This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/6I-7kIsmNEbjqpaRLZFYHSiX3Cg.roa File: 6I-7kIsmNEbjqpaRLZFYHSiX3Cg.roa (raw, json) Hash identifier: l5DJjaa9jBabVc2gTKAmahVVwUkclCV/KKoXuPERh3I= Subject key identifier: E8:8F:BB:90:8B:26:34:46:E3:AA:96:91:2D:91:58:1D:28:97:DC:28 Certificate issuer: /CN=b77813f6c5670a58686adc3d4955744295dd1419 Certificate serial: 019B7EA63BEFE877A7D0EE146FF978B09CF6 Authority key identifier: B7:78:13:F6:C5:67:0A:58:68:6A:DC:3D:49:55:74:42:95:DD:14:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3gT9sVnClhoatw9SVV0QpXdFBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/6I-7kIsmNEbjqpaRLZFYHSiX3Cg.roa Signing time: Fri 02 Jan 2026 12:19:42 +0000 ROA not before: Fri 02 Jan 2026 12:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199806 IP address blocks: 193.84.252.0/24 maxlen: 24 2001:67c:1828::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.mft rsync://rpki.ripe.net/repository/DEFAULT/t3gT9sVnClhoatw9SVV0QpXdFBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:3b:ef:e8:77:a7:d0:ee:14:6f:f9:78:b0:9c:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b77813f6c5670a58686adc3d4955744295dd1419 Validity Not Before: Jan 2 12:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e88fbb908b263446e3aa96912d91581d2897dc28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4d:1c:37:e3:cd:c4:eb:9b:e8:ec:5b:80:bc: eb:7b:1a:67:f8:97:ea:2f:c4:ea:fa:e6:9e:da:3c: 14:7f:56:8c:ef:53:21:74:d7:ed:a2:62:a4:79:6a: 2f:c6:c5:5c:f8:63:2c:48:07:67:92:86:b5:21:85: 3e:25:c1:b4:08:e6:61:14:0b:4c:91:ca:a1:69:d3: 6d:52:9b:7f:68:0f:e9:8c:3d:7f:9c:6b:a2:39:33: 57:40:e5:5f:d8:18:fb:43:4d:40:f8:b1:51:64:e1: 64:a6:7a:e1:43:0f:7b:3a:c7:79:9d:e4:0d:26:2e: 1f:32:5e:99:b1:7b:25:95:1e:5d:c8:4b:cb:a7:de: db:c6:c0:e9:bc:cc:30:1c:aa:9a:45:30:b0:4d:f9: e7:ed:45:d2:10:88:9d:23:2d:96:ad:e4:ed:e2:67: ba:7e:55:5f:f7:36:8a:16:b0:fe:78:f2:d3:4c:ae: c6:56:5d:34:b7:1b:30:85:df:83:77:18:21:8e:68: 0e:98:88:5b:22:ac:df:2d:41:2b:0f:e1:ae:49:65: 4c:8f:28:f2:22:15:1e:1a:fe:e7:80:8c:ad:4d:36: e5:ae:bf:e7:47:8d:20:55:33:80:78:4f:63:eb:39: 31:77:1b:2f:47:39:8f:6d:c5:55:2f:98:c6:57:c8: 64:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:8F:BB:90:8B:26:34:46:E3:AA:96:91:2D:91:58:1D:28:97:DC:28 X509v3 Authority Key Identifier: keyid:B7:78:13:F6:C5:67:0A:58:68:6A:DC:3D:49:55:74:42:95:DD:14:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3gT9sVnClhoatw9SVV0QpXdFBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/6I-7kIsmNEbjqpaRLZFYHSiX3Cg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.84.252.0/24 IPv6: 2001:67c:1828::/48 Signature Algorithm: sha256WithRSAEncryption 45:5c:08:d7:3a:cd:3d:ff:a3:74:e9:dc:8b:ba:41:8a:6f:20: c9:a1:f9:65:3b:82:ec:d7:54:e9:a9:52:fb:1e:8c:08:1c:87: 84:6c:c8:ad:3b:e6:e6:b8:49:98:14:7a:dd:70:72:68:17:b7: 36:7b:1e:9e:09:01:83:c2:fe:59:c3:f0:54:83:89:af:f6:53: 8a:d1:68:c4:4e:cc:4c:8d:75:b2:f5:dc:f2:52:15:ef:d7:4f: 3d:c6:08:ea:0c:bb:e3:ee:71:9e:17:5c:42:c1:fe:42:34:5a: 96:e8:c7:19:2f:2e:78:8d:72:55:40:9b:e7:f5:3f:0e:15:f2: 81:ae:1a:ff:ca:28:c8:4b:7b:b6:6d:9b:7b:97:b5:0c:1c:85: 25:c8:69:f6:43:6d:95:cf:66:cb:35:b8:83:00:c7:e0:18:11: 40:7a:1d:81:72:6d:16:07:f6:e7:72:ef:ee:94:0d:13:f0:02: a0:72:fd:ec:22:d7:cc:d4:c8:ee:fe:08:36:a9:5a:80:f9:75: d3:a6:c2:07:5a:b6:eb:c2:b6:79:60:a3:ba:cc:9d:4c:80:3b: e3:66:95:7f:91:41:52:cb:f7:0f:00:d7:69:8d:40:19:ec:fb: 00:d1:84:f1:76:c7:c6:c3:9c:28:c4:99:0d:7c:44:29:8f:53: 0d:0b:2b:78 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+pjvv6Hen0O4Ub/l4sJz2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NzgxM2Y2YzU2NzBhNTg2ODZhZGMzZDQ5NTU3NDQyOTVk ZDE0MTkwHhcNMjYwMTAyMTIxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODhmYmI5MDhiMjYzNDQ2ZTNhYTk2OTEyZDkxNTgxZDI4OTdkYzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU0cN+PNxOub6OxbgLzrexpn+Jfq L8Tq+uae2jwUf1aM71MhdNftomKkeWovxsVc+GMsSAdnkoa1IYU+JcG0COZhFAtM kcqhadNtUpt/aA/pjD1/nGuiOTNXQOVf2Bj7Q01A+LFRZOFkpnrhQw97Osd5neQN Ji4fMl6ZsXsllR5dyEvLp97bxsDpvMwwHKqaRTCwTfnn7UXSEIidIy2WreTt4me6 flVf9zaKFrD+ePLTTK7GVl00txswhd+DdxghjmgOmIhbIqzfLUErD+GuSWVMjyjy IhUeGv7ngIytTTblrr/nR40gVTOAeE9j6zkxdxsvRzmPbcVVL5jGV8hkPQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOiPu5CLJjRG46qWkS2RWB0ol9woMB8GA1UdIwQY MBaAFLd4E/bFZwpYaGrcPUlVdEKV3RQZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDNnVDlzVm5DbGhvYXR3OVNWVjBRcFhkRkJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xZjU3ZDUtOTljMi00Y2E5LTkzNTAt MTc3MzVlMmMyNTVmLzEvNkktN2tJc21ORWJqcXBhUkxaRllIU2lYM0NnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xZjU3ZDUtOTljMi00Y2E5LTkzNTAtMTc3MzVlMmMyNTVm LzEvdDNnVDlzVm5DbGhvYXR3OVNWVjBRcFhkRkJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwVT8MA8E AgACMAkDBwAgAQZ8GCgwDQYJKoZIhvcNAQELBQADggEBAEVcCNc6zT3/o3Tp3Iu6 QYpvIMmh+WU7guzXVOmpUvsejAgch4RsyK075ua4SZgUet1wcmgXtzZ7Hp4JAYPC /lnD8FSDia/2U4rRaMROzEyNdbL13PJSFe/XTz3GCOoMu+PucZ4XXELB/kI0Wpbo xxkvLniNclVAm+f1Pw4V8oGuGv/KKMhLe7Ztm3uXtQwchSXIafZDbZXPZss1uIMA x+AYEUB6HYFybRYH9udy7+6UDRPwAqBy/ewi18zUyO7+CDapWoD5ddOmwgdatuvC tnlgo7rMnUyAO+NmlX+RQVLL9w8A12mNQBns+wDRhPF2x8bDnCjEmQ18RCmPUw0L K3g= -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:42 2026 by rpki-client