This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/6xuNTY_iWkHPPmX8ImnPUwpIICw.roa File: 6xuNTY_iWkHPPmX8ImnPUwpIICw.roa (raw, json) Hash identifier: rki5JF3Dn8KF0wiQ0pOA5KuyYBjrNPOOlyoFXsz/Nw4= Subject key identifier: EB:1B:8D:4D:8F:E2:5A:41:CF:3E:65:FC:22:69:CF:53:0A:48:20:2C Certificate issuer: /CN=656cc25012e3a4c8b1626dd757c7b0510e457341 Certificate serial: 019B7D5CF153CBABED2B4B05BD672D33664D Authority key identifier: 65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/6xuNTY_iWkHPPmX8ImnPUwpIICw.roa Signing time: Fri 02 Jan 2026 06:20:01 +0000 ROA not before: Fri 02 Jan 2026 06:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.170.188.0/24 maxlen: 24 185.170.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f1:53:cb:ab:ed:2b:4b:05:bd:67:2d:33:66:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656cc25012e3a4c8b1626dd757c7b0510e457341 Validity Not Before: Jan 2 06:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb1b8d4d8fe25a41cf3e65fc2269cf530a48202c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c5:fd:5a:1d:8b:d6:f1:85:3f:71:fa:9b:85: 10:6a:6c:b4:77:a9:e1:54:a7:f5:75:90:51:ac:79: 42:05:ee:0d:e6:1e:58:4e:ba:84:7f:df:63:ce:2e: 72:27:a0:fc:16:80:5d:62:9a:8c:64:0c:e8:79:82: 53:fa:55:90:4f:11:51:ab:53:58:fc:98:cb:0e:03: b8:7d:4e:fc:7d:b6:8f:79:18:47:0e:c1:69:fd:3c: d8:c5:5c:0c:db:f5:37:d6:73:9b:59:a5:db:88:66: 0d:66:d6:19:c4:d0:bc:7e:2a:09:c9:b2:76:dd:68: ae:b2:50:0b:60:82:18:9c:a8:d4:62:c9:e1:d0:62: e8:71:96:3b:8b:48:41:61:1e:77:a3:58:06:53:c4: f5:01:3e:42:07:95:39:ec:5a:74:f6:1e:5a:d6:3c: 83:b6:98:c3:a6:c1:33:f7:aa:e9:5e:44:e0:5a:6c: 64:80:9e:ce:dc:a5:a2:c2:fa:4c:af:a8:7b:94:45: 22:3f:d5:bb:10:bc:f1:7f:84:e7:fa:3b:1d:59:7d: 65:78:dd:91:17:23:df:b8:53:48:b4:a6:48:c0:be: 9b:d4:cc:b9:4d:d8:d2:ee:ca:28:81:c9:36:67:69: af:78:e8:34:bf:ee:ce:eb:cf:a5:00:a5:77:c0:b4: 72:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1B:8D:4D:8F:E2:5A:41:CF:3E:65:FC:22:69:CF:53:0A:48:20:2C X509v3 Authority Key Identifier: keyid:65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/6xuNTY_iWkHPPmX8ImnPUwpIICw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.170.188.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:8a:49:cc:32:1c:f8:e2:3c:01:44:92:43:5e:59:21:b6:70: 65:95:51:da:80:09:58:7c:e8:56:6b:3a:87:b8:2c:f5:6e:c5: 38:a9:8d:da:db:2f:cd:9d:e1:15:72:50:0f:5a:ca:d5:dd:af: 12:96:c9:09:cf:48:71:bb:d5:17:bd:e9:54:d5:a0:7b:49:d1: 73:13:0b:c5:a7:d7:6e:16:c1:5d:a7:c3:9f:be:f3:99:f0:0e: 42:3d:35:f2:83:69:c9:0e:b1:17:8d:40:cb:29:f2:17:3b:4d: 6f:ea:b8:42:c4:3e:b0:1f:ba:7c:5c:19:eb:72:69:89:69:55: 7b:5c:b8:77:f6:b4:78:c0:0b:08:67:8a:23:d9:37:97:b7:14: 25:52:a3:f1:80:04:58:3f:0a:94:58:ae:38:31:57:f9:f9:34: 59:82:85:85:00:0c:3a:0f:07:27:f5:14:7d:b3:b0:ec:c3:bc: 33:a2:29:c5:db:c6:6c:f4:fc:c1:bd:f6:80:80:f4:c4:54:91: 14:34:ed:f0:50:5e:43:8f:89:fc:5a:fd:bd:7d:bc:6e:49:3a: 10:b9:4f:13:39:62:8d:30:4e:5d:1e:23:46:7a:6f:3d:c2:69: ad:cf:98:c9:fa:c6:d2:b8:5c:86:3a:bc:8d:93:98:ca:35:23: 94:b7:d1:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XPFTy6vtK0sFvWctM2ZNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NmNjMjUwMTJlM2E0YzhiMTYyNmRkNzU3YzdiMDUxMGU0 NTczNDEwHhcNMjYwMTAyMDYyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjFiOGQ0ZDhmZTI1YTQxY2YzZTY1ZmMyMjY5Y2Y1MzBhNDgyMDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8X9Wh2L1vGFP3H6m4UQamy0d6nh VKf1dZBRrHlCBe4N5h5YTrqEf99jzi5yJ6D8FoBdYpqMZAzoeYJT+lWQTxFRq1NY /JjLDgO4fU78fbaPeRhHDsFp/TzYxVwM2/U31nObWaXbiGYNZtYZxNC8fioJybJ2 3WiuslALYIIYnKjUYsnh0GLocZY7i0hBYR53o1gGU8T1AT5CB5U57Fp09h5a1jyD tpjDpsEz96rpXkTgWmxkgJ7O3KWiwvpMr6h7lEUiP9W7ELzxf4Tn+jsdWX1leN2R FyPfuFNItKZIwL6b1My5TdjS7soogck2Z2mveOg0v+7O68+lAKV3wLRy/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOsbjU2P4lpBzz5l/CJpz1MKSCAsMB8GA1UdIwQY MBaAFGVswlAS46TIsWJt11fHsFEORXNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWld6Q1VCTGpwTWl4WW0zWFY4ZXdVUTVGYzBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82ZGI0NmQtYmMyZC00NWQ3LWEyNzkt ODIwMzI1ZjUzY2NiLzEvNnh1TlRZX2lXa0hQUG1YOEltblBVd3BJSUN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi82ZGI0NmQtYmMyZC00NWQ3LWEyNzktODIwMzI1ZjUzY2Ni LzEvWld6Q1VCTGpwTWl4WW0zWFY4ZXdVUTVGYzBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuaq8MA0G CSqGSIb3DQEBCwUAA4IBAQCNiknMMhz44jwBRJJDXlkhtnBllVHagAlYfOhWazqH uCz1bsU4qY3a2y/NneEVclAPWsrV3a8SlskJz0hxu9UXvelU1aB7SdFzEwvFp9du FsFdp8OfvvOZ8A5CPTXyg2nJDrEXjUDLKfIXO01v6rhCxD6wH7p8XBnrcmmJaVV7 XLh39rR4wAsIZ4oj2TeXtxQlUqPxgARYPwqUWK44MVf5+TRZgoWFAAw6Dwcn9RR9 s7Dsw7wzoinF28Zs9PzBvfaAgPTEVJEUNO3wUF5Dj4n8Wv29fbxuSToQuU8TOWKN ME5dHiNGem89wmmtz5jJ+sbSuFyGOryNk5jKNSOUt9HV -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:02 2026 by rpki-client