This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/6jWcTCuvnIbvDAxZuWYVZRLhDLU.roa File: 6jWcTCuvnIbvDAxZuWYVZRLhDLU.roa (raw, json) Hash identifier: LkG1rsHegbWJdLC+vukY1wOXCMcnkOUFAcxz3/K326I= Subject key identifier: EA:35:9C:4C:2B:AF:9C:86:EF:0C:0C:59:B9:66:15:65:12:E1:0C:B5 Certificate issuer: /CN=e3f19cc5e38d8f9c1d6547177665f89211dec899 Certificate serial: 019B77C6712D84659F370FB2E22E6F75277C Authority key identifier: E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/6jWcTCuvnIbvDAxZuWYVZRLhDLU.roa Signing time: Thu 01 Jan 2026 04:17:32 +0000 ROA not before: Thu 01 Jan 2026 04:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61146 IP address blocks: 31.216.136.0/21 maxlen: 21 62.108.216.0/21 maxlen: 21 185.176.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:71:2d:84:65:9f:37:0f:b2:e2:2e:6f:75:27:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3f19cc5e38d8f9c1d6547177665f89211dec899 Validity Not Before: Jan 1 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea359c4c2baf9c86ef0c0c59b966156512e10cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2d:84:2a:66:f0:c3:f8:2c:51:54:41:3d:e0: 20:b2:08:f1:99:8c:69:b7:8c:cb:e0:29:c2:62:4e: 97:1f:11:23:31:6d:af:a5:cc:de:a1:39:99:49:c1: e7:e0:8e:f2:95:0c:45:7d:72:ec:69:b2:a5:47:ff: 25:77:48:94:bd:5d:eb:9a:50:a4:90:9c:46:32:32: 39:d1:15:71:0d:c8:b7:08:02:0c:d2:3e:ee:42:84: cf:31:ca:95:f8:f0:42:e3:bb:e5:3a:51:4f:14:10: 9c:df:3a:47:b0:e4:a6:46:33:40:26:22:23:66:f9: ea:5e:70:3b:02:ba:dc:f7:53:b9:d1:45:b7:ae:7f: 1f:2b:a1:2d:9f:00:c6:f1:a7:d8:5b:d0:4c:dd:1a: b9:f0:b7:c7:7b:8d:82:75:db:96:0a:69:ea:4f:ef: 9a:3c:af:1d:4e:9d:84:b8:30:6c:51:4e:65:cd:6c: ec:41:66:95:10:1b:fd:04:c1:6d:71:a4:89:9a:36: 1b:19:8c:bc:1e:c3:77:a6:bf:57:8d:8a:5e:33:bc: 7e:6c:32:76:20:d4:1d:6d:36:81:e1:8c:3a:8b:96: c5:03:71:c6:da:a2:d8:98:ed:8d:3a:43:9d:a6:83: 8d:89:80:fe:ac:d5:64:2e:e7:b6:ef:b6:ca:19:c3: 52:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:35:9C:4C:2B:AF:9C:86:EF:0C:0C:59:B9:66:15:65:12:E1:0C:B5 X509v3 Authority Key Identifier: keyid:E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/6jWcTCuvnIbvDAxZuWYVZRLhDLU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.216.136.0/21 62.108.216.0/21 185.176.184.0/22 Signature Algorithm: sha256WithRSAEncryption 68:b2:93:0a:5d:46:63:8f:c6:04:12:4e:98:ae:48:f2:1f:64: 6a:4f:2f:2d:18:6f:cb:bd:f6:ab:f2:ea:b8:38:54:1f:da:44: 1b:d1:21:7b:bf:81:22:16:8e:af:0f:cb:04:12:bb:e6:07:1d: fb:c2:f2:ac:bb:c3:30:2e:ae:48:93:e1:63:18:4a:68:34:45: 8a:1c:64:19:48:50:99:10:4a:da:94:23:10:ef:e4:48:7c:94: 5d:4e:02:7c:d8:b3:d6:1d:23:a2:bc:67:fa:54:bb:53:5c:2a: 00:f1:7e:98:e3:c4:7a:7d:32:ed:24:96:3c:0b:fd:9e:f2:54: f9:17:8f:ee:46:1f:58:10:fd:cc:6d:04:69:07:cb:4a:b3:38: ab:cb:a9:ba:27:d5:f5:eb:ea:08:03:a8:c5:77:62:8a:9e:e4: d6:21:1c:a4:fd:83:07:ff:c0:6b:88:ac:e7:93:f8:f6:88:21: 00:0c:08:25:14:10:8f:de:64:36:38:f1:7c:dc:46:ff:53:38: 04:52:41:d5:fb:03:a3:3b:4b:55:1c:6b:37:5f:b2:90:0d:e2: 64:46:a1:ad:b8:d9:92:90:0a:63:26:c8:34:58:7c:9d:a7:56: 65:62:59:5a:6d:55:29:10:fc:81:03:58:9c:03:ad:a1:07:37: 6a:f7:ac:66 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xnEthGWfNw+y4i5vdSd8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZjE5Y2M1ZTM4ZDhmOWMxZDY1NDcxNzc2NjVmODkyMTFk ZWM4OTkwHhcNMjYwMTAxMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTM1OWM0YzJiYWY5Yzg2ZWYwYzBjNTliOTY2MTU2NTEyZTEwY2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky2EKmbww/gsUVRBPeAgsgjxmYxp t4zL4CnCYk6XHxEjMW2vpczeoTmZScHn4I7ylQxFfXLsabKlR/8ld0iUvV3rmlCk kJxGMjI50RVxDci3CAIM0j7uQoTPMcqV+PBC47vlOlFPFBCc3zpHsOSmRjNAJiIj ZvnqXnA7Arrc91O50UW3rn8fK6EtnwDG8afYW9BM3Rq58LfHe42CdduWCmnqT++a PK8dTp2EuDBsUU5lzWzsQWaVEBv9BMFtcaSJmjYbGYy8HsN3pr9XjYpeM7x+bDJ2 INQdbTaB4Yw6i5bFA3HG2qLYmO2NOkOdpoONiYD+rNVkLue277bKGcNSXwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOo1nEwrr5yG7wwMWblmFWUS4Qy1MB8GA1UdIwQY MBaAFOPxnMXjjY+cHWVHF3Zl+JIR3siZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNF9HY3hlT05qNXdkWlVjWGRtWDRraEhleUprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8xYTg1YTgtZTRmOC00OThiLWE1YWUt YTRiZTE3MmM3NmJhLzEvNmpXY1RDdXZuSWJ2REF4WnVXWVZaUkxoRExVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8xYTg1YTgtZTRmOC00OThiLWE1YWUtYTRiZTE3MmM3NmJh LzEvNF9HY3hlT05qNXdkWlVjWGRtWDRraEhleUprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDH9iIAwQD PmzYAwQCubC4MA0GCSqGSIb3DQEBCwUAA4IBAQBospMKXUZjj8YEEk6YrkjyH2Rq Ty8tGG/Lvfar8uq4OFQf2kQb0SF7v4EiFo6vD8sEErvmBx37wvKsu8MwLq5Ik+Fj GEpoNEWKHGQZSFCZEEralCMQ7+RIfJRdTgJ82LPWHSOivGf6VLtTXCoA8X6Y48R6 fTLtJJY8C/2e8lT5F4/uRh9YEP3MbQRpB8tKsziry6m6J9X16+oIA6jFd2KKnuTW IRyk/YMH/8BriKznk/j2iCEADAglFBCP3mQ2OPF83Eb/UzgEUkHV+wOjO0tVHGs3 X7KQDeJkRqGtuNmSkApjJsg0WHydp1ZlYllabVUpEPyBA1icA62hBzdq96xm -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:12 2026 by rpki-client