This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/anGfaLD7Sw-uBHUL7ZCjm1E0Zuo.roa File: anGfaLD7Sw-uBHUL7ZCjm1E0Zuo.roa (raw, json) Hash identifier: odjCBhO2fg7tVXSaHs+W/QeZyJocuWu2JrcGva0i788= Subject key identifier: 6A:71:9F:68:B0:FB:4B:0F:AE:04:75:0B:ED:90:A3:9B:51:34:66:EA Certificate issuer: /CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b Certificate serial: 019B7BA50C060B36D4C9A515DE43749EA8F6 Authority key identifier: 0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/anGfaLD7Sw-uBHUL7ZCjm1E0Zuo.roa Signing time: Thu 01 Jan 2026 22:19:32 +0000 ROA not before: Thu 01 Jan 2026 22:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29061 IP address blocks: 92.62.64.0/20 maxlen: 24 92.62.64.0/21 maxlen: 24 92.62.65.0/24 maxlen: 24 92.62.66.0/23 maxlen: 24 95.87.72.0/21 maxlen: 24 95.87.72.0/22 maxlen: 24 95.87.76.0/22 maxlen: 24 95.87.80.0/21 maxlen: 24 95.87.88.0/23 maxlen: 24 95.87.92.0/22 maxlen: 24 95.87.92.0/24 maxlen: 24 95.87.93.0/24 maxlen: 24 95.87.94.0/24 maxlen: 24 95.87.95.0/24 maxlen: 24 185.53.228.0/22 maxlen: 24 185.53.228.0/24 maxlen: 24 185.53.229.0/24 maxlen: 24 185.53.230.0/24 maxlen: 24 185.53.231.0/24 maxlen: 24 217.29.16.0/20 maxlen: 24 217.29.16.0/21 maxlen: 24 217.29.16.0/24 maxlen: 24 217.29.17.0/24 maxlen: 24 217.29.18.0/24 maxlen: 24 217.29.19.0/24 maxlen: 24 217.29.20.0/24 maxlen: 24 217.29.21.0/24 maxlen: 24 217.29.22.0/24 maxlen: 24 217.29.23.0/24 maxlen: 24 217.29.24.0/21 maxlen: 24 217.29.24.0/24 maxlen: 24 217.29.25.0/24 maxlen: 24 217.29.26.0/24 maxlen: 24 217.29.27.0/24 maxlen: 24 217.29.28.0/24 maxlen: 24 217.29.31.0/24 maxlen: 24 2a02:820::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:0c:06:0b:36:d4:c9:a5:15:de:43:74:9e:a8:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b Validity Not Before: Jan 1 22:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a719f68b0fb4b0fae04750bed90a39b513466ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bc:5b:23:4e:5f:45:18:6f:92:99:4e:e8:31: 01:02:28:fa:47:70:7e:1c:78:70:61:5f:90:44:aa: d1:05:77:65:65:71:81:a8:2d:a4:ff:68:96:a4:e1: 13:29:fb:56:0c:66:f7:e7:52:71:b6:8b:7e:0c:26: 22:23:b3:51:57:b6:ec:fd:49:8d:f7:20:44:29:0f: d4:fd:13:13:01:50:2a:66:da:0a:dd:39:94:d3:a6: fd:e4:12:dc:c9:62:4b:fb:06:bd:ef:7f:8f:cf:93: 1f:58:92:c0:a6:8e:7d:7a:86:b5:9d:53:4a:f0:74: b2:e2:48:cb:2f:4b:39:e5:4e:e6:8f:4c:a5:a5:0c: a9:9e:75:22:c5:b9:cb:f0:ec:e1:5b:d8:73:10:af: ac:1a:ab:36:e1:dc:cd:b8:0c:77:48:08:af:e6:c6: 8d:dd:44:80:e7:5f:86:92:b5:12:ac:04:d4:c6:5f: c1:2e:fc:a5:f9:74:df:6a:5f:fc:2d:14:97:c8:3b: 02:69:c1:2f:60:b4:03:12:26:db:3b:7f:9a:db:af: 3b:70:9c:b7:19:9e:79:e5:2c:ed:db:14:e3:27:88: db:c5:12:3c:41:52:bd:67:3d:10:2c:63:20:5a:36: 56:8d:4a:f7:7d:cf:c0:ae:14:24:f7:9a:fc:67:4a: bb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:71:9F:68:B0:FB:4B:0F:AE:04:75:0B:ED:90:A3:9B:51:34:66:EA X509v3 Authority Key Identifier: keyid:0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/anGfaLD7Sw-uBHUL7ZCjm1E0Zuo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.62.64.0/20 95.87.72.0-95.87.89.255 95.87.92.0/22 185.53.228.0/22 217.29.16.0/20 IPv6: 2a02:820::/32 Signature Algorithm: sha256WithRSAEncryption d2:85:4f:ca:46:3b:73:27:fa:52:82:ae:a3:04:23:a1:52:25: d4:e9:76:b9:b8:59:98:f0:1a:c9:c9:a3:92:b4:ab:1c:b2:80: 50:69:d9:1c:ef:15:74:25:b0:aa:2c:b6:3e:90:0a:a3:61:31: 7f:5e:0f:00:a4:b4:dd:f7:19:1c:e5:5d:90:35:ac:f8:f6:e7: 06:25:e5:f0:35:d2:6d:8e:b7:d2:36:36:fb:ff:6f:91:f9:54: 8e:a7:cf:01:19:cb:2e:f7:59:9e:2d:4d:4c:30:00:e0:da:0b: 9e:49:ad:7b:c0:a2:63:db:5d:f9:49:cd:5a:76:5b:e0:f9:d9: 6e:54:ca:25:06:7c:5f:06:b9:25:54:43:26:70:f5:13:97:55: 9b:8b:58:81:e9:bb:cd:5c:03:e7:e3:31:63:a7:96:2c:7d:f0: f9:c9:91:d2:99:23:95:4f:2e:df:06:9c:5f:8d:be:f9:a8:09: b8:50:1f:86:4d:89:9e:86:86:5f:d3:77:26:ec:09:02:c1:a5: f4:b1:fd:aa:22:c6:85:a5:74:b0:b4:d8:98:d2:5e:48:65:12: 22:4f:f5:fb:e1:9b:ad:41:14:98:09:44:d0:07:66:6e:89:a0: 73:e8:e3:42:6f:ce:0a:52:33:ff:8e:1f:cb:10:95:d9:55:d0: 62:a0:70:ff -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt7pQwGCzbUyaUV3kN0nqj2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNmYxODI4MDRiNTZlNTA4YWEzNzJjMDNjY2ViNzNlZjhj MmM2OGIwHhcNMjYwMTAxMjIxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTcxOWY2OGIwZmI0YjBmYWUwNDc1MGJlZDkwYTM5YjUxMzQ2NmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrxbI05fRRhvkplO6DEBAij6R3B+ HHhwYV+QRKrRBXdlZXGBqC2k/2iWpOETKftWDGb351Jxtot+DCYiI7NRV7bs/UmN 9yBEKQ/U/RMTAVAqZtoK3TmU06b95BLcyWJL+wa973+Pz5MfWJLApo59eoa1nVNK 8HSy4kjLL0s55U7mj0ylpQypnnUixbnL8OzhW9hzEK+sGqs24dzNuAx3SAiv5saN 3USA51+GkrUSrATUxl/BLvyl+XTfal/8LRSXyDsCacEvYLQDEibbO3+a2687cJy3 GZ555Szt2xTjJ4jbxRI8QVK9Zz0QLGMgWjZWjUr3fc/ArhQk95r8Z0q7qQIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFGpxn2iw+0sPrgR1C+2Qo5tRNGbqMB8GA1UdIwQY MBaAFAxvGCgEtW5QiqNywDzOtz74wsaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREc4WUtBUzFibENLbzNMQVBNNjNQdmpDeG9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82YzBlMjItZmI2MS00OWRiLWIwNjUt OTkzY2Q4Mzg4ZmQ1LzEvYW5HZmFMRDdTdy11QkhVTDdaQ2ptMUUwWnVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC82YzBlMjItZmI2MS00OWRiLWIwNjUtOTkzY2Q4Mzg4ZmQ1 LzEvREc4WUtBUzFibENLbzNMQVBNNjNQdmpDeG9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQEXD5AMAwD BANfV0gDBAFfV1gDBAJfV1wDBAK5NeQDBATZHRAwDQQCAAIwBwMFACoCCCAwDQYJ KoZIhvcNAQELBQADggEBANKFT8pGO3Mn+lKCrqMEI6FSJdTpdrm4WZjwGsnJo5K0 qxyygFBp2RzvFXQlsKostj6QCqNhMX9eDwCktN33GRzlXZA1rPj25wYl5fA10m2O t9I2Nvv/b5H5VI6nzwEZyy73WZ4tTUwwAODaC55JrXvAomPbXflJzVp2W+D52W5U yiUGfF8GuSVUQyZw9ROXVZuLWIHpu81cA+fjMWOnlix98PnJkdKZI5VPLt8GnF+N vvmoCbhQH4ZNiZ6Ghl/TdybsCQLBpfSx/aoixoWldLC02JjSXkhlEiJP9fvhm61B FJgJRNAHZm6JoHPo40JvzgpSM/+OH8sQldlV0GKgcP8= -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:01 2026 by rpki-client