This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/6Ns2Tq-n87jQpr-uT64fUsVKUX0.roa File: 6Ns2Tq-n87jQpr-uT64fUsVKUX0.roa (raw, json) Hash identifier: z05GfLGcIJ87A3P7XPgnZqPOo0sEQDgBgR5Fwhr1K/M= Subject key identifier: E8:DB:36:4E:AF:A7:F3:B8:D0:A6:BF:AE:4F:AE:1F:52:C5:4A:51:7D Certificate issuer: /CN=cb7f2ffb39aa2df2004b7ca1573d11317a8fb74a Certificate serial: 019BFAED8BBC6F009D6909E9F500700363B2 Authority key identifier: CB:7F:2F:FB:39:AA:2D:F2:00:4B:7C:A1:57:3D:11:31:7A:8F:B7:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/6Ns2Tq-n87jQpr-uT64fUsVKUX0.roa Signing time: Mon 26 Jan 2026 15:30:30 +0000 ROA not before: Mon 26 Jan 2026 15:30:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57544 IP address blocks: 91.232.178.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.crl rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:ed:8b:bc:6f:00:9d:69:09:e9:f5:00:70:03:63:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb7f2ffb39aa2df2004b7ca1573d11317a8fb74a Validity Not Before: Jan 26 15:30:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8db364eafa7f3b8d0a6bfae4fae1f52c54a517d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:13:c7:6c:dd:99:27:75:fb:90:cf:bd:a1:6e: 3f:d6:ea:aa:02:a5:07:fe:70:d0:e8:73:2f:89:21: dd:89:b3:3d:f6:66:1f:dd:6d:e1:92:42:14:45:0e: 4a:e6:c7:37:d7:26:e8:08:e3:81:9f:a1:17:fb:56: 93:ed:a8:b7:b4:c2:ce:4f:c2:a9:26:8c:08:fe:b6: 67:1a:7f:40:85:4b:bb:0a:01:b7:67:15:01:19:5d: ed:0c:d1:dd:10:39:66:e9:44:a5:6a:d5:4e:c3:c9: b2:94:d9:ef:41:26:19:14:bc:62:ea:17:bf:39:c9: 13:10:e1:34:eb:2c:2c:77:82:b7:c9:97:43:77:72: 89:6e:cd:6f:97:9d:c4:c1:67:5b:eb:c8:46:fb:01: 5b:f3:52:00:cb:63:ef:ff:64:d7:eb:a6:b3:ec:76: b9:26:c5:10:82:62:d3:f3:2f:ea:a0:dc:f7:05:20: f7:c5:8d:eb:01:23:e5:ec:48:ce:67:bb:f0:da:32: 2c:e3:9d:6e:10:34:ab:1e:1b:1e:6a:66:31:2f:12: 11:d7:f9:98:74:9a:72:cc:2d:88:b4:38:08:92:03: 3e:37:f5:ad:be:b7:d1:7f:1d:19:ef:2c:0f:b3:ce: 83:6f:8d:3d:44:dc:cf:4e:80:a8:ff:1b:5e:e1:4f: fe:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:DB:36:4E:AF:A7:F3:B8:D0:A6:BF:AE:4F:AE:1F:52:C5:4A:51:7D X509v3 Authority Key Identifier: keyid:CB:7F:2F:FB:39:AA:2D:F2:00:4B:7C:A1:57:3D:11:31:7A:8F:B7:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/6Ns2Tq-n87jQpr-uT64fUsVKUX0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.178.0/23 Signature Algorithm: sha256WithRSAEncryption 7b:c5:a0:ab:8f:5b:00:dc:e0:30:5c:f8:a2:cc:17:b8:cb:81: 72:f3:7f:36:20:40:be:14:f0:cc:54:67:e8:93:e1:c2:94:d0: 74:ab:44:19:e3:c6:3d:15:cf:79:5a:9d:d3:07:62:39:19:29: fb:a7:58:53:d5:57:78:5b:1f:06:ba:4c:56:29:13:1f:ac:28: e5:63:72:ca:77:f1:c0:dc:d0:70:66:7a:68:68:4c:82:c1:7f: 89:66:4e:92:ea:34:b4:7d:bd:00:ca:4e:28:d2:ae:7d:bb:fc: 01:e5:74:8e:cb:16:ce:eb:eb:58:38:b4:f8:a4:1b:b5:83:3f: 67:f4:1f:5c:26:ee:ca:35:d1:7a:47:60:92:e7:b2:73:41:4d: b7:0f:43:f5:5f:c8:36:92:bc:41:4e:40:81:1f:c2:46:63:ab: f1:d9:24:e5:31:9d:da:5d:ec:ef:37:39:0e:9b:1b:1a:46:66: e5:c7:d9:b4:16:89:33:8a:ab:11:cb:bb:d0:a0:41:11:41:d8: f2:dc:19:b7:3a:2e:1b:1a:d1:1d:27:49:f0:39:96:ab:05:0e: ca:03:ad:dd:44:62:dc:2f:61:03:ac:9b:52:a1:e0:56:9d:b3: 0c:eb:b1:08:d1:61:31:d3:3a:ed:60:05:dd:9f:14:3d:a9:dc: 3b:e7:4f:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv67Yu8bwCdaQnp9QBwA2OyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiN2YyZmZiMzlhYTJkZjIwMDRiN2NhMTU3M2QxMTMxN2E4 ZmI3NGEwHhcNMjYwMTI2MTUzMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGRiMzY0ZWFmYTdmM2I4ZDBhNmJmYWU0ZmFlMWY1MmM1NGE1MTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBPHbN2ZJ3X7kM+9oW4/1uqqAqUH /nDQ6HMviSHdibM99mYf3W3hkkIURQ5K5sc31yboCOOBn6EX+1aT7ai3tMLOT8Kp JowI/rZnGn9AhUu7CgG3ZxUBGV3tDNHdEDlm6USlatVOw8mylNnvQSYZFLxi6he/ OckTEOE06ywsd4K3yZdDd3KJbs1vl53EwWdb68hG+wFb81IAy2Pv/2TX66az7Ha5 JsUQgmLT8y/qoNz3BSD3xY3rASPl7EjOZ7vw2jIs451uEDSrHhseamYxLxIR1/mY dJpyzC2ItDgIkgM+N/WtvrfRfx0Z7ywPs86Db409RNzPToCo/xte4U/+xwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOjbNk6vp/O40Ka/rk+uH1LFSlF9MB8GA1UdIwQY MBaAFMt/L/s5qi3yAEt8oVc9ETF6j7dKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTM4di16bXFMZklBUzN5aFZ6MFJNWHFQdDBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9hM2IxN2YtMDdkMi00ZjQ1LWJlMWQt YzhmYmEwYjMxMGE5LzEvNk5zMlRxLW44N2pRcHItdVQ2NGZVc1ZLVVgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9hM2IxN2YtMDdkMi00ZjQ1LWJlMWQtYzhmYmEwYjMxMGE5 LzEveTM4di16bXFMZklBUzN5aFZ6MFJNWHFQdDBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+iyMA0G CSqGSIb3DQEBCwUAA4IBAQB7xaCrj1sA3OAwXPiizBe4y4Fy8382IEC+FPDMVGfo k+HClNB0q0QZ48Y9Fc95Wp3TB2I5GSn7p1hT1Vd4Wx8GukxWKRMfrCjlY3LKd/HA 3NBwZnpoaEyCwX+JZk6S6jS0fb0Ayk4o0q59u/wB5XSOyxbO6+tYOLT4pBu1gz9n 9B9cJu7KNdF6R2CS57JzQU23D0P1X8g2krxBTkCBH8JGY6vx2STlMZ3aXezvNzkO mxsaRmblx9m0FokziqsRy7vQoEERQdjy3Bm3Oi4bGtEdJ0nwOZarBQ7KA63dRGLc L2EDrJtSoeBWnbMM67EI0WEx0zrtYAXdnxQ9qdw750/C -----END CERTIFICATE-----Generated at Mon Feb 2 07:53:51 2026 by rpki-client