This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/6GMqaoNuem-rKgHvy1GiWJWKilw.roa File: 6GMqaoNuem-rKgHvy1GiWJWKilw.roa (raw, json) Hash identifier: nwMP8vU+agP8Pszmp+8gcADemNbpqE9xOsflD5H9lfw= Subject key identifier: E8:63:2A:6A:83:6E:7A:6F:AB:2A:01:EF:CB:51:A2:58:95:8A:8A:5C Certificate issuer: /CN=69c977d45c29d81bd923fdeb1f092ff34644e33c Certificate serial: 019B7EA64AEBA2C1198670634344B5C912E5 Authority key identifier: 69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/6GMqaoNuem-rKgHvy1GiWJWKilw.roa Signing time: Fri 02 Jan 2026 12:19:45 +0000 ROA not before: Fri 02 Jan 2026 12:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49544 IP address blocks: 185.191.240.0/22 maxlen: 22 2a0a:2140::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:4a:eb:a2:c1:19:86:70:63:43:44:b5:c9:12:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69c977d45c29d81bd923fdeb1f092ff34644e33c Validity Not Before: Jan 2 12:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8632a6a836e7a6fab2a01efcb51a258958a8a5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5d:a5:b2:89:b2:c1:36:56:7e:88:cd:33:85: 99:6b:5d:71:00:e3:44:c5:23:79:33:e1:80:a5:8f: cc:5e:a4:a7:d1:f7:ad:3f:fa:6b:b8:85:3b:5e:57: 74:55:5e:34:66:3c:a9:1e:bb:9c:21:ce:9a:58:10: 98:9c:62:d9:fb:74:9f:9e:bd:25:a1:f5:4a:2f:90: 53:98:1f:46:10:9b:93:13:b8:d1:f8:2c:11:e3:91: ba:53:01:0e:1c:7a:3a:86:3d:bb:e9:10:1a:53:f3: a5:bb:a6:2d:b9:26:f5:66:73:0a:ec:c7:d8:ed:9c: b5:50:35:f0:37:0f:ff:0c:d5:f5:44:a2:91:46:70: c7:83:e0:95:45:1f:ba:1d:c7:8d:d4:7c:0c:bc:cf: 45:0d:50:72:95:b2:20:63:4e:a4:d7:4c:b4:95:95: fc:13:23:17:19:36:c6:6d:ad:a4:b7:cf:60:74:8c: 16:9d:77:df:fd:8e:5b:f1:48:51:c0:36:80:38:76: 43:fb:6c:c1:11:02:f9:22:85:f9:eb:97:e1:bd:fe: fb:74:21:2d:91:21:c0:f2:a1:e1:1b:fb:e7:29:54: 07:2f:f5:8a:8c:d5:79:26:73:38:1d:35:8b:b4:4d: 19:90:80:a1:fa:48:c0:94:a7:ee:d0:94:9f:47:6d: db:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:63:2A:6A:83:6E:7A:6F:AB:2A:01:EF:CB:51:A2:58:95:8A:8A:5C X509v3 Authority Key Identifier: keyid:69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/6GMqaoNuem-rKgHvy1GiWJWKilw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.191.240.0/22 IPv6: 2a0a:2140::/29 Signature Algorithm: sha256WithRSAEncryption 3e:9f:b0:16:2e:af:7b:b8:82:30:28:66:f3:46:d8:e7:80:04: fb:ba:94:b4:e8:8c:26:2e:38:82:94:ac:2a:63:ca:a1:30:98: 00:71:e8:7d:28:8d:d1:5a:c8:56:66:41:5b:51:1e:9f:84:62: 85:26:d1:c7:ff:07:a5:60:49:9c:0f:d9:58:93:ac:b4:aa:bc: 3a:34:90:70:a6:71:5d:e9:df:59:09:8a:6d:74:40:34:cc:a4: 08:7c:99:f1:10:29:28:b7:ad:4f:31:94:d8:a9:04:37:a9:dd: 77:a9:5d:39:e5:a4:ea:c5:bf:fb:16:d3:71:2e:97:f9:89:4d: cf:ba:e0:ad:83:8b:c0:59:75:84:64:25:a6:ed:60:54:4b:e2: 31:dc:c7:7d:c5:08:bd:5a:a7:46:d0:8d:02:b9:38:87:29:2e: 37:35:70:6d:09:1d:20:47:1d:82:d6:75:f0:53:70:9c:0f:c3: 86:71:80:f9:0a:14:89:56:f9:e1:d4:1f:89:25:ea:dc:ec:c3: 64:d2:8f:b2:08:95:dc:11:e7:13:94:5f:88:70:2e:86:2d:24: 18:51:91:02:76:23:4f:80:a9:70:a5:5c:4a:3e:63:34:ae:4d: b3:1e:7d:0f:cf:1f:c0:6a:26:18:fc:04:ee:bd:08:e5:24:93: cf:50:99:ae -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pkrrosEZhnBjQ0S1yRLlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5Yzk3N2Q0NWMyOWQ4MWJkOTIzZmRlYjFmMDkyZmYzNDY0 NGUzM2MwHhcNMjYwMTAyMTIxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODYzMmE2YTgzNmU3YTZmYWIyYTAxZWZjYjUxYTI1ODk1OGE4YTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF2lsomywTZWfojNM4WZa11xAONE xSN5M+GApY/MXqSn0fetP/pruIU7Xld0VV40ZjypHrucIc6aWBCYnGLZ+3Sfnr0l ofVKL5BTmB9GEJuTE7jR+CwR45G6UwEOHHo6hj276RAaU/Olu6YtuSb1ZnMK7MfY 7Zy1UDXwNw//DNX1RKKRRnDHg+CVRR+6HceN1HwMvM9FDVBylbIgY06k10y0lZX8 EyMXGTbGba2kt89gdIwWnXff/Y5b8UhRwDaAOHZD+2zBEQL5IoX565fhvf77dCEt kSHA8qHhG/vnKVQHL/WKjNV5JnM4HTWLtE0ZkICh+kjAlKfu0JSfR23bfQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOhjKmqDbnpvqyoB78tRoliViopcMB8GA1UdIwQY MBaAFGnJd9RcKdgb2SP96x8JL/NGROM8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWNsMzFGd3AyQnZaSV8zckh3a3Y4MFpFNHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8xYzlkZGMtZGM0ZC00NTcxLTgyZGIt Y2U1MzUyNmU2Njk5LzEvNkdNcWFvTnVlbS1yS2dIdnkxR2lXSldLaWx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8xYzlkZGMtZGM0ZC00NTcxLTgyZGItY2U1MzUyNmU2Njk5 LzEvYWNsMzFGd3AyQnZaSV8zckh3a3Y4MFpFNHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCub/wMA0E AgACMAcDBQMqCiFAMA0GCSqGSIb3DQEBCwUAA4IBAQA+n7AWLq97uIIwKGbzRtjn gAT7upS06IwmLjiClKwqY8qhMJgAceh9KI3RWshWZkFbUR6fhGKFJtHH/welYEmc D9lYk6y0qrw6NJBwpnFd6d9ZCYptdEA0zKQIfJnxECkot61PMZTYqQQ3qd13qV05 5aTqxb/7FtNxLpf5iU3PuuCtg4vAWXWEZCWm7WBUS+Ix3Md9xQi9WqdG0I0CuTiH KS43NXBtCR0gRx2C1nXwU3CcD8OGcYD5ChSJVvnh1B+JJerc7MNk0o+yCJXcEecT lF+IcC6GLSQYUZECdiNPgKlwpVxKPmM0rk2zHn0Pzx/AaiYY/ATuvQjlJJPPUJmu -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:05 2026 by rpki-client