This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/6AphNA0mG7iYn4g9t4CVeYnl-0Y.roa File: 6AphNA0mG7iYn4g9t4CVeYnl-0Y.roa (raw, json) Hash identifier: ES2CFvY9/aMMP3GdeYDhO1AlVTq0AbKmFVcT86x0bsU= Subject key identifier: E8:0A:61:34:0D:26:1B:B8:98:9F:88:3D:B7:80:95:79:89:E5:FB:46 Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3 Certificate serial: 019B7C1278463F6CDB0A7EE67D7D1CC739A8 Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/6AphNA0mG7iYn4g9t4CVeYnl-0Y.roa Signing time: Fri 02 Jan 2026 00:19:03 +0000 ROA not before: Fri 02 Jan 2026 00:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 185.10.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:78:46:3f:6c:db:0a:7e:e6:7d:7d:1c:c7:39:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3 Validity Not Before: Jan 2 00:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e80a61340d261bb8989f883db780957989e5fb46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:33:74:c1:f4:dc:e6:8a:fd:c7:0b:5b:1a:a9: 8d:f1:92:00:79:96:b0:5f:6a:f9:7b:c6:99:e1:85: 16:bb:c3:f4:fd:56:d5:45:98:1b:71:bb:f0:d9:56: 4c:8d:77:66:e1:fc:f8:55:ae:a4:57:77:f4:d3:a4: f7:24:15:e4:a3:d1:5a:4b:4f:8a:e4:a1:92:39:7d: 6a:3b:71:4f:ed:7e:d4:fc:2c:0b:50:44:55:a8:98: ed:ca:17:14:77:f7:de:c1:5e:9c:49:7d:ab:45:c4: de:76:3b:57:91:1a:f2:3c:43:ba:22:3f:45:7e:c8: 81:28:f3:e9:bc:a3:90:a2:af:14:fe:a0:ef:ae:84: 27:3e:91:47:95:8b:06:23:51:66:4f:99:aa:1a:eb: e9:71:41:fa:e0:84:bf:27:c1:f4:d5:9d:d6:bb:e7: df:71:6f:2b:28:43:db:01:84:40:33:ef:bb:ee:45: 52:32:90:f8:c1:9a:7d:cd:fe:c2:08:f6:13:d6:2f: 55:fa:1d:5e:3a:d8:82:77:db:9d:dd:d0:ab:f9:4d: 9e:23:2c:0e:71:e3:b2:a1:e3:cc:49:1e:8a:16:a0: 74:62:52:74:19:c0:06:2e:f7:3b:27:8d:ed:48:bf: 47:ae:e6:1a:80:26:24:27:af:c2:d1:35:77:65:d2: c1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:0A:61:34:0D:26:1B:B8:98:9F:88:3D:B7:80:95:79:89:E5:FB:46 X509v3 Authority Key Identifier: keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/6AphNA0mG7iYn4g9t4CVeYnl-0Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.10.120.0/23 Signature Algorithm: sha256WithRSAEncryption 52:b1:fa:05:1a:3f:9b:07:4d:5c:48:aa:9a:01:3a:6d:95:50: 57:8f:ac:c0:e0:f1:51:13:b9:33:98:bb:33:37:78:4f:48:5c: 48:5f:9f:6f:26:52:5f:0b:8f:c2:91:d8:c0:da:cb:26:49:69: 66:cf:88:53:3d:50:99:e9:2d:73:54:5e:36:b4:79:e7:0c:ef: 4d:37:a4:a3:16:92:c2:62:36:ca:d3:36:b7:6f:1c:70:83:2e: 7b:8b:f1:2f:85:4e:49:5e:54:f6:1c:55:a8:98:39:79:94:07: dc:fa:a2:e8:60:4f:bc:84:0b:ff:1b:c7:d5:f3:83:75:dc:80: c7:77:26:db:6f:c9:44:d1:da:c0:76:9f:9c:4a:dd:72:e3:84: 5a:47:21:19:e4:7a:ec:18:17:8f:6b:1d:d5:59:33:d7:77:86: 33:81:05:ab:7c:56:4b:51:0d:1c:e6:85:bb:98:fc:81:0a:fe: d6:8c:91:c0:67:c4:f4:09:cb:7a:12:2f:ea:09:f2:89:99:20: 3f:62:5f:63:cf:d0:fa:df:06:48:9d:6d:4d:41:58:94:f3:c5: d0:d7:27:64:f5:b7:43:3f:1f:06:e9:78:7f:87:49:fc:09:63: 02:09:e7:08:37:3d:ab:17:b2:97:40:ba:ae:47:85:52:2b:aa: 8e:41:82:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EnhGP2zbCn7mfX0cxzmoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0Yzg2ZGEzZjQ4MzI0NjUxOGQzNjgwMzRiYzg2MTEzOTA2 YTU1YTMwHhcNMjYwMTAyMDAxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODBhNjEzNDBkMjYxYmI4OTg5Zjg4M2RiNzgwOTU3OTg5ZTVmYjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzN0wfTc5or9xwtbGqmN8ZIAeZaw X2r5e8aZ4YUWu8P0/VbVRZgbcbvw2VZMjXdm4fz4Va6kV3f006T3JBXko9FaS0+K 5KGSOX1qO3FP7X7U/CwLUERVqJjtyhcUd/fewV6cSX2rRcTedjtXkRryPEO6Ij9F fsiBKPPpvKOQoq8U/qDvroQnPpFHlYsGI1FmT5mqGuvpcUH64IS/J8H01Z3Wu+ff cW8rKEPbAYRAM++77kVSMpD4wZp9zf7CCPYT1i9V+h1eOtiCd9ud3dCr+U2eIywO ceOyoePMSR6KFqB0YlJ0GcAGLvc7J43tSL9HruYagCYkJ6/C0TV3ZdLB8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOgKYTQNJhu4mJ+IPbeAlXmJ5ftGMB8GA1UdIwQY MBaAFOTIbaP0gyRlGNNoA0vIYROQalWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTct YzUxMWEzZTkxMmI2LzEvNkFwaE5BMG1HN2lZbjRnOXQ0Q1ZlWW5sLTBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTctYzUxMWEzZTkxMmI2 LzEvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuQp4MA0G CSqGSIb3DQEBCwUAA4IBAQBSsfoFGj+bB01cSKqaATptlVBXj6zA4PFRE7kzmLsz N3hPSFxIX59vJlJfC4/CkdjA2ssmSWlmz4hTPVCZ6S1zVF42tHnnDO9NN6SjFpLC YjbK0za3bxxwgy57i/EvhU5JXlT2HFWomDl5lAfc+qLoYE+8hAv/G8fV84N13IDH dybbb8lE0drAdp+cSt1y44RaRyEZ5HrsGBePax3VWTPXd4YzgQWrfFZLUQ0c5oW7 mPyBCv7WjJHAZ8T0Cct6Ei/qCfKJmSA/Yl9jz9D63wZInW1NQViU88XQ1ydk9bdD Px8G6Xh/h0n8CWMCCecINz2rF7KXQLquR4VSK6qOQYJH -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:31 2026 by rpki-client