This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/6-cD7PwZNNg8B5NEI6cnS9qsYws.roa File: 6-cD7PwZNNg8B5NEI6cnS9qsYws.roa (raw, json) Hash identifier: EYqd8s/hHYel0xQm6Q8ZXtIUTI9f5VFJlpaewnbnCgw= Subject key identifier: EB:E7:03:EC:FC:19:34:D8:3C:07:93:44:23:A7:27:4B:DA:AC:63:0B Certificate issuer: /CN=5afd8667cce95be0ae96058c4550d7088035312f Certificate serial: 019B7FF1365DD57D37D53E8D0BA8ADDD5A98 Authority key identifier: 5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/6-cD7PwZNNg8B5NEI6cnS9qsYws.roa Signing time: Fri 02 Jan 2026 18:21:13 +0000 ROA not before: Fri 02 Jan 2026 18:21:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 193.3.46.0/24 maxlen: 24 195.246.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:36:5d:d5:7d:37:d5:3e:8d:0b:a8:ad:dd:5a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5afd8667cce95be0ae96058c4550d7088035312f Validity Not Before: Jan 2 18:21:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ebe703ecfc1934d83c07934423a7274bdaac630b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:94:4f:01:2f:fa:81:d7:51:3c:34:a9:92:f7: 77:3a:9c:71:62:78:fc:6c:c7:65:47:08:df:8d:94: 24:fa:f2:0f:29:5e:22:29:12:56:9f:6c:5f:9d:56: d2:79:5a:1f:e7:db:29:ad:d2:db:7a:af:ee:ff:68: 11:cf:c0:ef:bd:98:0e:b2:c7:22:c1:c9:0a:c3:0b: eb:7d:95:f9:80:99:19:c5:15:43:cb:d1:98:65:c2: cb:91:b1:be:fd:d2:b0:e0:90:ee:3a:f7:0e:09:1b: f6:d5:ff:bf:2a:59:46:c2:8a:c5:0a:83:7b:e7:03: 9a:a3:b0:a0:3b:ff:88:46:11:b0:4c:d6:a1:f3:70: d7:18:02:6c:85:ca:ef:91:8e:30:37:6e:82:36:b7: a7:7c:e7:04:3d:e8:7f:32:3d:85:ec:0a:22:7f:61: 7a:0f:37:31:6e:b1:bf:39:45:36:37:eb:9e:1d:c0: 16:ff:6c:10:41:92:f7:c0:27:0e:e5:2e:8d:64:07: 53:35:1f:72:85:04:93:9e:bd:30:6f:4a:fa:57:2b: 3e:ea:f6:20:1d:d9:c8:1d:66:64:5b:19:04:80:74: 9c:94:e0:9f:4c:5f:d8:64:13:46:05:e3:ee:77:da: 47:f7:1f:37:57:a1:14:53:8c:91:94:53:b2:f6:de: 62:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E7:03:EC:FC:19:34:D8:3C:07:93:44:23:A7:27:4B:DA:AC:63:0B X509v3 Authority Key Identifier: keyid:5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/6-cD7PwZNNg8B5NEI6cnS9qsYws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.3.46.0/24 195.246.98.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:fe:a7:05:2b:b3:d1:af:14:88:70:09:04:ec:f3:b6:09:98: 13:e6:4f:d6:48:d2:17:5c:fd:8a:b7:64:d9:b6:b9:1a:05:1a: 0b:16:d5:16:52:3a:a0:9c:b3:38:c7:b1:51:1a:0c:28:da:86: 40:be:4d:af:ff:8b:36:cd:a8:52:1b:14:2c:fa:29:1d:aa:af: b3:c1:79:52:c3:55:ad:c1:03:aa:eb:10:b8:3b:bb:8e:e1:6b: 13:41:f4:70:cc:1b:a0:0d:2d:ce:33:41:b8:8f:3a:e7:fa:12: 5b:88:9b:4d:7c:f5:b9:9d:a1:03:a3:ce:60:88:89:9d:a9:b8: ef:b6:b9:68:51:98:c2:13:bc:de:88:33:fd:fc:78:8e:ef:75: 9f:df:6e:80:a9:fe:24:d8:fc:f0:1d:37:74:f5:5e:e7:0b:05: cb:18:8e:59:86:ef:b0:cc:77:b1:5e:0c:80:f0:77:a6:37:6b: 80:93:06:90:5b:78:87:6b:e3:31:0b:ca:c2:a2:16:04:37:f8: 88:a4:62:2b:ba:a6:7f:ec:03:99:9d:9e:6b:b3:15:70:7e:4b: f4:f3:1d:30:4b:59:04:7e:0e:c8:59:62:a0:f0:78:7b:cc:f1: 2f:52:23:c1:d5:4b:ed:f1:9d:a5:9e:52:fc:29:6a:24:71:c8: 5a:d5:ef:91 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8TZd1X031T6NC6it3VqYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZmQ4NjY3Y2NlOTViZTBhZTk2MDU4YzQ1NTBkNzA4ODAz NTMxMmYwHhcNMjYwMTAyMTgyMTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmU3MDNlY2ZjMTkzNGQ4M2MwNzkzNDQyM2E3Mjc0YmRhYWM2MzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpRPAS/6gddRPDSpkvd3OpxxYnj8 bMdlRwjfjZQk+vIPKV4iKRJWn2xfnVbSeVof59sprdLbeq/u/2gRz8DvvZgOssci wckKwwvrfZX5gJkZxRVDy9GYZcLLkbG+/dKw4JDuOvcOCRv21f+/KllGworFCoN7 5wOao7CgO/+IRhGwTNah83DXGAJshcrvkY4wN26CNrenfOcEPeh/Mj2F7Aoif2F6 DzcxbrG/OUU2N+ueHcAW/2wQQZL3wCcO5S6NZAdTNR9yhQSTnr0wb0r6Vys+6vYg HdnIHWZkWxkEgHSclOCfTF/YZBNGBePud9pH9x83V6EUU4yRlFOy9t5iOQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOvnA+z8GTTYPAeTRCOnJ0varGMLMB8GA1UdIwQY MBaAFFr9hmfM6VvgrpYFjEVQ1wiANTEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3YyR1o4enBXLUN1bGdXTVJWRFhDSUExTVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9hYWNiMGEtY2Y2NC00ZTc1LWE5ZGYt MjQ5YWM3NzNjMjgyLzEvNi1jRDdQd1pOTmc4QjVORUk2Y25TOXFzWXdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9hYWNiMGEtY2Y2NC00ZTc1LWE5ZGYtMjQ5YWM3NzNjMjgy LzEvV3YyR1o4enBXLUN1bGdXTVJWRFhDSUExTVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwQMuAwQA w/ZiMA0GCSqGSIb3DQEBCwUAA4IBAQAr/qcFK7PRrxSIcAkE7PO2CZgT5k/WSNIX XP2Kt2TZtrkaBRoLFtUWUjqgnLM4x7FRGgwo2oZAvk2v/4s2zahSGxQs+ikdqq+z wXlSw1WtwQOq6xC4O7uO4WsTQfRwzBugDS3OM0G4jzrn+hJbiJtNfPW5naEDo85g iImdqbjvtrloUZjCE7zeiDP9/HiO73Wf326Aqf4k2PzwHTd09V7nCwXLGI5Zhu+w zHexXgyA8HemN2uAkwaQW3iHa+MxC8rCohYEN/iIpGIruqZ/7AOZnZ5rsxVwfkv0 8x0wS1kEfg7IWWKg8Hh7zPEvUiPB1Uvt8Z2lnlL8KWokccha1e+R -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:43 2026 by rpki-client