This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/unkGkB8qp1620UotFb6yhd6x1oU.roa File: unkGkB8qp1620UotFb6yhd6x1oU.roa (raw, json) Hash identifier: +yKx8BTwISlKJwgwtVb1Joc3L3N9AZY0nFPc0pnvQJ8= Subject key identifier: BA:79:06:90:1F:2A:A7:5E:B6:D1:4A:2D:15:BE:B2:85:DE:B1:D6:85 Certificate issuer: /CN=3c1b83888696fc44478c693d6e7803e9516250e6 Certificate serial: 019B7B3652EB3228B287206F96190EA5BA81 Authority key identifier: 3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/unkGkB8qp1620UotFb6yhd6x1oU.roa Signing time: Thu 01 Jan 2026 20:18:36 +0000 ROA not before: Thu 01 Jan 2026 20:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216442 IP address blocks: 185.51.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:52:eb:32:28:b2:87:20:6f:96:19:0e:a5:ba:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1b83888696fc44478c693d6e7803e9516250e6 Validity Not Before: Jan 1 20:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba7906901f2aa75eb6d14a2d15beb285deb1d685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:23:27:6b:72:f7:8d:eb:a4:a9:a2:5f:f6:d9: 24:3d:82:98:1a:e4:45:aa:9f:25:30:6e:8b:6f:73: 99:15:1e:48:a4:95:36:07:70:12:0f:89:53:08:43: 95:cc:52:5e:a9:c5:e6:19:81:aa:0f:b0:5d:82:f4: 3f:fb:cb:db:84:d9:19:03:fc:8d:6e:f2:66:93:ea: 1b:fa:4d:a1:41:81:d0:e2:2f:c1:a4:b4:fc:e4:e5: 59:10:de:40:8e:78:b2:a5:ac:00:38:af:31:a5:ec: 93:83:93:a4:8a:1e:9e:de:91:e0:f9:3d:7c:89:da: 89:f2:3b:0b:96:72:f9:dc:72:ec:78:d0:e0:7e:10: 28:81:90:97:4c:b3:8e:a4:32:5c:a9:29:05:aa:27: f8:8a:94:3c:7b:b6:b5:17:33:e1:3f:a2:3a:52:9b: 59:de:59:bd:3f:ca:a6:85:78:19:35:ce:25:02:63: 84:85:c4:1a:f9:f5:7a:8f:a4:ee:76:cd:75:a2:93: 69:07:6f:86:94:75:99:42:fc:ae:6a:71:f8:4d:22: 17:ea:4d:6b:b7:4e:a1:c0:c3:2e:a5:30:a6:30:39: 33:57:c7:da:2f:f7:a3:c8:12:ca:7e:b7:9c:7c:05: 83:56:55:5f:b1:3d:b0:cd:b1:15:87:5c:7c:d1:6e: 58:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:79:06:90:1F:2A:A7:5E:B6:D1:4A:2D:15:BE:B2:85:DE:B1:D6:85 X509v3 Authority Key Identifier: keyid:3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/unkGkB8qp1620UotFb6yhd6x1oU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.51.172.0/22 Signature Algorithm: sha256WithRSAEncryption b1:29:36:ef:80:19:91:5a:23:ef:f6:37:4e:74:98:96:7c:c2: ef:91:94:d7:89:6c:8f:80:a5:87:76:1a:5b:4b:de:60:4c:65: 22:22:53:51:dd:8d:df:07:a2:e4:75:6e:a4:ef:8f:71:2b:10: 08:00:5f:ea:4a:18:4d:3f:6b:2f:e1:5a:c3:47:74:34:8c:02: d2:ff:b5:49:6d:f5:a7:54:7d:1d:36:6e:91:18:3d:9c:b3:bc: 40:db:9a:82:28:eb:6b:1c:b0:eb:81:e5:6a:14:07:e5:e1:69: 2f:3e:3b:8c:ce:55:6b:10:82:73:e2:b9:ca:66:4c:2b:94:91: 16:98:1b:8e:5b:7b:17:29:d0:35:eb:6f:b0:b1:6e:6e:58:1d: 07:fa:d6:82:be:36:f3:4b:b1:4f:76:11:dc:4b:66:40:ff:60: 28:4c:e5:76:bf:c3:fc:d8:51:b6:6d:59:b8:2b:f6:01:47:3f: 54:10:60:97:90:06:b1:4c:04:0d:72:65:4b:3f:8a:f4:74:aa: a7:17:6f:77:e3:5a:45:82:1a:8e:a5:69:da:a3:d7:04:f7:1b: 02:fc:1c:84:e2:90:48:92:ca:e3:23:7d:4f:71:e5:2b:0c:0a: 41:c8:4f:31:88:5e:72:76:55:b2:66:f1:27:ab:7d:2a:14:b9: 8e:74:d3:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NlLrMiiyhyBvlhkOpbqBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMWI4Mzg4ODY5NmZjNDQ0NzhjNjkzZDZlNzgwM2U5NTE2 MjUwZTYwHhcNMjYwMTAxMjAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTc5MDY5MDFmMmFhNzVlYjZkMTRhMmQxNWJlYjI4NWRlYjFkNjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyMna3L3jeukqaJf9tkkPYKYGuRF qp8lMG6Lb3OZFR5IpJU2B3ASD4lTCEOVzFJeqcXmGYGqD7BdgvQ/+8vbhNkZA/yN bvJmk+ob+k2hQYHQ4i/BpLT85OVZEN5AjniypawAOK8xpeyTg5Okih6e3pHg+T18 idqJ8jsLlnL53HLseNDgfhAogZCXTLOOpDJcqSkFqif4ipQ8e7a1FzPhP6I6UptZ 3lm9P8qmhXgZNc4lAmOEhcQa+fV6j6Tuds11opNpB2+GlHWZQvyuanH4TSIX6k1r t06hwMMupTCmMDkzV8faL/ejyBLKfrecfAWDVlVfsT2wzbEVh1x80W5YAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLp5BpAfKqdettFKLRW+soXesdaFMB8GA1UdIwQY MBaAFDwbg4iGlvxER4xpPW54A+lRYlDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEJ1RGlJYVdfRVJIakdrOWJuZ0Q2VkZpVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kNTU2ODMtZmVjMi00N2ZkLWFjNmUt OWU4MmRhNzMxNWNmLzEvdW5rR2tCOHFwMTYyMFVvdEZiNnloZDZ4MW9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9kNTU2ODMtZmVjMi00N2ZkLWFjNmUtOWU4MmRhNzMxNWNm LzEvUEJ1RGlJYVdfRVJIakdrOWJuZ0Q2VkZpVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTOsMA0G CSqGSIb3DQEBCwUAA4IBAQCxKTbvgBmRWiPv9jdOdJiWfMLvkZTXiWyPgKWHdhpb S95gTGUiIlNR3Y3fB6LkdW6k749xKxAIAF/qShhNP2sv4VrDR3Q0jALS/7VJbfWn VH0dNm6RGD2cs7xA25qCKOtrHLDrgeVqFAfl4WkvPjuMzlVrEIJz4rnKZkwrlJEW mBuOW3sXKdA162+wsW5uWB0H+taCvjbzS7FPdhHcS2ZA/2AoTOV2v8P82FG2bVm4 K/YBRz9UEGCXkAaxTAQNcmVLP4r0dKqnF29341pFghqOpWnao9cE9xsC/ByE4pBI ksrjI31PceUrDApByE8xiF5ydlWyZvEnq30qFLmOdNP3 -----END CERTIFICATE-----Generated at Mon Jan 26 14:45:21 2026 by rpki-client