This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6qkzaOm8KxpxcO6V8H8gI5bOEJg.roa File: 6qkzaOm8KxpxcO6V8H8gI5bOEJg.roa (raw, json) Hash identifier: 7JYVg57UAP0YSCFy09kCcDYTYGRY15SsSzGv3cQCBv4= Subject key identifier: EA:A9:33:68:E9:BC:2B:1A:71:70:EE:95:F0:7F:20:23:96:CE:10:98 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F855715B8E3DAE027009003D524E4D4 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6qkzaOm8KxpxcO6V8H8gI5bOEJg.roa Signing time: Fri 02 Jan 2026 16:23:23 +0000 ROA not before: Fri 02 Jan 2026 16:23:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61003 IP address blocks: 212.193.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:57:15:b8:e3:da:e0:27:00:90:03:d5:24:e4:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eaa93368e9bc2b1a7170ee95f07f202396ce1098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:04:8c:99:56:9c:88:dd:55:6e:32:e5:3e:dd: 54:45:90:b7:37:40:c0:31:d4:5b:03:75:41:34:0c: 3c:16:38:f6:15:c9:7d:64:42:f7:22:b7:54:9b:da: ab:f1:83:19:8f:cd:64:61:f1:25:32:30:6c:50:95: e6:70:4d:f9:07:4c:7a:18:a1:5a:ec:e7:05:be:4d: ef:71:f0:fd:c7:4f:55:5d:8e:31:b1:32:7b:70:96: ae:06:a2:96:27:6c:0d:57:f0:a5:58:c3:fc:36:8d: 58:20:b5:98:85:e5:ad:43:38:ff:2f:3f:88:9f:ee: 1f:75:19:c4:ac:d7:c9:88:a6:9b:67:1f:54:bd:22: f4:f3:6a:55:ad:42:a0:71:27:a7:e6:36:ae:80:13: 89:67:d3:77:96:b9:c2:b7:fd:89:7f:4e:f2:df:24: 46:d8:02:05:a2:49:1f:f0:39:b4:c1:2b:b1:b2:af: f1:15:2e:95:97:11:b9:57:36:14:a6:cd:42:aa:a7: 29:14:17:51:1a:e6:15:b3:62:97:73:eb:bd:ea:85: 7f:bb:65:d8:a7:0e:7c:31:b5:fc:a7:ba:85:5c:34: fe:6e:54:bf:1b:ef:89:76:ee:50:6b:0e:a8:42:56: a5:0f:d2:95:5c:e5:05:00:9b:f4:b0:92:00:f7:18: 76:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A9:33:68:E9:BC:2B:1A:71:70:EE:95:F0:7F:20:23:96:CE:10:98 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6qkzaOm8KxpxcO6V8H8gI5bOEJg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.193.3.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:fa:f2:e9:ae:d7:f9:ce:b8:ec:e6:d8:1d:e4:66:d3:0e:01: 4d:58:0c:9b:3f:34:6f:27:e0:b5:52:0f:af:6d:a7:a8:11:bc: 97:12:92:75:73:a2:c6:b8:92:d0:8f:37:ff:18:55:83:76:28: a4:06:24:ae:10:e2:30:53:52:be:e3:96:16:56:62:89:ce:e5: 24:11:7a:4e:96:d8:59:67:2b:e2:9e:ac:b3:97:ce:94:53:1f: dc:0d:e5:3e:91:8e:e3:5e:2f:0a:fe:66:0c:f9:de:8c:88:7d: 18:24:53:b6:88:66:f3:34:5e:9e:36:f0:d6:f4:ba:65:7f:3a: dc:22:76:66:30:cd:b7:2f:d3:23:08:96:ea:fb:97:4d:50:54: 21:cd:68:e6:7c:e0:d3:9f:17:f9:44:45:a8:65:93:2e:8c:3d: d8:89:f4:87:1c:62:77:d8:86:d7:b9:8e:4d:4c:3d:e1:b1:4c: ce:64:92:82:73:96:13:91:3e:64:17:5d:1a:a3:c1:82:ab:2c: 1e:63:06:c5:ef:fe:23:53:82:d9:81:db:99:b6:2c:25:fe:92: ba:4c:3b:96:97:ea:19:8d:ed:f6:e7:04:dd:40:17:36:4e:38: 76:06:32:9f:71:96:ef:18:ac:31:91:a0:58:d6:c0:9a:6f:81: 5b:98:d8:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hVcVuOPa4CcAkAPVJOTUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWE5MzM2OGU5YmMyYjFhNzE3MGVlOTVmMDdmMjAyMzk2Y2UxMDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQSMmVaciN1VbjLlPt1URZC3N0DA MdRbA3VBNAw8Fjj2Fcl9ZEL3IrdUm9qr8YMZj81kYfElMjBsUJXmcE35B0x6GKFa 7OcFvk3vcfD9x09VXY4xsTJ7cJauBqKWJ2wNV/ClWMP8No1YILWYheWtQzj/Lz+I n+4fdRnErNfJiKabZx9UvSL082pVrUKgcSen5jaugBOJZ9N3lrnCt/2Jf07y3yRG 2AIFokkf8Dm0wSuxsq/xFS6VlxG5VzYUps1CqqcpFBdRGuYVs2KXc+u96oV/u2XY pw58MbX8p7qFXDT+blS/G++Jdu5Qaw6oQlalD9KVXOUFAJv0sJIA9xh2ZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOqpM2jpvCsacXDulfB/ICOWzhCYMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvNnFremFPbThLeHB4Y082VjhIOGdJNWJPRUpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1MEDMA0G CSqGSIb3DQEBCwUAA4IBAQCK+vLprtf5zrjs5tgd5GbTDgFNWAybPzRvJ+C1Ug+v baeoEbyXEpJ1c6LGuJLQjzf/GFWDdiikBiSuEOIwU1K+45YWVmKJzuUkEXpOlthZ Zyvinqyzl86UUx/cDeU+kY7jXi8K/mYM+d6MiH0YJFO2iGbzNF6eNvDW9Lplfzrc InZmMM23L9MjCJbq+5dNUFQhzWjmfODTnxf5REWoZZMujD3YifSHHGJ32IbXuY5N TD3hsUzOZJKCc5YTkT5kF10ao8GCqyweYwbF7/4jU4LZgduZtiwl/pK6TDuWl+oZ je325wTdQBc2Tjh2BjKfcZbvGKwxkaBY1sCab4FbmNhy -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:40 2026 by rpki-client