This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/6fl2PyZRjLFdwSBx3r61hkXya8k.roa File: 6fl2PyZRjLFdwSBx3r61hkXya8k.roa (raw, json) Hash identifier: D61QyHJ6S5T1IxCuN2yRBjSfJTg/+aLEQXnYgmdlUDs= Subject key identifier: E9:F9:76:3F:26:51:8C:B1:5D:C1:20:71:DE:BE:B5:86:45:F2:6B:C9 Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 019B76EB8A5F29C33D1262A9EC5C86285865 Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/6fl2PyZRjLFdwSBx3r61hkXya8k.roa Signing time: Thu 01 Jan 2026 00:18:26 +0000 ROA not before: Thu 01 Jan 2026 00:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199515 IP address blocks: 213.153.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8a:5f:29:c3:3d:12:62:a9:ec:5c:86:28:58:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Jan 1 00:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9f9763f26518cb15dc12071debeb58645f26bc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fe:a1:86:53:31:80:3c:de:a0:ce:fe:e9:4f: be:d3:e9:82:34:ec:e5:b2:82:9a:62:27:b1:de:41: 71:24:dc:9a:05:17:1d:90:b0:a8:ea:4e:a7:5b:bd: c8:02:9e:5d:08:b0:09:69:0b:7e:63:c4:b3:56:f2: 0b:60:29:09:2e:a9:c6:6c:b1:df:a0:d4:72:3d:12: ac:36:1c:be:a7:f0:80:c6:70:a2:0a:76:a5:fc:94: 45:b1:bc:1f:7a:bb:9e:b0:2f:26:f2:94:69:57:17: 53:ef:4e:13:2b:aa:b3:10:22:ee:57:78:0d:92:30: 25:25:1a:b0:72:8b:11:be:13:8b:c2:e6:95:bc:f7: bf:64:d6:7f:65:aa:7c:be:75:09:e7:2e:a2:74:41: 58:f2:28:54:2f:8a:7e:98:02:eb:e2:0c:2e:8a:cd: 47:0c:90:14:7d:72:cc:07:f6:82:b0:c1:8b:d5:71: 15:e8:05:ae:80:c3:6f:0f:1a:01:ce:75:f9:3a:6f: e3:c3:66:9d:6a:e9:c7:90:35:4e:05:db:cf:1a:03: 39:42:6c:a3:d3:d9:5f:e7:d1:d0:9a:32:fb:b1:8b: fc:dd:07:a8:67:fd:bc:8e:dd:41:29:49:77:b4:9b: e2:0c:14:3b:d2:1c:b1:72:d9:43:85:74:1f:78:37: 01:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F9:76:3F:26:51:8C:B1:5D:C1:20:71:DE:BE:B5:86:45:F2:6B:C9 X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/6fl2PyZRjLFdwSBx3r61hkXya8k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.153.232.0/24 Signature Algorithm: sha256WithRSAEncryption a9:af:9e:f1:3d:ab:a9:77:2f:d0:dd:37:86:f1:a9:33:bd:d0: 12:ef:ef:10:ac:86:ed:7e:45:92:ca:75:cd:d3:5d:2d:3f:d7: f6:33:86:40:1f:ca:c8:f8:63:49:91:47:e1:88:ce:92:b8:25: b9:e4:fe:b1:a5:61:01:3d:c1:47:6b:9e:d5:41:39:2b:86:7f: 60:e5:11:a4:a5:a7:8d:58:57:e3:a7:52:43:d3:85:1a:a3:59: 8f:54:61:41:06:d7:55:6b:d6:d4:03:70:37:01:5b:ce:a5:6d: 87:b5:74:f3:f4:e3:ab:cd:63:80:68:77:3e:8c:62:a7:91:4b: c8:4d:d1:35:bb:64:f2:c3:dc:f5:65:94:f1:5b:83:ac:63:ac: df:99:c1:bd:8a:59:d7:70:39:22:98:15:b0:79:e2:8f:df:f0: ec:a1:58:9a:ba:06:66:7a:50:99:4d:01:37:64:c5:3b:e8:a1: fd:03:8c:0e:38:5c:1a:1b:27:ed:67:a5:a6:e2:8d:8a:bb:a0: 9e:d6:ad:29:cd:e6:7b:1c:a5:4d:2a:b2:5b:ec:ea:1a:62:49: a1:9e:78:45:fb:3d:43:5f:98:04:87:cf:07:c1:f2:d4:6f:cb: 2c:fe:5d:9d:1e:da:ea:d1:dc:16:82:24:6d:52:47:ee:18:53: 84:3f:1c:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264pfKcM9EmKp7FyGKFhlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjYwMTAxMDAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWY5NzYzZjI2NTE4Y2IxNWRjMTIwNzFkZWJlYjU4NjQ1ZjI2YmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf6hhlMxgDzeoM7+6U++0+mCNOzl soKaYiex3kFxJNyaBRcdkLCo6k6nW73IAp5dCLAJaQt+Y8SzVvILYCkJLqnGbLHf oNRyPRKsNhy+p/CAxnCiCnal/JRFsbwferuesC8m8pRpVxdT704TK6qzECLuV3gN kjAlJRqwcosRvhOLwuaVvPe/ZNZ/Zap8vnUJ5y6idEFY8ihUL4p+mALr4gwuis1H DJAUfXLMB/aCsMGL1XEV6AWugMNvDxoBznX5Om/jw2adaunHkDVOBdvPGgM5Qmyj 09lf59HQmjL7sYv83QeoZ/28jt1BKUl3tJviDBQ70hyxctlDhXQfeDcBvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOn5dj8mUYyxXcEgcd6+tYZF8mvJMB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvNmZsMlB5WlJqTEZkd1NCeDNyNjFoa1h5YThrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ZnoMA0G CSqGSIb3DQEBCwUAA4IBAQCpr57xPaupdy/Q3TeG8akzvdAS7+8QrIbtfkWSynXN 010tP9f2M4ZAH8rI+GNJkUfhiM6SuCW55P6xpWEBPcFHa57VQTkrhn9g5RGkpaeN WFfjp1JD04Uao1mPVGFBBtdVa9bUA3A3AVvOpW2HtXTz9OOrzWOAaHc+jGKnkUvI TdE1u2Tyw9z1ZZTxW4OsY6zfmcG9ilnXcDkimBWweeKP3/DsoViaugZmelCZTQE3 ZMU76KH9A4wOOFwaGyftZ6Wm4o2Ku6Ce1q0pzeZ7HKVNKrJb7OoaYkmhnnhF+z1D X5gEh88HwfLUb8ss/l2dHtrq0dwWgiRtUkfuGFOEPxzv -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:18 2026 by rpki-client