This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6tKCB_wkIxXU6hzE6_HbzbLSnRk.roa File: 6tKCB_wkIxXU6hzE6_HbzbLSnRk.roa (raw, json) Hash identifier: qGVajF5H+47Haw7fSlS2S4yS6iBrCwjpFhlgTElC1Us= Subject key identifier: EA:D2:82:07:FC:24:23:15:D4:EA:1C:C4:EB:F1:DB:CD:B2:D2:9D:19 Certificate issuer: /CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0 Certificate serial: 019B7F858A4E7427B2E07007A26CC6AF6FE3 Authority key identifier: E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6tKCB_wkIxXU6hzE6_HbzbLSnRk.roa Signing time: Fri 02 Jan 2026 16:23:36 +0000 ROA not before: Fri 02 Jan 2026 16:23:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9136 IP address blocks: 194.39.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 22:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:8a:4e:74:27:b2:e0:70:07:a2:6c:c6:af:6f:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0 Validity Not Before: Jan 2 16:23:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ead28207fc242315d4ea1cc4ebf1dbcdb2d29d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0a:98:ca:6e:9b:e9:5a:d5:a2:b3:73:dd:55: ea:f6:34:ea:f3:d5:6b:ae:f8:a0:c3:27:f3:7d:be: d7:7c:df:62:1c:88:01:eb:95:12:c9:51:58:55:10: 97:49:73:24:36:de:78:30:68:f6:6a:15:09:01:aa: 62:0d:04:a0:39:e7:41:47:63:b1:a8:06:9c:b6:44: 49:c3:5f:83:2f:22:e9:d4:f1:34:b8:8b:84:a1:d4: d0:b6:30:95:7c:2a:ff:75:00:56:5e:4b:ca:97:41: 93:2e:7d:56:6f:57:10:04:4e:b6:d1:c5:b2:40:4d: 25:33:4d:e0:33:91:cb:5a:4f:2c:3b:16:6f:0c:8a: 86:2e:eb:ed:7a:ce:77:c3:23:ad:6a:3f:4e:2b:1d: 77:a0:7e:88:5f:a6:4e:5a:6b:e0:fc:92:0c:3e:20: b9:8f:1a:62:cd:a5:f6:01:50:1c:e8:2c:d4:4a:2f: ee:03:c3:26:55:ef:31:89:dc:e2:39:eb:eb:8f:e0: 8b:20:10:75:2c:d6:c4:28:5b:95:0a:8b:6d:c1:16: 37:f1:a4:56:40:da:99:2e:b7:86:3e:d5:57:c0:e5: 9c:3c:dc:73:b7:91:01:15:88:ac:73:78:8f:33:d2: f3:65:8a:9e:5d:53:9c:0d:2e:f3:ca:89:40:11:70: 49:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D2:82:07:FC:24:23:15:D4:EA:1C:C4:EB:F1:DB:CD:B2:D2:9D:19 X509v3 Authority Key Identifier: keyid:E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6tKCB_wkIxXU6hzE6_HbzbLSnRk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.39.104.0/22 Signature Algorithm: sha256WithRSAEncryption 93:76:91:2d:7e:ff:ce:60:19:a6:7b:f8:be:26:f7:0b:61:8f: a1:72:91:36:af:18:07:2d:74:ae:b2:5b:a7:58:9e:21:b7:8f: 31:c8:a5:90:37:bc:e3:b6:9c:38:aa:6e:f4:ae:66:5d:ec:55: f2:93:d7:17:32:03:72:f0:a0:2f:80:34:2e:ea:a3:78:1d:22: f4:7a:48:3f:25:32:f6:d1:2a:e3:cb:58:a1:b6:14:5c:0e:a3: db:64:a9:0e:47:09:1d:84:47:3c:0e:ad:80:e3:a3:78:ef:dd: 92:25:64:5a:ba:d1:d8:38:4f:4e:42:7c:fe:e1:40:1c:b9:fc: d9:02:2a:f9:6b:b2:d0:4a:99:06:41:da:68:e4:38:8c:39:03: 68:58:de:1a:09:5c:d9:fa:51:4d:c5:57:17:94:82:3f:39:1b: c1:73:ea:f2:3a:3a:8e:b4:d4:44:19:12:f5:7e:99:58:33:08: 65:ea:89:24:cd:ef:31:56:e0:0b:0a:61:f2:37:2f:61:4e:05: 07:36:8a:83:2e:a8:2e:d4:d8:e1:e7:7e:bf:5a:28:df:0d:67: f2:42:cf:05:34:da:bd:1f:22:fe:bb:ce:71:29:78:20:0c:34: cb:57:83:d0:1d:3e:f9:98:26:7d:9c:08:39:ae:32:a5:16:d4: 49:5d:78:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hYpOdCey4HAHomzGr2/jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4Y2E3MGMxZmM5NWI5YjFlOWRjNzc3NTQ1NWJhZGI5MjE0 ZjkxZDAwHhcNMjYwMTAyMTYyMzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWQyODIwN2ZjMjQyMzE1ZDRlYTFjYzRlYmYxZGJjZGIyZDI5ZDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAqYym6b6VrVorNz3VXq9jTq89Vr rvigwyfzfb7XfN9iHIgB65USyVFYVRCXSXMkNt54MGj2ahUJAapiDQSgOedBR2Ox qAactkRJw1+DLyLp1PE0uIuEodTQtjCVfCr/dQBWXkvKl0GTLn1Wb1cQBE620cWy QE0lM03gM5HLWk8sOxZvDIqGLuvtes53wyOtaj9OKx13oH6IX6ZOWmvg/JIMPiC5 jxpizaX2AVAc6CzUSi/uA8MmVe8xidziOevrj+CLIBB1LNbEKFuVCottwRY38aRW QNqZLreGPtVXwOWcPNxzt5EBFYisc3iPM9LzZYqeXVOcDS7zyolAEXBJSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOrSggf8JCMV1OocxOvx282y0p0ZMB8GA1UdIwQY MBaAFOjKcMH8lbmx6dx3dUVbrbkhT5HQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk1wd3dmeVZ1YkhwM0hkMVJWdXR1U0ZQa2RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81ZmI5ZmUtZGRjNy00NDMyLWE0YTMt MTZkOWY3ZDA3NGYzLzEvNnRLQ0Jfd2tJeFhVNmh6RTZfSGJ6YkxTblJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81ZmI5ZmUtZGRjNy00NDMyLWE0YTMtMTZkOWY3ZDA3NGYz LzEvNk1wd3dmeVZ1YkhwM0hkMVJWdXR1U0ZQa2RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwidoMA0G CSqGSIb3DQEBCwUAA4IBAQCTdpEtfv/OYBmme/i+JvcLYY+hcpE2rxgHLXSuslun WJ4ht48xyKWQN7zjtpw4qm70rmZd7FXyk9cXMgNy8KAvgDQu6qN4HSL0ekg/JTL2 0Srjy1ihthRcDqPbZKkORwkdhEc8Dq2A46N4792SJWRautHYOE9OQnz+4UAcufzZ Air5a7LQSpkGQdpo5DiMOQNoWN4aCVzZ+lFNxVcXlII/ORvBc+ryOjqOtNREGRL1 fplYMwhl6okkze8xVuALCmHyNy9hTgUHNoqDLqgu1Njh536/WijfDWfyQs8FNNq9 HyL+u85xKXggDDTLV4PQHT75mCZ9nAg5rjKlFtRJXXge -----END CERTIFICATE-----Generated at Tue Jan 20 07:47:12 2026 by rpki-client