This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/6jB2jMiHx3sCwDqQfo8bHL7xj1o.roa File: 6jB2jMiHx3sCwDqQfo8bHL7xj1o.roa (raw, json) Hash identifier: c6SeZtcLZoq1VVZbkWGju8/PVQHZ1NT6ScCfBSc3zdI= Subject key identifier: EA:30:76:8C:C8:87:C7:7B:02:C0:3A:90:7E:8F:1B:1C:BE:F1:8F:5A Certificate issuer: /CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc Certificate serial: 019B7910E40458BCA80A3360C3AA65F96812 Authority key identifier: D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/6jB2jMiHx3sCwDqQfo8bHL7xj1o.roa Signing time: Thu 01 Jan 2026 10:18:28 +0000 ROA not before: Thu 01 Jan 2026 10:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215867 IP address blocks: 195.211.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e4:04:58:bc:a8:0a:33:60:c3:aa:65:f9:68:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc Validity Not Before: Jan 1 10:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea30768cc887c77b02c03a907e8f1b1cbef18f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:df:e0:22:65:d3:cb:f1:0e:35:66:c1:bb:b1: 95:06:34:d4:fb:63:e2:d5:a6:a8:d4:43:56:5a:80: 91:92:f3:da:13:cd:ec:6b:d5:b4:ed:6f:ff:9f:e2: 74:85:9e:f8:dd:6b:ff:f9:bd:f1:3d:5b:43:cd:ab: f0:d6:d8:13:65:f5:3b:bc:43:be:97:8e:9e:57:67: f6:a5:ac:ea:53:2c:83:6e:7c:95:7c:ac:f1:92:20: b5:c5:45:47:34:0f:b1:a2:88:12:a4:fe:9d:4b:8f: 95:6d:1a:38:dd:96:13:b9:ef:d7:b3:90:1f:31:61: 4e:de:f2:41:81:ab:de:e2:d8:25:dd:d6:67:bc:59: 8b:09:a2:ee:45:84:e4:0e:f4:28:fe:5b:55:3d:68: 17:3c:61:ae:ba:73:25:9a:b7:2d:61:43:e7:46:42: b6:93:18:e1:c2:77:88:8b:d3:28:0d:dc:c4:18:7e: d7:59:31:94:d3:ff:4c:4f:8a:24:bb:68:7a:d2:21: 71:fe:66:08:5e:c3:24:9d:7e:1f:e9:84:a5:1c:d8: 4b:b7:87:c8:6f:9e:ec:cf:0a:6d:6f:de:34:96:79: 28:c7:00:de:e5:51:b9:d8:0a:80:4d:f8:a9:71:19: ce:d5:10:df:c0:c7:2e:25:1a:fe:ca:71:8b:09:76: dd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:30:76:8C:C8:87:C7:7B:02:C0:3A:90:7E:8F:1B:1C:BE:F1:8F:5A X509v3 Authority Key Identifier: keyid:D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/6jB2jMiHx3sCwDqQfo8bHL7xj1o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.211.125.0/24 Signature Algorithm: sha256WithRSAEncryption 10:96:78:23:24:ea:d6:e2:d6:6c:48:11:22:40:9f:8c:dd:4e: a7:4f:fe:84:3d:ac:41:e4:6b:30:86:4c:d5:41:c6:26:da:53: e4:02:ef:ad:81:9c:f4:82:55:93:43:cc:0d:37:6a:04:01:0e: d2:a7:c9:77:26:2f:28:95:94:bf:a1:3b:79:2c:4b:7c:6f:09: cd:d6:1b:88:ac:f3:43:49:e5:95:e0:43:44:f3:b8:f9:5c:73: 7c:5d:b2:2f:4e:fa:2e:f3:b7:d7:d3:28:df:3b:70:10:69:da: 3b:35:45:fe:fc:47:7d:bb:59:7c:95:ff:6d:ee:21:e7:b1:00: b0:66:c8:60:e2:11:c6:62:48:74:85:80:2a:c7:21:a3:be:d8: b1:a5:0f:1f:57:94:98:57:26:ee:30:72:75:cd:7b:18:13:ed: f7:dc:09:70:d7:3f:5b:80:64:96:fb:e3:a4:75:d9:44:e2:59: 39:3a:09:35:2c:55:24:e0:a7:22:61:f3:50:c3:7b:7d:bd:6d: e7:44:91:73:7f:ec:69:c9:d2:f9:52:69:74:77:28:9d:94:6d: 29:f1:20:54:44:07:d8:97:18:3b:51:6b:0d:af:da:49:7d:c4: 23:a0:cf:38:17:3d:4d:1d:1d:30:92:a1:ef:83:9f:75:f7:de: 2d:2b:6c:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EOQEWLyoCjNgw6pl+WgSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMWE1OTQwNzIyYjIwN2IyOWQ5NWE2YzgxYmUwZDJiZjRk NDEwY2MwHhcNMjYwMTAxMTAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTMwNzY4Y2M4ODdjNzdiMDJjMDNhOTA3ZThmMWIxY2JlZjE4ZjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9/gImXTy/EONWbBu7GVBjTU+2Pi 1aao1ENWWoCRkvPaE83sa9W07W//n+J0hZ743Wv/+b3xPVtDzavw1tgTZfU7vEO+ l46eV2f2pazqUyyDbnyVfKzxkiC1xUVHNA+xoogSpP6dS4+VbRo43ZYTue/Xs5Af MWFO3vJBgave4tgl3dZnvFmLCaLuRYTkDvQo/ltVPWgXPGGuunMlmrctYUPnRkK2 kxjhwneIi9MoDdzEGH7XWTGU0/9MT4oku2h60iFx/mYIXsMknX4f6YSlHNhLt4fI b57szwptb940lnkoxwDe5VG52AqATfipcRnO1RDfwMcuJRr+ynGLCXbdaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOowdozIh8d7AsA6kH6PGxy+8Y9aMB8GA1UdIwQY MBaAFNIaWUByKyB7KdlabIG+DSv01BDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhwWlFISXJJSHNwMlZwc2diNE5LX1RVRU13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81NjQzM2EtMGE3MC00ZWFlLTlmOWQt OGNmYmRiNzk5Mjg0LzEvNmpCMmpNaUh4M3NDd0RxUWZvOGJITDd4ajFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC81NjQzM2EtMGE3MC00ZWFlLTlmOWQtOGNmYmRiNzk5Mjg0 LzEvMGhwWlFISXJJSHNwMlZwc2diNE5LX1RVRU13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9N9MA0G CSqGSIb3DQEBCwUAA4IBAQAQlngjJOrW4tZsSBEiQJ+M3U6nT/6EPaxB5GswhkzV QcYm2lPkAu+tgZz0glWTQ8wNN2oEAQ7Sp8l3Ji8olZS/oTt5LEt8bwnN1huIrPND SeWV4ENE87j5XHN8XbIvTvou87fX0yjfO3AQado7NUX+/Ed9u1l8lf9t7iHnsQCw Zshg4hHGYkh0hYAqxyGjvtixpQ8fV5SYVybuMHJ1zXsYE+333Alw1z9bgGSW++Ok ddlE4lk5Ogk1LFUk4KciYfNQw3t9vW3nRJFzf+xpydL5Uml0dyidlG0p8SBURAfY lxg7UWsNr9pJfcQjoM84Fz1NHR0wkqHvg591994tK2w6 -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:30 2026 by rpki-client