This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/6ZpKI2F1-bRudxJYqq5UgGtrDuQ.roa File: 6ZpKI2F1-bRudxJYqq5UgGtrDuQ.roa (raw, json) Hash identifier: 9EgVSfhTl/QGkr1VbLiCkvS1twznwTX4xiKHAhOHNRU= Subject key identifier: E9:9A:4A:23:61:75:F9:B4:6E:77:12:58:AA:AE:54:80:6B:6B:0E:E4 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E344561390D9F6612C7152478E59F Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/6ZpKI2F1-bRudxJYqq5UgGtrDuQ.roa Signing time: Thu 01 Jan 2026 12:17:52 +0000 ROA not before: Thu 01 Jan 2026 12:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134176 IP address blocks: 185.190.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:34:45:61:39:0d:9f:66:12:c7:15:24:78:e5:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e99a4a236175f9b46e771258aaae54806b6b0ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e8:02:24:9f:90:ab:13:89:d4:15:45:3c:b3: ee:ca:86:ce:a4:25:54:9b:ac:7a:b9:59:77:03:79: 11:3a:9a:1d:1f:91:71:67:4d:63:50:63:35:68:b5: 66:38:ec:e3:1f:70:2e:8d:34:53:36:ef:bd:b0:d1: 40:f9:8f:a3:54:36:33:b2:7e:9d:59:1e:e4:4b:0c: 2a:a5:56:12:44:ad:6b:ec:3f:49:2f:fa:f9:41:a4: 07:5f:dd:8f:60:7c:d0:e8:fa:54:40:e2:01:e6:5c: fb:dc:85:3e:32:ee:80:48:ad:28:4a:10:f6:ce:b5: a3:06:e5:8d:4d:76:46:bf:db:a3:f5:d7:11:3e:d8: 7a:24:56:08:28:f4:77:d6:38:03:4a:43:50:94:e0: ed:a3:5c:5d:91:e0:10:a7:63:7d:b3:0a:e2:cb:1a: 32:22:ac:3e:db:c8:1b:d3:e7:32:87:6f:3e:43:ec: 27:95:ce:50:81:a4:2a:58:4b:80:2f:6f:3e:2d:72: 2f:38:0a:63:ce:47:11:22:85:9a:2f:60:e7:c9:c2: 9c:5e:76:0f:1b:c6:6f:7f:0b:03:c1:b2:b6:aa:42: be:dc:4a:fd:d3:3f:9a:e1:68:57:dc:bf:74:4c:98: 75:b7:a9:50:d0:49:ca:c2:ea:ac:5b:77:7f:a5:88: 3e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9A:4A:23:61:75:F9:B4:6E:77:12:58:AA:AE:54:80:6B:6B:0E:E4 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/6ZpKI2F1-bRudxJYqq5UgGtrDuQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.190.81.0/24 Signature Algorithm: sha256WithRSAEncryption 79:bc:a9:29:fe:52:fd:6a:7c:6c:9c:e7:ce:bd:f2:2a:76:e6: 40:c9:ad:36:73:49:ed:d7:f2:8c:c4:a5:bf:ec:7d:55:68:cb: 72:4f:db:f1:89:2c:a2:4d:ab:c1:a3:63:33:60:55:07:7e:a6: bc:f2:fc:03:de:5f:44:a4:58:8f:2b:49:d1:2a:de:9c:66:8f: 2f:ea:23:c4:6d:d9:a1:df:44:7d:4c:c2:31:1f:6e:89:b5:9e: 0f:0a:3e:b0:45:34:cb:74:6a:6f:ab:4f:a0:4d:8f:63:ec:c3: b9:93:a1:1e:78:af:32:6f:d0:52:0e:28:cf:56:4d:bb:10:dd: cb:92:42:e1:3f:30:a8:2b:6d:13:96:65:d1:d2:61:30:f3:c5: 9a:fb:b1:9d:4c:7c:6c:a4:9f:f7:b2:a9:ac:b6:78:a1:71:1f: fd:1e:c7:ca:8f:0b:3c:c5:4c:84:0b:c0:1a:fb:8f:32:34:03: 33:e7:14:68:99:d5:88:57:8c:8e:90:61:4e:bb:29:64:85:db: 90:ae:05:e2:31:07:ae:4f:49:f3:b6:65:ec:81:e7:6a:6e:c4: 36:5c:d2:8e:7f:8c:17:20:bb:1d:b2:04:15:db:cd:85:4b:32: ad:46:ee:7b:25:d9:da:d3:e5:df:5f:2a:31:e8:87:de:49:49: 05:46:74:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fjRFYTkNn2YSxxUkeOWfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTlhNGEyMzYxNzVmOWI0NmU3NzEyNThhYWFlNTQ4MDZiNmIwZWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoegCJJ+QqxOJ1BVFPLPuyobOpCVU m6x6uVl3A3kROpodH5FxZ01jUGM1aLVmOOzjH3AujTRTNu+9sNFA+Y+jVDYzsn6d WR7kSwwqpVYSRK1r7D9JL/r5QaQHX92PYHzQ6PpUQOIB5lz73IU+Mu6ASK0oShD2 zrWjBuWNTXZGv9uj9dcRPth6JFYIKPR31jgDSkNQlODto1xdkeAQp2N9swriyxoy Iqw+28gb0+cyh28+Q+wnlc5QgaQqWEuAL28+LXIvOApjzkcRIoWaL2DnycKcXnYP G8ZvfwsDwbK2qkK+3Er90z+a4WhX3L90TJh1t6lQ0EnKwuqsW3d/pYg+fQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOmaSiNhdfm0bncSWKquVIBraw7kMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvNlpwS0kyRjEtYlJ1ZHhKWXFxNVVnR3RyRHVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAub5RMA0G CSqGSIb3DQEBCwUAA4IBAQB5vKkp/lL9anxsnOfOvfIqduZAya02c0nt1/KMxKW/ 7H1VaMtyT9vxiSyiTavBo2MzYFUHfqa88vwD3l9EpFiPK0nRKt6cZo8v6iPEbdmh 30R9TMIxH26JtZ4PCj6wRTTLdGpvq0+gTY9j7MO5k6EeeK8yb9BSDijPVk27EN3L kkLhPzCoK20TlmXR0mEw88Wa+7GdTHxspJ/3sqmstnihcR/9HsfKjws8xUyEC8Aa +48yNAMz5xRomdWIV4yOkGFOuylkhduQrgXiMQeuT0nztmXsgedqbsQ2XNKOf4wX ILsdsgQV282FSzKtRu57Jdna0+XfXyox6IfeSUkFRnTi -----END CERTIFICATE-----Generated at Mon Jan 19 20:29:27 2026 by rpki-client