This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/6iMzwbFFVSZFbjKHJrWD3G5jUEg.roa File: 6iMzwbFFVSZFbjKHJrWD3G5jUEg.roa (raw, json) Hash identifier: AUkpBwM9ZIIijPBffPVNhUkrTaHGtdobqp/81DXNNoA= Subject key identifier: EA:23:33:C1:B1:45:55:26:45:6E:32:87:26:B5:83:DC:6E:63:50:48 Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5AF8CE57FAC3C7E622362BEE86EC03 Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/6iMzwbFFVSZFbjKHJrWD3G5jUEg.roa Signing time: Fri 02 Jan 2026 06:17:52 +0000 ROA not before: Fri 02 Jan 2026 06:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 86.107.178.0/24 maxlen: 24 86.107.179.0/24 maxlen: 24 89.34.27.0/24 maxlen: 24 89.36.94.0/24 maxlen: 24 89.36.95.0/24 maxlen: 24 89.41.180.0/24 maxlen: 24 89.41.181.0/24 maxlen: 24 93.114.194.0/24 maxlen: 24 185.101.107.0/24 maxlen: 24 188.211.233.0/24 maxlen: 24 188.241.218.0/24 maxlen: 24 188.241.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:f8:ce:57:fa:c3:c7:e6:22:36:2b:ee:86:ec:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea2333c1b1455526456e328726b583dc6e635048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b3:37:80:31:97:77:3d:67:e7:75:ae:f1:e3: 17:f9:52:01:3f:ea:fe:84:8d:73:9e:60:9a:3b:c7: 5d:cb:68:2d:1c:74:70:e9:d8:6b:23:60:4b:13:97: dd:63:64:32:fe:77:fa:5f:af:06:ea:89:2e:ff:0e: b6:81:21:8e:b1:af:b1:38:7e:7d:97:6c:2d:d1:0f: a9:90:f3:3d:49:17:79:68:1f:96:d6:b5:8a:e1:ee: 48:cc:7e:87:23:09:bf:ef:ce:0e:28:79:28:42:64: 6f:05:ca:83:5d:e2:0c:fe:19:4a:ad:b2:89:6f:bc: f1:6d:d7:6e:58:03:08:76:53:fb:e0:4e:74:be:3a: 88:ce:1e:8b:9a:6b:94:3c:f9:4b:0c:ca:be:55:65: 8f:ed:b4:c8:fc:33:9f:7c:61:19:95:cd:cd:0b:88: 86:29:ad:f1:e1:2f:42:1a:4a:14:10:0d:1e:fd:c8: 6d:69:c1:5e:53:d8:d5:f3:bd:24:9b:31:8e:84:df: 08:89:a7:94:18:3a:22:51:4d:90:e3:5f:8b:a2:bd: 69:74:46:d6:46:a8:00:07:56:6a:7c:d6:cc:3d:d8: 77:76:65:b8:68:36:83:7d:b1:0a:a7:27:4f:5c:b6: 5c:8f:f4:79:b7:43:a8:61:81:34:cc:ef:f1:24:c1: a8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:23:33:C1:B1:45:55:26:45:6E:32:87:26:B5:83:DC:6E:63:50:48 X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/6iMzwbFFVSZFbjKHJrWD3G5jUEg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.107.178.0/23 89.34.27.0/24 89.36.94.0/23 89.41.180.0/23 93.114.194.0/24 185.101.107.0/24 188.211.233.0/24 188.241.218.0/23 Signature Algorithm: sha256WithRSAEncryption 56:22:3c:f5:a3:5a:6a:50:f9:c7:ce:13:dc:ed:f7:dc:fb:1e: 3b:18:48:e5:58:1f:e9:e3:e2:44:18:00:b2:fe:0b:0f:45:7d: a3:53:54:25:00:5d:98:bb:8c:2a:ee:11:3c:dc:a4:ff:73:e4: 56:47:36:4b:f4:b7:af:53:d7:b4:bb:a2:f7:3b:58:63:0c:e7: 35:4d:0a:cb:80:eb:6c:43:e4:73:98:88:5b:59:79:fc:2a:e0: 3d:f9:e9:cd:9c:cc:09:f9:0b:c6:57:a1:bc:45:1d:60:a7:d0: b3:b5:a2:45:04:5e:f3:d6:e7:97:87:1d:59:36:f2:0c:93:24: 0d:3c:9d:3d:f3:7e:f9:b9:d7:2b:cf:39:d1:ec:14:b4:16:54: 4d:f2:71:7a:66:df:d3:d8:d7:de:90:83:15:3a:f4:df:1e:04: ab:71:22:cf:61:29:eb:cc:5e:cd:28:6d:16:98:66:74:79:d6: 3a:c7:25:04:c3:24:04:45:eb:ff:0d:37:b4:66:da:77:25:27: cd:cf:c7:0e:bf:c8:70:52:75:c2:cf:3c:7e:21:4e:ce:a6:8d: c3:96:8f:3a:fa:c2:d0:c7:2b:14:ff:33:9a:e3:47:1e:9e:d3: 07:36:e9:1c:28:1e:20:10:a3:47:66:06:f9:a5:fc:3b:bb:ed: 6c:59:16:16 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt9WvjOV/rDx+YiNivuhuwDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTIzMzNjMWIxNDU1NTI2NDU2ZTMyODcyNmI1ODNkYzZlNjM1MDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8rM3gDGXdz1n53Wu8eMX+VIBP+r+ hI1znmCaO8ddy2gtHHRw6dhrI2BLE5fdY2Qy/nf6X68G6oku/w62gSGOsa+xOH59 l2wt0Q+pkPM9SRd5aB+W1rWK4e5IzH6HIwm/784OKHkoQmRvBcqDXeIM/hlKrbKJ b7zxbdduWAMIdlP74E50vjqIzh6LmmuUPPlLDMq+VWWP7bTI/DOffGEZlc3NC4iG Ka3x4S9CGkoUEA0e/chtacFeU9jV870kmzGOhN8IiaeUGDoiUU2Q41+Lor1pdEbW RqgAB1ZqfNbMPdh3dmW4aDaDfbEKpydPXLZcj/R5t0OoYYE0zO/xJMGoQwIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFOojM8GxRVUmRW4yhya1g9xuY1BIMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvNmlNendiRkZWU1pGYmpLSEpyV0QzRzVqVUVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQBVmuyAwQA WSIbAwQBWSReAwQBWSm0AwQAXXLCAwQAuWVrAwQAvNPpAwQBvPHaMA0GCSqGSIb3 DQEBCwUAA4IBAQBWIjz1o1pqUPnHzhPc7ffc+x47GEjlWB/p4+JEGACy/gsPRX2j U1QlAF2Yu4wq7hE83KT/c+RWRzZL9LevU9e0u6L3O1hjDOc1TQrLgOtsQ+RzmIhb WXn8KuA9+enNnMwJ+QvGV6G8RR1gp9CztaJFBF7z1ueXhx1ZNvIMkyQNPJ098375 udcrzznR7BS0FlRN8nF6Zt/T2NfekIMVOvTfHgSrcSLPYSnrzF7NKG0WmGZ0edY6 xyUEwyQERev/DTe0Ztp3JSfNz8cOv8hwUnXCzzx+IU7Opo3Dlo86+sLQxysU/zOa 40centMHNukcKB4gEKNHZgb5pfw7u+1sWRYW -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:40 2026 by rpki-client