This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/P6cULxcVvZdYLDqV2esNPK-ZwZ8.roa File: P6cULxcVvZdYLDqV2esNPK-ZwZ8.roa (raw, json) Hash identifier: s1TATnmlewKEFD5Gzb4M62FOXoECxomh8AgpvANGPzU= Subject key identifier: 3F:A7:14:2F:17:15:BD:97:58:2C:3A:95:D9:EB:0D:3C:AF:99:C1:9F Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f Certificate serial: 019B797F40EC1C99151CC0EF867272742253 Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/P6cULxcVvZdYLDqV2esNPK-ZwZ8.roa Signing time: Thu 01 Jan 2026 12:19:01 +0000 ROA not before: Thu 01 Jan 2026 12:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25145 IP address blocks: 213.238.160.0/24 maxlen: 24 213.238.161.0/24 maxlen: 24 213.238.162.0/24 maxlen: 24 213.238.163.0/24 maxlen: 24 213.238.164.0/24 maxlen: 24 213.238.165.0/24 maxlen: 24 213.238.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:40:ec:1c:99:15:1c:c0:ef:86:72:72:74:22:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f Validity Not Before: Jan 1 12:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fa7142f1715bd97582c3a95d9eb0d3caf99c19f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:29:37:aa:4b:26:49:1b:d6:29:de:cd:21:12: 9f:4c:37:ef:1b:3d:b0:29:eb:39:3b:ef:0b:5e:43: 7b:4a:ea:60:79:31:cf:35:10:a5:ba:10:ca:53:1b: 9e:21:2f:7a:32:e3:eb:48:9c:b5:f4:b2:d2:ac:c9: 03:41:56:16:4a:b3:1c:d3:80:b8:0b:54:60:06:a7: ae:08:47:35:68:82:dd:c3:2c:4a:2e:92:ed:ab:d2: 65:5f:bc:aa:08:ce:18:a1:c8:a1:2b:69:85:fd:53: a4:5c:99:41:b7:eb:70:fb:38:c2:e7:56:0f:39:b9: a0:b7:fa:de:eb:32:29:f0:25:33:7b:cf:ba:58:a1: 2c:07:a3:38:9d:01:74:3a:b3:12:b3:1f:65:c8:7c: e6:6b:fd:86:5e:24:0b:ea:c5:3b:a2:0f:57:c2:61: 01:c8:0c:b0:3b:c3:53:09:91:26:39:92:38:87:ad: 29:5c:77:45:56:30:87:d3:25:0d:aa:15:cf:29:d6: b3:a5:c7:b4:c3:0f:b0:56:28:a9:d8:b3:ba:08:c2: f4:dc:74:e2:29:88:c1:06:0a:10:24:b3:d9:bc:29: 6e:75:58:d2:d0:d6:79:b8:8b:29:a6:bf:34:45:8a: c1:62:19:86:63:02:b4:95:b7:b9:56:85:a9:a7:c7: 1f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A7:14:2F:17:15:BD:97:58:2C:3A:95:D9:EB:0D:3C:AF:99:C1:9F X509v3 Authority Key Identifier: keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/P6cULxcVvZdYLDqV2esNPK-ZwZ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.238.160.0-213.238.165.255 213.238.168.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:18:c2:e4:80:70:88:66:1b:ae:a1:d1:e7:d9:d0:71:8c:be: 94:d1:f0:37:2e:c8:64:d0:83:83:4f:55:8f:73:b7:22:68:17: 82:09:57:9c:b7:56:5c:2a:63:04:f9:dc:f1:c2:00:f3:0b:c1: 61:ab:58:66:18:11:d4:3a:46:b8:bb:6c:e5:1d:b5:02:a9:76: 11:7e:72:07:4f:12:aa:d2:0d:d6:f9:ea:9b:4c:5a:29:18:70: 26:7a:be:61:46:4f:f0:cd:e4:52:00:13:67:d3:3e:0f:5f:55: f2:d9:a6:17:4d:a6:55:a3:21:72:4a:0e:e9:09:23:5c:63:3a: 57:48:81:0f:9f:b6:42:b0:55:45:4b:7a:a2:7d:2d:f0:d1:1f: 55:b9:de:1f:22:f0:8c:e9:bf:75:79:0c:3c:15:4d:31:b2:19: 85:5a:e6:e7:0e:c2:4c:de:83:11:4b:16:15:3b:f5:d6:36:db: 23:47:22:18:9b:68:7e:04:4d:ac:49:9a:ab:8f:5d:57:4c:d2: 07:7f:7f:23:1c:e4:14:31:2a:ab:f6:4e:1a:3f:a4:c5:94:e6: c6:6d:c6:99:3e:5d:c8:27:ad:cc:10:ec:82:41:84:17:d4:c6: 2f:77:52:05:f3:59:98:cc:4c:d3:85:3e:2d:52:d0:40:08:07: 31:33:d2:66 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt5f0DsHJkVHMDvhnJydCJTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0 MGRlM2YwHhcNMjYwMTAxMTIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmE3MTQyZjE3MTViZDk3NTgyYzNhOTVkOWViMGQzY2FmOTljMTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsik3qksmSRvWKd7NIRKfTDfvGz2w Kes5O+8LXkN7SupgeTHPNRCluhDKUxueIS96MuPrSJy19LLSrMkDQVYWSrMc04C4 C1RgBqeuCEc1aILdwyxKLpLtq9JlX7yqCM4YocihK2mF/VOkXJlBt+tw+zjC51YP Obmgt/re6zIp8CUze8+6WKEsB6M4nQF0OrMSsx9lyHzma/2GXiQL6sU7og9XwmEB yAywO8NTCZEmOZI4h60pXHdFVjCH0yUNqhXPKdazpce0ww+wViip2LO6CML03HTi KYjBBgoQJLPZvCludVjS0NZ5uIsppr80RYrBYhmGYwK0lbe5VoWpp8cfhwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFD+nFC8XFb2XWCw6ldnrDTyvmcGfMB8GA1UdIwQY MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt Y2QzMTYxNWQwMWE5LzEvUDZjVUx4Y1Z2WmRZTERxVjJlc05QSy1ad1o4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5 LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAXV7qAD BAHV7qQDBADV7qgwDQYJKoZIhvcNAQELBQADggEBAH4YwuSAcIhmG66h0efZ0HGM vpTR8DcuyGTQg4NPVY9ztyJoF4IJV5y3VlwqYwT53PHCAPMLwWGrWGYYEdQ6Rri7 bOUdtQKpdhF+cgdPEqrSDdb56ptMWikYcCZ6vmFGT/DN5FIAE2fTPg9fVfLZphdN plWjIXJKDukJI1xjOldIgQ+ftkKwVUVLeqJ9LfDRH1W53h8i8Izpv3V5DDwVTTGy GYVa5ucOwkzegxFLFhU79dY22yNHIhibaH4ETaxJmquPXVdM0gd/fyMc5BQxKqv2 Tho/pMWU5sZtxpk+XcgnrcwQ7IJBhBfUxi93UgXzWZjMTNOFPi1S0EAIBzEz0mY= -----END CERTIFICATE-----Generated at Wed Jan 21 15:54:26 2026 by rpki-client