This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6Zd-bBNIarwlV8b-djBfgQbXpv0.roa File: 6Zd-bBNIarwlV8b-djBfgQbXpv0.roa (raw, json) Hash identifier: mPkmkRQvFudWbTmMFezMF3ML/oXUp3bUvqrztiPOMDs= Subject key identifier: E9:97:7E:6C:13:48:6A:BC:25:57:C6:FE:76:30:5F:81:06:D7:A6:FD Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C130836C80D7625D337FA2B61C76B6A Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6Zd-bBNIarwlV8b-djBfgQbXpv0.roa Signing time: Fri 02 Jan 2026 00:19:40 +0000 ROA not before: Fri 02 Jan 2026 00:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214929 IP address blocks: 94.249.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:08:36:c8:0d:76:25:d3:37:fa:2b:61:c7:6b:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9977e6c13486abc2557c6fe76305f8106d7a6fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:70:1e:71:a5:a3:22:1f:c6:b7:b6:6f:60:6c: 49:d4:e7:47:7d:a2:d4:ef:76:70:eb:89:a3:0d:74: c5:06:9b:cd:e0:a7:9d:8f:bc:ae:5f:19:c1:75:a7: bb:ab:f5:c2:54:38:b7:42:66:30:ef:e1:c7:df:35: a1:6a:00:48:ef:3e:02:c5:99:00:79:c7:f3:79:0f: b4:50:38:95:b7:45:e9:da:b3:68:de:29:69:07:5b: 4a:2f:9d:43:12:26:0a:28:41:e4:b6:bb:9e:b1:db: 35:4a:04:e9:6d:26:90:52:a0:1d:b7:38:4f:2e:95: c7:3a:73:14:e0:4b:75:88:f4:df:0b:0f:04:dd:76: bb:53:8f:79:1b:f9:29:30:88:d6:82:ac:bc:13:12: ad:92:ea:5f:d6:0e:57:78:c3:67:4c:52:0e:9e:c8: f5:ec:5b:97:f6:69:8d:7c:d4:0c:c5:4a:5b:4b:0d: 08:23:ad:20:ac:e8:94:6a:f6:7d:0d:df:53:00:18: 77:89:0b:45:1b:5c:6f:d6:22:db:fa:e5:e9:2a:9c: 85:4f:e3:76:e6:90:9f:31:74:14:1e:cf:9e:71:24: c4:c5:26:4c:4c:bd:34:f0:58:e2:3b:f2:51:5c:08: b9:46:3f:99:22:d8:91:51:34:12:95:97:65:a1:16: 71:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:97:7E:6C:13:48:6A:BC:25:57:C6:FE:76:30:5F:81:06:D7:A6:FD X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6Zd-bBNIarwlV8b-djBfgQbXpv0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.249.228.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:18:17:10:26:37:4e:2e:5b:2b:98:2d:94:67:5e:c3:10:fb: 50:36:44:29:c4:22:73:88:0f:7f:fc:61:5a:b6:7f:ac:a1:65: 4f:41:37:90:2b:64:09:04:e5:fe:c5:d8:c9:b4:ed:4d:3c:0a: b4:c7:6f:7f:4e:14:6e:ca:97:d9:f6:d0:64:3f:15:e2:5a:5b: f6:06:0c:d4:a6:9a:7a:34:96:69:17:11:b7:63:6d:e3:82:85: 39:2e:75:e7:2d:28:c3:2b:4e:69:eb:c6:7d:bb:9d:88:05:4c: b6:71:a2:14:6c:a4:c6:29:9f:11:fa:97:a3:f2:4a:51:4d:1a: 01:13:bb:ca:72:1f:d8:a6:21:68:a6:b1:66:c9:f0:17:f5:72: 7a:9e:ff:b8:f9:a4:51:0d:70:c9:ad:e7:c2:9f:cd:c5:e2:a4: 36:31:20:cd:3e:73:83:00:2e:17:76:43:46:69:91:61:23:88: 8e:9c:fe:b2:54:de:f0:61:3d:59:c2:e8:e7:01:19:16:c7:76: 5a:95:55:e1:c0:9d:58:df:c8:52:14:f5:41:1d:09:9e:b1:f4: a6:01:d9:f8:05:e8:21:4b:ea:64:3d:ec:08:92:45:46:8a:1e: 43:76:ce:51:8c:f0:8c:ff:ad:8d:a6:e4:1b:64:0a:7c:0b:5c: b6:51:d1:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ewg2yA12JdM3+ithx2tqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTk3N2U2YzEzNDg2YWJjMjU1N2M2ZmU3NjMwNWY4MTA2ZDdhNmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3AecaWjIh/Gt7ZvYGxJ1OdHfaLU 73Zw64mjDXTFBpvN4Kedj7yuXxnBdae7q/XCVDi3QmYw7+HH3zWhagBI7z4CxZkA ecfzeQ+0UDiVt0Xp2rNo3ilpB1tKL51DEiYKKEHktruesds1SgTpbSaQUqAdtzhP LpXHOnMU4Et1iPTfCw8E3Xa7U495G/kpMIjWgqy8ExKtkupf1g5XeMNnTFIOnsj1 7FuX9mmNfNQMxUpbSw0II60grOiUavZ9Dd9TABh3iQtFG1xv1iLb+uXpKpyFT+N2 5pCfMXQUHs+ecSTExSZMTL008FjiO/JRXAi5Rj+ZItiRUTQSlZdloRZx2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOmXfmwTSGq8JVfG/nYwX4EG16b9MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvNlpkLWJCTklhcndsVjhiLWRqQmZnUWJYcHYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXvnkMA0G CSqGSIb3DQEBCwUAA4IBAQAMGBcQJjdOLlsrmC2UZ17DEPtQNkQpxCJziA9//GFa tn+soWVPQTeQK2QJBOX+xdjJtO1NPAq0x29/ThRuypfZ9tBkPxXiWlv2BgzUppp6 NJZpFxG3Y23jgoU5LnXnLSjDK05p68Z9u52IBUy2caIUbKTGKZ8R+pej8kpRTRoB E7vKch/YpiFoprFmyfAX9XJ6nv+4+aRRDXDJrefCn83F4qQ2MSDNPnODAC4XdkNG aZFhI4iOnP6yVN7wYT1ZwujnARkWx3ZalVXhwJ1Y38hSFPVBHQmesfSmAdn4Begh S+pkPewIkkVGih5Dds5RjPCM/62NpuQbZAp8C1y2UdHE -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:17 2026 by rpki-client