This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6lGLeRbOM6_WaWgsuHIwe5wpGzQ.roa File: 6lGLeRbOM6_WaWgsuHIwe5wpGzQ.roa (raw, json) Hash identifier: Z6cK8qTeWmtFXpYD8sJtaXIRqHllqyFsPewKvmoxIF8= Subject key identifier: EA:51:8B:79:16:CE:33:AF:D6:69:68:2C:B8:72:30:7B:9C:29:1B:34 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12FBB83EB610E9BA53A32E97D21341 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6lGLeRbOM6_WaWgsuHIwe5wpGzQ.roa Signing time: Fri 02 Jan 2026 00:19:37 +0000 ROA not before: Fri 02 Jan 2026 00:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212341 IP address blocks: 89.144.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:fb:b8:3e:b6:10:e9:ba:53:a3:2e:97:d2:13:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea518b7916ce33afd669682cb872307b9c291b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:28:00:19:88:ce:04:02:43:5d:c4:f3:b3:d5: 2e:5b:0f:37:a1:2d:1f:84:81:61:af:76:97:bf:f6: 94:75:85:91:b0:d2:91:91:fa:2e:9a:f8:e3:13:f3: 89:cc:9c:a0:ba:15:35:d8:b1:8d:7f:cb:06:6b:37: 3b:dd:1c:21:c7:6e:c9:db:e0:cc:5f:1a:2a:ff:ca: 17:07:55:a3:fa:9f:3d:99:cc:86:72:f8:98:dd:8e: 2a:b1:43:33:05:09:d0:51:b4:e4:6f:9c:49:75:c0: 79:d9:a5:70:77:db:d5:0a:f7:a5:ff:88:a4:51:15: 60:0c:58:be:4e:ee:11:cc:4a:bf:3a:fa:08:0a:e9: 3a:2a:02:a2:dc:79:61:5b:00:05:95:1e:a7:86:6f: 13:53:65:c1:b1:04:b6:51:ed:c8:6d:bc:d4:8d:5c: 8d:ad:bd:f1:a7:55:d9:52:21:ef:d0:9c:3b:91:e1: 6a:6f:9a:e6:09:b7:0a:d4:74:f4:fb:ed:57:69:62: f0:aa:0d:25:d7:fa:a1:a6:e9:fd:ed:00:cd:86:dd: 86:38:5e:1f:aa:01:6e:0a:e9:d8:b5:c3:31:f5:5d: 8c:29:c9:59:54:8d:cd:f1:e9:d9:c5:60:ca:34:ed: 35:37:f5:d7:7a:17:f7:79:90:09:8a:c7:b6:74:a5: c7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:51:8B:79:16:CE:33:AF:D6:69:68:2C:B8:72:30:7B:9C:29:1B:34 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6lGLeRbOM6_WaWgsuHIwe5wpGzQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.144.2.0/24 Signature Algorithm: sha256WithRSAEncryption 30:35:1c:d4:9f:70:53:e1:f7:49:a8:8e:84:7c:3d:4d:a6:01: ef:b2:0f:7a:3d:4c:40:47:fa:7b:1c:b6:50:9b:fc:36:26:c5: 39:24:54:e2:c1:74:0c:3f:a1:ac:33:d4:15:2b:69:88:41:3d: 63:6d:ba:d0:e2:86:36:63:37:5a:11:fc:db:b1:6c:78:f3:aa: aa:6e:eb:f3:82:73:5f:45:4a:4b:0e:84:50:26:87:cd:37:9c: 4c:9d:77:5d:a5:d1:9b:ba:b2:59:3c:09:b4:42:51:0e:de:0b: d6:a4:3f:df:d7:c8:ca:41:11:2b:09:a8:30:a4:4f:c4:53:86: 2a:f6:b7:5e:43:ab:17:11:3a:75:df:fb:8d:96:79:2e:15:fa: 29:ef:5f:c1:8a:f8:0a:33:d6:64:aa:48:9f:12:55:b3:40:6f: 4c:63:1f:8a:17:1c:71:3c:16:72:49:28:10:6a:cb:a4:14:c6: bf:fe:c6:6d:bb:e8:0a:0d:5e:01:eb:0a:a2:23:62:71:6f:3f: 4a:c2:df:06:8c:cc:d1:c0:e7:4d:ab:25:16:04:ee:b0:bf:d6: 5e:ca:9c:59:5a:73:40:87:5a:dc:06:16:1b:87:f2:df:90:c5: ee:cc:97:1e:cb:c2:f0:56:f3:19:dc:64:42:1b:a4:c4:e9:80: eb:d7:9c:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Evu4PrYQ6bpToy6X0hNBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTUxOGI3OTE2Y2UzM2FmZDY2OTY4MmNiODcyMzA3YjljMjkxYjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCgAGYjOBAJDXcTzs9UuWw83oS0f hIFhr3aXv/aUdYWRsNKRkfoumvjjE/OJzJyguhU12LGNf8sGazc73Rwhx27J2+DM Xxoq/8oXB1Wj+p89mcyGcviY3Y4qsUMzBQnQUbTkb5xJdcB52aVwd9vVCvel/4ik URVgDFi+Tu4RzEq/OvoICuk6KgKi3HlhWwAFlR6nhm8TU2XBsQS2Ue3IbbzUjVyN rb3xp1XZUiHv0Jw7keFqb5rmCbcK1HT0++1XaWLwqg0l1/qhpun97QDNht2GOF4f qgFuCunYtcMx9V2MKclZVI3N8enZxWDKNO01N/XXehf3eZAJise2dKXHXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOpRi3kWzjOv1mloLLhyMHucKRs0MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvNmxHTGVSYk9NNl9XYVdnc3VISXdlNXdwR3pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWZACMA0G CSqGSIb3DQEBCwUAA4IBAQAwNRzUn3BT4fdJqI6EfD1NpgHvsg96PUxAR/p7HLZQ m/w2JsU5JFTiwXQMP6GsM9QVK2mIQT1jbbrQ4oY2YzdaEfzbsWx486qqbuvzgnNf RUpLDoRQJofNN5xMnXddpdGburJZPAm0QlEO3gvWpD/f18jKQRErCagwpE/EU4Yq 9rdeQ6sXETp13/uNlnkuFfop71/BivgKM9ZkqkifElWzQG9MYx+KFxxxPBZySSgQ asukFMa//sZtu+gKDV4B6wqiI2Jxbz9Kwt8GjMzRwOdNqyUWBO6wv9ZeypxZWnNA h1rcBhYbh/LfkMXuzJcey8LwVvMZ3GRCG6TE6YDr15zv -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:54 2026 by rpki-client