This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/6thFfOGbh-U8AJJ26hDlrT3Bcrk.roa File: 6thFfOGbh-U8AJJ26hDlrT3Bcrk.roa (raw, json) Hash identifier: KCOPaIHLr+pxyqgE343O1xjtqPMzdKkZmLUGGeiIpxU= Subject key identifier: EA:D8:45:7C:E1:9B:87:E5:3C:00:92:76:EA:10:E5:AD:3D:C1:72:B9 Certificate issuer: /CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005 Certificate serial: 019B7A5AFE78DA7910076A3776BCE8808736 Authority key identifier: 9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/6thFfOGbh-U8AJJ26hDlrT3Bcrk.roa Signing time: Thu 01 Jan 2026 16:19:02 +0000 ROA not before: Thu 01 Jan 2026 16:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208368 IP address blocks: 185.229.22.0/23 maxlen: 24 2a0d:5e00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:fe:78:da:79:10:07:6a:37:76:bc:e8:80:87:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005 Validity Not Before: Jan 1 16:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ead8457ce19b87e53c009276ea10e5ad3dc172b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:27:d1:87:d4:58:bf:16:94:bb:7d:5c:1d:4e: 41:b9:2a:74:2d:d8:3a:0c:e6:c5:25:25:86:c2:a3: 14:3a:75:11:3a:89:68:b7:fd:69:83:47:24:fd:6d: f9:c5:fc:fa:a5:aa:d2:61:78:d6:32:06:90:84:20: 24:ec:f4:d4:55:c3:4d:12:24:97:b5:97:29:ea:b0: 98:ff:da:64:0f:30:a7:87:6e:81:72:a5:b4:f1:a8: 43:37:06:59:90:fb:9b:3b:c0:00:4b:29:57:eb:b1: b7:fb:97:04:24:11:81:48:3c:50:dc:52:21:34:48: 5f:9e:53:80:4a:8f:0e:8d:7f:9e:fb:f3:ee:05:e4: fa:ed:94:af:60:f0:35:88:9e:96:b1:0c:6a:a2:e8: 48:a4:e4:ff:5f:36:cd:55:fa:1d:4d:2f:50:24:26: 26:dd:6d:96:6f:88:6f:ee:20:c5:11:f9:b8:dd:2b: 2f:3d:3b:b4:94:03:4c:94:5d:bc:fb:f8:25:2f:f4: 63:15:19:0f:04:a3:23:e9:ee:77:eb:55:a7:71:2e: cd:43:47:22:ad:ae:e5:c9:61:82:74:6d:88:13:8d: 3e:25:fa:c0:36:a3:75:06:0d:84:09:c4:18:65:40: 31:53:b5:c6:c1:a3:48:e5:48:a4:3b:d3:1d:7f:5a: 52:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D8:45:7C:E1:9B:87:E5:3C:00:92:76:EA:10:E5:AD:3D:C1:72:B9 X509v3 Authority Key Identifier: keyid:9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/6thFfOGbh-U8AJJ26hDlrT3Bcrk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.229.22.0/23 IPv6: 2a0d:5e00::/29 Signature Algorithm: sha256WithRSAEncryption 6e:14:83:68:f6:a9:f5:d4:65:88:5f:72:87:a0:fb:ec:8f:01: 10:1f:e0:34:0e:1e:65:a0:3a:7e:37:f0:6e:89:eb:8c:10:5a: c6:f0:3f:98:0f:a4:f6:04:a1:d7:21:ec:85:66:8f:96:1f:fa: 3c:f2:4e:20:aa:ad:6f:8c:ae:56:e7:91:73:fa:7b:55:00:23: 02:94:9f:20:ec:4a:1c:d7:7c:55:d9:de:65:c9:ec:26:f7:83: d7:64:6d:3a:d0:05:06:08:e5:17:08:a7:5c:7b:24:a0:cb:52: 7f:d7:95:bd:ea:33:1c:94:b2:ba:86:cc:9e:15:2a:1f:9a:b7: 05:6c:f2:23:7c:21:45:b9:ef:55:07:3c:25:67:0d:6e:0c:f8: de:0c:97:49:2a:2a:d7:9a:1d:c6:2c:b5:b0:6e:72:d7:92:a8: 4a:19:33:ae:3b:34:bb:81:7c:1b:c4:32:64:8d:56:1b:20:5b: ec:56:44:a3:19:a8:d0:b8:fc:5c:67:9b:8c:88:c1:54:22:b6: 06:93:ea:cc:49:0d:0e:e4:87:80:ff:3b:6b:46:bf:3c:1d:c8: 17:2d:b8:88:47:26:b8:09:c5:9e:ac:4e:7d:90:ca:9a:e5:69: 16:77:67:63:ba:7d:21:6c:b1:fa:1a:73:2f:8b:9b:42:5d:8c: b4:41:49:82 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6Wv542nkQB2o3drzogIc2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYjMxNDNhMmU3M2YyMDllNjlkOTdjNGI4Zjc4Y2RhNWY0 MzcwMDUwHhcNMjYwMTAxMTYxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWQ4NDU3Y2UxOWI4N2U1M2MwMDkyNzZlYTEwZTVhZDNkYzE3MmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSfRh9RYvxaUu31cHU5BuSp0Ldg6 DObFJSWGwqMUOnUROolot/1pg0ck/W35xfz6parSYXjWMgaQhCAk7PTUVcNNEiSX tZcp6rCY/9pkDzCnh26BcqW08ahDNwZZkPubO8AASylX67G3+5cEJBGBSDxQ3FIh NEhfnlOASo8OjX+e+/PuBeT67ZSvYPA1iJ6WsQxqouhIpOT/XzbNVfodTS9QJCYm 3W2Wb4hv7iDFEfm43SsvPTu0lANMlF28+/glL/RjFRkPBKMj6e5361WncS7NQ0ci ra7lyWGCdG2IE40+JfrANqN1Bg2ECcQYZUAxU7XGwaNI5UikO9Mdf1pS2QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOrYRXzhm4flPACSduoQ5a09wXK5MB8GA1UdIwQY MBaAFJ6zFDouc/IJ5p2XxLj3jNpfQ3AFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnJNVU9pNXo4Z25tblpmRXVQZU0ybDlEY0FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZmFmMjQtMDVlMS00ZGI5LTlhYWYt NTAxNjE4NDExYzc2LzEvNnRoRmZPR2JoLVU4QUpKMjZoRGxyVDNCY3JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85ZmFmMjQtMDVlMS00ZGI5LTlhYWYtNTAxNjE4NDExYzc2 LzEvbnJNVU9pNXo4Z25tblpmRXVQZU0ybDlEY0FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBueUWMA0E AgACMAcDBQMqDV4AMA0GCSqGSIb3DQEBCwUAA4IBAQBuFINo9qn11GWIX3KHoPvs jwEQH+A0Dh5loDp+N/BuieuMEFrG8D+YD6T2BKHXIeyFZo+WH/o88k4gqq1vjK5W 55Fz+ntVACMClJ8g7Eoc13xV2d5lyewm94PXZG060AUGCOUXCKdceySgy1J/15W9 6jMclLK6hsyeFSofmrcFbPIjfCFFue9VBzwlZw1uDPjeDJdJKirXmh3GLLWwbnLX kqhKGTOuOzS7gXwbxDJkjVYbIFvsVkSjGajQuPxcZ5uMiMFUIrYGk+rMSQ0O5IeA /ztrRr88HcgXLbiIRya4CcWerE59kMqa5WkWd2djun0hbLH6GnMvi5tCXYy0QUmC -----END CERTIFICATE-----Generated at Thu Feb 5 19:52:17 2026 by rpki-client