This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/6J5zq7acHeCorGt2Kz1SRI8TBxw.roa File: 6J5zq7acHeCorGt2Kz1SRI8TBxw.roa (raw, json) Hash identifier: QUb/O/uGMs7lP+6gaahFi67OYlrRZUT6YWqd/feI1TU= Subject key identifier: E8:9E:73:AB:B6:9C:1D:E0:A8:AC:6B:76:2B:3D:52:44:8F:13:07:1C Certificate issuer: /CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48 Certificate serial: 019B7B35ED7776C7E4C6689E306C7FB7EEE8 Authority key identifier: 3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/6J5zq7acHeCorGt2Kz1SRI8TBxw.roa Signing time: Thu 01 Jan 2026 20:18:10 +0000 ROA not before: Thu 01 Jan 2026 20:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.117.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:ed:77:76:c7:e4:c6:68:9e:30:6c:7f:b7:ee:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48 Validity Not Before: Jan 1 20:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e89e73abb69c1de0a8ac6b762b3d52448f13071c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:33:b7:de:44:aa:13:6b:fe:f1:0f:24:74:d8: 77:03:87:d1:cd:eb:14:84:06:67:95:0c:07:a7:6f: b2:34:52:9c:f0:60:14:7e:66:5f:44:c5:70:6b:98: c8:8a:ae:5f:f2:a0:34:bc:ee:2c:14:68:a1:83:57: d4:5e:f3:ea:c3:a5:2c:db:5a:5e:13:71:4f:15:6c: ac:ab:f7:a6:17:af:98:c6:ea:f5:ae:d1:78:cf:9d: 36:f1:5b:74:f5:8b:21:df:31:47:10:c3:e7:66:d8: fa:f2:aa:65:6c:0e:d8:98:18:1b:ea:46:16:28:33: 1e:39:d2:a4:62:a1:3c:cd:41:0d:f6:ec:e9:ae:7f: 49:5e:21:58:03:ab:2e:b9:a9:87:ef:71:42:7a:3b: 4f:ed:c8:a3:56:f5:8c:dc:53:7e:5d:c4:01:7b:6f: ad:0d:66:ec:93:70:9a:88:c1:39:02:62:0f:a3:e6: 8e:a6:ae:94:c2:0c:88:18:eb:19:ec:2c:7a:aa:b3: e2:46:7c:81:9f:2d:88:df:61:06:ae:26:32:75:ae: fe:a9:91:11:26:47:c7:4f:02:4d:f7:e8:2a:a6:05: 69:9f:82:e6:b3:21:cb:ff:da:cd:da:4c:97:e5:3c: f4:56:83:87:cf:89:f8:8a:f3:f7:41:6b:ec:5c:41: 3c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:9E:73:AB:B6:9C:1D:E0:A8:AC:6B:76:2B:3D:52:44:8F:13:07:1C X509v3 Authority Key Identifier: keyid:3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/6J5zq7acHeCorGt2Kz1SRI8TBxw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.61.0/24 Signature Algorithm: sha256WithRSAEncryption ab:55:00:e4:bd:0b:1c:43:ed:63:05:7c:ec:4b:4a:53:1f:e2: c5:5d:b6:cc:66:59:23:70:7c:87:c9:e7:63:fa:ee:63:10:a1: 99:a6:6b:b2:d1:74:82:05:c4:0b:49:dd:f4:84:52:dd:9d:40: 8d:b7:96:58:d3:7b:d8:3e:2f:20:a7:07:9b:7c:3e:d1:f2:7e: 44:06:0c:57:70:1e:c3:a1:ab:8d:71:84:19:d1:39:44:be:f6: 89:80:10:c1:e3:5f:1c:3b:78:1d:eb:e7:ff:39:85:a1:de:88: cf:0e:aa:ad:89:c6:cb:45:6d:95:61:1f:15:d9:39:c7:cc:16: fb:27:49:fa:6f:5b:15:e9:8d:96:00:8b:26:4a:bb:72:2b:92: 29:62:1d:aa:1a:4f:b9:df:b3:77:d1:a1:8f:c9:b1:81:0c:0e: 0a:bc:aa:fa:f6:46:ec:db:53:9c:b8:68:d5:14:9b:34:f6:50: a3:21:e1:54:32:ac:28:7b:40:50:18:6e:b0:db:d2:a0:c7:9a: 6d:da:92:17:72:5b:5d:ed:f0:2c:ef:6e:03:55:92:b9:10:0b: 44:72:44:c2:98:04:81:17:7f:63:5f:00:d7:9c:46:10:f2:c9: 3b:bd:0a:38:99:7c:2f:d8:61:52:97:91:80:f9:86:7e:f8:9f: 59:fa:40:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Ne13dsfkxmieMGx/t+7oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiOGZlMjQ2NTg0MzAzMWI3NzhiYjhkOGI3YmQzNWEwOTRm Y2NmNDgwHhcNMjYwMTAxMjAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODllNzNhYmI2OWMxZGUwYThhYzZiNzYyYjNkNTI0NDhmMTMwNzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjO33kSqE2v+8Q8kdNh3A4fRzesU hAZnlQwHp2+yNFKc8GAUfmZfRMVwa5jIiq5f8qA0vO4sFGihg1fUXvPqw6Us21pe E3FPFWysq/emF6+Yxur1rtF4z5028Vt09Ysh3zFHEMPnZtj68qplbA7YmBgb6kYW KDMeOdKkYqE8zUEN9uzprn9JXiFYA6suuamH73FCejtP7cijVvWM3FN+XcQBe2+t DWbsk3CaiME5AmIPo+aOpq6UwgyIGOsZ7Cx6qrPiRnyBny2I32EGriYyda7+qZER JkfHTwJN9+gqpgVpn4LmsyHL/9rN2kyX5Tz0VoOHz4n4ivP3QWvsXEE8HQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOiec6u2nB3gqKxrdis9UkSPEwccMB8GA1UdIwQY MBaAFDuP4kZYQwMbd4u42Le9NaCU/M9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzRfaVJsaERBeHQzaTdqWXQ3MDFvSlQ4ejBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lZjIwY2YtNGMzOS00NzA3LTg1N2Mt N2MzNTAwNmUwN2ExLzEvNko1enE3YWNIZUNvckd0Mkt6MVNSSThUQnh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9lZjIwY2YtNGMzOS00NzA3LTg1N2MtN2MzNTAwNmUwN2Ex LzEvTzRfaVJsaERBeHQzaTdqWXQ3MDFvSlQ4ejBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXU9MA0G CSqGSIb3DQEBCwUAA4IBAQCrVQDkvQscQ+1jBXzsS0pTH+LFXbbMZlkjcHyHyedj +u5jEKGZpmuy0XSCBcQLSd30hFLdnUCNt5ZY03vYPi8gpwebfD7R8n5EBgxXcB7D oauNcYQZ0TlEvvaJgBDB418cO3gd6+f/OYWh3ojPDqqticbLRW2VYR8V2TnHzBb7 J0n6b1sV6Y2WAIsmSrtyK5IpYh2qGk+537N30aGPybGBDA4KvKr69kbs21OcuGjV FJs09lCjIeFUMqwoe0BQGG6w29Kgx5pt2pIXcltd7fAs724DVZK5EAtEckTCmASB F39jXwDXnEYQ8sk7vQo4mXwv2GFSl5GA+YZ++J9Z+kAY -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:11 2026 by rpki-client