This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/6JsGG8yxKzcDoQMwZR2x3KoCb00.roa File: 6JsGG8yxKzcDoQMwZR2x3KoCb00.roa (raw, json) Hash identifier: 6wxEu7HqJEfHfAXKDDmYgs76ZayF6+azKu/sKGA3exs= Subject key identifier: E8:9B:06:1B:CC:B1:2B:37:03:A1:03:30:65:1D:B1:DC:AA:02:6F:4D Certificate issuer: /CN=b2c5f74df4520d341da348a700a03b97caf07735 Certificate serial: 019B79ED241EF46276F24AE12203249E9A9C Authority key identifier: B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/6JsGG8yxKzcDoQMwZR2x3KoCb00.roa Signing time: Thu 01 Jan 2026 14:19:02 +0000 ROA not before: Thu 01 Jan 2026 14:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47230 IP address blocks: 195.216.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:24:1e:f4:62:76:f2:4a:e1:22:03:24:9e:9a:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2c5f74df4520d341da348a700a03b97caf07735 Validity Not Before: Jan 1 14:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e89b061bccb12b3703a10330651db1dcaa026f4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:78:66:5a:52:d8:bf:af:9c:65:e1:11:47:ef: 4e:05:97:aa:1d:87:87:12:34:e1:58:7f:20:59:4c: bc:86:af:ce:26:d2:b8:bc:37:27:e4:25:12:5b:46: 5b:66:a7:f9:b2:c0:75:43:c7:23:6f:ec:48:7b:d6: bb:2b:85:1d:8e:99:fc:78:23:d7:e2:f6:4c:5e:8b: 6b:22:b1:73:08:3c:f3:b5:38:03:21:84:9e:18:9f: 91:28:9b:9a:73:03:ff:a3:ad:1c:7e:26:5a:c9:e1: ce:78:10:bd:38:4d:25:88:bd:47:88:d4:c3:90:5e: 94:da:62:1b:33:2c:d9:29:c2:ea:b3:9c:64:33:8a: 5f:35:32:9d:25:44:c6:36:eb:0a:3d:79:df:43:a7: 72:45:4a:83:0d:d5:18:33:2b:71:98:95:14:13:c6: 9c:99:f7:ca:25:11:46:d1:fd:43:c9:09:a4:cf:e4: 34:c4:b5:56:f0:98:29:45:6c:d1:04:1c:7e:3c:a3: 16:a2:23:71:d0:f7:89:d5:d8:a9:59:6d:84:37:fb: b5:51:ac:35:01:29:46:a5:58:93:d5:51:dd:9c:d0: cd:7d:a0:58:97:6f:c2:3c:74:99:78:b4:f9:ce:6e: e5:10:86:f7:55:62:75:b7:17:49:b8:c9:f6:f8:0d: bd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:9B:06:1B:CC:B1:2B:37:03:A1:03:30:65:1D:B1:DC:AA:02:6F:4D X509v3 Authority Key Identifier: keyid:B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/6JsGG8yxKzcDoQMwZR2x3KoCb00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.216.239.0/24 Signature Algorithm: sha256WithRSAEncryption b2:5a:46:26:60:3f:4a:f3:87:0a:6a:25:f1:ed:f1:ab:17:5c: 8c:7f:a0:ec:09:09:c7:16:3b:8e:37:3f:47:49:3e:cc:0a:24: ec:af:41:19:7a:20:cb:83:66:db:c6:b8:4b:c5:8f:5c:23:8c: a4:e4:fe:84:a2:8e:4b:30:68:26:d3:4f:77:7e:05:f1:90:e1: 7b:93:74:35:85:58:bd:74:44:2a:b0:e7:86:bc:96:a5:26:eb: 30:eb:7b:1c:7d:63:ea:67:6e:e2:7f:76:c1:a1:cb:51:33:7d: bc:d3:9e:c9:af:61:f7:f7:b6:5f:8e:7b:45:ad:05:5b:3f:77: 9a:8e:c5:1d:15:1f:77:f7:a1:b6:a1:85:20:47:db:46:c5:32: 0a:52:fa:fc:1d:7a:18:a7:00:2a:a9:66:b1:fe:e1:b9:9d:95: 4a:79:3a:d2:4c:bc:20:8f:de:d9:26:78:54:8b:71:95:00:84: 71:9a:5a:57:b1:3c:d6:b6:7b:42:c5:bd:90:a9:13:f1:b9:3b: 91:f4:11:1e:1a:05:8a:67:69:74:45:32:cb:58:94:82:25:59: 23:5a:db:95:52:23:cb:c2:8b:b8:bf:a7:d7:7c:f7:e0:5a:41: 53:71:fe:65:00:c3:85:a2:d4:64:09:01:d6:13:95:09:ba:5d: 8e:c7:39:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57SQe9GJ28krhIgMknpqcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYzVmNzRkZjQ1MjBkMzQxZGEzNDhhNzAwYTAzYjk3Y2Fm MDc3MzUwHhcNMjYwMTAxMTQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODliMDYxYmNjYjEyYjM3MDNhMTAzMzA2NTFkYjFkY2FhMDI2ZjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHhmWlLYv6+cZeERR+9OBZeqHYeH EjThWH8gWUy8hq/OJtK4vDcn5CUSW0ZbZqf5ssB1Q8cjb+xIe9a7K4Udjpn8eCPX 4vZMXotrIrFzCDzztTgDIYSeGJ+RKJuacwP/o60cfiZayeHOeBC9OE0liL1HiNTD kF6U2mIbMyzZKcLqs5xkM4pfNTKdJUTGNusKPXnfQ6dyRUqDDdUYMytxmJUUE8ac mffKJRFG0f1DyQmkz+Q0xLVW8JgpRWzRBBx+PKMWoiNx0PeJ1dipWW2EN/u1Uaw1 ASlGpViT1VHdnNDNfaBYl2/CPHSZeLT5zm7lEIb3VWJ1txdJuMn2+A29pQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOibBhvMsSs3A6EDMGUdsdyqAm9NMB8GA1UdIwQY MBaAFLLF9030Ug00HaNIpwCgO5fK8Hc1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3NYM1RmUlNEVFFkbzBpbkFLQTdsOHJ3ZHpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9kZmZmYzUtY2I2ZC00NGNlLTg0NzIt Nzc3ZWU5NTU2MjEwLzEvNkpzR0c4eXhLemNEb1FNd1pSMngzS29DYjAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9kZmZmYzUtY2I2ZC00NGNlLTg0NzItNzc3ZWU5NTU2MjEw LzEvc3NYM1RmUlNEVFFkbzBpbkFLQTdsOHJ3ZHpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9jvMA0G CSqGSIb3DQEBCwUAA4IBAQCyWkYmYD9K84cKaiXx7fGrF1yMf6DsCQnHFjuONz9H ST7MCiTsr0EZeiDLg2bbxrhLxY9cI4yk5P6Eoo5LMGgm0093fgXxkOF7k3Q1hVi9 dEQqsOeGvJalJusw63scfWPqZ27if3bBoctRM328057Jr2H397ZfjntFrQVbP3ea jsUdFR9396G2oYUgR9tGxTIKUvr8HXoYpwAqqWax/uG5nZVKeTrSTLwgj97ZJnhU i3GVAIRxmlpXsTzWtntCxb2QqRPxuTuR9BEeGgWKZ2l0RTLLWJSCJVkjWtuVUiPL wou4v6fXfPfgWkFTcf5lAMOFotRkCQHWE5UJul2Oxzm0 -----END CERTIFICATE-----Generated at Tue Jan 20 09:21:47 2026 by rpki-client