This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/a6PACvJLM3s_lwkZeVEGJF5iO_4.roa File: a6PACvJLM3s_lwkZeVEGJF5iO_4.roa (raw, json) Hash identifier: 9/sIzT67dfyUZab/hjukKGa1L1/gCDghZ85Kq/KUdZw= Subject key identifier: 6B:A3:C0:0A:F2:4B:33:7B:3F:97:09:19:79:51:06:24:5E:62:3B:FE Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686 Certificate serial: 019C0064782E1A6EE5CC9326631CD66293DD Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/a6PACvJLM3s_lwkZeVEGJF5iO_4.roa Signing time: Tue 27 Jan 2026 16:58:30 +0000 ROA not before: Tue 27 Jan 2026 16:58:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198584 IP address blocks: 185.73.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:00:64:78:2e:1a:6e:e5:cc:93:26:63:1c:d6:62:93:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686 Validity Not Before: Jan 27 16:58:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ba3c00af24b337b3f970919795106245e623bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e0:9b:83:66:67:4f:0d:6b:58:91:f7:92:d8: 12:8b:b8:47:bf:98:ac:c4:c8:ce:b1:ba:00:29:68: c2:08:29:36:c5:dc:b7:f8:f5:40:90:af:5a:56:e5: 27:21:3d:3e:b0:f4:81:ce:fb:af:6d:27:f5:36:84: 0e:d9:45:f0:ef:86:7f:8d:36:c5:54:3b:db:f4:b6: be:49:90:f4:25:a2:54:3e:f1:29:cf:6a:68:67:60: c2:47:b5:2d:1c:5a:54:5c:77:76:be:a0:03:70:19: a2:b9:dc:28:53:5a:14:78:f1:5a:5e:d6:65:b2:92: a1:8b:c3:51:bc:34:63:30:9b:44:18:2a:2a:d6:8b: ed:39:37:15:34:00:8e:87:cd:cf:05:7e:ee:70:c5: 3c:a9:5b:17:d6:43:aa:f2:ea:95:94:12:8d:1a:ec: 92:ed:61:1d:b0:84:42:4c:0d:60:4d:8c:89:be:d7: 83:15:a8:d4:6b:74:72:10:d6:47:e4:d2:3a:c2:d3: 2a:08:38:36:1a:69:fb:88:ef:76:aa:50:5c:38:14: 88:84:5f:ea:23:33:c8:2d:92:d7:8b:fb:cc:60:ad: 62:42:91:5e:b1:86:89:9e:ee:b3:0a:d5:cf:21:e7: 4d:b2:11:94:5b:4a:84:0e:1f:d9:b6:6b:76:a5:66: 16:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A3:C0:0A:F2:4B:33:7B:3F:97:09:19:79:51:06:24:5E:62:3B:FE X509v3 Authority Key Identifier: keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/a6PACvJLM3s_lwkZeVEGJF5iO_4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.73.125.0/24 Signature Algorithm: sha256WithRSAEncryption 39:80:6e:0a:70:52:b5:6e:e9:4a:9c:be:38:2f:9f:0a:0d:06: c1:04:de:bf:a0:4f:e9:8f:2d:ec:56:f5:cc:6e:1e:cb:fc:d1: 5c:83:21:97:5e:42:30:9e:28:78:cc:31:ba:d5:9c:c5:df:93: 2a:ae:74:58:f4:c9:68:6a:3e:f3:48:f6:db:a7:90:1a:ae:4e: 1a:d6:d2:78:e3:e0:e2:b7:ab:7f:dc:3d:79:f9:1e:d1:e1:81: 07:36:0a:23:01:b4:e2:d0:b7:9f:b1:7a:be:af:e6:f9:42:9c: e3:8e:03:c8:56:c5:ec:49:fa:9b:13:c3:e5:94:2d:a7:93:8b: 7a:e2:ba:27:8f:b8:f8:03:83:99:62:49:a9:ac:e9:34:74:ac: 8b:28:be:6f:4d:53:cd:6a:d5:ed:61:2f:0f:93:97:a0:94:c4: 79:c5:b5:5c:8b:db:ff:27:75:f4:be:c1:c0:71:02:05:34:2b: 24:17:9b:61:41:c0:88:80:51:46:e1:b9:4e:a8:e1:ac:12:01: 3d:07:93:7e:97:f0:c1:f5:47:48:0c:d0:81:0b:62:79:16:79: 0b:3a:61:da:f6:2c:1f:99:ac:6c:62:b1:6d:8d:be:2a:f7:47: 55:24:81:95:39:4b:2b:cb:15:e1:5a:ad:ea:78:db:4a:53:af: 07:6c:00:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwAZHguGm7lzJMmYxzWYpPdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlM2YzMWM5ZWFjZTZmMGE1ZWNjZGI4ZGYyYjAxYzczNTE1 Njg2ODYwHhcNMjYwMTI3MTY1ODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmEzYzAwYWYyNGIzMzdiM2Y5NzA5MTk3OTUxMDYyNDVlNjIzYmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuCbg2ZnTw1rWJH3ktgSi7hHv5is xMjOsboAKWjCCCk2xdy3+PVAkK9aVuUnIT0+sPSBzvuvbSf1NoQO2UXw74Z/jTbF VDvb9La+SZD0JaJUPvEpz2poZ2DCR7UtHFpUXHd2vqADcBmiudwoU1oUePFaXtZl spKhi8NRvDRjMJtEGCoq1ovtOTcVNACOh83PBX7ucMU8qVsX1kOq8uqVlBKNGuyS 7WEdsIRCTA1gTYyJvteDFajUa3RyENZH5NI6wtMqCDg2Gmn7iO92qlBcOBSIhF/q IzPILZLXi/vMYK1iQpFesYaJnu6zCtXPIedNshGUW0qEDh/Ztmt2pWYWdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGujwArySzN7P5cJGXlRBiReYjv+MB8GA1UdIwQY MBaAFA4/Mcnqzm8KXszbjfKwHHNRVoaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9hNmRkYTEtMWI4Ny00ZWMzLTkzOGYt ZGQ1ZGRkMDVkYjBiLzEvYTZQQUN2SkxNM3NfbHdrWmVWRUdKRjVpT180LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9hNmRkYTEtMWI4Ny00ZWMzLTkzOGYtZGQ1ZGRkMDVkYjBi LzEvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUl9MA0G CSqGSIb3DQEBCwUAA4IBAQA5gG4KcFK1bulKnL44L58KDQbBBN6/oE/pjy3sVvXM bh7L/NFcgyGXXkIwnih4zDG61ZzF35MqrnRY9Mloaj7zSPbbp5Aark4a1tJ44+Di t6t/3D15+R7R4YEHNgojAbTi0LefsXq+r+b5QpzjjgPIVsXsSfqbE8PllC2nk4t6 4ronj7j4A4OZYkmprOk0dKyLKL5vTVPNatXtYS8Pk5eglMR5xbVci9v/J3X0vsHA cQIFNCskF5thQcCIgFFG4blOqOGsEgE9B5N+l/DB9UdIDNCBC2J5FnkLOmHa9iwf maxsYrFtjb4q90dVJIGVOUsryxXhWq3qeNtKU68HbACf -----END CERTIFICATE-----Generated at Tue Feb 3 12:36:45 2026 by rpki-client