This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/6QKPReqPPvM-G5eDtotQxkQu3rg.roa File: 6QKPReqPPvM-G5eDtotQxkQu3rg.roa (raw, json) Hash identifier: +zfD9kQLYj/Bi7oedLx+ydKYavDQjQhsfviUHiEJA58= Subject key identifier: E9:02:8F:45:EA:8F:3E:F3:3E:1B:97:83:B6:8B:50:C6:44:2E:DE:B8 Certificate issuer: /CN=b5d87fdc272ae058618786e741707557bf4e1a33 Certificate serial: 019B7F156E8439204A42A87A5A3F14741271 Authority key identifier: B5:D8:7F:DC:27:2A:E0:58:61:87:86:E7:41:70:75:57:BF:4E:1A:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/6QKPReqPPvM-G5eDtotQxkQu3rg.roa Signing time: Fri 02 Jan 2026 14:21:09 +0000 ROA not before: Fri 02 Jan 2026 14:21:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60936 IP address blocks: 185.23.64.0/24 maxlen: 24 185.23.65.0/24 maxlen: 24 185.23.66.0/24 maxlen: 24 185.23.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:6e:84:39:20:4a:42:a8:7a:5a:3f:14:74:12:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5d87fdc272ae058618786e741707557bf4e1a33 Validity Not Before: Jan 2 14:21:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9028f45ea8f3ef33e1b9783b68b50c6442edeb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d5:20:6c:91:88:01:97:da:f8:26:e9:5e:38: b9:57:d1:40:50:73:70:9a:59:17:df:40:5e:b8:79: 10:42:e2:84:e2:df:bc:9f:85:8a:41:2c:b4:4b:b6: d1:39:1c:22:99:82:5f:31:19:77:fc:0a:a0:12:2c: 57:5b:a8:ed:40:d4:f5:1d:78:a6:61:c1:e4:31:5e: 96:a5:94:76:a1:c9:7e:0d:81:af:ba:84:d3:9e:68: 05:56:5d:61:d7:8d:9d:c3:6e:d1:e4:17:97:ac:01: 56:06:0f:78:c1:52:c8:83:f4:26:8b:9a:47:82:5b: 40:ce:84:e9:56:ef:22:16:cc:b6:74:ec:05:b6:e2: eb:bc:ae:4a:96:a8:8e:e9:15:73:24:2b:1b:bd:cd: e0:14:37:55:c0:dd:94:b5:ce:e4:da:87:1f:ec:98: 63:c0:33:80:4a:96:5c:3d:f0:f1:83:73:2d:fa:4e: eb:5b:49:27:1e:07:e3:88:4b:3a:ca:26:d8:d3:a3: 8c:21:d9:21:8f:6f:1d:43:aa:85:2c:f7:41:61:72: c9:fd:19:19:bc:f2:fb:f6:04:60:b6:3e:07:73:58: c2:37:38:48:2c:a6:b6:6e:1b:07:93:2c:6d:38:31: 4a:0c:98:f2:e5:0f:40:77:e8:6e:56:3d:f2:62:47: 04:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:02:8F:45:EA:8F:3E:F3:3E:1B:97:83:B6:8B:50:C6:44:2E:DE:B8 X509v3 Authority Key Identifier: keyid:B5:D8:7F:DC:27:2A:E0:58:61:87:86:E7:41:70:75:57:BF:4E:1A:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/6QKPReqPPvM-G5eDtotQxkQu3rg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.23.64.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:9e:58:ed:1b:07:88:50:8a:eb:8a:46:9c:42:9d:d1:82:65: 99:c1:c3:c0:c8:95:18:3b:43:9c:79:e0:2e:b8:94:db:62:e1: 06:e9:52:83:fb:cf:cf:aa:f0:a5:59:b2:55:b5:43:15:f2:81: d1:45:24:0f:5e:7a:f0:37:ac:8e:66:2d:b6:dc:5a:bd:f1:56: cf:de:92:d6:80:e7:97:45:42:e0:e6:f1:20:fd:f4:30:67:28: d2:45:af:1e:75:74:18:6e:d2:68:72:e5:14:cf:71:5c:73:46: c2:35:5d:f5:e1:a8:19:5b:a9:ea:5f:96:97:cd:8c:cd:48:e3: d4:6e:33:bc:37:79:b2:41:dc:8f:4e:3e:30:dd:27:2e:d9:57: 42:9e:38:1f:48:02:e8:84:38:d4:47:7b:00:c2:27:e8:83:92: a9:c0:56:20:e3:a2:a5:a2:71:24:62:c5:fe:89:73:a0:19:70: aa:8d:99:6e:50:a7:13:f6:c2:b0:5c:8f:9f:4b:2d:39:e4:0a: b1:f9:2b:78:1d:72:5d:15:fc:df:82:62:bd:63:c7:bb:f7:04: 4b:77:99:75:50:7a:55:13:f9:8f:ed:05:8d:df:ce:a4:8c:ef: 5c:dd:9d:d3:a6:84:b6:9b:4d:d8:cc:ae:af:5b:ae:2d:ed:c0: 5c:95:b4:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FW6EOSBKQqh6Wj8UdBJxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ZDg3ZmRjMjcyYWUwNTg2MTg3ODZlNzQxNzA3NTU3YmY0 ZTFhMzMwHhcNMjYwMTAyMTQyMTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTAyOGY0NWVhOGYzZWYzM2UxYjk3ODNiNjhiNTBjNjQ0MmVkZWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtUgbJGIAZfa+CbpXji5V9FAUHNw mlkX30BeuHkQQuKE4t+8n4WKQSy0S7bRORwimYJfMRl3/AqgEixXW6jtQNT1HXim YcHkMV6WpZR2ocl+DYGvuoTTnmgFVl1h142dw27R5BeXrAFWBg94wVLIg/Qmi5pH gltAzoTpVu8iFsy2dOwFtuLrvK5KlqiO6RVzJCsbvc3gFDdVwN2Utc7k2ocf7Jhj wDOASpZcPfDxg3Mt+k7rW0knHgfjiEs6yibY06OMIdkhj28dQ6qFLPdBYXLJ/RkZ vPL79gRgtj4Hc1jCNzhILKa2bhsHkyxtODFKDJjy5Q9Ad+huVj3yYkcEaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOkCj0Xqjz7zPhuXg7aLUMZELt64MB8GA1UdIwQY MBaAFLXYf9wnKuBYYYeG50FwdVe/ThozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGRoXzNDY3E0RmhoaDRiblFYQjFWNzlPR2pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC82NzBiMTAtMTBlYi00NzZmLTg0ZWYt MTU2ZWRhMmI1NWI2LzEvNlFLUFJlcVBQdk0tRzVlRHRvdFF4a1F1M3JnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC82NzBiMTAtMTBlYi00NzZmLTg0ZWYtMTU2ZWRhMmI1NWI2 LzEvdGRoXzNDY3E0RmhoaDRiblFYQjFWNzlPR2pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuRdAMA0G CSqGSIb3DQEBCwUAA4IBAQCPnljtGweIUIrrikacQp3RgmWZwcPAyJUYO0OceeAu uJTbYuEG6VKD+8/PqvClWbJVtUMV8oHRRSQPXnrwN6yOZi223Fq98VbP3pLWgOeX RULg5vEg/fQwZyjSRa8edXQYbtJocuUUz3Fcc0bCNV314agZW6nqX5aXzYzNSOPU bjO8N3myQdyPTj4w3Scu2VdCnjgfSALohDjUR3sAwifog5KpwFYg46KlonEkYsX+ iXOgGXCqjZluUKcT9sKwXI+fSy055Aqx+St4HXJdFfzfgmK9Y8e79wRLd5l1UHpV E/mP7QWN386kjO9c3Z3TpoS2m03YzK6vW64t7cBclbRW -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:31 2026 by rpki-client