This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/6dIzMwo0G6tAhuml4GfIJNjdjVQ.roa File: 6dIzMwo0G6tAhuml4GfIJNjdjVQ.roa (raw, json) Hash identifier: wpsN0tsYTVD9eZ1wIkFPmbb5yPxiazJ0MhFoB9FJQW4= Subject key identifier: E9:D2:33:33:0A:34:1B:AB:40:86:E9:A5:E0:67:C8:24:D8:DD:8D:54 Certificate issuer: /CN=3cde2470c8563949487a3e78743c544c99ec8a64 Certificate serial: 019B7AC80064070151A84FD27DE1A4D32EE3 Authority key identifier: 3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/6dIzMwo0G6tAhuml4GfIJNjdjVQ.roa Signing time: Thu 01 Jan 2026 18:18:06 +0000 ROA not before: Thu 01 Jan 2026 18:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 86.111.192.0/22 maxlen: 22 86.111.192.0/24 maxlen: 24 86.111.193.0/24 maxlen: 24 86.111.194.0/24 maxlen: 24 86.111.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:00:64:07:01:51:a8:4f:d2:7d:e1:a4:d3:2e:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cde2470c8563949487a3e78743c544c99ec8a64 Validity Not Before: Jan 1 18:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9d233330a341bab4086e9a5e067c824d8dd8d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e1:34:bc:e7:3f:92:05:30:4d:cd:d6:41:77: 13:34:0c:3d:1e:69:68:10:9a:34:60:99:b0:03:a9: b9:aa:f0:7b:81:0c:a1:55:a8:3f:7a:8a:27:c4:33: f0:a3:ef:64:e1:a2:08:8d:03:5e:9a:ad:29:9e:9b: 2f:cf:4c:85:31:2a:3e:f9:00:b5:8f:bc:c6:25:5a: 92:d9:56:4c:ad:27:19:50:1a:67:b8:26:ff:98:8d: 6f:b4:8c:8c:a7:c6:dc:5b:57:7d:c3:3d:ec:17:13: c1:5a:c4:9a:ee:02:01:bb:56:95:ee:67:36:00:9b: d9:c8:e6:cb:b3:bd:4c:30:b2:b6:b8:a4:00:51:f6: 23:6d:70:43:59:f2:a9:37:16:bd:1f:ab:e1:ab:2c: 69:20:18:4b:90:1d:74:54:01:21:65:1e:f0:8c:31: 3e:20:73:30:d5:15:aa:f0:c5:aa:68:5f:94:71:ad: a9:2a:26:88:94:85:f5:35:5c:db:a7:66:3f:52:4e: 12:01:88:b4:7a:33:d2:e3:ed:2e:2a:c7:50:10:18: ba:24:5e:9d:b5:b7:27:3a:a2:95:0b:b1:f4:b7:3a: 9e:92:55:7d:f4:29:d1:dc:86:39:46:bb:1e:dd:21: 98:7e:1e:7c:cf:d5:94:d4:80:1b:1f:68:54:79:55: 3b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D2:33:33:0A:34:1B:AB:40:86:E9:A5:E0:67:C8:24:D8:DD:8D:54 X509v3 Authority Key Identifier: keyid:3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/6dIzMwo0G6tAhuml4GfIJNjdjVQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.111.192.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:27:92:21:28:bf:2b:aa:f0:39:5f:c7:25:88:ef:a5:2a:a9: 6d:f3:41:c0:b6:5c:f6:f7:06:98:84:cb:5d:74:ea:26:58:39: 81:7e:13:29:1e:5f:e5:f3:69:f4:4f:14:da:ff:36:7a:00:50: d9:5c:c3:85:61:2b:53:24:d6:cc:e8:0f:2d:69:0f:f3:f8:04: 52:94:e8:23:c2:be:f6:48:26:47:fc:b9:50:93:a1:f6:eb:00: 4a:57:95:05:d8:5c:98:3c:82:0a:5c:b8:84:94:2d:89:ed:4d: 13:65:c4:95:61:d8:c8:d6:8e:8c:66:7c:47:b3:9e:09:fa:e1: 07:2f:8d:d6:50:81:79:37:70:d3:75:a4:25:bb:1f:0d:24:80: 05:bd:f0:a0:26:b5:6c:d1:f5:4e:43:51:ec:8f:44:80:6b:39: 29:2e:d4:52:bd:25:7f:f0:30:de:62:af:29:0a:91:0a:d1:05: 53:9b:ab:ae:77:9c:5d:ee:54:fd:7f:c7:e6:f3:c3:e8:3f:7e: cd:8a:7e:1e:7b:89:b9:b0:84:d5:03:0e:3e:65:f6:96:c5:b6: 71:ac:b7:ed:81:d5:83:bd:75:5a:ff:c6:b9:e1:da:4a:eb:37: 8a:f1:1b:6c:91:ab:88:77:18:49:9d:80:f8:8c:18:cb:fe:71: 1a:5d:86:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yABkBwFRqE/SfeGk0y7jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZGUyNDcwYzg1NjM5NDk0ODdhM2U3ODc0M2M1NDRjOTll YzhhNjQwHhcNMjYwMTAxMTgxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWQyMzMzMzBhMzQxYmFiNDA4NmU5YTVlMDY3YzgyNGQ4ZGQ4ZDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquE0vOc/kgUwTc3WQXcTNAw9Hmlo EJo0YJmwA6m5qvB7gQyhVag/eoonxDPwo+9k4aIIjQNemq0pnpsvz0yFMSo++QC1 j7zGJVqS2VZMrScZUBpnuCb/mI1vtIyMp8bcW1d9wz3sFxPBWsSa7gIBu1aV7mc2 AJvZyObLs71MMLK2uKQAUfYjbXBDWfKpNxa9H6vhqyxpIBhLkB10VAEhZR7wjDE+ IHMw1RWq8MWqaF+Uca2pKiaIlIX1NVzbp2Y/Uk4SAYi0ejPS4+0uKsdQEBi6JF6d tbcnOqKVC7H0tzqeklV99CnR3IY5Rrse3SGYfh58z9WU1IAbH2hUeVU7GwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOnSMzMKNBurQIbppeBnyCTY3Y1UMB8GA1UdIwQY MBaAFDzeJHDIVjlJSHo+eHQ8VEyZ7IpkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mYTc5Y2YtOGM0Yy00MDk0LWExZjUt NDQxNzFiMmY1OTllLzEvNmRJek13bzBHNnRBaHVtbDRHZklKTmpkalZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9mYTc5Y2YtOGM0Yy00MDk0LWExZjUtNDQxNzFiMmY1OTll LzEvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVm/AMA0G CSqGSIb3DQEBCwUAA4IBAQCfJ5IhKL8rqvA5X8cliO+lKqlt80HAtlz29waYhMtd dOomWDmBfhMpHl/l82n0TxTa/zZ6AFDZXMOFYStTJNbM6A8taQ/z+ARSlOgjwr72 SCZH/LlQk6H26wBKV5UF2FyYPIIKXLiElC2J7U0TZcSVYdjI1o6MZnxHs54J+uEH L43WUIF5N3DTdaQlux8NJIAFvfCgJrVs0fVOQ1Hsj0SAazkpLtRSvSV/8DDeYq8p CpEK0QVTm6uud5xd7lT9f8fm88PoP37Nin4ee4m5sITVAw4+ZfaWxbZxrLftgdWD vXVa/8a54dpK6zeK8RtskauIdxhJnYD4jBjL/nEaXYaB -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:15 2026 by rpki-client