This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/6VbfAtk74cEPjvjgLQEhtLrP81U.roa File: 6VbfAtk74cEPjvjgLQEhtLrP81U.roa (raw, json) Hash identifier: rizvPmOdwzBXEQAhSRAxrV7Y3yfCi8vmhR+0fDvXQ4g= Subject key identifier: E9:56:DF:02:D9:3B:E1:C1:0F:8E:F8:E0:2D:01:21:B4:BA:CF:F3:55 Certificate issuer: /CN=09f93d62beb75bb4232dcd052d270276d36f8573 Certificate serial: 019B7C124DAB854769CE4AAF84924CD71BFE Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/6VbfAtk74cEPjvjgLQEhtLrP81U.roa Signing time: Fri 02 Jan 2026 00:18:52 +0000 ROA not before: Fri 02 Jan 2026 00:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46844 IP address blocks: 185.141.192.0/24 maxlen: 24 185.141.195.0/24 maxlen: 24 2a04:ac0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:4d:ab:85:47:69:ce:4a:af:84:92:4c:d7:1b:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573 Validity Not Before: Jan 2 00:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e956df02d93be1c10f8ef8e02d0121b4bacff355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a8:0b:45:65:03:a8:2b:6b:a2:5b:01:2e:8f: 24:bc:20:0f:72:fe:34:ce:08:2f:91:24:1f:cd:24: 10:2f:65:14:99:3b:d0:e6:8d:c4:03:fd:53:6c:35: c1:82:fb:55:f5:c7:33:ea:56:8a:26:45:fe:00:81: a3:74:15:3c:54:ec:6d:63:64:35:a3:84:94:f4:79: 87:1e:96:a7:e7:9c:16:78:b5:c7:4c:4a:18:ba:56: 1c:f5:96:6d:18:e0:f0:8f:eb:f9:bc:2a:51:07:a9: 72:9e:8b:30:6e:23:32:d1:b1:87:d2:cb:f9:14:f0: 4d:f6:01:74:24:08:df:5f:50:bb:11:64:5d:9a:e9: f6:9a:77:87:13:ca:a0:03:39:85:00:f8:84:a6:8b: 45:c2:e6:47:c3:1b:5e:1d:1b:ca:1b:f9:4f:f5:4e: d9:ed:39:df:de:21:41:a9:9e:ae:24:57:40:7d:0f: de:64:6e:0c:1a:3d:48:e4:1c:c8:d1:39:72:7a:0a: 21:af:88:94:54:ad:a9:8b:d9:54:4f:fe:af:0b:85: 19:dd:37:4c:dc:ce:64:52:71:b0:40:db:90:bc:e0: 1c:2b:d6:db:6a:71:af:69:af:df:ea:b1:30:dc:b4: da:ab:24:e5:fd:39:b2:6f:f1:5f:41:ec:90:65:61: 3a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:56:DF:02:D9:3B:E1:C1:0F:8E:F8:E0:2D:01:21:B4:BA:CF:F3:55 X509v3 Authority Key Identifier: keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/6VbfAtk74cEPjvjgLQEhtLrP81U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.141.192.0/24 185.141.195.0/24 IPv6: 2a04:ac0:1::/48 Signature Algorithm: sha256WithRSAEncryption 05:c2:59:41:23:ca:7f:8b:f5:00:85:77:c5:1c:41:42:4f:d6: ed:21:7a:1a:4f:14:64:61:70:fb:7e:60:23:59:50:f0:7d:37: ed:e2:15:53:32:27:46:39:02:b9:e1:92:17:ab:11:26:8d:78: 5c:92:f3:19:cd:91:e7:19:41:6d:fa:07:b2:0f:bd:64:47:35: 90:43:b3:d6:98:62:31:72:76:c2:fe:8f:e4:35:bc:70:04:d2: 1d:13:5a:88:99:1c:36:fc:90:57:2f:eb:11:04:24:71:12:5f: 10:a6:b9:f5:58:32:03:12:29:f3:c0:48:a9:38:75:a8:cb:4f: 27:cd:fa:f7:a5:98:0d:b7:74:17:f2:c1:da:ed:83:01:a0:d9: fa:94:2d:e4:44:9a:4a:7f:11:93:57:34:38:cd:e2:eb:73:f1: a0:57:37:1b:7a:5e:e6:17:ff:f5:3e:09:d4:6e:a7:de:7f:b6: 93:bc:91:f7:0d:49:f2:8b:af:26:39:93:72:76:92:76:1b:e2: a6:b5:38:eb:bd:b2:72:45:a5:52:70:9c:5a:b3:eb:51:8b:b3: e7:84:f5:3f:11:5f:8e:b1:47:49:98:97:29:ef:2e:46:13:a0: d5:d1:9e:7e:b3:08:44:0c:b0:e3:98:58:e1:24:5d:d6:1f:00: 26:72:66:12 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt8Ek2rhUdpzkqvhJJM1xv+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZjkzZDYyYmViNzViYjQyMzJkY2QwNTJkMjcwMjc2ZDM2 Zjg1NzMwHhcNMjYwMTAyMDAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTU2ZGYwMmQ5M2JlMWMxMGY4ZWY4ZTAyZDAxMjFiNGJhY2ZmMzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKgLRWUDqCtrolsBLo8kvCAPcv40 zggvkSQfzSQQL2UUmTvQ5o3EA/1TbDXBgvtV9ccz6laKJkX+AIGjdBU8VOxtY2Q1 o4SU9HmHHpan55wWeLXHTEoYulYc9ZZtGODwj+v5vCpRB6lynoswbiMy0bGH0sv5 FPBN9gF0JAjfX1C7EWRdmun2mneHE8qgAzmFAPiEpotFwuZHwxteHRvKG/lP9U7Z 7Tnf3iFBqZ6uJFdAfQ/eZG4MGj1I5BzI0Tlyegohr4iUVK2pi9lUT/6vC4UZ3TdM 3M5kUnGwQNuQvOAcK9bbanGvaa/f6rEw3LTaqyTl/Tmyb/FfQeyQZWE6RwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFOlW3wLZO+HBD4744C0BIbS6z/NVMB8GA1UdIwQY MBaAFAn5PWK+t1u0Iy3NBS0nAnbTb4VzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2ZrOVlyNjNXN1FqTGMwRkxTY0NkdE52aFhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83MDVhYWQtNTliMi00NzRlLWEzZDgt YmYzNGQwMWY4YjBhLzEvNlZiZkF0azc0Y0VQanZqZ0xRRWh0THJQODFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny83MDVhYWQtNTliMi00NzRlLWEzZDgtYmYzNGQwMWY4YjBh LzEvQ2ZrOVlyNjNXN1FqTGMwRkxTY0NkdE52aFhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAuY3AAwQA uY3DMA8EAgACMAkDBwAqBArAAAEwDQYJKoZIhvcNAQELBQADggEBAAXCWUEjyn+L 9QCFd8UcQUJP1u0hehpPFGRhcPt+YCNZUPB9N+3iFVMyJ0Y5ArnhkherESaNeFyS 8xnNkecZQW36B7IPvWRHNZBDs9aYYjFydsL+j+Q1vHAE0h0TWoiZHDb8kFcv6xEE JHESXxCmufVYMgMSKfPASKk4dajLTyfN+velmA23dBfywdrtgwGg2fqULeREmkp/ EZNXNDjN4utz8aBXNxt6XuYX//U+CdRup95/tpO8kfcNSfKLryY5k3J2knYb4qa1 OOu9snJFpVJwnFqz61GLs+eE9T8RX46xR0mYlynvLkYToNXRnn6zCEQMsOOYWOEk XdYfACZyZhI= -----END CERTIFICATE-----Generated at Sun Jan 11 15:07:47 2026 by rpki-client