This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/6wCR-IXi-d6mFq9coQKBvKcWKb8.roa File: 6wCR-IXi-d6mFq9coQKBvKcWKb8.roa (raw, json) Hash identifier: 3CTCR/QkDS3QC7l1TMcETE6DIffI4EDmk47oroP7Oco= Subject key identifier: EB:00:91:F8:85:E2:F9:DE:A6:16:AF:5C:A1:02:81:BC:A7:16:29:BF Certificate issuer: /CN=bb8d64a0dc21996b1c99e68cc951694e293edefe Certificate serial: 019B78A2E95E8ADBF61D86481A2BFAE4824A Authority key identifier: BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/6wCR-IXi-d6mFq9coQKBvKcWKb8.roa Signing time: Thu 01 Jan 2026 08:18:21 +0000 ROA not before: Thu 01 Jan 2026 08:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7155 IP address blocks: 185.71.116.0/24 maxlen: 24 185.71.117.0/24 maxlen: 24 185.71.118.0/24 maxlen: 24 185.71.119.0/24 maxlen: 24 212.50.35.0/24 maxlen: 24 212.50.42.0/24 maxlen: 24 212.50.43.0/24 maxlen: 24 212.50.45.0/24 maxlen: 24 212.50.46.0/24 maxlen: 24 212.50.47.0/24 maxlen: 24 212.50.48.0/24 maxlen: 24 212.50.49.0/24 maxlen: 24 212.50.50.0/24 maxlen: 24 212.50.51.0/24 maxlen: 24 212.50.52.0/24 maxlen: 24 212.50.53.0/24 maxlen: 24 212.50.56.0/24 maxlen: 24 212.50.57.0/24 maxlen: 24 212.50.58.0/24 maxlen: 24 212.50.59.0/24 maxlen: 24 212.50.60.0/24 maxlen: 24 212.50.62.0/24 maxlen: 24 212.50.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:e9:5e:8a:db:f6:1d:86:48:1a:2b:fa:e4:82:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb8d64a0dc21996b1c99e68cc951694e293edefe Validity Not Before: Jan 1 08:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb0091f885e2f9dea616af5ca10281bca71629bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:28:dc:c4:84:9f:f2:7d:8e:42:c3:5b:2c:d0: 58:9a:da:cb:3c:7d:6d:d7:49:ad:88:fc:2e:f9:23: 27:bd:9c:04:ce:55:ec:cf:84:7f:de:d5:99:4c:da: e8:b1:ad:3f:a5:e2:85:5f:f4:71:fc:54:94:8e:ef: 38:73:3f:14:63:01:f4:e0:0d:45:aa:b9:7e:04:52: 67:26:d9:98:cb:62:1b:c2:be:ee:54:d2:57:7b:f2: 8c:e9:71:3a:f7:52:c7:bf:4b:e3:ab:62:3a:a3:a5: ba:24:87:64:aa:0e:13:4c:fc:1e:e6:17:29:4c:92: 67:66:94:80:89:3e:85:43:e6:cd:af:15:72:12:a8: 3f:2e:cb:49:59:68:98:01:53:b7:ac:30:d8:7a:22: aa:6c:87:9b:e0:68:d6:88:69:0a:02:f2:01:eb:6d: 25:2c:bb:30:82:bf:5b:e2:56:93:5f:05:d8:ba:bf: 3b:02:d6:3c:d4:d1:55:77:f7:32:9c:2d:b2:0b:78: 38:2c:1e:35:69:8d:51:a1:f3:e3:28:68:42:1b:2a: b7:e7:c7:0e:8d:d9:e8:77:d4:ee:f7:38:1b:4c:c0: e1:f4:bb:03:ac:52:1d:e7:05:23:db:bb:ce:c2:5b: 75:12:94:3e:f7:c5:30:d3:5c:32:23:60:98:5e:b0: 40:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:00:91:F8:85:E2:F9:DE:A6:16:AF:5C:A1:02:81:BC:A7:16:29:BF X509v3 Authority Key Identifier: keyid:BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/6wCR-IXi-d6mFq9coQKBvKcWKb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.71.116.0/22 212.50.35.0/24 212.50.42.0/23 212.50.45.0-212.50.53.255 212.50.56.0-212.50.60.255 212.50.62.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:d9:bd:17:e1:c1:41:e2:a3:e0:84:8d:d6:13:86:2d:ed:c9: 59:45:47:c8:ba:3e:9a:1a:bb:f0:aa:30:21:61:77:e7:79:b0: 3a:a7:30:7b:84:bc:36:92:66:76:42:e9:5f:3d:09:42:31:4c: 1a:23:d9:9a:1a:7a:85:87:bc:3e:8a:b8:6b:d9:21:e5:66:0b: a8:2e:2e:e9:64:11:19:13:85:60:92:81:a1:22:8f:b8:02:4a: 31:7b:19:b0:c0:5d:15:f8:a8:e8:77:f1:4d:cf:9c:23:d8:0e: 88:4a:c0:59:d9:67:68:bc:65:dd:fc:2e:db:1f:6a:f1:54:23: f6:4f:20:7c:e7:d1:56:bc:b9:3a:ce:35:ab:d8:b5:cb:7a:f9: d1:2d:db:97:d1:0e:cb:0a:71:a0:d5:87:81:b2:8a:d4:cb:2a: f2:60:33:b1:98:26:a4:47:fd:d3:7e:83:1d:f8:94:f6:43:8b: 17:d0:81:70:c8:31:3a:66:f2:a9:6d:a6:5c:bc:1c:8d:da:ca: 45:35:37:78:62:c2:36:89:08:8a:39:5c:e0:d3:c9:ba:8d:d5: 68:2a:24:9a:18:e4:2b:81:0f:ab:1d:bc:1d:59:de:8c:02:7c: d5:c4:f0:7b:29:b6:f1:2c:9f:91:ee:c6:ec:bb:15:f1:24:4f: 4c:e9:e5:f8 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZt4ouleitv2HYZIGiv65IJKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiOGQ2NGEwZGMyMTk5NmIxYzk5ZTY4Y2M5NTE2OTRlMjkz ZWRlZmUwHhcNMjYwMTAxMDgxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjAwOTFmODg1ZTJmOWRlYTYxNmFmNWNhMTAyODFiY2E3MTYyOWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ijcxISf8n2OQsNbLNBYmtrLPH1t 10mtiPwu+SMnvZwEzlXsz4R/3tWZTNrosa0/peKFX/Rx/FSUju84cz8UYwH04A1F qrl+BFJnJtmYy2Ibwr7uVNJXe/KM6XE691LHv0vjq2I6o6W6JIdkqg4TTPwe5hcp TJJnZpSAiT6FQ+bNrxVyEqg/LstJWWiYAVO3rDDYeiKqbIeb4GjWiGkKAvIB620l LLswgr9b4laTXwXYur87AtY81NFVd/cynC2yC3g4LB41aY1RofPjKGhCGyq358cO jdnod9Tu9zgbTMDh9LsDrFId5wUj27vOwlt1EpQ+98Uw01wyI2CYXrBA8wIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFOsAkfiF4vnephavXKECgbynFim/MB8GA1UdIwQY MBaAFLuNZKDcIZlrHJnmjMlRaU4pPt7+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTQxa29Od2htV3NjbWVhTXlWRnBUaWstM3Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yMjAzMTgtNDZmMS00ZWJmLWE3OTUt ZGQ0YTIxN2Q2MDZiLzEvNndDUi1JWGktZDZtRnE5Y29RS0J2S2NXS2I4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8yMjAzMTgtNDZmMS00ZWJmLWE3OTUtZGQ0YTIxN2Q2MDZi LzEvdTQxa29Od2htV3NjbWVhTXlWRnBUaWstM3Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQCuUd0AwQA 1DIjAwQB1DIqMAwDBADUMi0DBAHUMjQwDAMEA9QyOAMEANQyPAMEAdQyPjANBgkq hkiG9w0BAQsFAAOCAQEACtm9F+HBQeKj4ISN1hOGLe3JWUVHyLo+mhq78KowIWF3 53mwOqcwe4S8NpJmdkLpXz0JQjFMGiPZmhp6hYe8Poq4a9kh5WYLqC4u6WQRGROF YJKBoSKPuAJKMXsZsMBdFfio6HfxTc+cI9gOiErAWdlnaLxl3fwu2x9q8VQj9k8g fOfRVry5Os41q9i1y3r50S3bl9EOywpxoNWHgbKK1Msq8mAzsZgmpEf9036DHfiU 9kOLF9CBcMgxOmbyqW2mXLwcjdrKRTU3eGLCNokIijlc4NPJuo3VaCokmhjkK4EP qx28HVnejAJ81cTweym28Syfke7G7LsV8SRPTOnl+A== -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:28 2026 by rpki-client