This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/6qBOGIzy7SiE5aHoDtHWinTh2oI.roa File: 6qBOGIzy7SiE5aHoDtHWinTh2oI.roa (raw, json) Hash identifier: KwYB7/zyOeuIegeDk01/5M8IIa6sVcCvAJ0ZuQL1yIE= Subject key identifier: EA:A0:4E:18:8C:F2:ED:28:84:E5:A1:E8:0E:D1:D6:8A:74:E1:DA:82 Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d Certificate serial: 019B7DCA6FAC1DFAF4D79AC628603999F243 Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/6qBOGIzy7SiE5aHoDtHWinTh2oI.roa Signing time: Fri 02 Jan 2026 08:19:37 +0000 ROA not before: Fri 02 Jan 2026 08:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398781 IP address blocks: 46.33.24.0/23 maxlen: 32 79.108.168.0/21 maxlen: 32 79.108.176.0/21 maxlen: 32 79.108.184.0/21 maxlen: 32 79.108.192.0/21 maxlen: 32 82.158.64.0/21 maxlen: 32 82.158.72.0/21 maxlen: 32 82.158.80.0/21 maxlen: 32 82.198.36.0/22 maxlen: 32 84.234.48.0/22 maxlen: 32 84.234.52.0/22 maxlen: 32 84.234.60.0/22 maxlen: 32 84.238.176.0/23 maxlen: 32 91.238.12.0/22 maxlen: 32 95.36.16.0/20 maxlen: 32 95.36.32.0/20 maxlen: 32 95.36.48.0/20 maxlen: 32 109.175.232.0/23 maxlen: 32 109.175.244.0/23 maxlen: 32 167.150.180.0/22 maxlen: 32 167.150.188.0/22 maxlen: 32 167.150.208.0/22 maxlen: 32 167.150.236.0/22 maxlen: 32 185.165.24.0/22 maxlen: 32 198.13.200.0/21 maxlen: 32 199.182.80.0/20 maxlen: 32 209.16.224.0/21 maxlen: 32 209.16.232.0/21 maxlen: 32 209.16.240.0/21 maxlen: 32 209.16.248.0/21 maxlen: 32 213.5.20.0/22 maxlen: 32 213.130.88.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:6f:ac:1d:fa:f4:d7:9a:c6:28:60:39:99:f2:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d Validity Not Before: Jan 2 08:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eaa04e188cf2ed2884e5a1e80ed1d68a74e1da82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:14:ff:1b:1a:e5:ec:86:1f:62:6c:dd:70:36: bb:3e:5c:52:cc:5d:c8:9a:10:ea:36:74:38:3c:f2: 7d:e5:f1:33:e2:f9:fa:ca:5c:23:e7:64:53:8c:a2: aa:6e:b9:fd:ec:8d:84:18:26:55:be:25:ba:1b:d0: d2:9b:ab:14:fa:37:7a:0d:18:4c:9a:e0:c4:11:ff: f9:53:51:f3:38:17:56:c8:4e:b0:1e:ce:aa:a2:79: 7b:e8:0f:18:60:2b:98:83:2d:cc:0c:60:2a:ad:6d: ac:09:3a:06:79:89:f0:72:07:66:a9:ee:df:ef:b6: be:da:5a:c2:8e:b9:e1:2c:9f:b7:e8:00:66:e5:1d: bf:d8:1d:57:81:82:1d:7b:72:47:7b:3e:e7:05:df: 2b:6c:0d:b4:c8:6c:c0:17:f2:b0:71:27:9b:79:98: 0f:60:43:3f:31:0e:75:c2:1b:43:87:d6:c6:22:8d: 4b:e3:8e:d8:6a:35:36:c4:e4:69:5e:13:a1:1c:42: da:9e:5a:cb:9f:ee:36:eb:80:e8:45:97:76:0b:c6: a5:91:1f:14:9d:3f:ae:1e:84:66:45:08:8f:c3:b3: 82:2d:15:67:5b:55:1c:1a:95:85:4e:35:f9:ea:67: 12:b2:26:a9:0c:f3:eb:7e:ae:c7:e1:79:5e:b3:3c: ea:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A0:4E:18:8C:F2:ED:28:84:E5:A1:E8:0E:D1:D6:8A:74:E1:DA:82 X509v3 Authority Key Identifier: keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/6qBOGIzy7SiE5aHoDtHWinTh2oI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.33.24.0/23 79.108.168.0-79.108.199.255 82.158.64.0-82.158.87.255 82.198.36.0/22 84.234.48.0/21 84.234.60.0/22 84.238.176.0/23 91.238.12.0/22 95.36.16.0-95.36.63.255 109.175.232.0/23 109.175.244.0/23 167.150.180.0/22 167.150.188.0/22 167.150.208.0/22 167.150.236.0/22 185.165.24.0/22 198.13.200.0/21 199.182.80.0/20 209.16.224.0/19 213.5.20.0/22 213.130.88.0/22 Signature Algorithm: sha256WithRSAEncryption a7:69:ad:80:0b:37:c4:2c:0c:5c:49:0d:7d:4f:22:b0:8e:a8: 6b:41:31:70:99:41:cd:b4:c7:ed:fd:c4:0e:a4:46:2d:b7:84: ee:16:f0:d2:bb:46:14:55:7f:77:2b:6a:2f:19:ff:a8:9d:fb: 4c:da:53:8d:94:af:be:bf:d3:7d:5e:db:bf:ca:45:51:9a:c3: 04:20:a2:c0:c1:cc:f2:e6:07:fa:5c:5a:36:c0:87:4a:f8:38: 99:aa:44:4a:6c:6e:ba:fd:11:2a:04:2f:b4:38:f8:9b:c1:25: a4:06:a7:e9:c4:cc:9f:e7:ef:2c:ed:7e:dc:0a:9f:23:81:2f: 97:72:0f:ed:31:db:b4:d7:56:46:b3:2b:f8:bb:1a:42:12:35: 73:b1:14:6d:f6:19:d4:54:b0:db:3e:ea:79:47:91:64:34:81: 86:5b:d8:0b:ee:b5:a8:93:19:92:97:34:a8:f7:eb:31:11:1b: 88:87:8d:14:39:10:b7:5e:6a:d4:76:92:0c:97:c0:7e:a3:38: 7c:c8:fc:b3:c8:9e:b0:36:19:c8:22:fc:49:fa:8f:38:e2:7e: ac:f7:02:6c:64:d7:97:f5:89:a9:e1:98:1e:dc:98:87:99:7d: be:f3:0c:dc:87:07:ab:ef:39:c3:9a:98:8d:3f:8b:2b:2b:e6: 11:02:03:e8 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgISAZt9ym+sHfr015rGKGA5mfJDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYTUxYTBiYzBmMGFmZWJiZjZkNWQ5MjdmZTFmOTgxNmY1 MjM1MmQwHhcNMjYwMTAyMDgxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWEwNGUxODhjZjJlZDI4ODRlNWExZTgwZWQxZDY4YTc0ZTFkYTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxT/Gxrl7IYfYmzdcDa7PlxSzF3I mhDqNnQ4PPJ95fEz4vn6ylwj52RTjKKqbrn97I2EGCZVviW6G9DSm6sU+jd6DRhM muDEEf/5U1HzOBdWyE6wHs6qonl76A8YYCuYgy3MDGAqrW2sCToGeYnwcgdmqe7f 77a+2lrCjrnhLJ+36ABm5R2/2B1XgYIde3JHez7nBd8rbA20yGzAF/KwcSebeZgP YEM/MQ51whtDh9bGIo1L447YajU2xORpXhOhHELanlrLn+4264DoRZd2C8alkR8U nT+uHoRmRQiPw7OCLRVnW1UcGpWFTjX56mcSsiapDPPrfq7H4XleszzqvwIDAQAB o4ICnjCCApowHQYDVR0OBBYEFOqgThiM8u0ohOWh6A7R1op04dqCMB8GA1UdIwQY MBaAFBulGgvA8K/rv21dkn/h+YFvUjUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQt ODcxZjllZDcwOGUwLzEvNnFCT0dJenk3U2lFNWFIb0R0SFdpblRoMm9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQtODcxZjllZDcwOGUw LzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYDBAEu IRgwDAMEA09sqAMEA09swDAMAwQGUp5AAwQDUp5QAwQCUsYkAwQDVOowAwQCVOo8 AwQBVO6wAwQCW+4MMAwDBARfJBADBAZfJAADBAFtr+gDBAFtr/QDBAKnlrQDBAKn lrwDBAKnltADBAKnluwDBAK5pRgDBAPGDcgDBATHtlADBAXREOADBALVBRQDBALV glgwDQYJKoZIhvcNAQELBQADggEBAKdprYALN8QsDFxJDX1PIrCOqGtBMXCZQc20 x+39xA6kRi23hO4W8NK7RhRVf3crai8Z/6id+0zaU42Ur76/031e27/KRVGawwQg osDBzPLmB/pcWjbAh0r4OJmqREpsbrr9ESoEL7Q4+JvBJaQGp+nEzJ/n7yztftwK nyOBL5dyD+0x27TXVkazK/i7GkISNXOxFG32GdRUsNs+6nlHkWQ0gYZb2AvutaiT GZKXNKj36zERG4iHjRQ5ELdeatR2kgyXwH6jOHzI/LPInrA2Gcgi/En6jzjifqz3 Amxk15f1ianhmB7cmIeZfb7zDNyHB6vvOcOamI0/iysr5hECA+g= -----END CERTIFICATE-----Generated at Tue Jan 27 02:19:03 2026 by rpki-client