This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/6D7xnslgrR1jYkhOQFOsCCy_Ilo.roa File: 6D7xnslgrR1jYkhOQFOsCCy_Ilo.roa (raw, json) Hash identifier: vZ6+RacR9VxPA5+UlqTbSm8U/9rgsp0IuJGD6MdbbQo= Subject key identifier: E8:3E:F1:9E:C9:60:AD:1D:63:62:48:4E:40:53:AC:08:2C:BF:22:5A Certificate issuer: /CN=3eb1788fe220e46434692d1cc437072d792d7888 Certificate serial: 019B79ECDB7105C38033FA95020646BBDA4F Authority key identifier: 3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/6D7xnslgrR1jYkhOQFOsCCy_Ilo.roa Signing time: Thu 01 Jan 2026 14:18:44 +0000 ROA not before: Thu 01 Jan 2026 14:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213068 IP address blocks: 185.237.152.0/24 maxlen: 24 185.237.153.0/24 maxlen: 24 185.237.154.0/24 maxlen: 24 185.237.155.0/24 maxlen: 24 2001:678:da0::/48 maxlen: 48 2001:678:da4::/48 maxlen: 48 2001:678:da8::/48 maxlen: 48 2001:678:dac::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:db:71:05:c3:80:33:fa:95:02:06:46:bb:da:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb1788fe220e46434692d1cc437072d792d7888 Validity Not Before: Jan 1 14:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e83ef19ec960ad1d6362484e4053ac082cbf225a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:55:a7:12:6f:f8:98:5a:1a:a8:60:7f:d2:e4: 40:89:35:48:43:7c:f7:d9:a5:87:25:d3:3d:a2:81: 82:12:e3:5c:5c:c8:25:8f:4e:4f:ba:57:cd:06:ca: 3d:95:9e:a9:3c:37:cd:52:16:09:46:e1:a6:d8:12: a2:41:48:c8:bb:cb:29:2f:c0:38:12:cf:80:d5:5b: ac:08:8f:15:69:26:c2:8c:3b:af:47:59:94:d3:27: 47:19:bc:62:25:07:ae:c2:e1:21:49:fa:d9:cb:17: 65:1d:0f:53:e0:fd:2f:35:02:27:7a:d5:58:6d:1b: 5d:d5:bc:c7:fa:72:62:4f:74:96:ca:fa:50:3d:0e: cc:dd:ef:f3:04:4e:db:0c:73:9e:38:86:14:92:c7: e7:dd:94:54:9f:90:37:61:47:b4:13:c0:58:36:e8: c4:df:05:40:4c:85:ae:d3:cf:5f:5c:cb:01:10:7f: 02:d2:f2:85:a8:98:b8:a7:d7:54:e4:dc:0c:51:b1: c7:0b:85:f1:ad:b0:a7:de:bb:f6:a9:e6:62:54:ca: ec:6a:76:fe:54:95:5c:14:94:ba:0d:bd:a8:c4:e1: 94:46:0b:dc:d9:91:88:fc:de:d0:3c:a6:b0:03:15: 18:a3:fd:b8:db:1e:96:0e:2e:33:29:fe:a3:b2:8f: a5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3E:F1:9E:C9:60:AD:1D:63:62:48:4E:40:53:AC:08:2C:BF:22:5A X509v3 Authority Key Identifier: keyid:3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/6D7xnslgrR1jYkhOQFOsCCy_Ilo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.237.152.0/22 IPv6: 2001:678:da0::/48 2001:678:da4::/48 2001:678:da8::/48 2001:678:dac::/48 Signature Algorithm: sha256WithRSAEncryption 28:56:90:c5:cd:a9:3d:f8:c9:c1:72:79:30:18:4f:38:9f:70: 09:1d:8a:ab:cc:0c:f4:7e:32:c7:15:f9:8f:89:bb:42:c7:fe: 39:c9:b8:cc:26:9b:a2:d1:d4:e2:81:ea:c6:62:a0:bb:48:a8: 46:d5:6f:d0:68:91:7b:41:17:94:b1:dc:3f:c0:12:d5:e5:b6: 8b:34:24:95:4b:16:25:04:67:e6:b5:a3:9e:db:de:8f:83:55: 0d:1a:f0:f7:84:33:f6:6a:9c:e9:35:44:61:b7:14:1b:d0:0f: ff:c6:53:f7:d5:1e:47:02:79:34:6b:98:f8:3e:66:24:4b:f1: 06:d1:db:82:d2:5a:29:0a:43:f5:cd:ae:57:3c:5e:8e:8c:8e: b0:de:45:39:e5:75:45:b2:de:13:4d:59:0d:37:dc:f1:43:1b: 20:8c:e7:a3:25:55:fe:93:19:8b:47:24:2c:21:86:79:e0:61: 11:34:d1:70:02:ba:7b:46:ad:5f:56:a7:fc:02:02:fa:e9:01: 2a:87:ea:cd:a7:c8:74:00:c2:ab:9a:d4:f2:78:f6:85:f8:3b: a8:58:22:86:f9:60:eb:e7:cf:71:d9:d1:c0:0c:19:51:cd:0a: 70:7d:8d:3a:c8:cb:d7:7f:5e:26:56:53:70:42:3e:5c:96:0d: fe:b4:51:7a -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt57NtxBcOAM/qVAgZGu9pPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYjE3ODhmZTIyMGU0NjQzNDY5MmQxY2M0MzcwNzJkNzky ZDc4ODgwHhcNMjYwMTAxMTQxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODNlZjE5ZWM5NjBhZDFkNjM2MjQ4NGU0MDUzYWMwODJjYmYyMjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlWnEm/4mFoaqGB/0uRAiTVIQ3z3 2aWHJdM9ooGCEuNcXMglj05PulfNBso9lZ6pPDfNUhYJRuGm2BKiQUjIu8spL8A4 Es+A1VusCI8VaSbCjDuvR1mU0ydHGbxiJQeuwuEhSfrZyxdlHQ9T4P0vNQInetVY bRtd1bzH+nJiT3SWyvpQPQ7M3e/zBE7bDHOeOIYUksfn3ZRUn5A3YUe0E8BYNujE 3wVATIWu089fXMsBEH8C0vKFqJi4p9dU5NwMUbHHC4XxrbCn3rv2qeZiVMrsanb+ VJVcFJS6Db2oxOGURgvc2ZGI/N7QPKawAxUYo/242x6WDi4zKf6jso+lLQIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFOg+8Z7JYK0dY2JITkBTrAgsvyJaMB8GA1UdIwQY MBaAFD6xeI/iIORkNGktHMQ3By15LXiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHJGNGotSWc1R1EwYVMwY3hEY0hMWGt0ZUlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8yMmY1NzAtMGIyNi00MDA0LThlZDAt ZDk1MDk0NzMwNzJjLzEvNkQ3eG5zbGdyUjFqWWtoT1FGT3NDQ3lfSWxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8yMmY1NzAtMGIyNi00MDA0LThlZDAtZDk1MDk0NzMwNzJj LzEvUHJGNGotSWc1R1EwYVMwY3hEY0hMWGt0ZUlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAMBAIAATAGAwQCue2YMCoE AgACMCQDBwAgAQZ4DaADBwAgAQZ4DaQDBwAgAQZ4DagDBwAgAQZ4DawwDQYJKoZI hvcNAQELBQADggEBAChWkMXNqT34ycFyeTAYTzifcAkdiqvMDPR+MscV+Y+Ju0LH /jnJuMwmm6LR1OKB6sZioLtIqEbVb9BokXtBF5Sx3D/AEtXltos0JJVLFiUEZ+a1 o57b3o+DVQ0a8PeEM/ZqnOk1RGG3FBvQD//GU/fVHkcCeTRrmPg+ZiRL8QbR24LS WikKQ/XNrlc8Xo6MjrDeRTnldUWy3hNNWQ033PFDGyCM56MlVf6TGYtHJCwhhnng YRE00XACuntGrV9Wp/wCAvrpASqH6s2nyHQAwqua1PJ49oX4O6hYIob5YOvnz3HZ 0cAMGVHNCnB9jTrIy9d/XiZWU3BCPlyWDf60UXo= -----END CERTIFICATE-----Generated at Mon Feb 2 08:09:22 2026 by rpki-client