This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/6rDcnc8zxzhkJyl08YVHLxKqAYU.roa File: 6rDcnc8zxzhkJyl08YVHLxKqAYU.roa (raw, json) Hash identifier: /x/sgx4yNdn4VpUAMOm2oqiLASykYIDoBe8pRNsOXmM= Subject key identifier: EA:B0:DC:9D:CF:33:C7:38:64:27:29:74:F1:85:47:2F:12:AA:01:85 Certificate issuer: /CN=ef7fd5d33061a9de920af1c2a13513d46dd24612 Certificate serial: 019B7E3767C0E0EAF0DADEF938826F93CCCA Authority key identifier: EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/6rDcnc8zxzhkJyl08YVHLxKqAYU.roa Signing time: Fri 02 Jan 2026 10:18:38 +0000 ROA not before: Fri 02 Jan 2026 10:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4755 IP address blocks: 193.32.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.mft rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:67:c0:e0:ea:f0:da:de:f9:38:82:6f:93:cc:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef7fd5d33061a9de920af1c2a13513d46dd24612 Validity Not Before: Jan 2 10:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eab0dc9dcf33c73864272974f185472f12aa0185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:de:31:22:5d:42:84:bb:4c:b7:83:1a:ef:00: c0:30:8d:b0:63:9d:23:bc:98:6f:50:49:22:d9:33: e7:2e:60:ee:dd:5f:1f:95:94:cb:fa:3c:98:2e:24: 9d:f8:07:6d:d9:74:88:d9:b9:af:4b:06:fa:77:3a: cb:75:80:ae:9c:00:f8:0f:f6:e7:57:de:de:42:5a: 80:3e:ed:d1:cf:2b:8f:0f:72:b4:54:fd:e9:5a:02: c5:17:2c:7c:08:d8:c9:dc:0b:10:a0:7b:bf:07:1f: 94:e2:cd:c4:5b:67:02:4a:b2:5a:2a:41:73:7f:d5: 45:a8:4d:c8:fc:1c:58:0e:96:df:bb:a4:c8:c4:fc: 3f:a5:40:ac:b2:60:be:28:a2:07:3e:c7:5e:bf:03: b4:6f:2a:f1:6e:44:9a:0b:4b:19:2d:ef:35:6d:7a: 1f:03:46:f7:77:36:62:ad:b7:fc:fc:75:0f:b8:b1: 6f:22:06:3c:46:2f:4c:cc:9e:81:36:7c:01:8a:05: f8:d2:ab:23:d4:9a:cf:78:ac:8f:55:d5:ee:c9:33: 60:ae:8c:34:ab:77:e8:15:cb:9e:7e:c2:74:88:93: 3e:6e:d8:2f:cd:b1:fa:c9:c9:2e:a5:ab:d6:1e:69: 64:16:d9:48:f7:96:f0:8e:c0:ac:c6:e9:d3:13:66: 32:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B0:DC:9D:CF:33:C7:38:64:27:29:74:F1:85:47:2F:12:AA:01:85 X509v3 Authority Key Identifier: keyid:EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/6rDcnc8zxzhkJyl08YVHLxKqAYU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.32.247.0/24 Signature Algorithm: sha256WithRSAEncryption b6:d6:60:b2:94:cc:31:e8:cc:47:bf:2c:74:01:3b:00:8c:42: 20:1d:ee:13:af:c8:2f:bc:53:5a:71:9d:d4:7d:d9:3d:bc:d0: fd:16:3c:16:78:b0:c0:87:05:b6:9e:d8:b6:15:32:38:0e:6a: 5a:ae:6b:f4:14:a8:ec:a1:3e:53:f5:92:79:b5:a2:cb:f8:dc: 54:78:97:bb:a9:03:61:bf:7d:4b:8a:02:df:40:7e:f8:62:67: 02:14:ef:fe:ff:19:0b:d8:97:61:6b:70:81:dc:a9:8d:b5:df: 1b:4f:15:11:09:a1:3a:1a:d9:37:2e:90:08:94:6c:60:da:5a: 12:96:d4:61:2d:3d:c7:a5:4e:aa:60:56:64:01:f5:cb:f3:35: e5:96:7d:b0:02:5e:5b:60:0c:a4:ee:90:cb:fe:7c:d8:cf:32: 99:02:35:70:50:57:62:0c:45:c2:55:77:77:09:0f:9d:7e:a6: 50:b9:56:24:ef:f9:dc:c2:53:5e:72:ab:ce:05:b5:db:09:72: fa:f9:51:85:9d:01:7f:79:ee:9d:22:ce:b4:4d:e5:da:b9:32: b5:ed:6f:6d:50:7c:2b:99:3d:b0:13:72:cf:6f:2d:d4:52:11: 13:73:bd:ea:00:dc:9b:40:58:fc:58:2d:9c:55:22:df:32:27: 9b:89:78:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N2fA4Orw2t75OIJvk8zKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmN2ZkNWQzMzA2MWE5ZGU5MjBhZjFjMmExMzUxM2Q0NmRk MjQ2MTIwHhcNMjYwMTAyMTAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWIwZGM5ZGNmMzNjNzM4NjQyNzI5NzRmMTg1NDcyZjEyYWEwMTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/N4xIl1ChLtMt4Ma7wDAMI2wY50j vJhvUEki2TPnLmDu3V8flZTL+jyYLiSd+Adt2XSI2bmvSwb6dzrLdYCunAD4D/bn V97eQlqAPu3RzyuPD3K0VP3pWgLFFyx8CNjJ3AsQoHu/Bx+U4s3EW2cCSrJaKkFz f9VFqE3I/BxYDpbfu6TIxPw/pUCssmC+KKIHPsdevwO0byrxbkSaC0sZLe81bXof A0b3dzZirbf8/HUPuLFvIgY8Ri9MzJ6BNnwBigX40qsj1JrPeKyPVdXuyTNgrow0 q3foFcuefsJ0iJM+btgvzbH6yckupavWHmlkFtlI95bwjsCsxunTE2YySQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOqw3J3PM8c4ZCcpdPGFRy8SqgGFMB8GA1UdIwQY MBaAFO9/1dMwYanekgrxwqE1E9Rt0kYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzNfVjB6QmhxZDZTQ3ZIQ29UVVQxRzNTUmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yMzE5MGMtZTFhMC00YmE0LWIxZDgt YTEwMmJlMzgyZTUxLzEvNnJEY25jOHp4emhrSnlsMDhZVkhMeEtxQVlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yMzE5MGMtZTFhMC00YmE0LWIxZDgtYTEwMmJlMzgyZTUx LzEvNzNfVjB6QmhxZDZTQ3ZIQ29UVVQxRzNTUmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSD3MA0G CSqGSIb3DQEBCwUAA4IBAQC21mCylMwx6MxHvyx0ATsAjEIgHe4Tr8gvvFNacZ3U fdk9vND9FjwWeLDAhwW2nti2FTI4Dmparmv0FKjsoT5T9ZJ5taLL+NxUeJe7qQNh v31LigLfQH74YmcCFO/+/xkL2Jdha3CB3KmNtd8bTxURCaE6Gtk3LpAIlGxg2loS ltRhLT3HpU6qYFZkAfXL8zXlln2wAl5bYAyk7pDL/nzYzzKZAjVwUFdiDEXCVXd3 CQ+dfqZQuVYk7/ncwlNecqvOBbXbCXL6+VGFnQF/ee6dIs60TeXauTK17W9tUHwr mT2wE3LPby3UUhETc73qANybQFj8WC2cVSLfMiebiXh0 -----END CERTIFICATE-----Generated at Tue Jan 20 02:59:50 2026 by rpki-client