83:7e:3c:1a:97:bd: e7:a0:c4:a3:00:58:6b:82:f3:d3:51:27:dc:8b:64: d2:e3:85:ca:fd:62:c0:91:88:d2:ba:83:35:39:6d: a6:18:66:07:06:52:c0:03:3d:ad:43:46:7c:55:31: 1c:a8:50:0e:ce:1d:8a:a3:dc:77:f6:cb:a1:39:f6: 22:bd:42:10:75:11:3b:d3:d9:8a:6c:72:9a:f5:62: 0e:0c:48:32:61:1b:b2:ea:96:cd:ff:5e:4a:04:86: 04:22:91:43:4a:ac:fa:58:d4:72:55:ec:68:63:c6: 9d:9c:7d:74:58:32:88:83:30:b7:18:f1:2f:ce:3d: 18:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:56:60:DF:D0:E1:AF:BC:EB:C5:32:F2:5C:F7:23:B7:A7:00:BC:6E X509v3 Authority Key Identifier: keyid:29:5B:6A:34:A2:10:9B:A7:C4:D9:7F:76:C7:44:66:F1:4C:33:33:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/6lZg39Dhr7zrxTLyXPcjt6cAvG4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.220.112.0/22 Signature Algorithm: sha256WithRSAEncryption 9c:db:21:8b:d1:99:2a:1a:ee:65:5a:d3:05:26:50:08:41:3d: 56:93:f9:2a:a8:63:fb:77:fa:af:30:a1:fd:10:e3:69:4d:23: 94:ad:66:76:60:7f:3d:64:1e:23:b7:ad:03:6a:98:b1:af:33: b0:1f:ea:f9:53:36:85:1a:c1:91:b8:a7:28:ba:11:e6:b3:70: 3c:49:38:a6:6e:5b:92:b4:21:fa:78:22:ae:8a:a9:88:18:8f: 63:8f:a9:1f:c8:20:a5:da:0f:7c:48:45:0e:19:44:b2:1c:a5: d6:76:4d:d7:c7:82:26:00:c0:60:6f:bd:fd:52:27:b1:09:5d: cc:95:c1:ce:67:4f:37:dc:de:bb:4c:3b:09:dd:71:b6:f3:bc: 32:f5:fc:7d:17:1c:ae:75:22:7e:51:b6:8d:cd:6b:68:d6:e6: 7c:df:33:40:c5:64:5b:2c:db:c2:da:24:ff:fb:94:05:7e:e6: 94:65:1f:2b:f7:59:de:fc:fc:2f:2e:35:2d:d8:9a:4d:c1:20: d5:6b:8f:5f:d6:12:1f:6c:95:71:0b:81:0b:39:d5:5d:09:bc: 73:94:f4:0e:b6:30:c5:3b:57:2a:ac:8f:7c:0a:91:72:89:ea: 17:20:df:5d:36:86:3d:14:a2:d9:dc:53:81:cd:59:a3:95:63: 26:79:35:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g83AfSl8ahryhDhAS97hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NWI2YTM0YTIxMDliYTdjNGQ5N2Y3NmM3NDQ2NmYxNGMz MzMzZTAwHhcNMjYwMTAyMTYyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTU2NjBkZmQwZTFhZmJjZWJjNTMyZjI1Y2Y3MjNiN2E3MDBiYzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRDyUTOFnkN7NUEF2sbwOSUwfJAl E4i962/U5MSJAr1MTsl9p17xB2VeDB7SnFcjj5fQqrmflxU0cn5gZpbUaprvdHJF AeBS3Tze5Xa8yZWTeDMIKFz55UFAvKMSh+cth4QUGv0Mg8YfG9koepOxgAGolKUq liiOg27g23A0D0WDfjwal73noMSjAFhrgvPTUSfci2TS44XK/WLAkYjSuoM1OW2m GGYHBlLAAz2tQ0Z8VTEcqFAOzh2Ko9x39suhOfYivUIQdRE709mKbHKa9WIODEgy YRuy6pbN/15KBIYEIpFDSqz6WNRyVexoY8adnH10WDKIgzC3GPEvzj0YLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOpWYN/Q4a+868Uy8lz3I7enALxuMB8GA1UdIwQY MBaAFClbajSiEJunxNl/dsdEZvFMMzPgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1Z0cU5LSVFtNmZFMlg5MngwUm04VXd6TS1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lOWIxNzMtOTJiNi00MjEwLWE4ZTAt Yjc5N2E0NDA2ZjMwLzEvNmxaZzM5RGhyN3pyeFRMeVhQY2p0NmNBdkc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9lOWIxNzMtOTJiNi00MjEwLWE4ZTAtYjc5N2E0NDA2ZjMw LzEvS1Z0cU5LSVFtNmZFMlg5MngwUm04VXd6TS1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudxwMA0G CSqGSIb3DQEBCwUAA4IBAQCc2yGL0ZkqGu5lWtMFJlAIQT1Wk/kqqGP7d/qvMKH9 EONpTSOUrWZ2YH89ZB4jt60DapixrzOwH+r5UzaFGsGRuKcouhHms3A8STimbluS tCH6eCKuiqmIGI9jj6kfyCCl2g98SEUOGUSyHKXWdk3Xx4ImAMBgb739UiexCV3M lcHOZ0833N67TDsJ3XG287wy9fx9FxyudSJ+UbaNzWto1uZ83zNAxWRbLNvC2iT/ +5QFfuaUZR8r91ne/PwvLjUt2JpNwSDVa49f1hIfbJVxC4ELOdVdCbxzlPQOtjDF O1cqrI98CpFyieoXIN9dNoY9FKLZ3FOBzVmjlWMmeTXX -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:05 2026 by rpki-client