This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/6DOga19N-SJus9fSs8aWod0Yc8s.roa File: 6DOga19N-SJus9fSs8aWod0Yc8s.roa (raw, json) Hash identifier: 6YzaiBJdvsex7JXKRsYEZt98CcuLIqwEZkpbs74D19I= Subject key identifier: E8:33:A0:6B:5F:4D:F9:22:6E:B3:D7:D2:B3:C6:96:A1:DD:18:73:CB Certificate issuer: /CN=7699c189027e25ecc53f98b52ea65ae725d2a730 Certificate serial: 019B7910B891353D59CB970B8675EAEB1DFC Authority key identifier: 76:99:C1:89:02:7E:25:EC:C5:3F:98:B5:2E:A6:5A:E7:25:D2:A7:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/6DOga19N-SJus9fSs8aWod0Yc8s.roa Signing time: Thu 01 Jan 2026 10:18:17 +0000 ROA not before: Thu 01 Jan 2026 10:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 185.46.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.crl rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b8:91:35:3d:59:cb:97:0b:86:75:ea:eb:1d:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7699c189027e25ecc53f98b52ea65ae725d2a730 Validity Not Before: Jan 1 10:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e833a06b5f4df9226eb3d7d2b3c696a1dd1873cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3e:e6:06:f1:5e:7e:94:79:2c:9a:d2:7f:92: 56:df:67:b3:08:07:06:11:7b:23:ce:4b:19:f1:20: 29:4d:c6:a4:b3:e8:87:1c:95:8d:68:8e:62:ca:e7: 0e:a6:54:d7:f6:70:7c:e8:fd:c0:ac:9d:45:0b:91: ac:0b:03:66:50:63:78:30:21:d1:e6:d7:11:91:71: d4:fb:b4:e6:c1:13:3a:2b:f7:e6:f4:00:28:60:1f: 43:93:45:48:c1:e5:f7:08:73:25:10:98:5a:b2:11: a9:99:05:c8:56:3c:9b:fb:a1:a9:44:c5:15:f0:e5: 02:8a:64:c8:05:28:ff:73:52:c3:5e:b4:3c:33:6e: 5f:48:f3:32:f0:7a:5c:ab:2e:03:16:c0:8c:d6:00: 9d:20:da:d6:5f:5d:a1:a2:55:b7:77:47:e2:8e:1f: cb:f9:d2:17:9a:6f:7d:5b:af:d8:2f:a1:18:c5:21: 57:d0:f0:74:37:70:55:af:d5:9d:c1:88:c8:de:b2: c1:e3:ed:8c:47:03:57:9a:b6:fa:80:a2:e4:e3:08: fa:7b:9c:85:85:19:67:a0:8c:f3:28:d4:49:7e:b4: 45:83:58:51:78:ac:57:62:83:8b:5f:82:cb:27:9e: aa:2f:a3:04:63:99:bc:1c:90:5f:85:54:3b:f3:ca: 80:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:33:A0:6B:5F:4D:F9:22:6E:B3:D7:D2:B3:C6:96:A1:DD:18:73:CB X509v3 Authority Key Identifier: keyid:76:99:C1:89:02:7E:25:EC:C5:3F:98:B5:2E:A6:5A:E7:25:D2:A7:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/6DOga19N-SJus9fSs8aWod0Yc8s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.46.232.0/24 Signature Algorithm: sha256WithRSAEncryption 67:3b:3d:61:05:48:27:e6:89:18:4d:6d:8a:08:fd:ba:0a:8d: 8c:3a:9b:96:99:17:8f:c4:c1:27:b9:4e:14:11:75:d6:03:76: da:48:03:ad:4d:02:74:b0:e2:99:b5:f4:84:1e:4f:a3:c3:da: 9e:21:9a:88:65:a5:ba:3c:9c:0a:a5:33:34:5b:9e:28:dd:dc: c2:57:cc:aa:4e:d7:31:5c:f9:59:3d:21:d5:36:41:e8:07:73: b2:a9:32:dc:51:8b:b8:39:69:c3:f9:1f:59:26:f8:e0:f5:14: e5:58:4e:d5:9e:02:7c:6a:3f:1f:44:37:9f:96:1a:25:42:c4: 91:d7:dc:3f:d0:bc:54:07:47:55:c8:c2:df:fb:2a:20:7d:fc: 85:18:c6:e2:83:f5:73:4c:3c:aa:77:3b:85:f4:ff:03:32:aa: 9f:10:8e:19:65:0c:00:cc:91:2d:34:17:94:0a:b2:0f:64:aa: 71:a3:e4:09:a6:56:10:1e:38:ac:02:db:09:04:69:c7:58:8f: f5:30:17:97:4d:c8:f0:27:78:b0:1b:f3:a6:d8:71:94:80:42: e1:a7:0c:1b:36:24:0a:86:bc:1d:1d:20:f3:1d:c1:7c:48:e8: 4d:33:71:0e:94:54:7f:e0:c2:9a:5b:5a:f1:2b:8e:c7:75:c7: de:65:9e:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ELiRNT1Zy5cLhnXq6x38MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2OTljMTg5MDI3ZTI1ZWNjNTNmOThiNTJlYTY1YWU3MjVk MmE3MzAwHhcNMjYwMTAxMTAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODMzYTA2YjVmNGRmOTIyNmViM2Q3ZDJiM2M2OTZhMWRkMTg3M2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT7mBvFefpR5LJrSf5JW32ezCAcG EXsjzksZ8SApTcaks+iHHJWNaI5iyucOplTX9nB86P3ArJ1FC5GsCwNmUGN4MCHR 5tcRkXHU+7TmwRM6K/fm9AAoYB9Dk0VIweX3CHMlEJhashGpmQXIVjyb+6GpRMUV 8OUCimTIBSj/c1LDXrQ8M25fSPMy8Hpcqy4DFsCM1gCdINrWX12holW3d0fijh/L +dIXmm99W6/YL6EYxSFX0PB0N3BVr9WdwYjI3rLB4+2MRwNXmrb6gKLk4wj6e5yF hRlnoIzzKNRJfrRFg1hReKxXYoOLX4LLJ56qL6MEY5m8HJBfhVQ788qATQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOgzoGtfTfkibrPX0rPGlqHdGHPLMB8GA1UdIwQY MBaAFHaZwYkCfiXsxT+YtS6mWucl0qcwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHBuQmlRSi1KZXpGUDVpMUxxWmE1eVhTcHpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS83MTc1NTUtMzU0Zi00YjM3LThhNmEt MDk0MDQzNjY5MWJkLzEvNkRPZ2ExOU4tU0p1czlmU3M4YVdvZDBZYzhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS83MTc1NTUtMzU0Zi00YjM3LThhNmEtMDk0MDQzNjY5MWJk LzEvZHBuQmlRSi1KZXpGUDVpMUxxWmE1eVhTcHpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuS7oMA0G CSqGSIb3DQEBCwUAA4IBAQBnOz1hBUgn5okYTW2KCP26Co2MOpuWmRePxMEnuU4U EXXWA3baSAOtTQJ0sOKZtfSEHk+jw9qeIZqIZaW6PJwKpTM0W54o3dzCV8yqTtcx XPlZPSHVNkHoB3OyqTLcUYu4OWnD+R9ZJvjg9RTlWE7VngJ8aj8fRDeflholQsSR 19w/0LxUB0dVyMLf+yogffyFGMbig/VzTDyqdzuF9P8DMqqfEI4ZZQwAzJEtNBeU CrIPZKpxo+QJplYQHjisAtsJBGnHWI/1MBeXTcjwJ3iwG/Om2HGUgELhpwwbNiQK hrwdHSDzHcF8SOhNM3EOlFR/4MKaW1rxK47HdcfeZZ47 -----END CERTIFICATE-----Generated at Mon Jan 19 16:52:06 2026 by rpki-client