This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/_ksG3kvAnj4QER34bGf9CzKZfqA.roa File: _ksG3kvAnj4QER34bGf9CzKZfqA.roa (raw, json) Hash identifier: hZjpPAvNf63FW5do/xOQrnx1Z9N5hBMWnbPukfeUVvA= Subject key identifier: FE:4B:06:DE:4B:C0:9E:3E:10:11:1D:F8:6C:67:FD:0B:32:99:7E:A0 Certificate issuer: /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8 Certificate serial: 019B7F80B16FF9FE2110B5C202AA107B558F Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/_ksG3kvAnj4QER34bGf9CzKZfqA.roa Signing time: Fri 02 Jan 2026 16:18:19 +0000 ROA not before: Fri 02 Jan 2026 16:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198785 IP address blocks: 185.46.32.0/22 maxlen: 22 185.98.14.0/24 maxlen: 24 185.98.15.0/24 maxlen: 24 2a04:a7c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:b1:6f:f9:fe:21:10:b5:c2:02:aa:10:7b:55:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8 Validity Not Before: Jan 2 16:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe4b06de4bc09e3e10111df86c67fd0b32997ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d1:35:3f:f2:ff:b1:c8:99:d2:8f:cd:a4:4a: c7:56:25:a8:86:3a:5c:59:d5:32:8e:54:f4:e8:36: 26:81:00:4c:fd:17:27:70:81:06:b3:9e:8f:73:25: 99:a6:d9:91:4e:31:76:7a:e3:90:59:66:f1:21:9e: 08:1e:cd:ec:fa:ff:7c:94:92:dc:14:33:6d:e0:15: 75:ea:85:e4:cc:30:d0:56:bc:3f:ed:13:0b:5c:65: 64:30:75:b6:3f:00:49:c9:bf:2d:ca:ba:60:c4:76: 21:cc:43:4f:1e:62:3e:9e:a2:42:b1:d9:61:f7:7a: 85:d4:90:5e:ab:82:5f:7c:0d:79:fc:f8:1d:07:72: 56:7e:ed:b2:47:6c:4c:9e:97:da:73:8f:5c:18:eb: 4b:bb:ed:6d:c1:d2:45:f9:9f:a2:ea:7d:24:e2:d2: e0:1e:fb:6a:82:4c:8f:76:db:81:e5:2b:12:87:a1: 88:9f:6f:4b:57:fa:21:de:5d:e2:1a:92:d3:d6:be: fc:ad:c1:cb:60:b3:ab:ba:76:4e:bd:c4:31:65:d9: c9:e4:47:84:82:94:6e:e8:85:75:6d:24:14:08:28: 74:9f:e4:42:9c:cd:50:ba:d5:c6:a1:bc:98:c7:80: 26:01:af:9f:75:4d:f3:5f:9c:39:2e:f8:18:d1:89: 5b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4B:06:DE:4B:C0:9E:3E:10:11:1D:F8:6C:67:FD:0B:32:99:7E:A0 X509v3 Authority Key Identifier: keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/_ksG3kvAnj4QER34bGf9CzKZfqA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.46.32.0/22 185.98.14.0/23 IPv6: 2a04:a7c0::/32 Signature Algorithm: sha256WithRSAEncryption 05:86:e4:11:76:a3:8e:b5:2f:c8:dd:f7:81:80:64:a3:5d:6a: 63:7c:1a:57:5a:8b:22:9e:9f:08:f2:96:f3:1e:ea:65:37:b1: 02:de:bb:4f:12:0a:7e:67:49:bb:c6:0f:27:52:2d:df:a6:e1: 57:ad:0e:45:82:41:f4:76:50:3b:32:82:4f:6e:eb:52:09:00: 09:0d:4c:db:12:5b:cd:5c:93:90:02:40:a6:35:0e:16:e6:02: 1f:eb:1d:c5:88:22:a4:df:d4:f4:59:6f:0d:3c:b2:9c:d5:be: 6c:98:28:e0:08:8d:5b:9e:f5:d9:46:c1:11:3e:e0:4f:d9:26: 0c:6f:19:ac:51:a3:4f:2d:33:88:6e:0f:52:42:37:d1:2d:2a: d1:c8:75:8e:5d:8e:e9:c9:6e:2b:7c:86:17:dd:c2:83:d2:d8: 3b:e9:bb:e4:74:57:fd:93:c6:f6:c5:f1:da:91:0a:98:8b:3a: 8d:49:6c:31:37:b4:80:5d:d5:c9:8c:a8:4f:5a:bc:8e:5e:56: 22:80:b5:e9:18:07:0c:91:99:af:05:38:45:17:70:05:d9:34: 45:43:e6:d9:bc:b1:78:f7:50:f4:b2:f7:3e:48:73:96:df:89: 26:08:95:8a:2a:e4:71:91:e9:57:9e:28:de:27:55:cb:37:78: fc:1f:e3:51 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/gLFv+f4hELXCAqoQe1WPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OGE0OTE0ZDk2MDA5YjY4MjJkMTY4YTBlZDUzZTkzNmQz YTQxZjgwHhcNMjYwMTAyMTYxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTRiMDZkZTRiYzA5ZTNlMTAxMTFkZjg2YzY3ZmQwYjMyOTk3ZWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA89E1P/L/sciZ0o/NpErHViWohjpc WdUyjlT06DYmgQBM/RcncIEGs56PcyWZptmRTjF2euOQWWbxIZ4IHs3s+v98lJLc FDNt4BV16oXkzDDQVrw/7RMLXGVkMHW2PwBJyb8tyrpgxHYhzENPHmI+nqJCsdlh 93qF1JBeq4JffA15/PgdB3JWfu2yR2xMnpfac49cGOtLu+1twdJF+Z+i6n0k4tLg HvtqgkyPdtuB5SsSh6GIn29LV/oh3l3iGpLT1r78rcHLYLOrunZOvcQxZdnJ5EeE gpRu6IV1bSQUCCh0n+RCnM1QutXGobyYx4AmAa+fdU3zX5w5LvgY0YlbLwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFP5LBt5LwJ4+EBEd+Gxn/QsymX6gMB8GA1UdIwQY MBaAFNeKSRTZYAm2gi0Wig7VPpNtOkH4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUt MjMwZmRhNjZhYmNiLzEvX2tzRzNrdkFuajRRRVIzNGJHZjlDektaZnFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUtMjMwZmRhNjZhYmNi LzEvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuS4gAwQB uWIOMA0EAgACMAcDBQAqBKfAMA0GCSqGSIb3DQEBCwUAA4IBAQAFhuQRdqOOtS/I 3feBgGSjXWpjfBpXWosinp8I8pbzHuplN7EC3rtPEgp+Z0m7xg8nUi3fpuFXrQ5F gkH0dlA7MoJPbutSCQAJDUzbElvNXJOQAkCmNQ4W5gIf6x3FiCKk39T0WW8NPLKc 1b5smCjgCI1bnvXZRsERPuBP2SYMbxmsUaNPLTOIbg9SQjfRLSrRyHWOXY7pyW4r fIYX3cKD0tg76bvkdFf9k8b2xfHakQqYizqNSWwxN7SAXdXJjKhPWryOXlYigLXp GAcMkZmvBThFF3AF2TRFQ+bZvLF491D0svc+SHOW34kmCJWKKuRxkelXnijeJ1XL N3j8H+NR -----END CERTIFICATE-----Generated at Fri Jan 9 15:56:28 2026 by rpki-client