This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/a1IDt2xomxWARvsJeU8MLNXS4IU.roa File: a1IDt2xomxWARvsJeU8MLNXS4IU.roa (raw, json) Hash identifier: 426ydjesv20i56PFyO1tKmNiavKTm2qYefp1CVawqKM= Subject key identifier: 6B:52:03:B7:6C:68:9B:15:80:46:FB:09:79:4F:0C:2C:D5:D2:E0:85 Certificate issuer: /CN=6838db7e699127da4c1c5a5e93f44f302b62863b Certificate serial: 019B7A5AE2C9324166ECA9FA746142A5F180 Authority key identifier: 68:38:DB:7E:69:91:27:DA:4C:1C:5A:5E:93:F4:4F:30:2B:62:86:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/a1IDt2xomxWARvsJeU8MLNXS4IU.roa Signing time: Thu 01 Jan 2026 16:18:55 +0000 ROA not before: Thu 01 Jan 2026 16:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49544 IP address blocks: 185.218.164.0/24 maxlen: 24 185.218.165.0/24 maxlen: 24 185.218.166.0/24 maxlen: 24 2a0b:d9c0:164::/48 maxlen: 48 2a0b:d9c0:165::/48 maxlen: 48 2a0b:d9c0:166::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.crl rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e2:c9:32:41:66:ec:a9:fa:74:61:42:a5:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6838db7e699127da4c1c5a5e93f44f302b62863b Validity Not Before: Jan 1 16:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b5203b76c689b158046fb09794f0c2cd5d2e085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ca:b1:6e:39:c6:4d:a6:93:13:b2:a7:9a:69: 55:73:5b:06:f8:65:6c:a3:9f:2c:11:ac:c0:06:77: 11:b9:57:4d:75:e4:39:51:93:3d:22:61:72:37:70: ec:f9:89:8a:6e:99:c0:18:0c:67:c1:c3:0d:fc:f7: de:26:76:61:55:ff:d0:26:85:1f:0e:a5:e0:4f:4f: 5a:5b:fe:ec:ca:83:29:89:75:be:e7:f9:9f:73:26: 5a:fb:b8:dc:ab:cc:00:83:46:20:15:b5:a4:09:f8: 2e:e4:b0:a4:f2:06:0b:84:f2:be:5b:17:f3:6d:83: 24:b9:41:3d:ff:ff:1f:85:f1:2b:f8:85:f1:2a:c1: 30:35:4b:5d:17:69:e1:41:cc:86:63:18:47:8b:aa: 5a:a0:19:59:7d:39:af:a4:14:81:b0:a6:cb:5c:11: 57:9d:80:00:94:35:4a:4d:f8:d3:0e:a3:ef:87:ff: ed:de:94:4e:1b:05:4a:ce:a7:51:99:6a:d4:da:aa: c0:c8:8a:9a:af:5f:28:12:00:25:38:3f:bb:13:8d: a8:d4:ce:33:3b:b9:5e:62:0a:8a:0c:c0:1f:86:c3: e0:f1:ae:14:bf:8c:bf:65:6a:04:f6:79:a1:3c:80: 6c:3b:6f:d0:76:49:ea:44:96:a3:0d:ca:4c:0a:55: 51:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:52:03:B7:6C:68:9B:15:80:46:FB:09:79:4F:0C:2C:D5:D2:E0:85 X509v3 Authority Key Identifier: keyid:68:38:DB:7E:69:91:27:DA:4C:1C:5A:5E:93:F4:4F:30:2B:62:86:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/a1IDt2xomxWARvsJeU8MLNXS4IU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.218.164.0-185.218.166.255 IPv6: 2a0b:d9c0:164::-2a0b:d9c0:166:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption c6:f4:d9:80:53:a0:46:ef:e9:e8:9c:90:f0:d6:fd:dc:3b:74: bc:02:a0:4b:ed:9b:6a:d9:af:2b:a5:04:04:4f:78:8a:ad:83: c2:e5:b9:86:75:03:dd:6e:4f:a7:19:6b:0d:cf:f8:68:8a:38: 86:d1:e9:e8:c9:ac:26:f7:78:80:6a:88:0e:07:db:db:e5:ac: 21:e0:f1:ca:2c:60:4d:9b:6a:0e:97:07:fd:05:c7:2b:7e:76: ed:4b:ba:4f:a1:40:0d:70:3b:a9:16:cc:66:ee:0c:06:93:d6: 41:9c:d3:0d:95:21:a2:9c:4b:74:5c:5a:55:de:43:9e:b1:a6: 88:4a:94:2f:ad:9f:9f:63:8b:e5:c8:25:eb:0a:fc:57:04:6c: a0:63:a4:2b:1b:02:0c:a6:6c:f2:4d:24:2b:ba:0e:7e:63:9d: 99:3a:57:36:94:1b:51:ff:70:e0:c4:26:60:b1:80:04:c0:70: 31:1d:54:77:0e:79:43:f2:72:fb:6c:0e:e1:13:26:80:82:1a: 90:ff:b4:7c:d5:c7:3b:20:b7:fb:aa:1b:2f:6c:e8:e8:fc:0c: 58:ec:a3:39:c0:19:d2:9a:28:de:26:d8:78:4f:fe:1a:d8:98: 53:a6:4c:92:4b:0a:18:95:6c:2d:77:ab:95:31:60:36:1f:90: 5a:96:cc:95 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt6WuLJMkFm7Kn6dGFCpfGAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MzhkYjdlNjk5MTI3ZGE0YzFjNWE1ZTkzZjQ0ZjMwMmI2 Mjg2M2IwHhcNMjYwMTAxMTYxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjUyMDNiNzZjNjg5YjE1ODA0NmZiMDk3OTRmMGMyY2Q1ZDJlMDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsqxbjnGTaaTE7KnmmlVc1sG+GVs o58sEazABncRuVdNdeQ5UZM9ImFyN3Ds+YmKbpnAGAxnwcMN/PfeJnZhVf/QJoUf DqXgT09aW/7syoMpiXW+5/mfcyZa+7jcq8wAg0YgFbWkCfgu5LCk8gYLhPK+Wxfz bYMkuUE9//8fhfEr+IXxKsEwNUtdF2nhQcyGYxhHi6paoBlZfTmvpBSBsKbLXBFX nYAAlDVKTfjTDqPvh//t3pROGwVKzqdRmWrU2qrAyIqar18oEgAlOD+7E42o1M4z O7leYgqKDMAfhsPg8a4Uv4y/ZWoE9nmhPIBsO2/QdknqRJajDcpMClVRuQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFGtSA7dsaJsVgEb7CXlPDCzV0uCFMB8GA1UdIwQY MBaAFGg4235pkSfaTBxaXpP0TzArYoY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYURqYmZtbVJKOXBNSEZwZWtfUlBNQ3RpaGpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iMjQ3MWMtYmViYy00NDEyLWE2YTQt MmY5Y2FjNzAwZmE1LzEvYTFJRHQyeG9teFdBUnZzSmVVOE1MTlhTNElVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9iMjQ3MWMtYmViYy00NDEyLWE2YTQtMmY5Y2FjNzAwZmE1 LzEvYURqYmZtbVJKOXBNSEZwZWtfUlBNQ3RpaGpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAUBAIAATAOMAwDBAK52qQD BAC52qYwGgQCAAIwFDASAwcCKgvZwAFkAwcAKgvZwAFmMA0GCSqGSIb3DQEBCwUA A4IBAQDG9NmAU6BG7+nonJDw1v3cO3S8AqBL7Ztq2a8rpQQET3iKrYPC5bmGdQPd bk+nGWsNz/hoijiG0enoyawm93iAaogOB9vb5awh4PHKLGBNm2oOlwf9Bccrfnbt S7pPoUANcDupFsxm7gwGk9ZBnNMNlSGinEt0XFpV3kOesaaISpQvrZ+fY4vlyCXr CvxXBGygY6QrGwIMpmzyTSQrug5+Y52ZOlc2lBtR/3DgxCZgsYAEwHAxHVR3DnlD 8nL7bA7hEyaAghqQ/7R81cc7ILf7qhsvbOjo/AxY7KM5wBnSmijeJth4T/4a2JhT pkySSwoYlWwtd6uVMWA2H5BalsyV -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:48 2026 by rpki-client