This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/6LIia5tMqbvxBKtY8BThO4xtAtc.roa File: 6LIia5tMqbvxBKtY8BThO4xtAtc.roa (raw, json) Hash identifier: +QLjKfCjIW6L5WkiIdYTEn/5q6ZYatBqzC1HJld3e54= Subject key identifier: E8:B2:22:6B:9B:4C:A9:BB:F1:04:AB:58:F0:14:E1:3B:8C:6D:02:D7 Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321 Certificate serial: 019B7F15331ADCE5610507B82CEB1C38B1E7 Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/6LIia5tMqbvxBKtY8BThO4xtAtc.roa Signing time: Fri 02 Jan 2026 14:20:54 +0000 ROA not before: Fri 02 Jan 2026 14:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 91.206.71.0/24 maxlen: 24 185.7.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:33:1a:dc:e5:61:05:07:b8:2c:eb:1c:38:b1:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321 Validity Not Before: Jan 2 14:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8b2226b9b4ca9bbf104ab58f014e13b8c6d02d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:de:79:21:75:2f:35:0b:8d:f8:f4:00:86:fa: 1c:96:e5:67:df:ea:ec:c0:e1:a5:a7:6d:00:8a:69: 99:e8:5a:31:af:1c:4b:aa:ec:a2:0d:69:61:a1:92: 85:d5:8b:d7:61:50:d0:07:1b:80:bc:fb:b2:82:f8: 51:e6:2d:b2:cc:56:5c:3e:e1:78:15:11:55:4c:6f: 09:f1:b6:3e:94:ee:98:8b:d2:33:91:f3:98:46:86: 5d:88:f3:f9:0f:a7:11:a4:01:0f:92:3f:f3:53:c4: 9b:9f:2c:9e:f2:f2:8b:98:26:0e:8f:2d:1a:3e:de: 83:97:1d:0f:dc:d0:c0:ba:66:1f:6f:70:6c:49:55: 78:5c:6b:8d:86:ea:5a:fb:4e:12:49:de:0b:bf:20: 17:be:19:89:2e:ab:86:6c:5e:a1:dd:2b:a6:f8:08: 42:10:68:20:d0:f7:b4:29:cd:18:64:9e:fc:96:e4: e0:3a:b5:2e:b5:5e:e9:5e:aa:5e:e0:3c:53:57:da: 85:2c:f1:63:19:be:28:d0:45:7e:96:26:fd:f3:6c: 9c:9e:3f:1b:88:96:4f:79:1b:c8:dc:71:3e:cc:47: 56:2b:62:22:68:6a:7f:88:d2:e2:5a:a4:29:98:b9: ce:45:94:3c:88:83:a5:fd:27:eb:6c:49:26:e7:a4: f4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B2:22:6B:9B:4C:A9:BB:F1:04:AB:58:F0:14:E1:3B:8C:6D:02:D7 X509v3 Authority Key Identifier: keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/6LIia5tMqbvxBKtY8BThO4xtAtc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.71.0/24 185.7.240.0/24 Signature Algorithm: sha256WithRSAEncryption c0:b6:c5:ba:3c:3e:f1:43:46:e0:60:00:ae:d1:0f:7e:86:86: d0:f6:88:f4:fa:42:97:2f:87:58:6c:c8:18:b9:fd:b6:48:0c: 31:21:c0:2a:5c:fc:10:24:50:46:75:11:db:ea:f5:91:98:28: 55:09:61:f9:07:b0:d7:5b:bc:3b:f7:36:ac:6a:44:65:93:06: 81:5f:d6:3c:57:a4:0c:b6:3d:e3:a1:bc:80:25:85:ca:ad:2a: 1e:86:3d:87:c9:f4:61:76:96:97:aa:61:f7:e5:06:2f:ec:66: 0e:88:82:27:ec:b8:9a:47:6e:04:9e:09:f2:90:58:5c:3f:fc: b3:65:0c:62:30:e2:8b:eb:a8:14:e7:89:89:50:ee:53:a7:2e: 35:fd:ef:87:40:58:5b:3d:93:92:24:3b:99:42:ed:b8:15:2f: 20:94:72:09:7b:df:6f:13:95:46:93:b1:e1:68:84:1a:e9:a5: 52:d5:e9:aa:48:c6:11:40:63:59:55:70:5c:39:c9:e1:da:8a: 37:3d:b2:92:bd:97:3e:e6:62:14:b1:6d:b7:74:7b:bd:00:53: 01:1f:26:63:0f:1f:cb:44:d0:fc:86:67:74:f9:9c:8d:1d:e6: e0:1b:c5:65:d7:f6:44:44:dc:83:35:3d:4f:39:d6:02:fb:c1: f5:b5:1d:2e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FTMa3OVhBQe4LOscOLHnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx ZDMzMjEwHhcNMjYwMTAyMTQyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGIyMjI2YjliNGNhOWJiZjEwNGFiNThmMDE0ZTEzYjhjNmQwMmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs955IXUvNQuN+PQAhvocluVn3+rs wOGlp20AimmZ6FoxrxxLquyiDWlhoZKF1YvXYVDQBxuAvPuygvhR5i2yzFZcPuF4 FRFVTG8J8bY+lO6Yi9IzkfOYRoZdiPP5D6cRpAEPkj/zU8Sbnyye8vKLmCYOjy0a Pt6Dlx0P3NDAumYfb3BsSVV4XGuNhupa+04SSd4LvyAXvhmJLquGbF6h3Sum+AhC EGgg0Pe0Kc0YZJ78luTgOrUutV7pXqpe4DxTV9qFLPFjGb4o0EV+lib982ycnj8b iJZPeRvI3HE+zEdWK2IiaGp/iNLiWqQpmLnORZQ8iIOl/SfrbEkm56T0AwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOiyImubTKm78QSrWPAU4TuMbQLXMB8GA1UdIwQY MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt NDNkZjQ3ZDVhMWU3LzEvNkxJaWE1dE1xYnZ4Qkt0WThCVGhPNHh0QXRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3 LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW85HAwQA uQfwMA0GCSqGSIb3DQEBCwUAA4IBAQDAtsW6PD7xQ0bgYACu0Q9+hobQ9oj0+kKX L4dYbMgYuf22SAwxIcAqXPwQJFBGdRHb6vWRmChVCWH5B7DXW7w79zasakRlkwaB X9Y8V6QMtj3jobyAJYXKrSoehj2HyfRhdpaXqmH35QYv7GYOiIIn7LiaR24Engny kFhcP/yzZQxiMOKL66gU54mJUO5Tpy41/e+HQFhbPZOSJDuZQu24FS8glHIJe99v E5VGk7HhaIQa6aVS1emqSMYRQGNZVXBcOcnh2oo3PbKSvZc+5mIUsW23dHu9AFMB HyZjDx/LRND8hmd0+ZyNHebgG8Vl1/ZERNyDNT1POdYC+8H1tR0u -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:05 2026 by rpki-client