This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/g6AUdtBKbxSolGFU2rOSyRaiZMc.roa File: g6AUdtBKbxSolGFU2rOSyRaiZMc.roa (raw, json) Hash identifier: coGf1wAtr5fsslkJ4IB/mKoERpi+xwxfE7T7e7sR0vg= Subject key identifier: 83:A0:14:76:D0:4A:6F:14:A8:94:61:54:DA:B3:92:C9:16:A2:64:C7 Certificate issuer: /CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1 Certificate serial: 019B7E38FCC71BE8400BDE24E1370E81747F Authority key identifier: D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/g6AUdtBKbxSolGFU2rOSyRaiZMc.roa Signing time: Fri 02 Jan 2026 10:20:21 +0000 ROA not before: Fri 02 Jan 2026 10:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61386 IP address blocks: 185.167.124.0/22 maxlen: 22 185.167.124.0/24 maxlen: 24 185.167.125.0/24 maxlen: 24 185.167.126.0/24 maxlen: 24 185.167.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:fc:c7:1b:e8:40:0b:de:24:e1:37:0e:81:74:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1 Validity Not Before: Jan 2 10:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83a01476d04a6f14a8946154dab392c916a264c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:20:81:78:d7:92:03:2d:fa:6a:19:78:ad:67: f7:c0:0f:9d:b4:18:99:4e:85:32:cd:9a:65:3f:2b: 37:5b:d4:9f:50:e1:99:ad:1f:3e:54:ed:be:23:d8: 76:af:7b:a6:0f:31:7c:2a:bd:b2:bd:b9:b9:4a:2a: 12:18:29:9d:30:66:75:0c:7f:e1:5a:9f:05:2a:2b: b0:84:6e:09:8d:1f:b8:6f:97:fc:b8:05:c2:d7:d5: 7f:62:74:a7:55:49:d4:eb:23:ed:39:7e:72:2c:53: ee:1e:9b:c2:cd:38:23:60:c9:30:64:12:a1:3e:a4: c6:82:1f:af:0b:7e:75:14:81:27:c5:44:ea:24:cf: c9:ca:fb:97:2a:66:b7:fa:97:01:c3:11:78:f0:96: 2b:50:ed:42:a4:1f:fd:94:67:b4:19:18:39:e1:0b: 03:d9:4d:46:8c:d3:4a:05:7f:6c:13:a3:af:2c:3f: d2:6d:a6:0b:73:b2:76:aa:7a:e0:91:c2:ec:29:5b: 9c:9a:3d:7a:db:b7:bc:f7:57:04:ed:51:87:dd:69: bf:56:a5:aa:1c:d5:3e:f3:56:7c:07:fc:4a:5c:97: 5a:eb:6e:e2:85:fc:4a:c4:5c:17:0e:18:98:ae:86: 7b:d2:07:6a:11:a3:88:b4:48:b2:2a:75:dc:87:29: bd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A0:14:76:D0:4A:6F:14:A8:94:61:54:DA:B3:92:C9:16:A2:64:C7 X509v3 Authority Key Identifier: keyid:D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/g6AUdtBKbxSolGFU2rOSyRaiZMc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.167.124.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:1b:e7:17:ab:12:cb:19:f3:a2:2c:37:54:f1:87:24:9f:16: aa:3b:d2:07:11:d7:38:3e:78:4e:17:2c:bd:c3:00:ba:1b:ed: 37:08:fd:f2:d3:ea:44:45:73:74:b7:d8:5b:46:ae:47:72:39: 49:ab:f3:44:30:47:0b:7d:c4:ed:8b:b6:5e:e7:21:40:97:9d: de:96:3a:04:5b:b2:5d:9d:44:bb:8d:b6:b4:d4:53:43:4e:09: 2d:5b:19:01:58:3b:fb:24:fd:3f:d8:f2:a0:eb:2c:3c:9a:88: 21:07:c7:c5:ed:bc:9e:6c:7d:4c:c6:e9:84:d3:6c:bd:70:af: 50:0b:4b:d1:d3:64:3e:06:dc:1f:05:5e:8f:51:3f:f9:72:00: 21:d6:2f:ae:33:1a:f4:11:63:33:75:6d:3b:2e:96:2e:6d:b5: ac:d3:27:0e:87:c1:6a:93:58:f2:7f:3a:94:39:e3:14:ca:78: 12:a2:f7:d1:09:44:45:62:39:12:5c:46:9c:3e:a2:cd:e9:0d: 29:e1:e9:bb:95:6a:a3:b3:51:22:18:a3:35:17:aa:74:a1:09: 39:61:27:00:62:e8:c0:a2:3a:05:6b:3d:9d:43:8e:71:dd:ef: 4a:99:c4:e5:f0:76:23:22:9e:85:1e:76:bc:54:b9:99:e4:ec: 61:6e:5b:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OPzHG+hAC94k4TcOgXR/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYmQ2NGNjOTRhNGE4NTE4YTcxZjk2ZWY4Yjc3NjI1YWZh NTI3ZDEwHhcNMjYwMTAyMTAyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2EwMTQ3NmQwNGE2ZjE0YTg5NDYxNTRkYWIzOTJjOTE2YTI2NGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSCBeNeSAy36ahl4rWf3wA+dtBiZ ToUyzZplPys3W9SfUOGZrR8+VO2+I9h2r3umDzF8Kr2yvbm5SioSGCmdMGZ1DH/h Wp8FKiuwhG4JjR+4b5f8uAXC19V/YnSnVUnU6yPtOX5yLFPuHpvCzTgjYMkwZBKh PqTGgh+vC351FIEnxUTqJM/JyvuXKma3+pcBwxF48JYrUO1CpB/9lGe0GRg54QsD 2U1GjNNKBX9sE6OvLD/SbaYLc7J2qnrgkcLsKVucmj1627e891cE7VGH3Wm/VqWq HNU+81Z8B/xKXJda627ihfxKxFwXDhiYroZ70gdqEaOItEiyKnXchym9twIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIOgFHbQSm8UqJRhVNqzkskWomTHMB8GA1UdIwQY MBaAFNG9ZMyUpKhRinH5bvi3diWvpSfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGIxa3pKU2txRkdLY2ZsdS1MZDJKYS1sSjlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yZWZhNTAtZjQ4My00YjUzLWIxZTct MDgyNmYzNmZmMjhmLzEvZzZBVWR0QktieFNvbEdGVTJyT1N5UmFpWk1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8yZWZhNTAtZjQ4My00YjUzLWIxZTctMDgyNmYzNmZmMjhm LzEvMGIxa3pKU2txRkdLY2ZsdS1MZDJKYS1sSjlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuad8MA0G CSqGSIb3DQEBCwUAA4IBAQBMG+cXqxLLGfOiLDdU8YcknxaqO9IHEdc4PnhOFyy9 wwC6G+03CP3y0+pERXN0t9hbRq5HcjlJq/NEMEcLfcTti7Ze5yFAl53eljoEW7Jd nUS7jba01FNDTgktWxkBWDv7JP0/2PKg6yw8moghB8fF7byebH1MxumE02y9cK9Q C0vR02Q+BtwfBV6PUT/5cgAh1i+uMxr0EWMzdW07LpYubbWs0ycOh8Fqk1jyfzqU OeMUyngSovfRCURFYjkSXEacPqLN6Q0p4em7lWqjs1EiGKM1F6p0oQk5YScAYujA ojoFaz2dQ45x3e9KmcTl8HYjIp6FHna8VLmZ5Oxhblux -----END CERTIFICATE-----Generated at Mon Feb 9 18:21:30 2026 by rpki-client