This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/6Gck1jxV8hodHhNErcSoI6JCNmA.roa File: 6Gck1jxV8hodHhNErcSoI6JCNmA.roa (raw, json) Hash identifier: ZJ993Nb90CZhKx6tSfqiMnkrneDYqT7k3WP7+tY6XUY= Subject key identifier: E8:67:24:D6:3C:55:F2:1A:1D:1E:13:44:AD:C4:A8:23:A2:42:36:60 Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f Certificate serial: 019B7C8048903FC818E4C50BAABC3B78312D Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/6Gck1jxV8hodHhNErcSoI6JCNmA.roa Signing time: Fri 02 Jan 2026 02:19:00 +0000 ROA not before: Fri 02 Jan 2026 02:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21859 IP address blocks: 185.113.64.0/23 maxlen: 23 185.113.64.0/24 maxlen: 24 185.113.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:48:90:3f:c8:18:e4:c5:0b:aa:bc:3b:78:31:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f Validity Not Before: Jan 2 02:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e86724d63c55f21a1d1e1344adc4a823a2423660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:13:2f:5d:cc:44:3e:90:20:8f:de:46:57:bb: 23:d4:99:2b:ee:8a:b2:4d:1c:fb:ab:2e:8f:37:49: e4:52:f9:02:66:e5:94:7b:14:c8:dc:40:83:bf:06: 1e:eb:18:1a:c7:34:12:fe:6e:99:6d:5a:98:14:d7: 8d:a9:02:f4:63:ac:79:66:48:17:4d:eb:fb:c9:04: 4a:72:50:22:f4:b7:7d:26:b0:ff:65:8e:82:3b:12: c2:92:dd:c2:9f:d1:4c:23:31:83:08:f0:3d:01:a7: 55:11:c4:fb:34:ef:1a:31:a6:64:f3:4e:e5:a3:a6: 6d:46:90:21:e4:52:56:46:6f:be:42:5e:45:6e:7a: 99:d3:dc:15:f2:5a:b9:49:e8:9d:ae:93:ee:f7:ca: 39:b8:b0:a5:21:43:db:ab:d3:d2:65:b1:89:bf:e3: 54:cc:62:f7:83:a2:ff:eb:7b:53:8a:f2:14:52:c5: d6:50:0d:7d:82:2d:24:8f:72:fc:f7:ed:fe:0a:a8: 7c:6f:12:4b:ae:f3:90:9a:9a:dc:a9:a5:21:eb:58: 5c:0a:00:ae:90:ae:a6:35:b5:f7:9a:1d:2e:82:48: 8e:72:39:d7:90:01:0e:7e:7a:62:9a:b0:e0:d2:72: 5c:e4:42:19:85:80:05:59:98:e3:7c:2e:d7:6a:70: 66:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:67:24:D6:3C:55:F2:1A:1D:1E:13:44:AD:C4:A8:23:A2:42:36:60 X509v3 Authority Key Identifier: keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/6Gck1jxV8hodHhNErcSoI6JCNmA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.113.64.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:2c:60:26:6d:5c:60:ed:af:3a:7c:f3:4d:ad:50:a2:db:3e: d1:1a:59:b4:ab:ac:7a:19:65:74:c2:b8:55:2c:67:b1:04:f4: f8:a6:b7:5d:21:15:d4:c8:a0:a0:57:74:b6:f9:93:22:14:b7: aa:29:8a:0c:88:2d:81:82:f2:29:4a:dd:85:c3:50:4d:d5:b6: 52:12:f8:47:ec:34:da:ba:15:a9:62:eb:01:1e:1f:a9:3d:80: 24:a4:1e:31:dc:93:d6:a7:7c:40:db:5f:e5:10:d0:2f:c7:5d: 0f:8f:6e:48:38:b4:ca:55:13:73:05:20:f1:64:90:e4:3b:70: 81:03:54:6d:45:f5:c0:91:58:9b:89:57:34:fd:0a:18:54:7b: 2b:17:76:07:d8:6f:ed:94:28:d4:8d:ed:fa:7a:93:c7:0e:ab: 33:cc:b4:fc:62:81:0a:08:d8:7e:ce:89:24:9e:1e:32:62:7e: 75:ee:61:7e:b0:78:70:14:f0:e4:e0:2d:f9:82:b2:4c:bc:68: 56:3d:5b:f2:47:94:e3:35:9f:cd:d6:87:75:ef:2b:b6:0d:46: 2d:c6:89:a6:8c:6f:1b:18:be:6c:6b:0d:c7:8e:9d:7c:7b:09: c1:bc:20:24:e5:dd:e2:52:29:a6:03:f9:a8:2d:63:6a:7b:c6: ac:53:71:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gEiQP8gY5MULqrw7eDEtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OTRmY2M2YmY2YTg3NDBmYTc4MTQ2NDFmZDlkNmVjOGQ4 NjJlNWYwHhcNMjYwMTAyMDIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODY3MjRkNjNjNTVmMjFhMWQxZTEzNDRhZGM0YTgyM2EyNDIzNjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthMvXcxEPpAgj95GV7sj1Jkr7oqy TRz7qy6PN0nkUvkCZuWUexTI3ECDvwYe6xgaxzQS/m6ZbVqYFNeNqQL0Y6x5ZkgX Tev7yQRKclAi9Ld9JrD/ZY6COxLCkt3Cn9FMIzGDCPA9AadVEcT7NO8aMaZk807l o6ZtRpAh5FJWRm++Ql5FbnqZ09wV8lq5SeidrpPu98o5uLClIUPbq9PSZbGJv+NU zGL3g6L/63tTivIUUsXWUA19gi0kj3L89+3+Cqh8bxJLrvOQmprcqaUh61hcCgCu kK6mNbX3mh0ugkiOcjnXkAEOfnpimrDg0nJc5EIZhYAFWZjjfC7XanBmxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOhnJNY8VfIaHR4TRK3EqCOiQjZgMB8GA1UdIwQY MBaAFDaU/Ma/aodA+ngUZB/Z1uyNhi5fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hOGRkOWUtNzFmMi00Zjc3LWI1NzUt MGQzZmNlNDI5YmRlLzEvNkdjazFqeFY4aG9kSGhORXJjU29JNkpDTm1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9hOGRkOWUtNzFmMi00Zjc3LWI1NzUtMGQzZmNlNDI5YmRl LzEvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuXFAMA0G CSqGSIb3DQEBCwUAA4IBAQAOLGAmbVxg7a86fPNNrVCi2z7RGlm0q6x6GWV0wrhV LGexBPT4prddIRXUyKCgV3S2+ZMiFLeqKYoMiC2BgvIpSt2Fw1BN1bZSEvhH7DTa uhWpYusBHh+pPYAkpB4x3JPWp3xA21/lENAvx10Pj25IOLTKVRNzBSDxZJDkO3CB A1RtRfXAkVibiVc0/QoYVHsrF3YH2G/tlCjUje36epPHDqszzLT8YoEKCNh+zokk nh4yYn517mF+sHhwFPDk4C35grJMvGhWPVvyR5TjNZ/N1od17yu2DUYtxommjG8b GL5saw3Hjp18ewnBvCAk5d3iUimmA/moLWNqe8asU3FI -----END CERTIFICATE-----Generated at Thu Jan 8 17:25:06 2026 by rpki-client