This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/6T7wlM6C0qqBOLawcH0bO7G9DLM.roa File: 6T7wlM6C0qqBOLawcH0bO7G9DLM.roa (raw, json) Hash identifier: 9NAPSc05b+DVo+TnqKYmM4gkM8VaqxeSULCyj7IwNqU= Subject key identifier: E9:3E:F0:94:CE:82:D2:AA:81:38:B6:B0:70:7D:1B:3B:B1:BD:0C:B3 Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019B7FF171D47F371A0B306C2CFA78C9AC78 Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/6T7wlM6C0qqBOLawcH0bO7G9DLM.roa Signing time: Fri 02 Jan 2026 18:21:28 +0000 ROA not before: Fri 02 Jan 2026 18:21:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 273177 IP address blocks: 193.160.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:71:d4:7f:37:1a:0b:30:6c:2c:fa:78:c9:ac:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Jan 2 18:21:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e93ef094ce82d2aa8138b6b0707d1b3bb1bd0cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0e:62:83:95:7b:13:f2:d8:38:9b:d3:23:c7: fc:39:50:ac:73:93:e7:54:6e:32:0a:a5:84:52:29: d0:d2:8a:11:aa:8e:8b:aa:5a:34:0f:99:b1:62:61: 03:4d:67:91:50:1b:9c:55:27:f1:2a:15:01:df:f7: bd:fa:b2:2a:1f:0b:4a:26:15:03:19:3a:3b:e6:5a: b0:1b:1a:d6:38:17:05:2c:64:33:91:db:37:1e:c6: 67:99:69:cd:13:c1:8b:79:8c:15:3f:f2:40:38:c6: de:3e:f2:d7:b8:9c:1b:84:c0:a9:eb:22:18:5b:22: ee:99:7d:51:cd:24:18:1a:a5:0c:37:14:a7:37:fc: ab:28:39:dd:ff:80:76:a1:ff:2d:f9:43:d3:ec:10: fa:63:29:c6:49:f8:45:25:70:01:ff:4d:ba:d1:2c: e2:f8:d8:60:0c:85:0a:fd:1c:90:bd:4f:8f:20:7f: 11:79:b4:46:89:9a:fc:aa:91:31:e2:f9:18:18:17: a1:61:53:ce:72:e2:0b:e2:b1:84:e7:7f:24:5f:61: 21:9c:5f:7b:88:31:19:7a:e7:47:12:74:58:4c:76: 9c:f5:7a:3a:e6:f0:6e:2b:aa:e9:3f:ab:dd:a7:1c: 53:5f:2e:53:4a:2f:2a:92:5d:4d:a9:95:84:fe:4b: 8a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:3E:F0:94:CE:82:D2:AA:81:38:B6:B0:70:7D:1B:3B:B1:BD:0C:B3 X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/6T7wlM6C0qqBOLawcH0bO7G9DLM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.160.220.0/24 Signature Algorithm: sha256WithRSAEncryption 83:dc:3f:9f:84:5a:a2:e8:d1:85:f6:73:62:4a:7b:55:ee:d6: 73:0f:07:c2:25:d6:5e:28:b4:64:51:0e:4d:34:f4:b8:d9:a8: 1b:a2:3f:40:e1:f4:27:fd:b2:f1:4a:b2:7d:83:92:27:28:bd: a7:bf:73:09:46:ed:2f:74:de:db:d2:03:1e:89:46:e3:79:d1: 5f:30:19:13:a4:91:70:21:38:22:1f:71:82:05:bc:68:dc:91: d9:bc:4e:2b:5b:0b:bb:c8:13:2e:b7:b5:80:e4:79:c8:61:01: dc:48:76:5b:95:47:1c:37:cd:e7:cd:51:8d:20:87:eb:15:cf: b7:ae:e3:86:6a:5d:f0:4c:fe:c5:a8:d4:9a:eb:83:dd:a4:8c: 8e:d5:aa:1c:6d:c9:9f:a2:36:dd:73:f6:ea:1b:f6:79:62:4b: 8a:61:19:3a:ae:03:56:4e:38:1e:f6:d6:fa:f6:ab:a7:8e:f1: c5:df:e7:0c:68:72:6b:80:25:6c:bf:94:be:5c:69:4e:47:9a: 5c:44:96:ad:4c:ac:6c:e5:e2:04:4e:d8:51:54:2e:81:d1:71: a8:20:4f:a9:68:d7:1b:c9:8e:8a:b1:80:6a:14:72:dc:7e:56: 20:c7:68:73:07:ad:b9:77:be:3f:b3:d6:9a:92:f9:28:86:32: c6:98:d5:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8XHUfzcaCzBsLPp4yax4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjYwMTAyMTgyMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTNlZjA5NGNlODJkMmFhODEzOGI2YjA3MDdkMWIzYmIxYmQwY2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Q5ig5V7E/LYOJvTI8f8OVCsc5Pn VG4yCqWEUinQ0ooRqo6Lqlo0D5mxYmEDTWeRUBucVSfxKhUB3/e9+rIqHwtKJhUD GTo75lqwGxrWOBcFLGQzkds3HsZnmWnNE8GLeYwVP/JAOMbePvLXuJwbhMCp6yIY WyLumX1RzSQYGqUMNxSnN/yrKDnd/4B2of8t+UPT7BD6YynGSfhFJXAB/0260Szi +NhgDIUK/RyQvU+PIH8RebRGiZr8qpEx4vkYGBehYVPOcuIL4rGE538kX2EhnF97 iDEZeudHEnRYTHac9Xo65vBuK6rpP6vdpxxTXy5TSi8qkl1NqZWE/kuKSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOk+8JTOgtKqgTi2sHB9GzuxvQyzMB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvNlQ3d2xNNkMwcXFCT0xhd2NIMGJPN0c5RExNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaDcMA0G CSqGSIb3DQEBCwUAA4IBAQCD3D+fhFqi6NGF9nNiSntV7tZzDwfCJdZeKLRkUQ5N NPS42agboj9A4fQn/bLxSrJ9g5InKL2nv3MJRu0vdN7b0gMeiUbjedFfMBkTpJFw ITgiH3GCBbxo3JHZvE4rWwu7yBMut7WA5HnIYQHcSHZblUccN83nzVGNIIfrFc+3 ruOGal3wTP7FqNSa64PdpIyO1aocbcmfojbdc/bqG/Z5YkuKYRk6rgNWTjge9tb6 9qunjvHF3+cMaHJrgCVsv5S+XGlOR5pcRJatTKxs5eIETthRVC6B0XGoIE+paNcb yY6KsYBqFHLcflYgx2hzB625d74/s9aakvkohjLGmNWn -----END CERTIFICATE-----Generated at Mon Jan 19 14:37:36 2026 by rpki-client