This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6fMjgTrIePHABbRBNRu19waA330.roa File: 6fMjgTrIePHABbRBNRu19waA330.roa (raw, json) Hash identifier: +PJKeA3l0lRXVfg/+DbmjRlYrAL0CJAvp3EFqXyopGc= Subject key identifier: E9:F3:23:81:3A:C8:78:F1:C0:05:B4:41:35:1B:B5:F7:06:80:DF:7D Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12E351F3BF62B5CEC9E627734D3BB6 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6fMjgTrIePHABbRBNRu19waA330.roa Signing time: Fri 02 Jan 2026 00:19:31 +0000 ROA not before: Fri 02 Jan 2026 00:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197071 IP address blocks: 5.83.135.0/24 maxlen: 24 5.175.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:e3:51:f3:bf:62:b5:ce:c9:e6:27:73:4d:3b:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9f323813ac878f1c005b441351bb5f70680df7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7d:7b:0b:41:84:79:62:ec:10:04:76:be:a6: 02:4a:23:84:34:f8:be:81:01:f7:e8:fc:40:2f:4e: 61:08:04:f0:d6:ad:9f:19:fe:fa:11:84:71:9f:16: 9a:f7:a7:4e:0c:9a:5b:50:3d:e3:d9:ae:74:c4:e7: 9a:ef:14:60:2d:5d:df:3b:c2:5d:52:fc:3b:93:27: bf:35:e6:9b:1d:60:e7:35:8d:25:ef:4b:c0:0c:ab: 66:c9:a7:cd:89:3c:01:76:32:7a:16:d2:df:1e:3e: 55:e8:0b:28:8c:9b:92:ed:33:5d:50:98:93:b1:a8: fd:96:78:6e:65:72:0f:11:f2:d6:5e:bc:70:91:d7: 0b:5e:47:65:5e:8f:0f:fb:93:0d:78:b0:73:47:a3: 7f:52:c3:6b:dd:de:aa:e1:09:55:88:0a:df:ea:a2: 7b:49:11:7d:f5:34:dc:6c:96:f8:1d:d5:9d:8b:8d: 34:bd:f3:1b:d2:ac:8b:7f:4d:2b:df:2f:6c:e4:94: d0:bf:4d:3d:df:9e:fc:32:ea:fe:97:82:5a:0c:52: cd:4b:3f:58:24:ed:e9:8b:d8:50:a8:fa:60:10:b4: ff:88:b2:c2:3e:b3:9b:49:c7:db:c6:d5:0c:f0:8b: 79:51:71:64:57:b7:4c:cb:13:92:60:a6:c4:3e:84: 2a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F3:23:81:3A:C8:78:F1:C0:05:B4:41:35:1B:B5:F7:06:80:DF:7D X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6fMjgTrIePHABbRBNRu19waA330.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.135.0/24 5.175.206.0/24 Signature Algorithm: sha256WithRSAEncryption 12:f5:ae:d1:bc:2a:e4:13:69:68:4b:bd:28:3f:b0:b7:90:03: d7:a2:b0:57:cb:68:4a:0c:b4:4f:e2:2b:db:95:2d:2e:7c:19: 5c:dd:af:b8:39:0c:96:6c:1d:ef:d6:f5:ed:8b:c4:0a:c9:61: 01:88:33:69:db:07:31:d4:ed:3f:47:95:a4:0b:10:1f:20:4c: 13:5a:4f:bf:ae:07:dd:a2:23:b0:1c:1e:10:c7:19:33:7c:32: 9b:99:a4:20:c9:e8:f7:41:43:ba:f8:b6:5e:05:0b:72:ec:6b: c1:6a:d1:8e:3a:e8:79:c3:5c:36:9c:09:ab:21:4c:6b:ed:9f: ee:a7:f3:63:48:3c:bb:64:f3:48:0b:18:d2:64:b3:25:a0:fe: e2:c5:bf:80:8b:92:6b:9a:40:d4:3b:0e:7d:b3:6d:8b:28:f3: bf:81:e6:62:6f:ce:7d:0e:4a:a4:f3:d6:3f:35:0f:75:c1:22: 84:41:c8:21:61:34:18:19:3a:6e:4e:a8:7e:ee:d9:09:3e:d4: fa:3e:8b:4a:6f:16:d4:46:26:d7:59:20:f9:d9:2d:45:69:ed: 21:1b:33:e7:9d:c3:f0:56:67:1e:10:ee:27:3a:c6:54:91:b1: 98:65:80:dd:14:91:01:38:dd:24:f8:2c:e6:9b:8e:b2:26:7f: ae:52:4a:55 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EuNR879itc7J5idzTTu2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWYzMjM4MTNhYzg3OGYxYzAwNWI0NDEzNTFiYjVmNzA2ODBkZjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq317C0GEeWLsEAR2vqYCSiOENPi+ gQH36PxAL05hCATw1q2fGf76EYRxnxaa96dODJpbUD3j2a50xOea7xRgLV3fO8Jd Uvw7kye/NeabHWDnNY0l70vADKtmyafNiTwBdjJ6FtLfHj5V6AsojJuS7TNdUJiT saj9lnhuZXIPEfLWXrxwkdcLXkdlXo8P+5MNeLBzR6N/UsNr3d6q4QlViArf6qJ7 SRF99TTcbJb4HdWdi400vfMb0qyLf00r3y9s5JTQv0093578Mur+l4JaDFLNSz9Y JO3pi9hQqPpgELT/iLLCPrObScfbxtUM8It5UXFkV7dMyxOSYKbEPoQqyQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOnzI4E6yHjxwAW0QTUbtfcGgN99MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvNmZNamdUckllUEhBQmJSQk5SdTE5d2FBMzMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABVOHAwQA Ba/OMA0GCSqGSIb3DQEBCwUAA4IBAQAS9a7RvCrkE2loS70oP7C3kAPXorBXy2hK DLRP4ivblS0ufBlc3a+4OQyWbB3v1vXti8QKyWEBiDNp2wcx1O0/R5WkCxAfIEwT Wk+/rgfdoiOwHB4QxxkzfDKbmaQgyej3QUO6+LZeBQty7GvBatGOOuh5w1w2nAmr IUxr7Z/up/NjSDy7ZPNICxjSZLMloP7ixb+Ai5JrmkDUOw59s22LKPO/geZib859 Dkqk89Y/NQ91wSKEQcghYTQYGTpuTqh+7tkJPtT6PotKbxbURibXWSD52S1Fae0h GzPnncPwVmceEO4nOsZUkbGYZYDdFJEBON0k+Czmm46yJn+uUkpV -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:34 2026 by rpki-client