This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/ax6eIjHYuyl0QBv51Atz3wWcyoE.roa File: ax6eIjHYuyl0QBv51Atz3wWcyoE.roa (raw, json) Hash identifier: VeATSBlllh5K01G1TOhorfGAawwB+xV+zgL6EEsH3z0= Subject key identifier: 6B:1E:9E:22:31:D8:BB:29:74:40:1B:F9:D4:0B:73:DF:05:9C:CA:81 Certificate issuer: /CN=27802685da734b157a2db9ccff76dd4e48911928 Certificate serial: 019B7F81AED7494C7CD35FAF464BF81991DF Authority key identifier: 27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/ax6eIjHYuyl0QBv51Atz3wWcyoE.roa Signing time: Fri 02 Jan 2026 16:19:23 +0000 ROA not before: Fri 02 Jan 2026 16:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51002 IP address blocks: 176.123.208.0/21 maxlen: 24 193.243.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:ae:d7:49:4c:7c:d3:5f:af:46:4b:f8:19:91:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27802685da734b157a2db9ccff76dd4e48911928 Validity Not Before: Jan 2 16:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b1e9e2231d8bb2974401bf9d40b73df059cca81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e5:a9:55:7c:e7:3d:b9:60:a9:ae:5b:88:62: 81:2e:c6:79:f7:ce:9f:98:3d:d8:9d:95:d8:08:1d: 00:92:9b:a5:9f:12:61:78:79:b6:08:ed:a6:2d:70: 79:a9:e1:c7:0e:bd:f6:2e:c9:a4:36:f6:f4:3e:8f: 2e:8c:d5:32:96:ae:98:a7:20:3a:ec:ad:f6:d4:f9: 18:c2:41:53:d1:a0:ae:f6:2a:c9:bd:1b:86:6f:35: 01:61:56:37:6b:83:cc:8c:f8:2c:d7:49:b0:7c:c6: 85:be:66:92:73:9b:dd:07:c5:a6:68:86:33:27:54: 23:60:15:82:59:cd:b0:fe:fb:b4:eb:a0:ab:dc:a6: 21:14:d0:87:79:35:98:be:ea:80:aa:37:08:a5:5e: 55:1d:85:6e:24:c8:3a:58:ca:a6:82:b8:0a:9e:8b: 16:9c:ff:d1:89:8a:be:61:1b:27:79:86:57:0f:f5: 99:6a:9a:53:c7:13:9d:ca:8f:e2:d6:73:08:d0:21: ff:af:6f:c0:0c:e9:4a:ce:a9:e8:df:e0:f3:03:15: 92:dd:7b:3a:3e:e0:f6:2f:7d:46:05:3f:0f:11:cc: bf:3a:82:4e:2e:dd:1b:a4:32:5d:0a:a0:36:c5:14: c8:4a:60:ab:53:1b:6c:41:21:e8:f6:dc:47:59:66: a1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1E:9E:22:31:D8:BB:29:74:40:1B:F9:D4:0B:73:DF:05:9C:CA:81 X509v3 Authority Key Identifier: keyid:27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/ax6eIjHYuyl0QBv51Atz3wWcyoE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.123.208.0/21 193.243.168.0/22 Signature Algorithm: sha256WithRSAEncryption 47:1a:1d:ac:89:8e:77:35:ec:18:ef:66:31:93:38:89:a1:d1: a5:a0:0d:5f:7c:6d:89:b5:fd:55:1a:86:b6:87:96:ce:d8:8c: f2:46:3f:76:83:3b:6d:24:4f:60:c3:67:29:c7:99:2b:9a:1a: b8:79:a7:79:b8:6b:5e:81:8d:29:75:80:3c:be:53:ea:bb:1b: f6:9e:1c:48:75:7b:03:86:64:ef:49:05:d3:d0:3b:dd:81:82: a8:db:ca:20:18:eb:b6:13:49:51:96:c8:eb:1d:a1:f2:62:be: 2f:b2:4c:d6:10:94:19:a9:fa:6d:37:44:99:ff:f5:05:0f:df: 95:b5:61:88:83:70:f7:2c:c8:8b:cf:0d:37:81:ee:8c:3f:d3: 92:bb:12:4c:2f:a1:30:f2:b1:52:8d:0e:4f:85:06:a2:53:ea: 24:43:49:1c:74:4e:72:0e:0e:c0:ad:d1:f4:ea:f2:a5:41:d0: 22:72:2a:6b:48:ad:6e:ac:c9:b8:e8:52:1b:fc:f1:eb:71:2c: ea:88:a2:10:f6:c0:32:14:f3:ef:88:5c:99:a7:30:96:c9:80: b4:17:c8:b5:25:df:c9:c6:15:42:2a:d6:c3:d8:8c:97:23:8e: 75:1f:63:17:f3:df:2d:00:62:8a:b4:c8:33:eb:1b:ee:dc:d9: e9:9a:25:6a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/ga7XSUx801+vRkv4GZHfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ODAyNjg1ZGE3MzRiMTU3YTJkYjljY2ZmNzZkZDRlNDg5 MTE5MjgwHhcNMjYwMTAyMTYxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjFlOWUyMjMxZDhiYjI5NzQ0MDFiZjlkNDBiNzNkZjA1OWNjYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+WpVXznPblgqa5biGKBLsZ5986f mD3YnZXYCB0AkpulnxJheHm2CO2mLXB5qeHHDr32LsmkNvb0Po8ujNUylq6YpyA6 7K321PkYwkFT0aCu9irJvRuGbzUBYVY3a4PMjPgs10mwfMaFvmaSc5vdB8WmaIYz J1QjYBWCWc2w/vu066Cr3KYhFNCHeTWYvuqAqjcIpV5VHYVuJMg6WMqmgrgKnosW nP/RiYq+YRsneYZXD/WZappTxxOdyo/i1nMI0CH/r2/ADOlKzqno3+DzAxWS3Xs6 PuD2L31GBT8PEcy/OoJOLt0bpDJdCqA2xRTISmCrUxtsQSHo9txHWWahRwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGseniIx2LspdEAb+dQLc98FnMqBMB8GA1UdIwQY MBaAFCeAJoXac0sVei25zP923U5IkRkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjRBbWhkcHpTeFY2TGJuTV8zYmRUa2lSR1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZTVkNjUtNTkxMi00MThlLTljMDEt MTIzYTg2ZDk0ODE4LzEvYXg2ZUlqSFl1eWwwUUJ2NTFBdHozd1djeW9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZTVkNjUtNTkxMi00MThlLTljMDEtMTIzYTg2ZDk0ODE4 LzEvSjRBbWhkcHpTeFY2TGJuTV8zYmRUa2lSR1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDsHvQAwQC wfOoMA0GCSqGSIb3DQEBCwUAA4IBAQBHGh2siY53NewY72YxkziJodGloA1ffG2J tf1VGoa2h5bO2IzyRj92gzttJE9gw2cpx5krmhq4ead5uGtegY0pdYA8vlPquxv2 nhxIdXsDhmTvSQXT0DvdgYKo28ogGOu2E0lRlsjrHaHyYr4vskzWEJQZqfptN0SZ //UFD9+VtWGIg3D3LMiLzw03ge6MP9OSuxJML6Ew8rFSjQ5PhQaiU+okQ0kcdE5y Dg7ArdH06vKlQdAiciprSK1urMm46FIb/PHrcSzqiKIQ9sAyFPPviFyZpzCWyYC0 F8i1Jd/JxhVCKtbD2IyXI451H2MX898tAGKKtMgz6xvu3NnpmiVq -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:07 2026 by rpki-client