This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/6HD8yje24V-7FIcNeR1XvMkEBR0.roa File: 6HD8yje24V-7FIcNeR1XvMkEBR0.roa (raw, json) Hash identifier: 6DkKcnhqjQUDPr7sEl35wcLlE+CRZzVKP7/RHwOWD2o= Subject key identifier: E8:70:FC:CA:37:B6:E1:5F:BB:14:87:0D:79:1D:57:BC:C9:04:05:1D Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Certificate serial: 019B7E38F32545A6CD23C10ADFD2A5B77A6D Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/6HD8yje24V-7FIcNeR1XvMkEBR0.roa Signing time: Fri 02 Jan 2026 10:20:19 +0000 ROA not before: Fri 02 Jan 2026 10:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215168 IP address blocks: 109.122.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 10:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f3:25:45:a6:cd:23:c1:0a:df:d2:a5:b7:7a:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Validity Not Before: Jan 2 10:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e870fcca37b6e15fbb14870d791d57bcc904051d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d7:e6:52:48:25:55:57:5c:f5:2d:a7:03:0c: db:fb:61:68:f1:80:d0:4f:55:1c:b0:20:f4:a7:96: b1:98:44:31:25:c6:1a:72:a3:b5:53:b5:a4:70:8e: 95:b0:35:6e:f4:7f:7e:e8:a1:32:6b:0b:47:96:a7: 05:7b:58:79:b2:fa:42:29:59:2a:df:10:b2:09:d4: 95:20:5c:e5:a4:63:a9:79:f2:5e:59:88:0e:7b:02: 9c:bd:88:eb:79:04:f2:fb:45:13:2b:c8:4e:85:4b: 19:e4:1c:af:3b:4c:28:e3:d0:e3:27:56:57:23:50: 50:cc:f9:17:9c:9d:70:52:a8:7c:fb:cc:3c:8e:3b: 1b:47:fb:60:0d:30:97:69:1f:b8:31:8c:a0:47:92: ca:eb:66:d9:40:8b:f9:31:c8:5f:6e:b6:08:63:b4: a5:c8:b5:e7:54:a4:66:d3:68:2a:e5:3c:4e:af:ed: f6:1d:98:26:8c:a2:eb:fc:a2:dc:a4:8f:a4:8e:45: e7:df:7c:ac:9d:c1:98:7a:c8:e4:67:88:3b:c4:04: be:70:70:36:29:28:3b:a8:fb:22:0b:2a:de:ce:02: bc:7c:10:bb:2e:b2:55:70:e7:98:73:bb:51:83:2a: a3:0c:c5:59:5f:4c:e1:8c:d7:ef:1d:d6:9a:f4:90: 97:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:70:FC:CA:37:B6:E1:5F:BB:14:87:0D:79:1D:57:BC:C9:04:05:1D X509v3 Authority Key Identifier: keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/6HD8yje24V-7FIcNeR1XvMkEBR0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.28.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:d0:95:78:f6:ae:95:1d:04:95:a4:0b:2a:9e:da:69:88:28: 6e:d4:64:1b:8d:db:33:3a:93:df:b1:87:11:c3:e7:a6:37:58: 96:f2:9b:8d:ab:b7:a7:b7:2c:b5:77:d1:e6:43:6a:40:0b:95: 80:23:54:f8:35:18:71:33:ac:5b:0c:ed:23:41:7c:f0:0f:b8: 6e:15:f2:31:2d:80:cf:27:93:ce:2c:23:9d:42:57:e3:e2:5f: 3b:6f:8b:e3:c0:23:3e:20:3e:98:19:c1:a9:8a:3f:90:35:7e: 95:79:69:3d:f8:8a:87:f5:fe:85:92:ad:60:1e:70:40:69:56: 81:28:06:6e:d3:98:33:0c:2d:a2:70:db:ac:63:65:ec:eb:f3: 7b:bb:ba:91:3d:24:c2:e3:d5:86:2e:ba:b7:f7:7d:20:ae:bc: 1e:77:ee:59:a4:1c:1b:d9:42:6b:47:0a:59:a4:02:fe:81:72: 39:80:e1:79:e1:cb:42:34:00:ac:46:a5:10:48:7f:75:7f:80: 1a:5e:20:be:b1:d8:4e:1b:48:d1:99:de:22:bb:3f:60:1a:24: b9:4b:41:3e:7a:37:ea:20:48:d7:3d:21:f6:1c:8c:57:11:99: 6e:f9:54:04:de:1c:c9:a0:5b:4e:e0:18:f7:18:8a:0c:f2:a0: 73:35:5c:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OPMlRabNI8EK39Klt3ptMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3 OGE1NzkwHhcNMjYwMTAyMTAyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODcwZmNjYTM3YjZlMTVmYmIxNDg3MGQ3OTFkNTdiY2M5MDQwNTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidfmUkglVVdc9S2nAwzb+2Fo8YDQ T1UcsCD0p5axmEQxJcYacqO1U7WkcI6VsDVu9H9+6KEyawtHlqcFe1h5svpCKVkq 3xCyCdSVIFzlpGOpefJeWYgOewKcvYjreQTy+0UTK8hOhUsZ5ByvO0wo49DjJ1ZX I1BQzPkXnJ1wUqh8+8w8jjsbR/tgDTCXaR+4MYygR5LK62bZQIv5MchfbrYIY7Sl yLXnVKRm02gq5TxOr+32HZgmjKLr/KLcpI+kjkXn33ysncGYesjkZ4g7xAS+cHA2 KSg7qPsiCyrezgK8fBC7LrJVcOeYc7tRgyqjDMVZX0zhjNfvHdaa9JCXtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOhw/Mo3tuFfuxSHDXkdV7zJBAUdMB8GA1UdIwQY MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt YTM5YWMyNTM5ZmM1LzEvNkhEOHlqZTI0Vi03RkljTmVSMVh2TWtFQlIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1 LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXocMA0G CSqGSIb3DQEBCwUAA4IBAQAL0JV49q6VHQSVpAsqntppiChu1GQbjdszOpPfsYcR w+emN1iW8puNq7entyy1d9HmQ2pAC5WAI1T4NRhxM6xbDO0jQXzwD7huFfIxLYDP J5POLCOdQlfj4l87b4vjwCM+ID6YGcGpij+QNX6VeWk9+IqH9f6Fkq1gHnBAaVaB KAZu05gzDC2icNusY2Xs6/N7u7qRPSTC49WGLrq3930grrwed+5ZpBwb2UJrRwpZ pAL+gXI5gOF54ctCNACsRqUQSH91f4AaXiC+sdhOG0jRmd4iuz9gGiS5S0E+ejfq IEjXPSH2HIxXEZlu+VQE3hzJoFtO4Bj3GIoM8qBzNVwS -----END CERTIFICATE-----Generated at Sun Jan 11 21:02:29 2026 by rpki-client