This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/6r3q3z9OFjrJ9qoUTQKhOroMbaM.roa File: 6r3q3z9OFjrJ9qoUTQKhOroMbaM.roa (raw, json) Hash identifier: 29mycutC5foPo3U8nHm9mrCTYw4984xkZIx+WiI1F9M= Subject key identifier: EA:BD:EA:DF:3F:4E:16:3A:C9:F6:AA:14:4D:02:A1:3A:BA:0C:6D:A3 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019B7A59B13F99881D4AE1D5028062745D2B Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/6r3q3z9OFjrJ9qoUTQKhOroMbaM.roa Signing time: Thu 01 Jan 2026 16:17:37 +0000 ROA not before: Thu 01 Jan 2026 16:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46261 IP address blocks: 139.28.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:b1:3f:99:88:1d:4a:e1:d5:02:80:62:74:5d:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Jan 1 16:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eabdeadf3f4e163ac9f6aa144d02a13aba0c6da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c9:ad:b1:dc:5b:01:d5:11:ac:fa:35:0e:4f: 6f:b5:04:f7:fa:1c:b5:eb:0c:49:25:24:39:a3:29: a3:e8:8a:c2:50:15:dd:38:8b:30:77:69:61:52:fd: 62:c8:37:c4:22:7d:a4:78:0f:a3:3c:59:bb:2d:85: 1c:7d:2b:5f:45:3a:4f:be:28:30:e9:e0:d1:8d:c4: 1b:44:cb:33:a7:d4:e1:ab:5c:84:94:a4:16:67:e1: 59:0b:63:b4:5e:88:7f:04:96:81:5d:20:fe:66:e2: da:e9:d4:50:21:94:0b:db:e7:a0:97:36:68:bf:87: 51:8f:d4:fa:84:c0:a6:e6:d5:5a:e1:6e:e2:5c:e0: da:b0:ff:25:cb:1f:28:03:63:1e:61:45:3c:d5:55: ef:51:af:e6:31:80:6c:c9:62:da:d0:51:e4:fa:03: 5d:16:be:6d:6d:82:1d:c1:b7:59:76:49:c8:64:0c: b2:65:12:45:bb:50:86:ba:91:d1:0f:0a:a4:0d:8b: 1d:c1:9a:d6:9b:49:07:7c:e2:4c:9c:67:75:eb:1d: fd:3d:41:43:1b:1f:d5:aa:0b:f5:c0:c5:f0:fe:9f: 74:65:c7:c3:ec:9b:01:0a:d9:2e:22:e1:65:04:30: c7:96:85:fb:c6:c9:3a:bb:b1:aa:2b:ae:9e:8d:aa: 09:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:BD:EA:DF:3F:4E:16:3A:C9:F6:AA:14:4D:02:A1:3A:BA:0C:6D:A3 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/6r3q3z9OFjrJ9qoUTQKhOroMbaM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.28.136.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:c2:3c:f1:e9:a2:49:10:b6:4b:04:42:d8:d0:26:b5:b6:f6: 03:0e:f2:6c:5c:a5:74:3c:44:27:ad:d5:95:3a:aa:fb:80:9c: 17:ec:db:c1:bf:91:fd:74:6e:3d:b7:24:a5:eb:5e:13:af:b8: 73:06:9d:8f:ad:6f:44:f7:d3:a2:2d:5f:8b:a9:3f:46:2c:c7: 1f:50:a2:f7:48:fe:66:ec:8d:9c:3a:6d:d1:d8:3c:fa:11:e5: 96:5c:56:e9:fa:73:a9:9f:30:a5:b6:a1:4c:d8:45:50:ed:1a: 91:32:ac:4f:41:20:c7:a0:d7:c1:d8:64:56:64:d6:d3:69:e4: d5:2b:fc:d8:f3:56:e0:db:3e:45:01:e4:4f:ba:71:e4:9e:be: dc:2c:54:99:f0:e7:56:bc:fe:2e:c7:8e:eb:af:4e:e6:4d:34: 72:ff:79:5f:98:92:50:5a:18:ac:0f:e4:12:72:10:59:17:f9: ea:46:3a:e5:c8:77:33:9f:40:04:fa:c8:4a:dc:1a:f6:1a:df: 37:90:8f:f3:57:16:6f:f4:a9:57:c4:86:2c:01:93:5f:98:ce: cd:80:e2:6d:1b:70:43:9c:0f:9f:31:db:53:40:8e:06:62:54: ad:58:22:40:30:d3:77:ee:63:57:e1:a8:a4:f2:e6:62:ef:fb: c7:07:fd:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WbE/mYgdSuHVAoBidF0rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwMTAxMTYxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWJkZWFkZjNmNGUxNjNhYzlmNmFhMTQ0ZDAyYTEzYWJhMGM2ZGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMmtsdxbAdURrPo1Dk9vtQT3+hy1 6wxJJSQ5oymj6IrCUBXdOIswd2lhUv1iyDfEIn2keA+jPFm7LYUcfStfRTpPvigw 6eDRjcQbRMszp9Thq1yElKQWZ+FZC2O0Xoh/BJaBXSD+ZuLa6dRQIZQL2+eglzZo v4dRj9T6hMCm5tVa4W7iXODasP8lyx8oA2MeYUU81VXvUa/mMYBsyWLa0FHk+gNd Fr5tbYIdwbdZdknIZAyyZRJFu1CGupHRDwqkDYsdwZrWm0kHfOJMnGd16x39PUFD Gx/Vqgv1wMXw/p90ZcfD7JsBCtkuIuFlBDDHloX7xsk6u7GqK66ejaoJ3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOq96t8/ThY6yfaqFE0CoTq6DG2jMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvNnIzcTN6OU9GanJKOXFvVVRRS2hPcm9NYmFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAixyIMA0G CSqGSIb3DQEBCwUAA4IBAQBMwjzx6aJJELZLBELY0Ca1tvYDDvJsXKV0PEQnrdWV Oqr7gJwX7NvBv5H9dG49tySl614Tr7hzBp2PrW9E99OiLV+LqT9GLMcfUKL3SP5m 7I2cOm3R2Dz6EeWWXFbp+nOpnzCltqFM2EVQ7RqRMqxPQSDHoNfB2GRWZNbTaeTV K/zY81bg2z5FAeRPunHknr7cLFSZ8OdWvP4ux47rr07mTTRy/3lfmJJQWhisD+QS chBZF/nqRjrlyHczn0AE+shK3Br2Gt83kI/zVxZv9KlXxIYsAZNfmM7NgOJtG3BD nA+fMdtTQI4GYlStWCJAMNN37mNX4aik8uZi7/vHB/2x -----END CERTIFICATE-----Generated at Mon Jan 5 03:57:57 2026 by rpki-client