This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/6oE2tV5xJLygHD8211ohyUC5Fhg.roa File: 6oE2tV5xJLygHD8211ohyUC5Fhg.roa (raw, json) Hash identifier: Z/3O7eTXu9453+Wb+f/D4hi5mlRSIZ2Q9SX36foWOhU= Subject key identifier: EA:81:36:B5:5E:71:24:BC:A0:1C:3F:36:D7:5A:21:C9:40:B9:16:18 Certificate issuer: /CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0 Certificate serial: 019B797E8F950F895C29D77AC9D271F72DCA Authority key identifier: 11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/6oE2tV5xJLygHD8211ohyUC5Fhg.roa Signing time: Thu 01 Jan 2026 12:18:15 +0000 ROA not before: Thu 01 Jan 2026 12:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2906 IP address blocks: 185.9.188.0/22 maxlen: 24 2a03:5640::/32 maxlen: 48 2a03:5640::/36 maxlen: 48 2a03:5640:f000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 06:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:8f:95:0f:89:5c:29:d7:7a:c9:d2:71:f7:2d:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0 Validity Not Before: Jan 1 12:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea8136b55e7124bca01c3f36d75a21c940b91618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6c:79:1c:2b:62:04:eb:c6:49:25:88:2c:86: d1:38:d0:09:a8:b5:19:10:c6:f1:fb:21:1b:50:dc: 03:fb:51:4f:42:3f:d6:a1:2f:a7:ca:ab:03:a2:5b: 14:1c:cc:23:bd:3b:a0:59:21:92:8a:64:ef:be:fd: 71:02:fc:dc:b0:d9:44:29:fc:c1:47:5e:ab:7d:99: 4f:54:1d:cd:35:81:b5:95:31:12:e7:d9:9f:e1:d7: 72:36:6b:a8:cd:80:45:13:eb:ae:01:ec:00:87:db: 16:ab:52:85:a6:c2:28:48:f0:db:47:bd:58:57:8e: 22:2e:da:6c:2b:72:c6:fd:83:17:d6:90:45:76:8c: 1b:38:fe:a4:f2:82:2c:80:90:18:05:ac:3a:08:1e: 1e:d7:57:49:7a:4a:d3:9b:44:d8:0a:65:45:72:15: 14:1d:5f:82:1e:39:8c:c9:3f:56:bc:cb:11:1e:ba: e3:4c:14:1f:9f:98:81:62:b5:bf:d9:9e:12:b9:0f: 12:b0:02:23:23:c1:a7:9f:3f:37:44:6e:ec:dd:a8: 56:0d:79:2a:dc:71:c4:e6:3d:7e:48:1b:93:58:ff: b2:80:f8:31:5f:b4:7d:a1:84:75:24:4a:27:a6:b3: 17:51:56:49:27:45:a4:d8:8e:92:e4:65:5c:ef:b6: 74:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:81:36:B5:5E:71:24:BC:A0:1C:3F:36:D7:5A:21:C9:40:B9:16:18 X509v3 Authority Key Identifier: keyid:11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/6oE2tV5xJLygHD8211ohyUC5Fhg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.9.188.0/22 IPv6: 2a03:5640::/32 Signature Algorithm: sha256WithRSAEncryption 21:9c:70:57:63:70:6b:91:12:dc:f2:15:e6:a3:cd:c5:a9:5e: c8:26:bf:97:9a:2a:2f:65:7e:7c:21:f9:4e:ba:2c:c5:82:b0: 2d:79:4d:1d:90:1a:14:3e:4d:16:82:ed:b6:84:90:28:a5:a6: da:42:1a:2d:53:f6:e9:88:f8:fd:31:5f:b3:02:b4:7a:a9:7c: 3b:b1:32:8a:d0:82:bf:ed:dc:fd:1f:9f:5e:96:eb:00:30:73: 02:97:67:ec:d9:bd:7f:cd:dc:2d:cb:7a:75:c2:c0:59:65:12: 89:26:4e:b6:7c:99:20:d5:c3:51:87:5a:fd:9b:85:d1:04:af: f4:2f:80:41:05:68:ab:e4:89:65:2c:06:76:67:15:e6:75:b0: e8:e7:c6:73:18:81:42:66:62:24:b9:fd:bb:df:a3:4d:ca:fa: 2b:2e:25:88:c9:34:f3:3f:18:55:15:a1:4d:f4:13:52:00:a2: b3:bd:d7:21:9b:5c:68:fe:2f:2f:b6:6a:04:05:29:45:d0:33: 67:e6:2a:23:e5:aa:f1:a3:ab:70:56:97:3c:58:89:60:65:8f: 8a:94:0d:dc:59:ae:49:44:6e:b4:f0:d8:34:92:11:cc:f3:7c: 4d:04:44:44:7e:a8:60:d6:2a:f4:7a:fe:2e:c4:9e:27:fc:fd: 96:bc:16:2a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fo+VD4lcKdd6ydJx9y3KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExOGJhNGVmOTAxYWFjMTA4NzZjY2Y5NzZhNWY3ZDE2YzRj YTc5ZjAwHhcNMjYwMTAxMTIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTgxMzZiNTVlNzEyNGJjYTAxYzNmMzZkNzVhMjFjOTQwYjkxNjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2x5HCtiBOvGSSWILIbRONAJqLUZ EMbx+yEbUNwD+1FPQj/WoS+nyqsDolsUHMwjvTugWSGSimTvvv1xAvzcsNlEKfzB R16rfZlPVB3NNYG1lTES59mf4ddyNmuozYBFE+uuAewAh9sWq1KFpsIoSPDbR71Y V44iLtpsK3LG/YMX1pBFdowbOP6k8oIsgJAYBaw6CB4e11dJekrTm0TYCmVFchUU HV+CHjmMyT9WvMsRHrrjTBQfn5iBYrW/2Z4SuQ8SsAIjI8Gnnz83RG7s3ahWDXkq 3HHE5j1+SBuTWP+ygPgxX7R9oYR1JEonprMXUVZJJ0Wk2I6S5GVc77Z04wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOqBNrVecSS8oBw/NtdaIclAuRYYMB8GA1UdIwQY MBaAFBGLpO+QGqwQh2zPl2pffRbEynnwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVl1azc1QWFyQkNIYk0tWGFsOTlGc1RLZWZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9iZDRkOGQtOTM4MC00MGU5LTgxNDIt ZjJiNGVmYmE1OWJjLzEvNm9FMnRWNXhKTHlnSEQ4MjExb2h5VUM1RmhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9iZDRkOGQtOTM4MC00MGU5LTgxNDItZjJiNGVmYmE1OWJj LzEvRVl1azc1QWFyQkNIYk0tWGFsOTlGc1RLZWZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuQm8MA0E AgACMAcDBQAqA1ZAMA0GCSqGSIb3DQEBCwUAA4IBAQAhnHBXY3BrkRLc8hXmo83F qV7IJr+XmiovZX58IflOuizFgrAteU0dkBoUPk0Wgu22hJAopabaQhotU/bpiPj9 MV+zArR6qXw7sTKK0IK/7dz9H59elusAMHMCl2fs2b1/zdwty3p1wsBZZRKJJk62 fJkg1cNRh1r9m4XRBK/0L4BBBWir5IllLAZ2ZxXmdbDo58ZzGIFCZmIkuf2736NN yvorLiWIyTTzPxhVFaFN9BNSAKKzvdchm1xo/i8vtmoEBSlF0DNn5ioj5arxo6tw Vpc8WIlgZY+KlA3cWa5JRG608Ng0khHM83xNBEREfqhg1ir0ev4uxJ4n/P2WvBYq -----END CERTIFICATE-----Generated at Fri Jan 2 16:26:01 2026 by rpki-client