This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/F6dm6rbFCCa1zY93BjJGyeETnt0.roa File: F6dm6rbFCCa1zY93BjJGyeETnt0.roa (raw, json) Hash identifier: rxY7ve2qQTaZM6DINcyNbHpjuzjA22sFgi08sTK9Teo= Subject key identifier: 17:A7:66:EA:B6:C5:08:26:B5:CD:8F:77:06:32:46:C9:E1:13:9E:DD Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13E42934D278971D94E86BB57385FF Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/F6dm6rbFCCa1zY93BjJGyeETnt0.roa Signing time: Fri 02 Jan 2026 14:19:28 +0000 ROA not before: Fri 02 Jan 2026 14:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25408 IP address blocks: 37.112.248.0/21 maxlen: 24 88.204.96.0/23 maxlen: 23 185.42.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:e4:29:34:d2:78:97:1d:94:e8:6b:b5:73:85:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17a766eab6c50826b5cd8f77063246c9e1139edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ab:87:82:87:28:00:0a:08:5a:a1:00:60:a1: f2:c5:08:b0:24:1e:c4:bc:58:d3:a4:ba:26:67:d8: 40:d4:9c:de:74:d9:99:1a:1f:30:ff:62:7f:93:ff: e9:26:82:51:1c:af:8e:57:a5:6b:ff:84:01:e3:02: 82:11:70:94:ce:00:b4:31:d2:26:bd:66:4a:5c:a3: d6:27:36:20:43:5b:e5:bd:36:52:af:4c:43:80:1c: 1c:ef:98:7b:fb:78:11:9f:e2:8e:e3:e1:42:10:45: 5c:f8:13:d9:fd:38:83:11:43:25:fb:44:4c:e1:e4: 4c:b1:ad:f6:14:24:55:e9:05:96:ad:de:76:57:01: 09:b7:54:96:0e:82:4b:63:68:34:02:82:96:5d:33: 42:27:c6:8b:02:52:6c:18:56:03:ed:91:fd:18:65: 71:50:83:03:07:74:96:09:85:3e:ea:38:4a:83:6f: 8e:ae:c5:c0:40:70:9d:63:e4:ab:6f:cd:db:88:df: 16:81:3f:90:1c:60:f2:a7:3c:00:15:11:85:b6:78: 53:54:d9:db:29:7c:31:f6:79:4f:62:28:05:99:be: 66:d6:c2:08:07:17:96:a4:c2:19:9e:96:07:38:34: be:cc:57:b3:9a:89:48:b0:32:9f:35:00:0b:f4:1e: b1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A7:66:EA:B6:C5:08:26:B5:CD:8F:77:06:32:46:C9:E1:13:9E:DD X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/F6dm6rbFCCa1zY93BjJGyeETnt0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.112.248.0/21 88.204.96.0/23 185.42.80.0/22 Signature Algorithm: sha256WithRSAEncryption bd:2f:e0:39:f7:d8:db:e3:92:9a:c5:fa:7b:50:6b:de:e3:d9: 07:50:5f:77:5b:9e:68:b9:d9:fd:22:69:b8:49:05:aa:d7:60: 11:02:49:90:78:9f:79:d6:df:dc:dc:5d:2e:a0:1f:4f:b2:25: cf:eb:13:d7:a3:37:1c:96:ed:33:24:72:7e:02:80:19:63:13: 45:89:b5:32:9c:e3:42:67:7b:61:e7:96:17:ca:c2:07:de:07: 59:5f:d8:00:be:01:11:8a:2b:de:55:bf:c5:0d:6c:41:d5:11: 16:8e:6a:a8:11:41:95:8c:bf:88:5b:64:c0:82:4c:31:af:76: 64:68:5c:f2:07:af:ef:51:61:e9:95:45:4d:d5:ab:0e:95:79: a5:0c:e0:a9:4b:4e:23:fd:fe:32:e5:1d:18:34:e9:f5:17:f7: 62:a4:0e:0e:06:27:9f:b8:90:02:2d:e2:75:17:57:f2:24:5e: 56:d0:7c:8c:88:ee:66:5c:5a:34:bc:f4:0b:28:32:77:13:ca: ae:1f:d4:eb:1f:2e:58:06:41:69:0f:b5:4d:b4:a3:5d:f4:20: 76:f9:9e:18:55:d0:7b:ba:c1:a8:1b:77:e7:f7:03:25:a8:95: 86:7d:13:ff:18:fb:67:00:8f:31:77:51:64:7e:02:76:51:7d: a7:79:73:25 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/E+QpNNJ4lx2U6Gu1c4X/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2E3NjZlYWI2YzUwODI2YjVjZDhmNzcwNjMyNDZjOWUxMTM5ZWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArquHgocoAAoIWqEAYKHyxQiwJB7E vFjTpLomZ9hA1JzedNmZGh8w/2J/k//pJoJRHK+OV6Vr/4QB4wKCEXCUzgC0MdIm vWZKXKPWJzYgQ1vlvTZSr0xDgBwc75h7+3gRn+KO4+FCEEVc+BPZ/TiDEUMl+0RM 4eRMsa32FCRV6QWWrd52VwEJt1SWDoJLY2g0AoKWXTNCJ8aLAlJsGFYD7ZH9GGVx UIMDB3SWCYU+6jhKg2+OrsXAQHCdY+Srb83biN8WgT+QHGDypzwAFRGFtnhTVNnb KXwx9nlPYigFmb5m1sIIBxeWpMIZnpYHODS+zFezmolIsDKfNQAL9B6xCQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBenZuq2xQgmtc2PdwYyRsnhE57dMB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEvRjZkbTZyYkZDQ2Exelk5M0JqSkd5ZUVUbnQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4 LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDJXD4AwQB WMxgAwQCuSpQMA0GCSqGSIb3DQEBCwUAA4IBAQC9L+A599jb45Kaxfp7UGve49kH UF93W55oudn9Imm4SQWq12ARAkmQeJ951t/c3F0uoB9PsiXP6xPXozcclu0zJHJ+ AoAZYxNFibUynONCZ3th55YXysIH3gdZX9gAvgERiiveVb/FDWxB1REWjmqoEUGV jL+IW2TAgkwxr3ZkaFzyB6/vUWHplUVN1asOlXmlDOCpS04j/f4y5R0YNOn1F/di pA4OBiefuJACLeJ1F1fyJF5W0HyMiO5mXFo0vPQLKDJ3E8quH9TrHy5YBkFpD7VN tKNd9CB2+Z4YVdB7usGoG3fn9wMlqJWGfRP/GPtnAI8xd1FkfgJ2UX2neXMl -----END CERTIFICATE-----Generated at Thu Feb 5 05:55:53 2026 by rpki-client