This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/6mugNtdudbDdBm5CKSX1k0XhW7Q.roa File: 6mugNtdudbDdBm5CKSX1k0XhW7Q.roa (raw, json) Hash identifier: QwJGGsLBaGqVdpKRP/uEJPtx3uyW+xZeB/D0UVYiuCA= Subject key identifier: EA:6B:A0:36:D7:6E:75:B0:DD:06:6E:42:29:25:F5:93:45:E1:5B:B4 Certificate issuer: /CN=cf89cb889f99212e8bf53d06e45d87abb9169506 Certificate serial: 019B7CECCC0F71C3CF503F79AFC3FA266B49 Authority key identifier: CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/6mugNtdudbDdBm5CKSX1k0XhW7Q.roa Signing time: Fri 02 Jan 2026 04:17:32 +0000 ROA not before: Fri 02 Jan 2026 04:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8779 IP address blocks: 46.252.208.0/20 maxlen: 20 78.152.160.0/19 maxlen: 19 94.230.192.0/20 maxlen: 20 185.15.4.0/23 maxlen: 23 2a00:6740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:cc:0f:71:c3:cf:50:3f:79:af:c3:fa:26:6b:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf89cb889f99212e8bf53d06e45d87abb9169506 Validity Not Before: Jan 2 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea6ba036d76e75b0dd066e422925f59345e15bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2b:57:80:8f:60:12:c9:f7:70:76:78:f4:c7: 1f:13:dd:ae:d4:49:05:27:1f:14:a6:9c:52:22:3c: 2c:c0:41:45:d6:e2:de:3f:23:26:78:55:37:f1:1b: 77:da:6a:ea:ae:09:aa:97:74:6a:7e:b3:59:5f:01: c9:eb:c2:a2:34:06:3b:9e:4f:97:15:03:c0:72:5a: ce:7b:e4:a5:20:d6:9c:42:ce:ab:ad:3b:6f:97:e8: 7e:7d:36:0d:1c:4b:4b:23:e0:83:71:67:99:86:dc: 2e:d1:0c:96:e5:8d:b4:6f:3f:d2:7f:21:ae:6c:e3: 87:71:d3:b5:3d:86:49:c5:2e:65:cb:f3:14:c9:70: 01:d9:45:af:32:0d:04:d8:e0:7a:c8:31:9f:c3:c6: 76:a0:a0:ad:d9:41:d3:ba:4a:ec:7c:ea:2e:b2:0a: 27:8e:cd:f4:84:e6:c8:7d:c8:21:11:69:2e:0c:68: 74:9e:fb:71:44:94:a9:92:d3:6b:7b:3a:c1:fb:96: e1:48:1f:62:0c:4e:bf:f1:4d:37:16:ab:a3:c5:22: a9:a4:ac:ef:83:e4:23:a4:eb:b6:c5:f4:4f:08:17: 2f:7e:50:62:ee:24:32:fb:d4:e7:03:15:10:ef:d0: cc:aa:f0:2c:1f:0e:53:8e:70:90:97:97:fb:6d:11: 4f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:6B:A0:36:D7:6E:75:B0:DD:06:6E:42:29:25:F5:93:45:E1:5B:B4 X509v3 Authority Key Identifier: keyid:CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/6mugNtdudbDdBm5CKSX1k0XhW7Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.252.208.0/20 78.152.160.0/19 94.230.192.0/20 185.15.4.0/23 IPv6: 2a00:6740::/32 Signature Algorithm: sha256WithRSAEncryption 8b:5e:51:b6:a2:fe:de:4f:4d:9b:a2:c0:f2:75:4a:cb:d0:b6: 33:13:74:40:10:9d:97:77:2b:f4:3c:aa:d3:35:94:e6:f2:ba: c7:fb:21:ae:67:c2:12:fb:59:de:36:c8:a3:da:18:bc:f4:55: 5b:5d:cd:e1:f7:20:ee:80:8d:ab:d8:c3:9a:4d:be:b7:cb:9a: f8:7a:68:72:cf:dc:16:c6:97:ab:90:c5:78:aa:72:79:2c:86: 66:41:48:e5:9f:22:43:da:b0:8f:de:34:17:50:8f:1f:8d:4d: e4:63:f2:11:99:b6:c2:39:3a:eb:04:e6:91:d4:69:1f:8f:70: ab:2b:4b:bf:ca:cf:ba:61:a8:c4:0b:dd:c8:b7:70:61:a4:69: ae:52:69:b5:6d:2a:12:cb:6e:7c:90:0e:92:d6:29:0f:04:f1: 45:f7:f4:c1:54:73:6c:d8:20:3a:56:27:cb:65:39:87:f7:fd: 3f:88:1f:36:f0:71:62:26:5e:54:7c:76:a0:bf:74:fd:3e:39: 52:de:4c:fa:f6:72:e5:38:80:ee:5b:8c:24:61:64:28:4f:da: 80:b7:b0:62:1e:6f:43:c9:0a:10:4f:6d:2d:a2:0d:ab:98:61: ee:29:58:c1:1f:dd:68:53:e7:61:88:e5:60:b4:2a:94:31:9a: 07:95:c6:b4 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt87MwPccPPUD95r8P6JmtJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmODljYjg4OWY5OTIxMmU4YmY1M2QwNmU0NWQ4N2FiYjkx Njk1MDYwHhcNMjYwMTAyMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTZiYTAzNmQ3NmU3NWIwZGQwNjZlNDIyOTI1ZjU5MzQ1ZTE1YmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoStXgI9gEsn3cHZ49McfE92u1EkF Jx8UppxSIjwswEFF1uLePyMmeFU38Rt32mrqrgmql3RqfrNZXwHJ68KiNAY7nk+X FQPAclrOe+SlINacQs6rrTtvl+h+fTYNHEtLI+CDcWeZhtwu0QyW5Y20bz/SfyGu bOOHcdO1PYZJxS5ly/MUyXAB2UWvMg0E2OB6yDGfw8Z2oKCt2UHTukrsfOousgon js30hObIfcghEWkuDGh0nvtxRJSpktNrezrB+5bhSB9iDE6/8U03FqujxSKppKzv g+QjpOu2xfRPCBcvflBi7iQy+9TnAxUQ79DMqvAsHw5TjnCQl5f7bRFPXwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFOproDbXbnWw3QZuQikl9ZNF4Vu0MB8GA1UdIwQY MBaAFM+Jy4ifmSEui/U9BuRdh6u5FpUGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejRuTGlKLVpJUzZMOVQwRzVGMkhxN2tXbFFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8wYjg5NTEtMjY5OS00NGIzLTkwNjct ZDlhNDBjNGQzMjkxLzEvNm11Z050ZHVkYkRkQm01Q0tTWDFrMFhoVzdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8wYjg5NTEtMjY5OS00NGIzLTkwNjctZDlhNDBjNGQzMjkx LzEvejRuTGlKLVpJUzZMOVQwRzVGMkhxN2tXbFFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQELvzQAwQF TpigAwQEXubAAwQBuQ8EMA0EAgACMAcDBQAqAGdAMA0GCSqGSIb3DQEBCwUAA4IB AQCLXlG2ov7eT02bosDydUrL0LYzE3RAEJ2Xdyv0PKrTNZTm8rrH+yGuZ8IS+1ne Nsij2hi89FVbXc3h9yDugI2r2MOaTb63y5r4emhyz9wWxperkMV4qnJ5LIZmQUjl nyJD2rCP3jQXUI8fjU3kY/IRmbbCOTrrBOaR1Gkfj3CrK0u/ys+6YajEC93It3Bh pGmuUmm1bSoSy258kA6S1ikPBPFF9/TBVHNs2CA6VifLZTmH9/0/iB828HFiJl5U fHagv3T9PjlS3kz69nLlOIDuW4wkYWQoT9qAt7BiHm9DyQoQT20tog2rmGHuKVjB H91oU+dhiOVgtCqUMZoHlca0 -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:16 2026 by rpki-client