This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/6PInJ2tbRTip0fDT1jftw8w7R7I.roa File: 6PInJ2tbRTip0fDT1jftw8w7R7I.roa (raw, json) Hash identifier: JDGvPisnEK8vyfb4vuVlQuoioDUHeR2I2cF0Dy3S3VU= Subject key identifier: E8:F2:27:27:6B:5B:45:38:A9:D1:F0:D3:D6:37:ED:C3:CC:3B:47:B2 Certificate issuer: /CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a Certificate serial: 019B77C668D663302F1C0D863DE425AD2478 Authority key identifier: 4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/6PInJ2tbRTip0fDT1jftw8w7R7I.roa Signing time: Thu 01 Jan 2026 04:17:30 +0000 ROA not before: Thu 01 Jan 2026 04:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.117.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:68:d6:63:30:2f:1c:0d:86:3d:e4:25:ad:24:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a Validity Not Before: Jan 1 04:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8f227276b5b4538a9d1f0d3d637edc3cc3b47b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fa:49:50:80:8f:fc:7a:7c:a3:0b:b7:44:af: 6a:b4:b7:03:8c:70:7b:f1:fd:82:6e:ff:14:37:b5: 9c:34:dc:2d:49:6f:73:48:31:53:06:ca:79:61:44: 81:79:1f:c8:a9:3d:29:15:b8:5b:38:a4:ad:49:96: 08:70:b9:9f:69:97:14:73:e8:d1:82:01:65:43:8e: a2:a2:0a:36:38:ec:0e:e6:8e:49:58:35:34:1b:c4: c2:9e:a7:15:51:6b:0c:97:14:40:63:66:26:10:5c: ae:4f:06:2d:bc:af:7f:60:40:40:f7:5d:bc:72:f5: 53:26:91:59:ad:d0:38:28:b5:f8:60:f1:ba:9c:27: 07:c4:14:46:a2:a5:28:c5:6b:6b:83:59:91:9e:4b: 39:24:dc:14:0b:0e:2e:f6:30:c8:f8:6e:6f:ec:e7: ea:7c:cb:2e:cc:cd:71:72:d1:1e:7c:7f:ca:98:79: 39:ad:57:53:bb:5e:64:ed:52:d7:4a:00:d6:89:ab: 63:10:5e:3e:7b:0a:7c:a8:ff:5f:e8:e3:0a:8a:b6: 0f:12:b3:95:e9:74:a6:58:58:0a:93:d9:c0:8e:f6: 3c:80:5d:3f:a9:50:bc:96:51:4b:4c:ae:9a:5d:8e: f4:60:e6:bd:88:c9:77:4d:14:e4:e8:54:a7:25:54: 60:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F2:27:27:6B:5B:45:38:A9:D1:F0:D3:D6:37:ED:C3:CC:3B:47:B2 X509v3 Authority Key Identifier: keyid:4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/6PInJ2tbRTip0fDT1jftw8w7R7I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.225.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:cd:be:39:b9:e5:33:b4:25:65:cb:78:0e:1c:04:01:13:d3: a7:aa:ad:1b:d1:46:f5:d0:fa:17:5c:8d:ab:38:14:d8:f3:3e: fd:93:be:d0:f5:b9:7b:65:63:61:a4:a4:c4:92:8c:3e:17:f6: 6b:69:0a:d9:bf:0a:e8:6a:cf:e9:f3:1e:79:20:cb:79:e9:58: 1b:ca:1d:0b:0a:54:bb:29:45:da:27:89:67:b8:37:72:1d:f8: a7:35:c0:12:de:e3:5b:84:a9:42:1e:68:b9:af:f9:bb:0f:c4: d9:bc:05:eb:e1:06:66:a1:86:93:a8:08:4c:76:ee:b2:db:6f: 6e:3b:40:63:50:45:c6:cd:40:8c:2e:a7:29:48:1f:8e:17:82: 1d:e7:3a:04:e0:c1:97:93:ab:b5:d2:1f:3d:6e:99:c3:3b:64: 0d:bf:90:01:11:9c:87:d1:6f:07:05:f7:04:1a:d7:2e:f1:21: ee:10:c2:91:f5:8a:3a:88:bb:9a:70:b0:2b:d3:c9:06:6c:5e: d5:a4:53:4e:40:9b:ea:9f:4e:7a:de:5b:27:b9:25:49:c9:54: f4:4d:12:db:ff:42:e5:dc:84:62:34:0a:bb:b6:59:0b:dc:86: e4:da:12:01:3b:cb:1b:c5:1b:3b:fa:2d:b5:cb:ef:dd:91:00: a4:66:d2:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xmjWYzAvHA2GPeQlrSR4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhY2ZhYzg2NDVhM2M2ZjEwMDQyZGM0YTc0ZDcwMGQ5ZDA2 YWYxN2EwHhcNMjYwMTAxMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGYyMjcyNzZiNWI0NTM4YTlkMWYwZDNkNjM3ZWRjM2NjM2I0N2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fpJUICP/Hp8owu3RK9qtLcDjHB7 8f2Cbv8UN7WcNNwtSW9zSDFTBsp5YUSBeR/IqT0pFbhbOKStSZYIcLmfaZcUc+jR ggFlQ46iogo2OOwO5o5JWDU0G8TCnqcVUWsMlxRAY2YmEFyuTwYtvK9/YEBA9128 cvVTJpFZrdA4KLX4YPG6nCcHxBRGoqUoxWtrg1mRnks5JNwUCw4u9jDI+G5v7Ofq fMsuzM1xctEefH/KmHk5rVdTu15k7VLXSgDWiatjEF4+ewp8qP9f6OMKirYPErOV 6XSmWFgKk9nAjvY8gF0/qVC8llFLTK6aXY70YOa9iMl3TRTk6FSnJVRgeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOjyJydrW0U4qdHw09Y37cPMO0eyMB8GA1UdIwQY MBaAFErPrIZFo8bxAELcSnTXANnQavF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3Mtc2hrV2p4dkVBUXR4S2ROY0EyZEJxOFhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yYzE3Y2ItNDc0Mi00NGNmLTg5MWYt N2JmODI3N2Q4YTJmLzEvNlBJbkoydGJSVGlwMGZEVDFqZnR3OHc3UjdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8yYzE3Y2ItNDc0Mi00NGNmLTg5MWYtN2JmODI3N2Q4YTJm LzEvU3Mtc2hrV2p4dkVBUXR4S2ROY0EyZEJxOFhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXXhMA0G CSqGSIb3DQEBCwUAA4IBAQAtzb45ueUztCVly3gOHAQBE9Onqq0b0Ub10PoXXI2r OBTY8z79k77Q9bl7ZWNhpKTEkow+F/ZraQrZvwroas/p8x55IMt56Vgbyh0LClS7 KUXaJ4lnuDdyHfinNcAS3uNbhKlCHmi5r/m7D8TZvAXr4QZmoYaTqAhMdu6y229u O0BjUEXGzUCMLqcpSB+OF4Id5zoE4MGXk6u10h89bpnDO2QNv5ABEZyH0W8HBfcE Gtcu8SHuEMKR9Yo6iLuacLAr08kGbF7VpFNOQJvqn0563lsnuSVJyVT0TRLb/0Ll 3IRiNAq7tlkL3Ibk2hIBO8sbxRs7+i21y+/dkQCkZtJb -----END CERTIFICATE-----Generated at Fri Jan 2 09:30:03 2026 by rpki-client