This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/6Ftx8Zws0EArRVC2i8S0_U_teiE.roa File: 6Ftx8Zws0EArRVC2i8S0_U_teiE.roa (raw, json) Hash identifier: 7fbXsad6LDVhAfWE8WJEJDQ3QGP+dEI28LUew1x9B8A= Subject key identifier: E8:5B:71:F1:9C:2C:D0:40:2B:45:50:B6:8B:C4:B4:FD:4F:ED:7A:21 Certificate issuer: /CN=b744309908269e538b2b4fa963370c9ec2077a78 Certificate serial: 019B7CEDC0CE7B2682A1575319510726D4EB Authority key identifier: B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/6Ftx8Zws0EArRVC2i8S0_U_teiE.roa Signing time: Fri 02 Jan 2026 04:18:34 +0000 ROA not before: Fri 02 Jan 2026 04:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57777 IP address blocks: 185.173.128.0/24 maxlen: 24 2a10:fc40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:c0:ce:7b:26:82:a1:57:53:19:51:07:26:d4:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b744309908269e538b2b4fa963370c9ec2077a78 Validity Not Before: Jan 2 04:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e85b71f19c2cd0402b4550b68bc4b4fd4fed7a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:00:47:21:da:7c:ae:84:fc:c0:a2:bd:1a:2b: 75:a7:6c:6f:47:cf:2a:4e:bc:04:a5:b6:b1:d7:73: 50:dd:16:e5:e1:9f:e9:fc:71:a3:ac:d7:ac:4c:27: 69:2f:f0:a0:89:b8:ff:7b:0a:fe:2c:a5:a6:34:8b: 42:4b:cc:f1:d4:7e:20:dd:ff:e3:5c:ba:e8:f1:6b: 89:95:ae:83:61:89:ed:46:4a:eb:95:bf:89:74:20: 7f:6f:71:ee:87:e6:f1:93:f0:9d:a9:c4:f4:f8:bd: 3b:e4:ce:6f:4b:a4:de:6e:37:bd:f5:ea:f6:89:d0: 38:79:b8:b2:6e:35:c6:96:14:cf:40:b2:4e:d4:43: d0:df:a6:92:e6:09:44:1f:e8:de:26:57:59:af:d9: 9f:05:38:f2:89:df:b2:ec:95:bb:82:b5:ed:6d:59: dc:33:fc:1b:54:b2:67:f3:98:97:6b:1d:bb:f2:33: ba:17:53:56:5c:db:19:25:47:96:35:78:8f:0a:45: af:2a:c3:38:9d:33:28:0f:aa:88:7d:b9:28:68:68: 9e:94:bf:fa:7e:6c:33:87:fb:82:21:c4:bc:d5:bf: ae:79:50:42:87:45:c4:ea:a6:04:40:2b:02:fa:c8: 2e:cf:25:2b:ed:9b:d0:76:a6:fd:22:09:7d:4b:62: a5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5B:71:F1:9C:2C:D0:40:2B:45:50:B6:8B:C4:B4:FD:4F:ED:7A:21 X509v3 Authority Key Identifier: keyid:B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/6Ftx8Zws0EArRVC2i8S0_U_teiE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.173.128.0/24 IPv6: 2a10:fc40::/29 Signature Algorithm: sha256WithRSAEncryption 36:e5:e8:a9:9d:3e:dc:44:52:39:a3:ff:af:17:9c:bc:2c:db: 7e:fc:99:27:63:7f:74:3b:47:fe:4b:50:83:2b:b3:8f:4c:40: 2a:51:90:30:6f:58:2e:44:dc:5f:14:98:97:67:69:04:8d:99: 54:95:ef:3f:e4:c7:50:5b:4c:7d:85:6e:a9:c8:1c:c8:97:bf: 0f:0d:75:91:20:83:64:88:38:8e:58:98:b4:94:75:59:4f:59: 76:b7:08:25:5c:a8:de:c0:c2:f4:76:f5:08:16:f2:31:44:b8: 79:56:4a:14:c0:0f:8f:19:d7:d9:77:58:7a:d7:a4:94:b6:08: cb:34:72:fb:c7:0b:9a:41:fb:a1:32:3d:3e:2a:a7:ab:b2:5e: 49:73:d2:31:9c:ed:e4:ca:c2:42:b0:f3:67:d4:2b:e6:06:da: 73:27:19:e5:04:18:79:87:9b:3e:b0:7d:0c:2d:22:e7:71:dc: da:5b:63:ae:5c:2e:d5:a2:9a:42:cb:9c:7f:bf:e4:f0:f2:b9: 75:84:29:ad:1b:a5:18:6a:ca:08:d8:f4:1a:3e:f0:4f:85:e0: 19:17:cc:76:f2:10:87:19:03:ae:af:94:68:06:59:e8:bf:37: df:59:b5:7c:36:85:f7:81:43:d7:02:6d:c4:52:03:3f:44:da: 7f:bb:67:3e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87cDOeyaCoVdTGVEHJtTrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NDQzMDk5MDgyNjllNTM4YjJiNGZhOTYzMzcwYzllYzIw NzdhNzgwHhcNMjYwMTAyMDQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODViNzFmMTljMmNkMDQwMmI0NTUwYjY4YmM0YjRmZDRmZWQ3YTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwBHIdp8roT8wKK9Git1p2xvR88q TrwEpbax13NQ3Rbl4Z/p/HGjrNesTCdpL/Cgibj/ewr+LKWmNItCS8zx1H4g3f/j XLro8WuJla6DYYntRkrrlb+JdCB/b3Huh+bxk/CdqcT0+L075M5vS6Tebje99er2 idA4ebiybjXGlhTPQLJO1EPQ36aS5glEH+jeJldZr9mfBTjyid+y7JW7grXtbVnc M/wbVLJn85iXax278jO6F1NWXNsZJUeWNXiPCkWvKsM4nTMoD6qIfbkoaGielL/6 fmwzh/uCIcS81b+ueVBCh0XE6qYEQCsC+sguzyUr7ZvQdqb9Igl9S2KlgQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOhbcfGcLNBAK0VQtovEtP1P7XohMB8GA1UdIwQY MBaAFLdEMJkIJp5TiytPqWM3DJ7CB3p4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDBRd21RZ21ubE9MSzAtcFl6Y01uc0lIZW5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80NjUyZTgtNWQyMC00MmY2LWE3Mzkt ZDU0OTIxNjA0ZWNkLzEvNkZ0eDhad3MwRUFyUlZDMmk4UzBfVV90ZWlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS80NjUyZTgtNWQyMC00MmY2LWE3MzktZDU0OTIxNjA0ZWNk LzEvdDBRd21RZ21ubE9MSzAtcFl6Y01uc0lIZW5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAua2AMA0E AgACMAcDBQMqEPxAMA0GCSqGSIb3DQEBCwUAA4IBAQA25eipnT7cRFI5o/+vF5y8 LNt+/JknY390O0f+S1CDK7OPTEAqUZAwb1guRNxfFJiXZ2kEjZlUle8/5MdQW0x9 hW6pyBzIl78PDXWRIINkiDiOWJi0lHVZT1l2twglXKjewML0dvUIFvIxRLh5VkoU wA+PGdfZd1h616SUtgjLNHL7xwuaQfuhMj0+Kqersl5Jc9IxnO3kysJCsPNn1Cvm BtpzJxnlBBh5h5s+sH0MLSLncdzaW2OuXC7VoppCy5x/v+Tw8rl1hCmtG6UYasoI 2PQaPvBPheAZF8x28hCHGQOur5RoBlnovzffWbV8NoX3gUPXAm3EUgM/RNp/u2c+ -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:42 2026 by rpki-client