This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/bO3gP48gXR59qEaPaz0ip1xjgwQ.roa File: bO3gP48gXR59qEaPaz0ip1xjgwQ.roa (raw, json) Hash identifier: XOVMmfwGhj7NmfYoVzb+IQU1JCdUzXepcMZ7m+uOQU0= Subject key identifier: 6C:ED:E0:3F:8F:20:5D:1E:7D:A8:46:8F:6B:3D:22:A7:5C:63:83:04 Certificate issuer: /CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970 Certificate serial: 019C1DFE4ACE29A0C2071B96230195C33049 Authority key identifier: C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/bO3gP48gXR59qEaPaz0ip1xjgwQ.roa Signing time: Mon 02 Feb 2026 10:55:30 +0000 ROA not before: Mon 02 Feb 2026 10:55:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29119 IP address blocks: 185.201.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1d:fe:4a:ce:29:a0:c2:07:1b:96:23:01:95:c3:30:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970 Validity Not Before: Feb 2 10:55:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cede03f8f205d1e7da8468f6b3d22a75c638304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:89:ed:d9:ea:b9:6f:42:7a:69:ed:74:52:5d: c7:a3:cb:f7:96:a4:3c:1a:09:1f:3d:75:b0:9b:87: 38:09:47:d5:69:56:36:12:14:d9:58:97:ea:8d:f9: 96:f7:23:11:48:9f:ab:37:c7:47:7e:aa:48:25:6b: 7e:a7:96:a1:0a:b7:e7:f1:0d:21:f8:5f:d5:a9:ff: 49:8f:d0:94:29:57:1f:fb:25:72:fb:18:0e:6b:3b: 50:8d:ef:82:45:6b:30:a5:36:e5:49:0e:62:da:d4: 6d:59:a5:09:ac:e5:30:fd:26:dd:31:66:f2:58:38: 87:84:b9:62:e1:f0:e4:25:c1:1e:09:17:de:21:7c: 95:57:63:d6:f5:fa:2e:be:a9:7c:ac:fa:52:3c:d1: 39:3c:8a:dd:e4:d5:ca:36:57:dd:5d:91:0f:21:69: 86:10:d5:8d:75:2f:28:45:03:63:dd:a5:0b:3e:85: 7f:c9:03:a8:a0:40:d0:63:b7:03:d3:2e:72:bc:d3: 76:de:d2:0f:e3:55:65:b4:bf:ff:37:a5:76:00:20: d1:4d:42:41:5a:b2:0f:c2:d8:97:79:17:02:e9:88: 5a:be:62:a6:84:9d:9d:82:6e:64:57:a0:71:a2:9b: df:a8:9d:99:1e:5a:ef:d8:7c:73:4e:2e:e8:f2:22: c7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:ED:E0:3F:8F:20:5D:1E:7D:A8:46:8F:6B:3D:22:A7:5C:63:83:04 X509v3 Authority Key Identifier: keyid:C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/bO3gP48gXR59qEaPaz0ip1xjgwQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.201.6.0/24 Signature Algorithm: sha256WithRSAEncryption e4:25:9a:b4:c5:76:36:c7:19:a6:b9:4c:e6:78:9e:d2:52:bb: 22:f2:cd:c2:ee:56:26:51:85:3d:6f:60:a4:ab:5b:7f:e4:63: 5e:79:0b:94:9a:fe:64:39:9a:4b:de:52:bf:b7:c5:2c:f0:7b: d6:2f:e0:e5:73:92:3a:41:18:67:06:4b:af:5d:35:fc:04:9c: 20:99:5e:d6:6c:64:00:09:a1:ee:4c:32:90:af:04:3c:d8:83: 92:a0:6a:d8:19:ad:28:22:92:3f:4e:18:94:a8:76:15:d7:53: de:3d:69:91:e7:0d:c8:f5:31:4d:b7:07:49:2e:88:69:4e:c4: 33:a8:b9:02:cd:f6:4c:e3:4d:46:2d:bc:20:7d:0e:11:d4:2b: e9:74:8f:26:3c:62:f3:8e:98:d8:92:82:ee:8f:3a:12:6d:50: 25:18:1c:80:75:3e:4d:2b:50:77:23:13:e8:ae:4d:d6:c9:b0: 51:d0:49:60:ca:96:14:5e:fc:c7:aa:f9:c7:77:f0:55:3d:4a: 18:8d:83:fe:3e:d6:da:c3:bc:ec:8a:2f:20:09:51:df:1e:ce: 7f:86:1b:d2:9b:20:2c:38:8b:88:af:75:75:be:58:ba:5f:db: 43:29:25:4b:52:07:f7:55:7f:8f:fc:f5:e9:7e:44:ea:43:85: fe:4f:56:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwd/krOKaDCBxuWIwGVwzBJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYjQyZTRhNWMxYzkxZWJjNGVmZmZmMTQ4YjMxMmZlN2I3 ZTg5NzAwHhcNMjYwMjAyMTA1NTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2VkZTAzZjhmMjA1ZDFlN2RhODQ2OGY2YjNkMjJhNzVjNjM4MzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkont2eq5b0J6ae10Ul3Ho8v3lqQ8 GgkfPXWwm4c4CUfVaVY2EhTZWJfqjfmW9yMRSJ+rN8dHfqpIJWt+p5ahCrfn8Q0h +F/Vqf9Jj9CUKVcf+yVy+xgOaztQje+CRWswpTblSQ5i2tRtWaUJrOUw/SbdMWby WDiHhLli4fDkJcEeCRfeIXyVV2PW9fouvql8rPpSPNE5PIrd5NXKNlfdXZEPIWmG ENWNdS8oRQNj3aULPoV/yQOooEDQY7cD0y5yvNN23tIP41VltL//N6V2ACDRTUJB WrIPwtiXeRcC6YhavmKmhJ2dgm5kV6BxopvfqJ2ZHlrv2HxzTi7o8iLHrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGzt4D+PIF0efahGj2s9IqdcY4MEMB8GA1UdIwQY MBaAFMK0LkpcHJHrxO//8UizEv57folwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3JRdVNsd2NrZXZFN19feFNMTVNfbnQtaVhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hYTE3OTctNDM3My00YTJmLWEwNzQt YzczY2JlNzBhYmI5LzEvYk8zZ1A0OGdYUjU5cUVhUGF6MGlwMXhqZ3dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9hYTE3OTctNDM3My00YTJmLWEwNzQtYzczY2JlNzBhYmI5 LzEvd3JRdVNsd2NrZXZFN19feFNMTVNfbnQtaVhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuckGMA0G CSqGSIb3DQEBCwUAA4IBAQDkJZq0xXY2xxmmuUzmeJ7SUrsi8s3C7lYmUYU9b2Ck q1t/5GNeeQuUmv5kOZpL3lK/t8Us8HvWL+Dlc5I6QRhnBkuvXTX8BJwgmV7WbGQA CaHuTDKQrwQ82IOSoGrYGa0oIpI/ThiUqHYV11PePWmR5w3I9TFNtwdJLohpTsQz qLkCzfZM401GLbwgfQ4R1CvpdI8mPGLzjpjYkoLujzoSbVAlGByAdT5NK1B3IxPo rk3WybBR0ElgypYUXvzHqvnHd/BVPUoYjYP+Ptbaw7zsii8gCVHfHs5/hhvSmyAs OIuIr3V1vli6X9tDKSVLUgf3VX+P/PXpfkTqQ4X+T1aF -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:05 2026 by rpki-client