This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/J6FmNDAxHRgFsssLSzgzQh53r1Y.roa File: J6FmNDAxHRgFsssLSzgzQh53r1Y.roa (raw, json) Hash identifier: 9kmfubQa+S1khPjpZARKisbPrmjL4y5wvcmzrFU7yFI= Subject key identifier: 27:A1:66:34:30:31:1D:18:05:B2:CB:0B:4B:38:33:42:1E:77:AF:56 Certificate issuer: /CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4 Certificate serial: 019B7CED177C762E6FDF4355BAD735582DBC Authority key identifier: D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/J6FmNDAxHRgFsssLSzgzQh53r1Y.roa Signing time: Fri 02 Jan 2026 04:17:51 +0000 ROA not before: Fri 02 Jan 2026 04:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49010 IP address blocks: 193.0.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:17:7c:76:2e:6f:df:43:55:ba:d7:35:58:2d:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4 Validity Not Before: Jan 2 04:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27a1663430311d1805b2cb0b4b3833421e77af56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ff:63:20:88:c9:79:9c:2a:10:6b:3f:c7:f4: 6d:55:f6:30:fe:de:4e:9e:05:1c:ac:29:47:fd:3d: d3:7b:2a:8b:aa:9a:ec:cf:04:e8:5f:7c:24:d8:87: 1a:7b:d6:01:0a:a6:38:e5:7c:d7:4e:13:e6:8c:d8: 09:cb:f8:f9:33:64:ec:af:70:5d:5d:da:cc:d0:ff: 76:8d:0d:92:54:4a:61:e1:70:75:92:67:27:4e:a9: df:a2:d8:39:50:b4:6f:f2:a6:ce:26:08:86:33:75: 14:4a:65:c7:1e:82:5a:8e:0f:6c:36:d6:5e:af:39: da:1e:d3:65:40:2d:76:a0:1e:b5:46:43:1d:ff:56: 49:56:79:ca:3d:08:2b:1f:84:17:18:23:68:ee:3f: 77:2f:9c:18:12:77:97:51:c2:e9:b3:08:1d:60:df: e9:ca:34:1b:53:86:8d:98:b7:5b:68:62:88:30:d0: 88:96:4a:2a:0c:f1:c9:80:ad:28:c2:84:86:9e:04: 0c:9b:b0:04:75:d9:27:a2:e5:65:d7:c7:4a:74:26: 1d:4c:65:53:cb:f1:ae:e1:39:82:87:ee:75:67:2f: 2c:f2:86:0c:6c:f8:b2:16:5a:8d:32:66:6f:33:ba: 60:b8:aa:c1:1a:20:e3:07:4c:e2:d3:7a:ec:05:f2: 79:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A1:66:34:30:31:1D:18:05:B2:CB:0B:4B:38:33:42:1E:77:AF:56 X509v3 Authority Key Identifier: keyid:D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/J6FmNDAxHRgFsssLSzgzQh53r1Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.161.0/24 Signature Algorithm: sha256WithRSAEncryption 54:24:b9:d3:97:40:62:30:fb:ad:d1:c4:71:cf:ec:31:3b:58: a5:be:6b:47:a3:7c:a7:5e:26:5d:c2:20:b3:1b:c1:e6:e0:7f: 02:5a:55:ed:9d:23:08:65:7f:9b:3f:72:d6:5c:85:6c:b2:eb: ca:a3:5b:98:48:2f:d7:28:02:77:5b:97:65:ad:cb:da:aa:5e: 5b:84:62:a2:c5:99:95:f4:80:c6:9a:a2:dd:3e:5a:a7:cf:b1: 98:e2:89:17:a6:21:c6:84:a5:da:71:cc:89:49:c1:46:15:34: 93:57:ac:27:36:a1:50:e1:32:a9:95:a6:01:be:a6:57:d8:83: 7a:c3:cb:bc:b4:5d:6c:47:d6:67:6a:fd:27:d9:93:c5:48:cc: bf:cd:ae:27:68:9b:9d:55:4d:5a:9b:7c:f2:02:a2:77:f8:e0: 7c:f5:3b:bc:26:9a:5b:8d:81:61:b0:67:af:dc:bf:8b:93:1e: 26:0e:8d:5e:36:d0:35:0f:a9:ea:93:18:cd:10:12:97:24:1c: 38:a1:f5:45:fe:50:84:65:98:f1:12:e7:ea:c0:e1:3c:26:ac: cf:ec:d8:43:bc:0b:a0:5f:72:51:31:11:a9:e9:ba:2c:eb:f9: 73:0c:6c:71:58:5b:80:8d:f7:aa:a5:fe:9f:04:eb:d0:3f:68: 34:0a:03:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Rd8di5v30NVutc1WC28MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MmVhOTJlY2M5YjBkMzU0YjVmZDcwMmUwOTkxZjE1MGEz MDlmZTQwHhcNMjYwMTAyMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2ExNjYzNDMwMzExZDE4MDViMmNiMGI0YjM4MzM0MjFlNzdhZjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/9jIIjJeZwqEGs/x/RtVfYw/t5O ngUcrClH/T3TeyqLqprszwToX3wk2Icae9YBCqY45XzXThPmjNgJy/j5M2Tsr3Bd XdrM0P92jQ2SVEph4XB1kmcnTqnfotg5ULRv8qbOJgiGM3UUSmXHHoJajg9sNtZe rznaHtNlQC12oB61RkMd/1ZJVnnKPQgrH4QXGCNo7j93L5wYEneXUcLpswgdYN/p yjQbU4aNmLdbaGKIMNCIlkoqDPHJgK0owoSGngQMm7AEddknouVl18dKdCYdTGVT y/Gu4TmCh+51Zy8s8oYMbPiyFlqNMmZvM7pguKrBGiDjB0zi03rsBfJ5ywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCehZjQwMR0YBbLLC0s4M0Ied69WMB8GA1UdIwQY MBaAFNYuqS7Mmw01S1/XAuCZHxUKMJ/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWk2cExzeWJEVFZMWDljQzRKa2ZGUW93bi1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi83YjU4MTQtN2M3Ni00OTVjLWE2ZTct NTQ1OTQ3OTVlZWEyLzEvSjZGbU5EQXhIUmdGc3NzTFN6Z3pRaDUzcjFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi83YjU4MTQtN2M3Ni00OTVjLWE2ZTctNTQ1OTQ3OTVlZWEy LzEvMWk2cExzeWJEVFZMWDljQzRKa2ZGUW93bi1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQChMA0G CSqGSIb3DQEBCwUAA4IBAQBUJLnTl0BiMPut0cRxz+wxO1ilvmtHo3ynXiZdwiCz G8Hm4H8CWlXtnSMIZX+bP3LWXIVssuvKo1uYSC/XKAJ3W5dlrcvaql5bhGKixZmV 9IDGmqLdPlqnz7GY4okXpiHGhKXaccyJScFGFTSTV6wnNqFQ4TKplaYBvqZX2IN6 w8u8tF1sR9Znav0n2ZPFSMy/za4naJudVU1am3zyAqJ3+OB89Tu8JppbjYFhsGev 3L+Lkx4mDo1eNtA1D6nqkxjNEBKXJBw4ofVF/lCEZZjxEufqwOE8JqzP7NhDvAug X3JRMRGp6bos6/lzDGxxWFuAjfeqpf6fBOvQP2g0CgMt -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:37 2026 by rpki-client