This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_6DXV1WE0v-oybUplKLLF-qO42Q.roa File: _6DXV1WE0v-oybUplKLLF-qO42Q.roa (raw, json) Hash identifier: Iu/YSu6oOqTfa7ZyhKaNhQqb474GLyUXE1gWIy1f6g4= Subject key identifier: FF:A0:D7:57:55:84:D2:FF:A8:C9:B5:29:94:A2:CB:17:EA:8E:E3:64 Certificate issuer: /CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582 Certificate serial: 019B7E392055A4E4C5DDF446BB324F77A086 Authority key identifier: FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_6DXV1WE0v-oybUplKLLF-qO42Q.roa Signing time: Fri 02 Jan 2026 10:20:31 +0000 ROA not before: Fri 02 Jan 2026 10:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50673 IP address blocks: 185.42.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 01:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:20:55:a4:e4:c5:dd:f4:46:bb:32:4f:77:a0:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582 Validity Not Before: Jan 2 10:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffa0d7575584d2ffa8c9b52994a2cb17ea8ee364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e2:aa:7e:db:2b:14:52:5c:db:88:e9:cd:57: d0:0d:ab:4c:cb:29:a8:af:5f:d1:e6:b3:d2:86:fa: 45:7c:f8:ea:78:0d:ae:ee:a1:5f:6c:44:e6:29:56: 5e:15:d9:4e:d5:cb:ba:b7:f9:91:45:49:9b:e9:30: bb:a5:a9:26:2a:77:32:aa:f9:b3:74:2f:f0:98:42: 2d:de:8a:e2:90:7c:16:94:f8:7f:4e:a8:26:d0:d0: f1:f7:80:d5:48:a1:19:da:a5:d9:18:80:ec:81:e8: 9e:81:9d:0b:4a:2e:cf:42:07:93:77:7a:dd:f7:0b: 13:7d:e5:95:c3:4e:68:c7:17:a8:50:f8:5c:80:28: 4d:6c:2d:85:fa:69:85:c4:f8:64:db:72:d1:70:c2: 76:89:b6:64:a5:e6:97:74:83:6c:cb:e9:55:bc:90: cf:9f:c4:f4:83:97:5f:32:95:c7:fa:42:88:54:4e: 7c:2e:62:3a:ec:03:66:13:63:75:81:04:d2:78:6d: 5b:24:e5:37:3b:3e:a0:21:fb:18:b7:37:ca:80:4b: 9d:97:d1:a0:61:8e:5f:59:67:ed:97:63:e6:b4:c0: 36:f4:8c:4b:12:63:27:3a:7d:e7:35:d7:26:4c:9c: 70:16:b2:e2:89:35:23:e4:84:43:f4:20:30:e6:f5: 18:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A0:D7:57:55:84:D2:FF:A8:C9:B5:29:94:A2:CB:17:EA:8E:E3:64 X509v3 Authority Key Identifier: keyid:FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_6DXV1WE0v-oybUplKLLF-qO42Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.42.59.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:91:d7:f4:cd:a6:49:ed:fa:54:2a:de:9f:21:3d:90:40:b0: 49:3a:72:cc:c6:f3:d6:9e:4c:be:ed:2d:e7:e4:4f:51:57:d7: 52:57:f5:1b:95:79:89:86:25:db:2c:14:64:ea:8a:f7:72:98: d8:17:9e:e8:50:04:a6:1e:af:86:4c:c7:cc:6e:07:0a:8b:a1: ac:04:0c:2a:06:e3:d4:90:09:f6:5b:30:85:e1:fd:b6:fa:39: d4:18:e2:7a:bf:ce:ba:ef:d2:20:97:fb:73:0c:a8:93:e2:9f: 20:e6:b6:08:13:48:c9:50:fc:8f:04:1b:b9:8d:18:82:6d:5a: 68:1b:c0:aa:23:28:e6:eb:f3:7d:ef:16:69:6a:dc:f9:83:0b: 36:5c:1a:cf:de:64:90:d4:22:09:d5:8d:08:de:15:d9:57:32: 34:a2:1a:6f:df:8d:c9:6c:9c:f2:ef:95:67:13:e3:64:52:37: bd:1b:9e:d2:f9:53:84:55:60:02:7c:93:98:d1:1a:ec:b7:19: 80:d3:b9:81:68:c6:85:ed:f4:b7:67:90:f0:45:3c:a8:8e:10: f3:6f:ba:28:c0:99:18:6b:f2:4e:60:90:2c:13:d1:e0:36:c5: 63:3c:f2:34:6b:a4:a3:a2:34:9f:0b:96:d5:d5:6f:0c:4c:1e: be:a6:25:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OSBVpOTF3fRGuzJPd6CGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMzU4NzdjYzAzOGJmZmRiOTdiYjNkNmVhMjE2YWI1MmIz YTA1ODIwHhcNMjYwMTAyMTAyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmEwZDc1NzU1ODRkMmZmYThjOWI1Mjk5NGEyY2IxN2VhOGVlMzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOKqftsrFFJc24jpzVfQDatMyymo r1/R5rPShvpFfPjqeA2u7qFfbETmKVZeFdlO1cu6t/mRRUmb6TC7pakmKncyqvmz dC/wmEIt3orikHwWlPh/Tqgm0NDx94DVSKEZ2qXZGIDsgeiegZ0LSi7PQgeTd3rd 9wsTfeWVw05oxxeoUPhcgChNbC2F+mmFxPhk23LRcMJ2ibZkpeaXdINsy+lVvJDP n8T0g5dfMpXH+kKIVE58LmI67ANmE2N1gQTSeG1bJOU3Oz6gIfsYtzfKgEudl9Gg YY5fWWftl2PmtMA29IxLEmMnOn3nNdcmTJxwFrLiiTUj5IRD9CAw5vUYZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP+g11dVhNL/qMm1KZSiyxfqjuNkMB8GA1UdIwQY MBaAFPw1h3zAOL/9uXuz1uoharUrOgWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0RXSGZNQTR2XzI1ZTdQVzZpRnF0U3M2QllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lODA3MmEtNjAxNy00ZWQ1LWJlZTMt OGU2NWIzNDdmMjE4LzEvXzZEWFYxV0Uwdi1veWJVcGxLTExGLXFPNDJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lODA3MmEtNjAxNy00ZWQ1LWJlZTMtOGU2NWIzNDdmMjE4 LzEvX0RXSGZNQTR2XzI1ZTdQVzZpRnF0U3M2QllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSo7MA0G CSqGSIb3DQEBCwUAA4IBAQCOkdf0zaZJ7fpUKt6fIT2QQLBJOnLMxvPWnky+7S3n 5E9RV9dSV/UblXmJhiXbLBRk6or3cpjYF57oUASmHq+GTMfMbgcKi6GsBAwqBuPU kAn2WzCF4f22+jnUGOJ6v86679Igl/tzDKiT4p8g5rYIE0jJUPyPBBu5jRiCbVpo G8CqIyjm6/N97xZpatz5gws2XBrP3mSQ1CIJ1Y0I3hXZVzI0ohpv343JbJzy75Vn E+NkUje9G57S+VOEVWACfJOY0RrstxmA07mBaMaF7fS3Z5DwRTyojhDzb7oowJkY a/JOYJAsE9HgNsVjPPI0a6SjojSfC5bV1W8MTB6+piUT -----END CERTIFICATE-----Generated at Sun Jan 11 11:45:38 2026 by rpki-client