This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/6twj1FNGbSdC6GwrHJCaAlK97kQ.roa File: 6twj1FNGbSdC6GwrHJCaAlK97kQ.roa (raw, json) Hash identifier: ZXy5hFs9BRqqonUgm00rE7vHIrD50csuYB7WxmR/ZMA= Subject key identifier: EA:DC:23:D4:53:46:6D:27:42:E8:6C:2B:1C:90:9A:02:52:BD:EE:44 Certificate issuer: /CN=d181d0c40951a4f900e4d9dd9c20e4856350920e Certificate serial: 019B7758771432ECD60BCCCE2AB971B8CD14 Authority key identifier: D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/6twj1FNGbSdC6GwrHJCaAlK97kQ.roa Signing time: Thu 01 Jan 2026 02:17:24 +0000 ROA not before: Thu 01 Jan 2026 02:17:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205694 IP address blocks: 185.160.152.0/23 maxlen: 23 185.160.152.0/24 maxlen: 24 185.160.153.0/24 maxlen: 24 185.160.154.0/23 maxlen: 23 185.160.154.0/24 maxlen: 24 185.160.155.0/24 maxlen: 24 185.208.184.0/22 maxlen: 22 185.208.184.0/23 maxlen: 23 185.208.184.0/24 maxlen: 24 185.208.185.0/24 maxlen: 24 185.208.186.0/23 maxlen: 23 185.208.186.0/24 maxlen: 24 185.208.187.0/24 maxlen: 24 2a07:c2c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:77:14:32:ec:d6:0b:cc:ce:2a:b9:71:b8:cd:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d181d0c40951a4f900e4d9dd9c20e4856350920e Validity Not Before: Jan 1 02:17:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eadc23d453466d2742e86c2b1c909a0252bdee44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7a:1f:c8:1a:8a:ab:2d:21:8e:1e:89:77:9e: f6:64:c2:fc:4d:9b:2b:fe:26:c2:b6:4d:08:fc:a0: 9c:58:35:00:37:d8:f5:af:a1:fc:84:90:5f:80:64: d9:3e:00:a7:ad:a7:33:db:59:77:66:ad:09:0d:16: cd:87:70:da:e3:b7:5a:b4:f1:4b:12:2b:c5:ee:67: 76:b8:3c:80:18:f1:ec:3d:a7:cf:a9:3f:eb:6d:86: 77:2e:c9:75:a7:e9:59:2f:dc:35:ad:ac:9d:96:87: 0f:e7:1a:90:44:c6:15:2f:50:18:a0:f6:bb:7e:4d: 54:18:72:22:71:2e:a0:6f:18:f4:4a:aa:b5:23:e8: 83:63:ab:7a:38:68:7f:71:6a:54:65:d9:23:cc:96: 48:74:53:b3:38:95:1a:c4:2d:a5:fc:7d:be:8c:45: 84:4c:22:2b:ee:61:9c:6e:40:47:7e:84:62:f7:e7: 40:7b:7a:e4:91:7f:50:fc:17:b8:05:b9:22:b2:6e: 73:e5:cd:68:bd:08:2c:b7:2a:dd:df:da:e4:2a:58: 46:fc:f0:fa:ca:e5:72:89:10:b2:50:25:44:ee:2b: 05:80:e7:e2:20:71:b4:c8:de:20:a5:40:08:3e:0e: 2f:42:ac:42:67:4b:5c:33:98:52:de:07:86:82:5d: e4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:DC:23:D4:53:46:6D:27:42:E8:6C:2B:1C:90:9A:02:52:BD:EE:44 X509v3 Authority Key Identifier: keyid:D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/6twj1FNGbSdC6GwrHJCaAlK97kQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.160.152.0/22 185.208.184.0/22 IPv6: 2a07:c2c0::/29 Signature Algorithm: sha256WithRSAEncryption 5f:17:8a:0d:6a:a6:c6:5f:dc:9a:e2:67:b0:f7:64:fc:3f:8b: b1:02:7a:f3:d6:fc:07:ea:40:0b:5c:1a:06:aa:3a:98:19:81: 40:d0:8b:20:81:80:64:ed:71:a0:e9:af:c9:81:30:0a:e6:44: 73:97:09:03:85:c9:04:49:38:6c:d0:1e:fc:32:55:64:26:64: 7b:48:5c:19:b6:21:78:02:65:83:9f:e7:ae:f9:2a:cc:5e:0c: b2:00:be:32:52:8f:2b:2b:c7:80:ce:bb:42:70:f0:86:1c:3e: 4a:5f:4f:c4:3e:b9:57:85:91:ee:94:2d:72:d0:db:6e:ff:ff: 70:57:71:3f:4c:fd:85:6b:fd:9c:34:7e:92:8f:c4:fd:e8:07: 23:80:88:ce:ca:c6:b0:fb:82:48:0b:88:87:53:bc:18:51:77: 10:20:39:1d:9d:56:36:74:1e:93:9e:a8:c9:a5:92:9d:b8:7a: 26:a4:01:c8:ff:00:31:68:e0:21:ec:dd:47:a8:b8:59:87:97: cc:b3:e6:05:b1:1a:b3:96:ea:44:45:5e:8c:4c:96:4a:33:94: b0:f0:e0:0b:9e:15:97:b9:ee:b1:d0:84:4f:d3:fb:c7:2d:d3: a7:8c:5a:e3:38:16:49:ca:65:50:04:79:ae:6c:94:b6:45:c7: 02:55:6a:50 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3WHcUMuzWC8zOKrlxuM0UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxODFkMGM0MDk1MWE0ZjkwMGU0ZDlkZDljMjBlNDg1NjM1 MDkyMGUwHhcNMjYwMTAxMDIxNzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWRjMjNkNDUzNDY2ZDI3NDJlODZjMmIxYzkwOWEwMjUyYmRlZTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nofyBqKqy0hjh6Jd572ZML8TZsr /ibCtk0I/KCcWDUAN9j1r6H8hJBfgGTZPgCnracz21l3Zq0JDRbNh3Da47datPFL EivF7md2uDyAGPHsPafPqT/rbYZ3Lsl1p+lZL9w1raydlocP5xqQRMYVL1AYoPa7 fk1UGHIicS6gbxj0Sqq1I+iDY6t6OGh/cWpUZdkjzJZIdFOzOJUaxC2l/H2+jEWE TCIr7mGcbkBHfoRi9+dAe3rkkX9Q/Be4Bbkism5z5c1ovQgstyrd39rkKlhG/PD6 yuVyiRCyUCVE7isFgOfiIHG0yN4gpUAIPg4vQqxCZ0tcM5hS3geGgl3kmwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOrcI9RTRm0nQuhsKxyQmgJSve5EMB8GA1UdIwQY MBaAFNGB0MQJUaT5AOTZ3Zwg5IVjUJIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFlIUXhBbFJwUGtBNU5uZG5DRGtoV05Ra2c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hOWQ3OWUtYjI4Mi00M2MxLThiOGEt Mzg4YjgxYzBjOTBjLzEvNnR3ajFGTkdiU2RDNkd3ckhKQ2FBbEs5N2tRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9hOWQ3OWUtYjI4Mi00M2MxLThiOGEtMzg4YjgxYzBjOTBj LzEvMFlIUXhBbFJwUGtBNU5uZG5DRGtoV05Ra2c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuaCYAwQC udC4MA0EAgACMAcDBQMqB8LAMA0GCSqGSIb3DQEBCwUAA4IBAQBfF4oNaqbGX9ya 4mew92T8P4uxAnrz1vwH6kALXBoGqjqYGYFA0IsggYBk7XGg6a/JgTAK5kRzlwkD hckESThs0B78MlVkJmR7SFwZtiF4AmWDn+eu+SrMXgyyAL4yUo8rK8eAzrtCcPCG HD5KX0/EPrlXhZHulC1y0Ntu//9wV3E/TP2Fa/2cNH6Sj8T96AcjgIjOysaw+4JI C4iHU7wYUXcQIDkdnVY2dB6TnqjJpZKduHompAHI/wAxaOAh7N1HqLhZh5fMs+YF sRqzlupERV6MTJZKM5Sw8OALnhWXue6x0IRP0/vHLdOnjFrjOBZJymVQBHmubJS2 RccCVWpQ -----END CERTIFICATE-----Generated at Mon Jan 26 20:41:40 2026 by rpki-client