This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/B6zCssOGAYIa6DKLi6o-N-DWqB4.roa File: B6zCssOGAYIa6DKLi6o-N-DWqB4.roa (raw, json) Hash identifier: sfr6LW4qdLDIsjbkt4T+8PL0knT66WJZ1YsAztDDhg4= Subject key identifier: 07:AC:C2:B2:C3:86:01:82:1A:E8:32:8B:8B:AA:3E:37:E0:D6:A8:1E Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019C08D7E42B4ACB68277F7AC132705E8804 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/B6zCssOGAYIa6DKLi6o-N-DWqB4.roa Signing time: Thu 29 Jan 2026 08:21:32 +0000 ROA not before: Thu 29 Jan 2026 08:21:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215343 IP address blocks: 2.59.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 11:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:08:d7:e4:2b:4a:cb:68:27:7f:7a:c1:32:70:5e:88:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 29 08:21:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07acc2b2c38601821ae8328b8baa3e37e0d6a81e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4f:09:85:9f:4d:a9:d7:75:28:cd:2e:c4:51: fb:2e:f6:05:50:9b:ec:b0:2a:a6:9c:49:ef:cc:96: 4d:96:e7:7e:17:8b:d8:d5:61:95:4c:f1:7f:a9:37: f5:32:aa:63:c2:aa:e1:4a:5b:6c:a1:72:48:ca:bb: f7:bc:b2:d1:29:cc:a9:82:cd:86:6d:de:2b:b0:5d: 0c:c2:e7:8e:be:f7:81:01:b3:be:e1:e6:a5:38:1b: a8:5e:58:dc:c5:7c:3b:84:f7:d1:95:70:f0:20:f8: c4:95:dc:03:a0:f0:47:3a:5c:bb:74:b5:a9:6a:69: e1:c7:8c:94:4e:c1:30:3b:86:92:5e:21:49:4c:bb: 82:92:92:8c:b3:cc:d8:e3:a6:85:ea:5d:11:60:c4: c9:40:27:6a:06:36:58:ab:0f:60:c8:27:db:ab:e0: e0:18:91:88:12:d1:46:fa:36:49:c0:54:79:fa:66: 73:1a:08:b8:41:bf:4c:b8:dd:f9:75:5a:da:25:ba: d7:3f:9e:13:c2:fe:f1:94:6e:ea:f0:76:63:b1:5c: fe:ea:47:a8:76:0a:73:68:c3:3a:80:19:18:5d:42: 9a:2c:04:ef:e9:8e:a9:bc:ca:6f:5e:65:b0:17:a6: c9:68:19:af:5e:2b:5e:8f:20:39:e5:05:2c:39:33: 7d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:AC:C2:B2:C3:86:01:82:1A:E8:32:8B:8B:AA:3E:37:E0:D6:A8:1E X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/B6zCssOGAYIa6DKLi6o-N-DWqB4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.252.0/24 Signature Algorithm: sha256WithRSAEncryption 76:d4:12:5d:40:f3:3f:1b:1f:24:69:57:ec:6a:03:1e:a8:d1: 5a:70:e1:b8:15:b2:75:53:03:7e:54:7e:2a:39:d0:44:4d:aa: 9d:e3:65:89:46:7a:bd:da:ac:57:b3:e2:73:1b:38:ed:3a:72: b6:1f:1e:f5:91:66:00:60:72:35:ee:c8:3e:b1:48:41:d3:e2: dd:8c:d7:3a:c5:39:dd:cf:c6:5a:13:d0:67:5c:f4:1e:31:e3: 00:90:70:d4:6f:31:92:c0:bf:06:65:6f:87:5b:d7:99:44:27: 99:2a:9a:8d:70:d6:ca:fd:ef:54:e9:c9:cf:1b:ee:3c:53:59: 5a:38:01:4a:4a:3f:88:e7:6e:08:79:94:7f:cf:12:ed:41:24: 03:12:b8:49:7c:1b:2b:92:c0:5d:74:9a:01:bc:4e:de:10:b0: c9:fe:80:7c:0d:9d:c2:08:56:9d:98:8c:b7:fe:b4:2c:d5:cb: 92:b8:32:47:bf:d3:8e:66:34:01:3b:1b:cf:83:a1:49:85:23: 85:1f:b4:91:1d:60:19:8b:46:51:4a:77:99:45:bc:22:30:67: 16:1d:d5:d1:45:57:29:0c:6b:7f:e5:6f:e5:11:b3:f7:61:01: 0d:db:ca:24:9d:7a:87:4f:bb:14:0d:de:2a:67:58:6e:15:ac: 81:d3:9b:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwI1+QrSstoJ396wTJwXogEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTI5MDgyMTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2FjYzJiMmMzODYwMTgyMWFlODMyOGI4YmFhM2UzN2UwZDZhODFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU8JhZ9Nqdd1KM0uxFH7LvYFUJvs sCqmnEnvzJZNlud+F4vY1WGVTPF/qTf1MqpjwqrhSltsoXJIyrv3vLLRKcypgs2G bd4rsF0MwueOvveBAbO+4ealOBuoXljcxXw7hPfRlXDwIPjEldwDoPBHOly7dLWp amnhx4yUTsEwO4aSXiFJTLuCkpKMs8zY46aF6l0RYMTJQCdqBjZYqw9gyCfbq+Dg GJGIEtFG+jZJwFR5+mZzGgi4Qb9MuN35dVraJbrXP54Twv7xlG7q8HZjsVz+6keo dgpzaMM6gBkYXUKaLATv6Y6pvMpvXmWwF6bJaBmvXitejyA55QUsOTN9UwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAeswrLDhgGCGugyi4uqPjfg1qgeMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvQjZ6Q3NzT0dBWUlhNkRLTGk2by1OLURXcUI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjv8MA0G CSqGSIb3DQEBCwUAA4IBAQB21BJdQPM/Gx8kaVfsagMeqNFacOG4FbJ1UwN+VH4q OdBETaqd42WJRnq92qxXs+JzGzjtOnK2Hx71kWYAYHI17sg+sUhB0+LdjNc6xTnd z8ZaE9BnXPQeMeMAkHDUbzGSwL8GZW+HW9eZRCeZKpqNcNbK/e9U6cnPG+48U1la OAFKSj+I524IeZR/zxLtQSQDErhJfBsrksBddJoBvE7eELDJ/oB8DZ3CCFadmIy3 /rQs1cuSuDJHv9OOZjQBOxvPg6FJhSOFH7SRHWAZi0ZRSneZRbwiMGcWHdXRRVcp DGt/5W/lEbP3YQEN28oknXqHT7sUDd4qZ1huFayB05v5 -----END CERTIFICATE-----Generated at Thu Jan 29 14:47:30 2026 by rpki-client