This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/6su6G9gD8e3RN4SkscncX7pH8dU.roa File: 6su6G9gD8e3RN4SkscncX7pH8dU.roa (raw, json) Hash identifier: iX/wppA+kslivMcVzyE3n4qWg+QmDXZMKIru9by6tO4= Subject key identifier: EA:CB:BA:1B:D8:03:F1:ED:D1:37:84:A4:B1:C9:DC:5F:BA:47:F1:D5 Certificate issuer: /CN=493a2d48376330a582faf3e3032ef7b0bcca33e8 Certificate serial: 019B7F14166E430634E8B7D49D7B3B803618 Authority key identifier: 49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/6su6G9gD8e3RN4SkscncX7pH8dU.roa Signing time: Fri 02 Jan 2026 14:19:41 +0000 ROA not before: Fri 02 Jan 2026 14:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31693 IP address blocks: 62.244.82.0/23 maxlen: 23 62.244.100.0/22 maxlen: 22 62.244.104.0/22 maxlen: 22 164.138.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:16:6e:43:06:34:e8:b7:d4:9d:7b:3b:80:36:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=493a2d48376330a582faf3e3032ef7b0bcca33e8 Validity Not Before: Jan 2 14:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eacbba1bd803f1edd13784a4b1c9dc5fba47f1d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f9:c1:19:c3:a4:6c:6a:15:86:fe:5e:da:a3: ad:1f:d5:12:bf:33:da:90:40:26:c9:28:03:b8:75: 88:71:54:3b:b6:ab:7e:d4:48:87:e4:87:c3:3c:f0: b9:81:c0:f2:af:b2:02:e9:31:1d:7c:4d:a1:15:a1: 71:c0:5d:9f:06:7d:93:8b:87:42:91:6c:b7:cf:9e: 1f:27:9a:23:19:a3:d4:57:70:00:e0:71:50:d1:90: ee:0b:77:d2:8a:e4:9e:4d:32:9c:2e:c0:c0:01:11: f7:ed:50:17:04:d6:c7:ca:7f:79:7f:02:57:a8:3a: 1a:be:88:43:78:6c:c0:f4:9c:f2:81:5c:dc:92:74: 4c:6d:35:47:58:eb:ad:d4:bd:39:10:df:dd:d0:5e: ce:07:63:a1:68:ee:07:d2:e0:18:7c:9e:e1:1d:1e: 7a:a3:8d:e8:8c:1a:b9:fc:6f:c3:e8:2b:f1:1f:4e: 23:41:9b:9f:26:ed:ee:4e:51:c8:2c:23:9c:d1:a3: 0e:f8:4c:e0:f7:f3:c5:ba:16:51:8f:cb:40:31:27: eb:99:4c:bc:da:07:e3:71:8a:30:67:0f:b3:1a:a4: 01:62:7b:82:8a:b0:ac:65:a8:6a:2b:29:0b:b9:70: 87:51:ce:4b:7f:e1:a1:7c:56:ff:13:8c:78:2f:a1: 48:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:CB:BA:1B:D8:03:F1:ED:D1:37:84:A4:B1:C9:DC:5F:BA:47:F1:D5 X509v3 Authority Key Identifier: keyid:49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/6su6G9gD8e3RN4SkscncX7pH8dU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.244.82.0/23 62.244.100.0-62.244.107.255 164.138.56.0/21 Signature Algorithm: sha256WithRSAEncryption 7e:ea:68:7d:bb:a5:d6:39:c4:3f:cd:4d:08:48:fc:2b:b3:93: 16:6f:ee:fb:04:b9:d4:77:07:33:14:d2:f3:18:4e:d3:20:3d: 3e:6a:1c:23:83:9c:55:9a:d3:6c:68:24:0d:0b:1d:8c:6c:29: 21:83:98:5b:f6:81:d0:98:67:b4:d3:d1:19:4b:2e:ba:0d:3b: 0e:5e:f5:2b:4b:fd:03:6b:07:64:20:52:df:52:bb:40:76:4b: e5:35:80:ca:d9:13:92:50:68:99:a3:a1:ca:51:16:43:28:1e: a8:3e:e9:3e:d4:c5:3f:a7:8a:63:51:be:f1:08:ca:9d:84:f2: 5a:e7:79:b2:0d:e7:b5:40:14:1d:2b:77:7e:f4:b4:3b:6e:ab: 83:23:e6:8b:bf:dd:b1:9a:90:bf:31:32:13:02:d7:b4:47:6e: 27:3b:e4:7e:80:0f:91:ad:ef:89:6f:5b:36:c4:93:79:22:a6: de:15:ad:7c:24:6a:09:c3:af:75:20:a5:e0:ac:c4:f7:5d:ec: 5f:3e:3e:46:81:ff:2f:8a:b3:c0:99:70:1f:b7:0e:60:7a:70: 91:ba:74:fb:05:de:0d:c8:a3:00:c8:6a:29:2e:52:a0:b0:c8: 24:15:8f:51:61:ad:67:35:8c:f7:6d:fb:f8:b0:b5:64:e9:92: 3d:76:fc:8a -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt/FBZuQwY06LfUnXs7gDYYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5M2EyZDQ4Mzc2MzMwYTU4MmZhZjNlMzAzMmVmN2IwYmNj YTMzZTgwHhcNMjYwMTAyMTQxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWNiYmExYmQ4MDNmMWVkZDEzNzg0YTRiMWM5ZGM1ZmJhNDdmMWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvnBGcOkbGoVhv5e2qOtH9USvzPa kEAmySgDuHWIcVQ7tqt+1EiH5IfDPPC5gcDyr7IC6TEdfE2hFaFxwF2fBn2Ti4dC kWy3z54fJ5ojGaPUV3AA4HFQ0ZDuC3fSiuSeTTKcLsDAARH37VAXBNbHyn95fwJX qDoavohDeGzA9JzygVzcknRMbTVHWOut1L05EN/d0F7OB2OhaO4H0uAYfJ7hHR56 o43ojBq5/G/D6CvxH04jQZufJu3uTlHILCOc0aMO+Ezg9/PFuhZRj8tAMSfrmUy8 2gfjcYowZw+zGqQBYnuCirCsZahqKykLuXCHUc5Lf+GhfFb/E4x4L6FIzwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFOrLuhvYA/Ht0TeEpLHJ3F+6R/HVMB8GA1UdIwQY MBaAFEk6LUg3YzClgvrz4wMu97C8yjPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1RvdFNEZGpNS1dDLXZQakF5NzNzTHpLTS1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9kNzY1YTQtNTRlYi00MTBkLThmM2Qt Njg5YmE0ZDMzYzRiLzEvNnN1Nkc5Z0Q4ZTNSTjRTa3NjbmNYN3BIOGRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9kNzY1YTQtNTRlYi00MTBkLThmM2QtNjg5YmE0ZDMzYzRi LzEvU1RvdFNEZGpNS1dDLXZQakF5NzNzTHpLTS1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBPvRSMAwD BAI+9GQDBAI+9GgDBAOkijgwDQYJKoZIhvcNAQELBQADggEBAH7qaH27pdY5xD/N TQhI/CuzkxZv7vsEudR3BzMU0vMYTtMgPT5qHCODnFWa02xoJA0LHYxsKSGDmFv2 gdCYZ7TT0RlLLroNOw5e9StL/QNrB2QgUt9Su0B2S+U1gMrZE5JQaJmjocpRFkMo Hqg+6T7UxT+nimNRvvEIyp2E8lrnebIN57VAFB0rd370tDtuq4Mj5ou/3bGakL8x MhMC17RHbic75H6AD5Gt74lvWzbEk3kipt4VrXwkagnDr3UgpeCsxPdd7F8+PkaB /y+Ks8CZcB+3DmB6cJG6dPsF3g3IowDIaikuUqCwyCQVj1FhrWc1jPdt+/iwtWTp kj12/Io= -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:44 2026 by rpki-client