This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/a6AW8erSgL4cyC7RB0KFlvz16WI.roa File: a6AW8erSgL4cyC7RB0KFlvz16WI.roa (raw, json) Hash identifier: rfXhxRN3Mr6NGEn48dAtVk+dzIWU793BYF95HmzV6sU= Subject key identifier: 6B:A0:16:F1:EA:D2:80:BE:1C:C8:2E:D1:07:42:85:96:FC:F5:E9:62 Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Certificate serial: 019B78A31E79DCB0FCD9B3DDD4DD7E10BEF0 Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/a6AW8erSgL4cyC7RB0KFlvz16WI.roa Signing time: Thu 01 Jan 2026 08:18:34 +0000 ROA not before: Thu 01 Jan 2026 08:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41108 IP address blocks: 109.205.193.0/24 maxlen: 24 2a01:fb05::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:1e:79:dc:b0:fc:d9:b3:dd:d4:dd:7e:10:be:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Validity Not Before: Jan 1 08:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ba016f1ead280be1cc82ed107428596fcf5e962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ef:19:60:94:81:6f:59:17:93:3d:3e:30:5e: a0:7f:a8:36:f7:6e:3a:f7:06:36:12:94:f9:3a:ee: 21:2f:3a:5a:2e:fe:f2:c9:15:08:4e:be:10:e0:bf: 48:51:2b:d3:89:46:2d:38:47:3a:cb:9d:c6:9a:1a: 9c:b0:7d:72:ff:ca:4f:6c:b5:9f:96:d8:14:9a:49: 0d:d4:a9:55:a9:66:f7:a0:7f:3b:f0:e5:e1:c6:cd: 2f:36:24:7c:ce:3d:72:0b:f4:4b:ba:47:56:a3:0a: 52:9d:02:2a:f6:3d:e9:83:9b:d7:9d:1d:78:48:bb: 54:15:6a:c8:39:b3:42:1f:12:bd:ba:18:92:5b:b5: 9b:12:36:50:46:bf:5d:fc:46:2b:10:d5:67:f0:5d: b8:f5:59:52:07:51:ba:3e:b4:29:72:eb:58:d0:0d: ef:31:68:2b:b4:7d:10:e0:dc:64:6b:86:bf:53:c5: b6:42:d3:25:38:40:c7:24:1b:01:eb:48:e7:6b:00: c4:1f:85:ce:09:80:b7:02:34:22:7f:64:07:34:82: c1:2e:d1:01:ac:3f:2d:9c:94:af:13:09:53:d3:7f: 23:da:31:91:7f:8b:d8:e3:ad:4b:16:2f:9b:83:77: d6:bf:4b:8d:54:41:08:dc:12:71:23:7a:9b:89:60: 07:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A0:16:F1:EA:D2:80:BE:1C:C8:2E:D1:07:42:85:96:FC:F5:E9:62 X509v3 Authority Key Identifier: keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/a6AW8erSgL4cyC7RB0KFlvz16WI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.205.193.0/24 IPv6: 2a01:fb05::/36 Signature Algorithm: sha256WithRSAEncryption 76:33:32:82:97:27:85:fe:d2:69:48:f2:11:f5:f6:b9:7b:f2: 01:9b:32:fb:eb:e0:35:c2:d9:9e:da:4d:e1:87:7d:39:aa:41: c2:d4:84:e9:6e:2d:df:fa:d1:4d:b2:e9:13:2c:af:8d:a6:db: d6:4d:f9:7a:13:34:34:e7:67:af:e3:80:13:ea:23:27:c4:5b: 6b:b3:71:e3:58:f5:05:e5:57:3e:1c:b5:b8:57:24:14:1d:ba: 0a:0e:a8:cc:67:73:b1:e7:47:1c:fe:24:5c:4c:d1:df:b8:4d: d8:7d:00:c3:96:5a:fe:8d:94:4a:89:4b:50:ac:e0:d9:87:40: 94:db:ff:15:0a:dd:54:3c:59:80:d5:e4:bc:8b:e0:0e:bf:4f: f5:f8:85:eb:95:18:ca:67:c6:5b:56:12:91:c4:9e:fa:a7:27: 4b:dd:f9:40:bc:c9:e1:00:62:f0:00:ad:28:c2:a7:d5:9d:9e: 57:93:82:4d:60:02:68:ea:47:49:cf:60:c0:03:99:a7:5b:a4: 1d:74:a5:10:4f:e9:1c:26:3d:5d:29:c8:db:b5:8b:35:2b:99: 54:74:93:16:4d:e3:81:8b:96:12:1c:6d:e9:ca:e8:37:ca:ff: ab:d3:26:7e:95:b4:8c:6b:69:de:e6:bf:ea:80:2f:48:fe:88: 34:73:7b:a7 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt4ox553LD82bPd1N1+EL7wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjQ1ODFlNDM2ODgyNWQ1ZTEzZjRmMmEwZDZmZjhlNDg0 Yzk1ZTYwHhcNMjYwMTAxMDgxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmEwMTZmMWVhZDI4MGJlMWNjODJlZDEwNzQyODU5NmZjZjVlOTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu8ZYJSBb1kXkz0+MF6gf6g29246 9wY2EpT5Ou4hLzpaLv7yyRUITr4Q4L9IUSvTiUYtOEc6y53GmhqcsH1y/8pPbLWf ltgUmkkN1KlVqWb3oH878OXhxs0vNiR8zj1yC/RLukdWowpSnQIq9j3pg5vXnR14 SLtUFWrIObNCHxK9uhiSW7WbEjZQRr9d/EYrENVn8F249VlSB1G6PrQpcutY0A3v MWgrtH0Q4Nxka4a/U8W2QtMlOEDHJBsB60jnawDEH4XOCYC3AjQif2QHNILBLtEB rD8tnJSvEwlT038j2jGRf4vY461LFi+bg3fWv0uNVEEI3BJxI3qbiWAHfQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFGugFvHq0oC+HMgu0QdChZb89eliMB8GA1UdIwQY MBaAFPMkWB5DaIJdXhP08qDW/45ITJXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMt NmUyZDk3Y2ExNWZmLzEvYTZBVzhlclNnTDRjeUM3UkIwS0ZsdnoxNldJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMtNmUyZDk3Y2ExNWZm LzEvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAbc3BMA4E AgACMAgDBgQqAfsFADANBgkqhkiG9w0BAQsFAAOCAQEAdjMygpcnhf7SaUjyEfX2 uXvyAZsy++vgNcLZntpN4Yd9OapBwtSE6W4t3/rRTbLpEyyvjabb1k35ehM0NOdn r+OAE+ojJ8Rba7Nx41j1BeVXPhy1uFckFB26Cg6ozGdzsedHHP4kXEzR37hN2H0A w5Za/o2USolLUKzg2YdAlNv/FQrdVDxZgNXkvIvgDr9P9fiF65UYymfGW1YSkcSe +qcnS935QLzJ4QBi8ACtKMKn1Z2eV5OCTWACaOpHSc9gwAOZp1ukHXSlEE/pHCY9 XSnI27WLNSuZVHSTFk3jgYuWEhxt6croN8r/q9MmfpW0jGtp3ua/6oAvSP6INHN7 pw== -----END CERTIFICATE-----Generated at Mon Jan 19 14:37:25 2026 by rpki-client