This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/oN6-8TjcpnWOi19_YcKHjgP4exg.roa File: oN6-8TjcpnWOi19_YcKHjgP4exg.roa (raw, json) Hash identifier: XKqFhmz4qM1QAqbdgj7Ft/qb7sgIFeQcaicCKYT8doU= Subject key identifier: A0:DE:BE:F1:38:DC:A6:75:8E:8B:5F:7F:61:C2:87:8E:03:F8:7B:18 Certificate issuer: /CN=e6f1dedaf4dbda60da990d685650e68c888c6100 Certificate serial: 019B7DCA9CA69E3FD26B1C591E9A3B555AF4 Authority key identifier: E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/oN6-8TjcpnWOi19_YcKHjgP4exg.roa Signing time: Fri 02 Jan 2026 08:19:49 +0000 ROA not before: Fri 02 Jan 2026 08:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209854 IP address blocks: 185.204.92.0/24 maxlen: 24 185.230.230.0/24 maxlen: 24 185.230.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:9c:a6:9e:3f:d2:6b:1c:59:1e:9a:3b:55:5a:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6f1dedaf4dbda60da990d685650e68c888c6100 Validity Not Before: Jan 2 08:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0debef138dca6758e8b5f7f61c2878e03f87b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0d:af:e4:00:6a:8e:76:81:95:a3:13:7c:a6: 3e:72:dd:5f:cb:71:d8:81:84:1b:1b:cb:8b:5b:8d: 75:94:b9:d0:8f:8a:39:3b:93:fb:53:1b:2e:bc:e2: 69:ae:93:98:6c:83:44:f9:e2:fc:33:c7:1c:81:f8: 9f:56:37:b2:23:ec:15:17:8c:f6:d9:f2:26:4f:cb: a6:50:18:1e:68:7c:13:61:ca:1f:76:da:77:f3:c3: dc:ff:9b:6a:31:5e:4e:d1:68:73:c7:5a:09:ac:a5: 91:9a:a0:21:4f:e7:bf:ae:f4:f2:0b:ba:9d:70:10: 25:d4:7b:0f:35:8e:ed:59:9a:19:32:8c:7b:40:e2: 3e:15:f7:85:eb:de:77:1f:82:c3:05:0d:a7:d1:c6: 6c:aa:ac:09:aa:a8:78:71:57:9f:1c:3b:f0:1a:d7: 40:8e:5b:d7:eb:85:5c:58:4b:15:65:1c:95:07:80: d7:ef:a6:1f:14:6d:fb:73:08:5c:30:7c:6d:43:32: 64:d6:d5:a4:8b:8d:46:97:d6:d0:9e:9c:7f:8f:ef: ca:f4:f0:58:30:d9:16:4c:8a:57:21:f1:99:59:d7: d2:e8:b0:bb:1b:f1:ad:2e:19:da:df:ac:fa:d8:5a: 73:24:4f:6a:69:0f:02:02:8c:2c:3c:47:b1:5e:e0: 50:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DE:BE:F1:38:DC:A6:75:8E:8B:5F:7F:61:C2:87:8E:03:F8:7B:18 X509v3 Authority Key Identifier: keyid:E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/oN6-8TjcpnWOi19_YcKHjgP4exg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.204.92.0/24 185.230.230.0/23 Signature Algorithm: sha256WithRSAEncryption 61:a4:75:ff:6a:b0:d6:8f:c3:a2:9b:2f:a8:20:3f:d2:12:15: 0f:16:5b:10:e8:3f:ad:06:bd:2e:c1:d1:c1:3e:c3:e5:05:e3: c4:b0:9f:f7:41:29:f2:cb:d9:10:b8:3a:30:be:87:f7:46:07: d1:bb:4a:2e:df:b9:7f:e7:a5:03:97:ce:72:ef:f5:d9:0a:db: 0a:70:d5:35:ff:a4:cd:83:f1:38:61:f8:b1:ac:48:7d:3a:a1: 6e:c1:d9:7c:04:50:b9:1a:12:c8:e5:ee:d2:a8:b0:5d:ad:5c: a3:23:97:9e:05:88:27:70:db:b2:6e:af:7f:e4:d7:c9:ea:4d: 9b:b8:df:d7:7c:2f:ef:7e:06:b7:d4:d7:79:cc:52:2e:20:26: 58:ad:20:e2:fa:99:0d:db:30:e9:9b:d5:2c:ff:2e:ee:1e:2b: d8:55:c7:84:81:17:12:a9:bb:c9:c7:de:a6:99:e9:fd:19:28: 90:19:99:93:39:a7:1c:69:03:1e:ac:d2:96:c6:33:ff:39:7c: ed:33:0f:41:13:ad:dc:da:ea:67:db:50:32:79:df:b8:5e:d3: 4d:af:fd:c3:52:f6:93:72:93:af:ce:24:76:bf:1f:af:d2:b3: 67:b5:69:b4:82:60:8b:2d:b2:0f:5e:b7:9f:b6:50:a1:d2:b8: c7:3f:1b:55 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9ypymnj/SaxxZHpo7VVr0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ZjFkZWRhZjRkYmRhNjBkYTk5MGQ2ODU2NTBlNjhjODg4 YzYxMDAwHhcNMjYwMTAyMDgxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGRlYmVmMTM4ZGNhNjc1OGU4YjVmN2Y2MWMyODc4ZTAzZjg3YjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw2v5ABqjnaBlaMTfKY+ct1fy3HY gYQbG8uLW411lLnQj4o5O5P7UxsuvOJprpOYbINE+eL8M8ccgfifVjeyI+wVF4z2 2fImT8umUBgeaHwTYcofdtp388Pc/5tqMV5O0Whzx1oJrKWRmqAhT+e/rvTyC7qd cBAl1HsPNY7tWZoZMox7QOI+FfeF6953H4LDBQ2n0cZsqqwJqqh4cVefHDvwGtdA jlvX64VcWEsVZRyVB4DX76YfFG37cwhcMHxtQzJk1tWki41Gl9bQnpx/j+/K9PBY MNkWTIpXIfGZWdfS6LC7G/GtLhna36z62FpzJE9qaQ8CAowsPEexXuBQmQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKDevvE43KZ1jotff2HCh44D+HsYMB8GA1UdIwQY MBaAFObx3tr029pg2pkNaFZQ5oyIjGEAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXZIZTJ2VGIybURhbVExb1ZsRG1qSWlNWVFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8yM2JhNDYtZmM3YS00Yjk3LThiNGYt MjMxNjU3ODI5ZWY1LzEvb042LThUamNwbldPaTE5X1ljS0hqZ1A0ZXhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS8yM2JhNDYtZmM3YS00Yjk3LThiNGYtMjMxNjU3ODI5ZWY1 LzEvNXZIZTJ2VGIybURhbVExb1ZsRG1qSWlNWVFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAucxcAwQB uebmMA0GCSqGSIb3DQEBCwUAA4IBAQBhpHX/arDWj8Oimy+oID/SEhUPFlsQ6D+t Br0uwdHBPsPlBePEsJ/3QSnyy9kQuDowvof3RgfRu0ou37l/56UDl85y7/XZCtsK cNU1/6TNg/E4YfixrEh9OqFuwdl8BFC5GhLI5e7SqLBdrVyjI5eeBYgncNuybq9/ 5NfJ6k2buN/XfC/vfga31Nd5zFIuICZYrSDi+pkN2zDpm9Us/y7uHivYVceEgRcS qbvJx96mmen9GSiQGZmTOaccaQMerNKWxjP/OXztMw9BE63c2upn21Ayed+4XtNN r/3DUvaTcpOvziR2vx+v0rNntWm0gmCLLbIPXreftlCh0rjHPxtV -----END CERTIFICATE-----Generated at Wed Jan 7 06:57:04 2026 by rpki-client