This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/E6uFRto1KOOlDteB9p8TgWfe7iA.roa File: E6uFRto1KOOlDteB9p8TgWfe7iA.roa (raw, json) Hash identifier: dfDYcJiyeiY8hSBk1DQV6nWMpgUuU4rmpVyKldkTJrs= Subject key identifier: 13:AB:85:46:DA:35:28:E3:A5:0E:D7:81:F6:9F:13:81:67:DE:EE:20 Certificate issuer: /CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5 Certificate serial: 019B7BA36863D209739FFE92A1F313A0B84D Authority key identifier: FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/E6uFRto1KOOlDteB9p8TgWfe7iA.roa Signing time: Thu 01 Jan 2026 22:17:45 +0000 ROA not before: Thu 01 Jan 2026 22:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24971 IP address blocks: 185.145.160.0/22 maxlen: 22 2a07:4880::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 16:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:68:63:d2:09:73:9f:fe:92:a1:f3:13:a0:b8:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5 Validity Not Before: Jan 1 22:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13ab8546da3528e3a50ed781f69f138167deee20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5a:70:02:53:ed:5d:19:70:d4:19:94:21:5a: cc:e1:91:41:ca:60:52:1f:e8:d0:3e:2a:06:20:d1: b4:27:79:50:04:8d:54:02:5a:45:19:e4:86:f6:ea: a2:fa:5e:a9:9c:08:c4:d8:ca:e4:db:8c:6c:f7:a5: 42:57:16:28:c0:bf:86:e1:55:8e:c0:c0:13:f9:eb: f4:0d:1a:60:49:c2:24:5d:cd:a2:74:77:1d:81:5a: 24:49:a0:3c:96:a0:ec:0a:29:03:76:15:d4:78:48: 6f:b8:8c:54:79:7c:d9:60:52:6e:82:7d:2e:ec:3c: 99:b5:aa:e8:c9:31:2a:6e:74:2e:b0:e9:2b:3d:b5: 29:17:40:d7:a4:13:35:d9:d6:77:a9:53:8c:d5:34: e7:77:a2:07:ed:ef:93:3c:3b:5f:89:a1:2a:3d:b8: f0:e8:49:4e:2e:e8:70:07:e1:67:35:38:cf:8d:e5: 35:d4:7c:00:da:7a:0c:74:0c:6d:5c:a3:93:2b:7d: 47:5a:f5:31:99:bc:13:8c:e7:4e:6f:b5:94:5a:67: 9d:7d:d7:18:56:13:b7:97:63:35:e4:7b:02:78:c3: d1:a4:d4:17:47:18:5e:bb:e2:87:a1:3c:42:bd:34: ca:f6:08:10:59:56:dc:47:99:b8:55:20:0e:68:d8: 7d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AB:85:46:DA:35:28:E3:A5:0E:D7:81:F6:9F:13:81:67:DE:EE:20 X509v3 Authority Key Identifier: keyid:FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/E6uFRto1KOOlDteB9p8TgWfe7iA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.145.160.0/22 IPv6: 2a07:4880::/29 Signature Algorithm: sha256WithRSAEncryption 61:d5:a3:c7:65:c9:e2:a0:69:71:6a:da:4c:56:e6:d7:75:d6: d3:ce:66:69:f2:a7:c5:12:df:af:05:5c:ba:0e:8e:1f:89:2f: 23:2b:59:cd:01:9a:0f:d7:e4:cb:19:3b:72:76:3f:7a:7f:72: dc:6f:ad:56:35:03:ab:90:8f:17:55:cf:6b:d6:7a:2d:14:53: ac:3a:1e:6b:5a:e2:af:88:d0:57:44:e1:2d:af:b0:c6:a1:e0: d9:f2:1f:fe:b1:39:48:7a:04:7b:22:ef:85:b7:af:07:25:81: dc:38:5f:d5:e7:6c:e5:a6:db:dd:9d:54:f4:ba:60:87:5a:02: 02:63:42:1c:36:b8:a7:3e:38:af:52:f4:d8:84:37:f9:58:aa: bf:a3:da:2a:d2:d8:4c:d3:e9:71:1f:a1:30:b6:a8:5a:e2:97: 25:92:9d:6b:f8:d5:6d:81:9f:48:6d:9e:bb:f9:7f:ea:a4:be: b3:b6:a8:06:10:c2:fe:db:6f:66:92:5d:e8:e0:2b:28:4a:3b: cc:47:a5:c9:e2:25:85:57:bb:7f:b8:d9:ae:de:f1:37:6b:e1: 90:68:ac:7e:88:43:54:84:a2:ce:86:2e:4b:0c:e4:3e:b2:ad: 35:0f:59:ae:53:14:04:21:81:56:65:36:7a:4f:29:07:46:35: 63:b3:f5:61 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7o2hj0glzn/6SofMToLhNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkM2FmMmIwNmY0YTUwMTZlMGU1YWJlZDE4M2Y0NjVkYjE1 ZjQxZDUwHhcNMjYwMTAxMjIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2FiODU0NmRhMzUyOGUzYTUwZWQ3ODFmNjlmMTM4MTY3ZGVlZTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1pwAlPtXRlw1BmUIVrM4ZFBymBS H+jQPioGING0J3lQBI1UAlpFGeSG9uqi+l6pnAjE2Mrk24xs96VCVxYowL+G4VWO wMAT+ev0DRpgScIkXc2idHcdgVokSaA8lqDsCikDdhXUeEhvuIxUeXzZYFJugn0u 7DyZtaroyTEqbnQusOkrPbUpF0DXpBM12dZ3qVOM1TTnd6IH7e+TPDtfiaEqPbjw 6ElOLuhwB+FnNTjPjeU11HwA2noMdAxtXKOTK31HWvUxmbwTjOdOb7WUWmedfdcY VhO3l2M15HsCeMPRpNQXRxheu+KHoTxCvTTK9ggQWVbcR5m4VSAOaNh9/QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBOrhUbaNSjjpQ7XgfafE4Fn3u4gMB8GA1UdIwQY MBaAFP068rBvSlAW4OWr7Rg/Rl2xX0HVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RyeXNHOUtVQmJnNWF2dEdEOUdYYkZmUWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85MjI2MmUtMjI3Ni00YTg4LWE3MzMt MDQ5YmQ3YjFlMTE5LzEvRTZ1RlJ0bzFLT09sRHRlQjlwOFRnV2ZlN2lBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS85MjI2MmUtMjI3Ni00YTg4LWE3MzMtMDQ5YmQ3YjFlMTE5 LzEvX1RyeXNHOUtVQmJnNWF2dEdEOUdYYkZmUWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZGgMA0E AgACMAcDBQMqB0iAMA0GCSqGSIb3DQEBCwUAA4IBAQBh1aPHZcnioGlxatpMVubX ddbTzmZp8qfFEt+vBVy6Do4fiS8jK1nNAZoP1+TLGTtydj96f3Lcb61WNQOrkI8X Vc9r1notFFOsOh5rWuKviNBXROEtr7DGoeDZ8h/+sTlIegR7Iu+Ft68HJYHcOF/V 52zlptvdnVT0umCHWgICY0IcNrinPjivUvTYhDf5WKq/o9oq0thM0+lxH6Ewtqha 4pclkp1r+NVtgZ9IbZ67+X/qpL6ztqgGEML+229mkl3o4CsoSjvMR6XJ4iWFV7t/ uNmu3vE3a+GQaKx+iENUhKLOhi5LDOQ+sq01D1muUxQEIYFWZTZ6TykHRjVjs/Vh -----END CERTIFICATE-----Generated at Tue Jan 27 02:08:52 2026 by rpki-client