This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/6qcrdhxsXntUBfmqIofqw1-iJPY.roa File: 6qcrdhxsXntUBfmqIofqw1-iJPY.roa (raw, json) Hash identifier: GiOc4UHObExccKeqBRzv/DUsn92kIZYjDxqeAxX9Y0Q= Subject key identifier: EA:A7:2B:76:1C:6C:5E:7B:54:05:F9:AA:22:87:EA:C3:5F:A2:24:F6 Certificate issuer: /CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99 Certificate serial: 019B7CEDDE65BB2793479C314E2D8C87B0DA Authority key identifier: A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/6qcrdhxsXntUBfmqIofqw1-iJPY.roa Signing time: Fri 02 Jan 2026 04:18:42 +0000 ROA not before: Fri 02 Jan 2026 04:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38998 IP address blocks: 193.111.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:de:65:bb:27:93:47:9c:31:4e:2d:8c:87:b0:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99 Validity Not Before: Jan 2 04:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eaa72b761c6c5e7b5405f9aa2287eac35fa224f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9b:5f:5c:b6:57:88:9a:e2:20:26:df:31:bb: 02:d7:ec:30:e4:61:df:30:0a:96:84:21:35:c2:f2: d8:83:b6:79:aa:16:38:9e:8f:3d:9f:fe:28:08:e0: 04:b2:01:b2:a4:87:32:55:d9:aa:de:5e:ec:b0:a9: e7:7f:28:fb:26:02:f1:8e:5d:8c:56:5f:78:43:43: 11:dc:0f:41:40:ec:62:73:fd:e6:b5:92:66:f6:6f: 3e:74:bf:f1:0b:3f:a3:c5:18:fd:b7:fe:50:ad:fb: 58:f2:b3:8a:52:07:7b:05:f5:b3:9a:3a:02:98:cb: b9:8c:1a:a6:85:94:81:b8:9d:87:3a:b6:c7:22:79: 1d:75:6b:70:d4:68:cd:96:c4:49:12:47:30:ad:02: 4d:66:f9:85:2a:52:54:b5:c8:23:40:f7:ce:c0:c8: 4c:9f:d3:c5:69:83:00:54:a7:a4:31:5f:f8:04:2e: ef:fb:55:65:22:46:8c:ea:ad:75:56:2e:3f:06:b1: 26:a4:fd:c6:1b:9d:39:74:aa:93:3c:f8:18:b9:fb: ca:4e:11:35:77:15:e7:c1:2c:d0:bd:8e:59:37:45: 80:30:1f:bb:7e:57:ff:6e:69:65:95:73:49:50:a6: fe:ca:33:20:65:88:c9:72:12:44:52:f6:ba:e4:85: e4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A7:2B:76:1C:6C:5E:7B:54:05:F9:AA:22:87:EA:C3:5F:A2:24:F6 X509v3 Authority Key Identifier: keyid:A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/6qcrdhxsXntUBfmqIofqw1-iJPY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.68.0/23 Signature Algorithm: sha256WithRSAEncryption 40:b9:cb:8f:c6:8a:05:a2:8a:cc:b6:59:97:3d:dd:49:17:98: a1:33:fc:34:b2:8e:21:c1:06:e1:8f:83:e7:19:34:a5:ae:6b: fd:4f:cb:d9:fa:85:3c:0f:b7:c3:12:fc:b2:ac:ba:9d:e3:4c: 55:37:f7:dc:f7:90:76:83:3a:cc:17:97:4e:85:4a:29:68:ab: ee:97:c8:db:e4:a9:1e:cb:a8:7e:69:9b:ef:b0:0c:eb:f6:06: cc:61:72:88:f0:d2:7d:ef:81:80:21:77:b9:2f:87:22:d8:fd: df:dd:df:ed:d9:33:a7:17:68:9c:5e:76:ce:5d:58:74:4a:c8: 76:df:f2:57:7f:02:a0:e6:f5:15:5e:65:2a:6c:1d:db:75:09: 01:17:28:ff:a6:84:dd:9a:41:f9:74:02:4e:02:f0:50:7b:7e: 3f:18:ae:eb:f7:81:30:b2:59:2b:39:60:15:d7:ef:09:f4:f5: ac:2a:90:57:17:71:99:b5:f2:aa:57:96:3a:94:05:f4:3d:a7: 1b:9b:e7:98:eb:bb:b7:99:5d:e4:6a:d4:6d:18:8c:44:fb:3e: 58:fb:f4:03:4f:e3:a7:14:1a:c2:bb:12:d7:88:40:5f:69:e8: f5:fd:8d:4d:2c:1a:5a:87:7f:4d:11:a9:e5:a9:35:5e:98:fa: eb:ba:35:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87d5luyeTR5wxTi2Mh7DaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZWU5MjZmMWYxNTM3YjliZTc1ZWI0YjlkNzkyZGY0MWQy NWNkOTkwHhcNMjYwMTAyMDQxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWE3MmI3NjFjNmM1ZTdiNTQwNWY5YWEyMjg3ZWFjMzVmYTIyNGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZtfXLZXiJriICbfMbsC1+ww5GHf MAqWhCE1wvLYg7Z5qhY4no89n/4oCOAEsgGypIcyVdmq3l7ssKnnfyj7JgLxjl2M Vl94Q0MR3A9BQOxic/3mtZJm9m8+dL/xCz+jxRj9t/5QrftY8rOKUgd7BfWzmjoC mMu5jBqmhZSBuJ2HOrbHInkddWtw1GjNlsRJEkcwrQJNZvmFKlJUtcgjQPfOwMhM n9PFaYMAVKekMV/4BC7v+1VlIkaM6q11Vi4/BrEmpP3GG505dKqTPPgYufvKThE1 dxXnwSzQvY5ZN0WAMB+7flf/bmlllXNJUKb+yjMgZYjJchJEUva65IXkCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOqnK3YcbF57VAX5qiKH6sNfoiT2MB8GA1UdIwQY MBaAFKXukm8fFTe5vnXrS515LfQdJc2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGU2U2J4OFZON20tZGV0TG5Ya3Q5QjBselprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hODdhZWMtYmVhYS00YWViLWE0OGUt OGYzNGJkMzkxZDE4LzEvNnFjcmRoeHNYbnRVQmZtcUlvZnF3MS1pSlBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9hODdhZWMtYmVhYS00YWViLWE0OGUtOGYzNGJkMzkxZDE4 LzEvcGU2U2J4OFZON20tZGV0TG5Ya3Q5QjBselprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwW9EMA0G CSqGSIb3DQEBCwUAA4IBAQBAucuPxooFoorMtlmXPd1JF5ihM/w0so4hwQbhj4Pn GTSlrmv9T8vZ+oU8D7fDEvyyrLqd40xVN/fc95B2gzrMF5dOhUopaKvul8jb5Kke y6h+aZvvsAzr9gbMYXKI8NJ974GAIXe5L4ci2P3f3d/t2TOnF2icXnbOXVh0Ssh2 3/JXfwKg5vUVXmUqbB3bdQkBFyj/poTdmkH5dAJOAvBQe34/GK7r94EwslkrOWAV 1+8J9PWsKpBXF3GZtfKqV5Y6lAX0Pacbm+eY67u3mV3katRtGIxE+z5Y+/QDT+On FBrCuxLXiEBfaej1/Y1NLBpah39NEanlqTVemPrrujXw -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:19 2026 by rpki-client