This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/t6iqftpbJQl-rj4l4hMmt54XfbA.roa File: t6iqftpbJQl-rj4l4hMmt54XfbA.roa (raw, json) Hash identifier: lDaGCGIXZDpqUqTytYf/+3g7w0I/cU8Ge92ZphoqH7w= Subject key identifier: B7:A8:AA:7E:DA:5B:25:09:7E:AE:3E:25:E2:13:26:B7:9E:17:7D:B0 Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1 Certificate serial: 019BDFE4285E34F5F736CBB5851A4BA3750F Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/t6iqftpbJQl-rj4l4hMmt54XfbA.roa Signing time: Wed 21 Jan 2026 09:30:30 +0000 ROA not before: Wed 21 Jan 2026 09:30:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46475 IP address blocks: 153.51.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:30:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:e4:28:5e:34:f5:f7:36:cb:b5:85:1a:4b:a3:75:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1 Validity Not Before: Jan 21 09:30:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7a8aa7eda5b25097eae3e25e21326b79e177db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ac:cb:57:d0:95:70:02:9a:eb:54:30:bc:2c: a4:f4:b9:85:19:07:bb:71:c9:da:6a:b2:e8:a8:c6: a7:d4:57:f0:b0:7e:85:46:28:15:96:c6:2a:3f:a6: fc:a0:95:40:34:a0:00:c5:f4:8d:22:7a:e2:c8:0f: 9b:4a:48:57:d2:5e:5b:5b:3c:7d:47:87:1d:d1:98: 34:04:3e:1e:3b:9c:64:47:bf:52:7d:34:eb:6c:87: 31:37:fa:9e:10:44:33:9d:c0:f7:c8:76:26:c8:3a: 6c:9e:a4:35:94:fb:f4:7b:e1:29:47:72:4d:b1:9d: dd:9c:96:97:1a:0c:78:74:68:d4:6b:2b:2e:7b:11: 2a:53:da:64:4c:9b:60:11:d7:31:5f:92:7c:c2:2d: 7c:77:4a:85:4b:4d:52:07:3a:1f:dd:01:68:ab:20: 08:4b:b5:17:4e:b7:f1:a1:8b:79:97:86:8b:0b:ad: 4a:9d:be:14:73:99:35:29:b6:ed:6a:96:fa:8e:5e: da:e4:a1:de:c6:44:87:31:04:ac:38:9b:12:db:10: 81:53:ef:d7:84:e6:69:d9:dc:c5:a1:1a:5b:50:96: f7:f9:c4:b1:50:3a:33:ba:88:e6:21:95:a1:e1:78: f6:96:c7:20:29:1b:f7:b7:54:c2:dd:8d:06:ea:55: 24:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A8:AA:7E:DA:5B:25:09:7E:AE:3E:25:E2:13:26:B7:9E:17:7D:B0 X509v3 Authority Key Identifier: keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/t6iqftpbJQl-rj4l4hMmt54XfbA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 153.51.191.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:d2:9c:93:e3:11:55:8e:f8:7e:06:17:eb:8c:a1:01:75:90: 97:df:4d:a5:3f:69:78:88:13:b5:98:58:dc:18:f9:a7:b6:07: 05:34:d1:45:0b:db:96:ae:ff:22:ac:ac:be:a0:05:ab:f7:8e: ad:46:04:69:d0:92:2a:5d:e3:1d:d3:a1:04:d6:c6:f8:e5:81: 27:5b:8c:23:f2:b5:64:ae:a2:3f:f0:98:51:f2:75:3e:b2:c0: 02:2d:07:60:29:f6:19:fb:d9:b8:b8:cc:71:97:07:ff:44:b5: 96:84:16:3f:dd:32:e8:5d:a5:1f:8a:ae:9b:c0:aa:41:c6:1e: 55:9d:c2:26:df:69:d8:e5:b9:ae:a7:81:c2:63:5e:80:c0:8b: 66:18:96:24:c8:66:be:62:9c:62:d3:b5:e4:06:0f:51:97:3d: 59:1c:17:d5:2a:37:07:4c:df:d9:65:f1:32:3c:08:4b:b5:2d: fb:da:98:1c:c2:a5:75:e3:98:6a:01:99:f9:0b:8a:e1:73:55: d7:0a:ea:68:1c:f8:9a:04:76:ed:46:1e:d9:a1:32:c2:07:fa: c1:a1:77:b8:fa:8e:08:23:fd:04:51:b1:f1:c4:eb:49:b8:f0: ee:fd:3f:3d:ac:30:01:8a:f8:f1:8a:e4:e7:52:1e:d8:cb:6b: d4:2d:8d:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvf5CheNPX3Nsu1hRpLo3UPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz OGM4ZTEwHhcNMjYwMTIxMDkzMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2E4YWE3ZWRhNWIyNTA5N2VhZTNlMjVlMjEzMjZiNzllMTc3ZGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqzLV9CVcAKa61QwvCyk9LmFGQe7 ccnaarLoqMan1FfwsH6FRigVlsYqP6b8oJVANKAAxfSNInriyA+bSkhX0l5bWzx9 R4cd0Zg0BD4eO5xkR79SfTTrbIcxN/qeEEQzncD3yHYmyDpsnqQ1lPv0e+EpR3JN sZ3dnJaXGgx4dGjUaysuexEqU9pkTJtgEdcxX5J8wi18d0qFS01SBzof3QFoqyAI S7UXTrfxoYt5l4aLC61Knb4Uc5k1Kbbtapb6jl7a5KHexkSHMQSsOJsS2xCBU+/X hOZp2dzFoRpbUJb3+cSxUDozuojmIZWh4Xj2lscgKRv3t1TC3Y0G6lUkoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLeoqn7aWyUJfq4+JeITJreeF32wMB8GA1UdIwQY MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt MzBjOWRlMjA1YWZjLzEvdDZpcWZ0cGJKUWwtcmo0bDRoTW10NTRYZmJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmTO/MA0G CSqGSIb3DQEBCwUAA4IBAQBt0pyT4xFVjvh+BhfrjKEBdZCX302lP2l4iBO1mFjc GPmntgcFNNFFC9uWrv8irKy+oAWr946tRgRp0JIqXeMd06EE1sb45YEnW4wj8rVk rqI/8JhR8nU+ssACLQdgKfYZ+9m4uMxxlwf/RLWWhBY/3TLoXaUfiq6bwKpBxh5V ncIm32nY5bmup4HCY16AwItmGJYkyGa+Ypxi07XkBg9Rlz1ZHBfVKjcHTN/ZZfEy PAhLtS372pgcwqV145hqAZn5C4rhc1XXCupoHPiaBHbtRh7ZoTLCB/rBoXe4+o4I I/0EUbHxxOtJuPDu/T89rDABivjxiuTnUh7Yy2vULY05 -----END CERTIFICATE-----Generated at Wed Jan 21 17:34:14 2026 by rpki-client