This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/k6X22bQfluylqHARD-L5Ikhx1sQ.roa File: k6X22bQfluylqHARD-L5Ikhx1sQ.roa (raw, json) Hash identifier: dFpw1lhqCaKbzT3oHGvLx20tpk89gIoCNO+pACDK98E= Subject key identifier: 93:A5:F6:D9:B4:1F:96:EC:A5:A8:70:11:0F:E2:F9:22:48:71:D6:C4 Certificate issuer: /CN=794f551e97a132542e3b056e905de8f3dba24c9c Certificate serial: 019BDD5B39146E21710A838C936935714D70 Authority key identifier: 79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/k6X22bQfluylqHARD-L5Ikhx1sQ.roa Signing time: Tue 20 Jan 2026 21:41:41 +0000 ROA not before: Tue 20 Jan 2026 21:41:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47597 IP address blocks: 185.152.140.0/22 maxlen: 22 2a07:8280::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dd:5b:39:14:6e:21:71:0a:83:8c:93:69:35:71:4d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=794f551e97a132542e3b056e905de8f3dba24c9c Validity Not Before: Jan 20 21:41:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93a5f6d9b41f96eca5a870110fe2f9224871d6c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:82:6b:7b:2c:38:9f:a9:41:9f:ec:23:04:4b: 74:29:bc:8b:6b:37:f8:56:6e:f8:b9:dc:56:2c:ac: 3d:4c:80:d9:51:6b:66:ae:5d:0f:15:01:39:92:0c: ae:d6:1a:67:3b:50:6e:1d:3e:22:cb:e9:3d:40:7c: ac:87:c4:44:fe:ee:5b:bb:86:f0:f6:c5:c1:d2:fa: 11:24:12:c3:3a:d3:19:6e:73:84:56:3c:49:28:a1: b1:e2:76:07:22:fc:8c:c4:73:28:ff:ca:43:c3:0c: 28:ff:64:83:ef:b8:6f:a5:5c:89:03:32:f0:02:64: 8e:ff:03:89:96:db:70:f2:6a:3b:e2:97:60:4e:1c: b1:15:37:d5:25:d5:38:75:64:b7:95:2b:35:b1:26: 69:87:a9:a3:45:74:2d:1c:ff:5c:76:3f:fe:75:26: 0e:f3:62:36:d9:58:bf:b0:e3:68:70:2c:95:ec:bf: 94:d7:05:ff:36:7b:38:0b:32:5d:dc:73:7d:ad:6a: f8:c3:4c:ba:6e:37:6b:76:f4:18:2a:68:cc:ff:ee: 0d:df:b3:44:ef:02:dd:78:d4:90:56:54:cb:cb:14: 19:d0:59:ca:b6:c2:59:9e:55:c4:17:bd:1d:32:4c: 3a:09:74:8d:7f:ea:7c:f3:6f:62:b9:72:32:20:09: c4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A5:F6:D9:B4:1F:96:EC:A5:A8:70:11:0F:E2:F9:22:48:71:D6:C4 X509v3 Authority Key Identifier: keyid:79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/k6X22bQfluylqHARD-L5Ikhx1sQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.152.140.0/22 IPv6: 2a07:8280::/29 Signature Algorithm: sha256WithRSAEncryption 1e:3b:e2:20:62:8a:65:0f:5a:7f:39:45:7d:86:07:2a:99:6d: 55:70:c8:4e:ba:cf:c0:da:eb:7c:70:9f:23:5f:11:5c:15:1c: b3:ce:10:c4:36:b6:f0:36:5e:e5:73:96:3a:ee:e3:03:67:7d: 52:65:84:4a:3a:e5:20:84:b8:00:c9:a8:28:9f:b1:2e:66:db: 8d:37:3a:a3:b4:5b:a9:39:0a:e8:79:69:00:17:e0:c5:46:a6: ca:25:de:0f:23:bd:de:98:65:6f:a5:a8:b8:09:41:8b:d5:45: a0:b9:a0:64:a1:eb:21:36:3c:00:d3:48:6c:18:7c:45:ec:80: ae:61:1d:d3:cf:75:b4:c3:6a:fb:12:4e:74:64:1b:42:c8:13: 58:29:fb:a6:3e:99:4e:92:6d:43:a0:e6:03:3b:73:11:61:50: ec:d1:b8:78:c4:cb:7d:e6:2f:23:41:cf:fb:db:a2:b5:da:d6: 64:28:61:28:7a:ee:e5:6c:58:bb:73:3d:2b:bc:1f:b8:34:b2: cf:6f:e8:3f:7b:54:2d:7c:95:26:35:7a:bd:35:bc:e6:7e:bb: 3b:25:e9:a6:c6:6f:de:e2:57:b3:eb:75:e5:49:9d:9e:2b:34: fc:88:52:ec:cb:f8:3f:e8:e1:5a:0a:60:cd:3e:9c:91:d1:8a: 6b:f9:3e:a5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZvdWzkUbiFxCoOMk2k1cU1wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NGY1NTFlOTdhMTMyNTQyZTNiMDU2ZTkwNWRlOGYzZGJh MjRjOWMwHhcNMjYwMTIwMjE0MTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2E1ZjZkOWI0MWY5NmVjYTVhODcwMTEwZmUyZjkyMjQ4NzFkNmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIJreyw4n6lBn+wjBEt0KbyLazf4 Vm74udxWLKw9TIDZUWtmrl0PFQE5kgyu1hpnO1BuHT4iy+k9QHysh8RE/u5bu4bw 9sXB0voRJBLDOtMZbnOEVjxJKKGx4nYHIvyMxHMo/8pDwwwo/2SD77hvpVyJAzLw AmSO/wOJlttw8mo74pdgThyxFTfVJdU4dWS3lSs1sSZph6mjRXQtHP9cdj/+dSYO 82I22Vi/sONocCyV7L+U1wX/Nns4CzJd3HN9rWr4w0y6bjdrdvQYKmjM/+4N37NE 7wLdeNSQVlTLyxQZ0FnKtsJZnlXEF70dMkw6CXSNf+p8829iuXIyIAnEOwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJOl9tm0H5bspahwEQ/i+SJIcdbEMB8GA1UdIwQY MBaAFHlPVR6XoTJULjsFbpBd6PPbokycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVU5VkhwZWhNbFF1T3dWdWtGM284OXVpVEp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xOTI1ZTctMTY5NC00M2VkLThmYmMt NDM2ODU4ODc0MzZjLzEvazZYMjJiUWZsdXlscUhBUkQtTDVJa2h4MXNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8xOTI1ZTctMTY5NC00M2VkLThmYmMtNDM2ODU4ODc0MzZj LzEvZVU5VkhwZWhNbFF1T3dWdWtGM284OXVpVEp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZiMMA0E AgACMAcDBQMqB4KAMA0GCSqGSIb3DQEBCwUAA4IBAQAeO+IgYoplD1p/OUV9hgcq mW1VcMhOus/A2ut8cJ8jXxFcFRyzzhDENrbwNl7lc5Y67uMDZ31SZYRKOuUghLgA yagon7EuZtuNNzqjtFupOQroeWkAF+DFRqbKJd4PI73emGVvpai4CUGL1UWguaBk oeshNjwA00hsGHxF7ICuYR3Tz3W0w2r7Ek50ZBtCyBNYKfumPplOkm1DoOYDO3MR YVDs0bh4xMt95i8jQc/726K12tZkKGEoeu7lbFi7cz0rvB+4NLLPb+g/e1QtfJUm NXq9Nbzmfrs7Jemmxm/e4lez63XlSZ2eKzT8iFLsy/g/6OFaCmDNPpyR0Ypr+T6l -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:54 2026 by rpki-client