This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/6pgIGLkDK4SsPvd5O6nkCW0Aieg.roa File: 6pgIGLkDK4SsPvd5O6nkCW0Aieg.roa (raw, json) Hash identifier: e5J3SLEEVC0bCn42X4/k+intNwPoXVhopRIC0Xq8ZiQ= Subject key identifier: EA:98:08:18:B9:03:2B:84:AC:3E:F7:79:3B:A9:E4:09:6D:00:89:E8 Certificate issuer: /CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824 Certificate serial: 019B797E4163592DB31C48399C70CA132CFC Authority key identifier: A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/6pgIGLkDK4SsPvd5O6nkCW0Aieg.roa Signing time: Thu 01 Jan 2026 12:17:55 +0000 ROA not before: Thu 01 Jan 2026 12:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39741 IP address blocks: 31.25.240.0/21 maxlen: 24 31.25.247.0/24 maxlen: 24 185.234.116.0/24 maxlen: 24 185.234.117.0/24 maxlen: 24 185.234.118.0/24 maxlen: 24 185.234.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:41:63:59:2d:b3:1c:48:39:9c:70:ca:13:2c:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824 Validity Not Before: Jan 1 12:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea980818b9032b84ac3ef7793ba9e4096d0089e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cb:8c:85:13:ef:13:e1:59:90:5f:d9:36:0b: 1d:5c:0a:8e:6f:58:cc:0c:2b:8a:a3:69:d1:a5:b7: 96:7c:c9:1d:29:51:56:bd:3b:ce:84:05:c8:14:67: 94:34:24:3c:f5:43:00:b0:41:e5:8e:5b:f8:bd:a5: 10:01:bc:fe:08:29:21:69:13:11:00:b2:1f:26:31: a3:0d:c9:7f:1c:d0:02:2c:24:c2:31:27:a6:d5:18: dc:e8:94:b2:ae:7d:98:40:d7:41:74:b9:7b:89:ae: db:bf:15:9c:52:7e:52:1b:75:70:e4:58:68:00:a6: 6e:e6:c5:63:64:53:75:d5:83:3f:58:16:ac:b1:00: dc:e1:7b:d8:a9:f8:79:4a:f5:c6:70:8e:b1:dd:32: 0b:39:6d:c0:4d:d8:45:49:32:88:80:a9:c7:0d:ed: c2:9e:c7:0d:5d:be:11:86:90:97:ec:ae:e9:50:31: 86:a1:52:bd:16:69:79:d2:2c:8b:fc:77:4e:7c:15: ff:60:62:b1:24:21:62:08:3f:e3:01:0a:47:ca:f2: 41:77:0a:5d:2f:d9:d1:73:e8:fd:38:32:5f:48:92: 8e:b8:2e:3c:aa:77:97:22:2d:76:f0:2c:8a:0b:50: 10:39:f9:c7:46:70:04:28:c4:4f:59:97:03:2d:27: 29:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:98:08:18:B9:03:2B:84:AC:3E:F7:79:3B:A9:E4:09:6D:00:89:E8 X509v3 Authority Key Identifier: keyid:A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/6pgIGLkDK4SsPvd5O6nkCW0Aieg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.25.240.0/21 185.234.116.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:5d:32:07:4d:01:3c:0a:09:e1:93:49:4c:5a:97:fc:eb:a7: 4a:bf:d5:37:b6:be:e2:d3:2e:28:84:99:34:e0:0f:3a:d0:c1: e0:48:dc:70:57:21:b6:07:7c:c6:17:e7:1e:ab:7c:10:58:92: 5e:c2:fd:ad:bb:a4:fe:fb:c5:05:fe:b2:dc:63:24:5c:33:ef: d9:88:cd:ed:87:43:17:5e:66:28:c0:2f:05:45:e8:8c:9a:a8: 29:5c:7f:56:d5:6e:9e:6a:f8:38:41:df:87:eb:be:87:9f:8f: b1:75:03:c4:b8:22:ba:aa:c4:02:3f:38:d8:9c:59:f6:9a:68: da:72:7c:86:6f:8e:3e:06:4b:d5:86:9f:07:82:e4:72:7b:43: 9e:4a:b8:d1:c5:c2:64:a0:e3:3a:2c:9e:09:cf:97:ca:15:80: b8:56:50:9e:28:66:d2:cd:8b:4a:24:f7:d6:1f:c6:0d:e5:d7: d3:2a:6d:da:56:4e:bc:62:78:06:22:bb:94:a3:48:d1:64:c8: 22:4c:f9:0d:39:32:3e:8c:e9:04:0d:5a:eb:46:0b:23:61:78: 9e:ce:29:84:e2:0f:22:be:38:e4:1b:e3:54:45:34:eb:ef:1e: 27:7d:d2:30:4c:12:24:89:a0:d1:9e:97:35:61:20:7d:1f:5d: 2c:de:1b:bf -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fkFjWS2zHEg5nHDKEyz8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyY2JlOWFiYTFmZjc1NjRkOTEzZWQ3ODY3MmUzMzcxYjdm MzU4MjQwHhcNMjYwMTAxMTIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTk4MDgxOGI5MDMyYjg0YWMzZWY3NzkzYmE5ZTQwOTZkMDA4OWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsuMhRPvE+FZkF/ZNgsdXAqOb1jM DCuKo2nRpbeWfMkdKVFWvTvOhAXIFGeUNCQ89UMAsEHljlv4vaUQAbz+CCkhaRMR ALIfJjGjDcl/HNACLCTCMSem1Rjc6JSyrn2YQNdBdLl7ia7bvxWcUn5SG3Vw5Fho AKZu5sVjZFN11YM/WBassQDc4XvYqfh5SvXGcI6x3TILOW3ATdhFSTKIgKnHDe3C nscNXb4RhpCX7K7pUDGGoVK9Fml50iyL/HdOfBX/YGKxJCFiCD/jAQpHyvJBdwpd L9nRc+j9ODJfSJKOuC48qneXIi128CyKC1AQOfnHRnAEKMRPWZcDLScpqQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOqYCBi5AyuErD73eTup5AltAInoMB8GA1UdIwQY MBaAFKLL6auh/3Vk2RPteGcuM3G381gkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3N2cHE2SF9kV1RaRS0xNFp5NHpjYmZ6V0NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS80MDhlODMtNTMwZC00NDYyLWIxYzkt ZGYzMjRjNGM2ZWVkLzEvNnBnSUdMa0RLNFNzUHZkNU82bmtDVzBBaWVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS80MDhlODMtNTMwZC00NDYyLWIxYzktZGYzMjRjNGM2ZWVk LzEvb3N2cHE2SF9kV1RaRS0xNFp5NHpjYmZ6V0NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDHxnwAwQC uep0MA0GCSqGSIb3DQEBCwUAA4IBAQBPXTIHTQE8Cgnhk0lMWpf866dKv9U3tr7i 0y4ohJk04A860MHgSNxwVyG2B3zGF+ceq3wQWJJewv2tu6T++8UF/rLcYyRcM+/Z iM3th0MXXmYowC8FReiMmqgpXH9W1W6eavg4Qd+H676Hn4+xdQPEuCK6qsQCPzjY nFn2mmjacnyGb44+BkvVhp8HguRye0OeSrjRxcJkoOM6LJ4Jz5fKFYC4VlCeKGbS zYtKJPfWH8YN5dfTKm3aVk68YngGIruUo0jRZMgiTPkNOTI+jOkEDVrrRgsjYXie zimE4g8ivjjkG+NURTTr7x4nfdIwTBIkiaDRnpc1YSB9H10s3hu/ -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:38 2026 by rpki-client