This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/6XKN9mbXIZSOV6lIZCe171oGYFI.roa File: 6XKN9mbXIZSOV6lIZCe171oGYFI.roa (raw, json) Hash identifier: y46Uc83KEsrnQfYqTwtEh8WVRZS0uyMCAN5uYCStLoQ= Subject key identifier: E9:72:8D:F6:66:D7:21:94:8E:57:A9:48:64:27:B5:EF:5A:06:60:52 Certificate issuer: /CN=10e05dabbcf14d53015ab8ff1e4bd7297acb0e77 Certificate serial: 019B7C7EDD8366AF390E68D671B72D83F03E Authority key identifier: 10:E0:5D:AB:BC:F1:4D:53:01:5A:B8:FF:1E:4B:D7:29:7A:CB:0E:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/6XKN9mbXIZSOV6lIZCe171oGYFI.roa Signing time: Fri 02 Jan 2026 02:17:27 +0000 ROA not before: Fri 02 Jan 2026 02:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 62.164.198.0/24 maxlen: 24 87.199.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 20:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:dd:83:66:af:39:0e:68:d6:71:b7:2d:83:f0:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10e05dabbcf14d53015ab8ff1e4bd7297acb0e77 Validity Not Before: Jan 2 02:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9728df666d721948e57a9486427b5ef5a066052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d9:7a:c9:2d:63:8e:6d:5c:2b:7f:c7:e4:7b: 9b:44:a0:a7:45:11:0f:56:f0:f4:bf:dd:71:ef:1e: 99:94:6c:19:13:1c:a2:73:d5:c3:93:e9:6b:46:d3: 9e:26:48:0b:7d:ff:35:e3:04:aa:7f:66:35:e7:42: 2f:82:26:77:80:44:c2:ad:eb:c9:28:57:33:e3:69: ba:9c:f7:fb:6f:c8:2b:1f:f4:70:1e:0c:5b:16:ce: 59:76:41:69:7e:50:2b:95:0b:a0:b8:25:e6:87:e3: 17:a2:45:ee:a1:a3:e8:d6:b9:6c:b4:d5:13:45:44: fa:7e:1a:9b:b7:4b:fd:0e:63:b6:17:65:3d:ff:47: 80:35:1a:e8:7e:b6:8a:26:e2:92:04:f1:c8:40:79: fb:80:bc:35:e3:95:c1:1b:43:0d:63:60:0c:bc:da: f9:c8:b6:e4:b0:e7:72:34:cd:1f:b5:f0:97:17:47: 4f:3f:3a:c5:95:b0:37:86:9d:90:02:9f:c1:1f:4f: 6b:40:bd:03:c5:14:ec:5e:11:e4:6a:6a:e4:d2:32: 06:53:e6:4e:00:fb:20:a3:88:bd:14:bf:09:e5:b4: 4c:07:ff:7b:9c:4c:fe:8b:e9:00:6b:57:bd:07:d1: 26:8d:2c:60:52:3b:a8:b5:2c:b9:e6:28:3b:31:49: 4c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:72:8D:F6:66:D7:21:94:8E:57:A9:48:64:27:B5:EF:5A:06:60:52 X509v3 Authority Key Identifier: keyid:10:E0:5D:AB:BC:F1:4D:53:01:5A:B8:FF:1E:4B:D7:29:7A:CB:0E:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/6XKN9mbXIZSOV6lIZCe171oGYFI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.164.198.0/24 87.199.127.0/24 Signature Algorithm: sha256WithRSAEncryption 18:9b:a3:25:10:dc:f4:ff:de:73:ae:f2:36:0f:09:b4:a1:8c: b2:2f:91:45:0f:b4:a9:20:5b:bf:92:c4:a8:f3:b3:a1:52:a1: 6a:87:c2:47:9c:2f:96:3f:98:55:34:c4:3d:23:d9:27:14:7f: 4d:af:0e:92:3a:f7:c5:40:94:55:77:0c:e1:25:4c:8b:92:92: 2b:b1:96:4e:6f:7a:77:69:73:5d:0c:d0:e1:62:86:fd:92:15: 19:99:bd:b3:f6:23:77:65:d7:eb:6a:dd:cd:c2:d7:94:9e:d4: 2f:e4:ac:fc:e6:43:da:01:6d:cf:15:2a:05:b6:7f:e5:e5:04: 22:24:2c:32:ea:b5:71:83:2a:89:cb:57:92:a5:da:aa:34:df: 02:c2:67:14:74:ce:ff:76:10:71:09:b5:ce:fb:a5:18:55:01: 08:fe:38:1f:f3:d6:b5:c0:1f:e2:47:7f:2d:fd:98:0b:9c:f3: 74:75:e3:79:9a:96:33:29:d2:69:9c:99:56:37:da:be:16:8b: 08:30:b2:44:af:d2:8b:5b:9c:b3:bc:f7:50:84:da:a7:81:15: ba:01:84:18:c4:b4:8c:4b:27:14:c6:3d:a7:17:b7:64:60:bb: 13:aa:39:c1:49:5d:77:3e:a0:18:04:87:17:b2:f3:81:24:b7: a5:ca:56:0c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8ft2DZq85DmjWcbctg/A+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZTA1ZGFiYmNmMTRkNTMwMTVhYjhmZjFlNGJkNzI5N2Fj YjBlNzcwHhcNMjYwMTAyMDIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTcyOGRmNjY2ZDcyMTk0OGU1N2E5NDg2NDI3YjVlZjVhMDY2MDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtl6yS1jjm1cK3/H5HubRKCnRREP VvD0v91x7x6ZlGwZExyic9XDk+lrRtOeJkgLff814wSqf2Y150IvgiZ3gETCrevJ KFcz42m6nPf7b8grH/RwHgxbFs5ZdkFpflArlQuguCXmh+MXokXuoaPo1rlstNUT RUT6fhqbt0v9DmO2F2U9/0eANRrofraKJuKSBPHIQHn7gLw145XBG0MNY2AMvNr5 yLbksOdyNM0ftfCXF0dPPzrFlbA3hp2QAp/BH09rQL0DxRTsXhHkamrk0jIGU+ZO APsgo4i9FL8J5bRMB/97nEz+i+kAa1e9B9EmjSxgUjuotSy55ig7MUlMcQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOlyjfZm1yGUjlepSGQnte9aBmBSMB8GA1UdIwQY MBaAFBDgXau88U1TAVq4/x5L1yl6yw53MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU9CZHE3enhUVk1CV3JqX0hrdlhLWHJMRG5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hYTRmNGUtMmUwMS00NmVjLTgxZDEt ZTYyM2Q1M2Y4YmIxLzEvNlhLTjltYlhJWlNPVjZsSVpDZTE3MW9HWUZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9hYTRmNGUtMmUwMS00NmVjLTgxZDEtZTYyM2Q1M2Y4YmIx LzEvRU9CZHE3enhUVk1CV3JqX0hrdlhLWHJMRG5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPqTGAwQA V8d/MA0GCSqGSIb3DQEBCwUAA4IBAQAYm6MlENz0/95zrvI2Dwm0oYyyL5FFD7Sp IFu/ksSo87OhUqFqh8JHnC+WP5hVNMQ9I9knFH9Nrw6SOvfFQJRVdwzhJUyLkpIr sZZOb3p3aXNdDNDhYob9khUZmb2z9iN3Zdfrat3NwteUntQv5Kz85kPaAW3PFSoF tn/l5QQiJCwy6rVxgyqJy1eSpdqqNN8CwmcUdM7/dhBxCbXO+6UYVQEI/jgf89a1 wB/iR38t/ZgLnPN0deN5mpYzKdJpnJlWN9q+FosIMLJEr9KLW5yzvPdQhNqngRW6 AYQYxLSMSycUxj2nF7dkYLsTqjnBSV13PqAYBIcXsvOBJLelylYM -----END CERTIFICATE-----Generated at Sat Jan 3 04:53:30 2026 by rpki-client