This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/i6gcioIk1jIxZGNq2Keg8xOkBWg.roa File: i6gcioIk1jIxZGNq2Keg8xOkBWg.roa (raw, json) Hash identifier: EYNfjU+Znmdq/oFfOoZVDk/plRE4M9DNa/cL2woqZVo= Subject key identifier: 8B:A8:1C:8A:82:24:D6:32:31:64:63:6A:D8:A7:A0:F3:13:A4:05:68 Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520 Certificate serial: 019B78A2A3A7BDF4095E3AE61F784E42A0D7 Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/i6gcioIk1jIxZGNq2Keg8xOkBWg.roa Signing time: Thu 01 Jan 2026 08:18:03 +0000 ROA not before: Thu 01 Jan 2026 08:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398465 IP address blocks: 185.161.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:a3:a7:bd:f4:09:5e:3a:e6:1f:78:4e:42:a0:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520 Validity Not Before: Jan 1 08:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ba81c8a8224d6323164636ad8a7a0f313a40568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9f:ff:4d:57:fe:fb:1b:df:f4:30:a8:b5:56: f6:15:42:db:54:0a:b4:83:58:2e:6e:01:b2:bd:97: a2:21:93:fa:dc:a9:20:61:7a:5d:e9:49:56:78:e8: 0d:c5:9c:49:9f:42:f2:54:5b:fb:e7:61:43:1f:e5: af:98:6a:1c:ad:7c:9f:45:db:53:6b:44:76:df:2a: a0:bc:a1:0f:80:b2:34:c8:42:32:05:9b:c1:39:09: 28:b9:18:69:93:0b:37:2d:07:24:95:fb:de:dc:22: cb:00:42:15:34:ce:15:3e:99:b8:45:3f:cd:cd:18: c1:e9:34:4f:4a:9b:77:47:eb:3e:1c:da:bf:04:99: db:8e:18:d2:fd:64:d4:53:e5:f7:2b:9d:a8:12:74: 47:35:ac:cf:a6:dd:20:71:a1:37:18:70:3f:bb:5c: 56:f7:6d:34:da:b9:5c:34:7c:04:af:f1:43:89:05: 2b:0e:80:56:44:a0:08:17:3c:58:3a:3f:96:44:53: 44:6f:7f:1a:82:43:27:eb:b8:61:20:aa:be:11:1d: 93:71:0d:1f:b2:ba:26:ac:5a:40:70:c5:55:69:4c: c4:ea:ff:a4:cf:f5:1b:39:4f:52:e4:3e:7a:04:10: 62:a8:9b:e1:17:d3:48:34:00:b8:e6:bf:93:68:4c: 20:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A8:1C:8A:82:24:D6:32:31:64:63:6A:D8:A7:A0:F3:13:A4:05:68 X509v3 Authority Key Identifier: keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/i6gcioIk1jIxZGNq2Keg8xOkBWg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.252.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:5f:47:ca:23:27:65:8c:82:95:87:0a:12:66:c4:47:1d:db: 8f:f4:48:a4:8a:da:13:a3:04:1c:a5:27:7b:8c:e4:d8:b4:8e: cf:6a:a7:9a:c1:47:0d:80:06:aa:5f:20:f9:03:30:4b:84:4b: 60:bc:da:4a:f8:8a:a5:52:ca:fa:44:25:90:1c:6e:db:4c:19: bc:09:0c:71:c0:26:33:8d:e5:3c:42:cd:88:c0:8f:4e:42:9c: 3c:ed:47:ae:6a:71:4c:c5:f4:2c:fc:e3:e5:1c:56:1b:56:d6: ca:40:51:ae:c7:34:ed:a5:f5:5a:56:b2:75:7f:51:a2:35:98: d1:54:cb:66:b6:79:2c:92:c3:38:88:16:5e:cd:d7:4e:5f:a4: 4c:e0:eb:7d:c7:26:dd:a1:66:14:b8:d8:d0:32:bc:ff:13:95: 49:6f:7c:66:a7:58:42:cd:66:56:2b:be:cb:c3:fa:56:22:44: 69:49:f6:cc:fa:98:e1:52:c5:64:d0:ab:f3:f7:36:9b:1d:87: 0a:d4:5a:30:35:af:05:35:8a:01:c2:e1:78:94:10:66:29:7b: d8:a6:df:0e:1d:eb:45:63:53:1f:48:83:82:e7:05:80:c8:21: 0e:35:a3:cb:08:73:76:27:f5:c9:bc:ae:03:c7:fa:c0:77:6f: fe:04:55:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oqOnvfQJXjrmH3hOQqDXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNmM2NjBiMzBmNTY5MmIyYjE2ZTI4OWIyNDkwMWM1MThm ZGE1MjAwHhcNMjYwMTAxMDgxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmE4MWM4YTgyMjRkNjMyMzE2NDYzNmFkOGE3YTBmMzEzYTQwNTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ//TVf++xvf9DCotVb2FULbVAq0 g1gubgGyvZeiIZP63KkgYXpd6UlWeOgNxZxJn0LyVFv752FDH+WvmGocrXyfRdtT a0R23yqgvKEPgLI0yEIyBZvBOQkouRhpkws3LQcklfve3CLLAEIVNM4VPpm4RT/N zRjB6TRPSpt3R+s+HNq/BJnbjhjS/WTUU+X3K52oEnRHNazPpt0gcaE3GHA/u1xW 92002rlcNHwEr/FDiQUrDoBWRKAIFzxYOj+WRFNEb38agkMn67hhIKq+ER2TcQ0f sromrFpAcMVVaUzE6v+kz/UbOU9S5D56BBBiqJvhF9NINAC45r+TaEwgnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIuoHIqCJNYyMWRjatinoPMTpAVoMB8GA1UdIwQY MBaAFBJsZgsw9WkrKxbiibJJAcUY/aUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjIt NDM4YWNiNzJmYzViLzEvaTZnY2lvSWsxakl4WkdOcTJLZWc4eE9rQldnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjItNDM4YWNiNzJmYzVi LzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaH8MA0G CSqGSIb3DQEBCwUAA4IBAQBqX0fKIydljIKVhwoSZsRHHduP9EikitoTowQcpSd7 jOTYtI7PaqeawUcNgAaqXyD5AzBLhEtgvNpK+IqlUsr6RCWQHG7bTBm8CQxxwCYz jeU8Qs2IwI9OQpw87UeuanFMxfQs/OPlHFYbVtbKQFGuxzTtpfVaVrJ1f1GiNZjR VMtmtnksksM4iBZezddOX6RM4Ot9xybdoWYUuNjQMrz/E5VJb3xmp1hCzWZWK77L w/pWIkRpSfbM+pjhUsVk0Kvz9zabHYcK1FowNa8FNYoBwuF4lBBmKXvYpt8OHetF Y1MfSIOC5wWAyCEONaPLCHN2J/XJvK4Dx/rAd2/+BFW0 -----END CERTIFICATE-----Generated at Thu Jan 8 09:24:01 2026 by rpki-client