This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/v6BYpcJO3-wsjQFLOaxpXNTBy8c.roa File: v6BYpcJO3-wsjQFLOaxpXNTBy8c.roa (raw, json) Hash identifier: JkzBGN/ijvZxmUUufWRYlPrilvvosCUoDbl0rdaSfl8= Subject key identifier: BF:A0:58:A5:C2:4E:DF:EC:2C:8D:01:4B:39:AC:69:5C:D4:C1:CB:C7 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B791070E694F5CF6048F5072B29F72D3B Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/v6BYpcJO3-wsjQFLOaxpXNTBy8c.roa Signing time: Thu 01 Jan 2026 10:17:59 +0000 ROA not before: Thu 01 Jan 2026 10:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214447 IP address blocks: 212.68.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:70:e6:94:f5:cf:60:48:f5:07:2b:29:f7:2d:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfa058a5c24edfec2c8d014b39ac695cd4c1cbc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:8d:05:cc:ef:0d:b0:3f:d8:d2:dd:94:3c:06: 16:c4:ca:6a:02:d0:8f:c3:95:00:84:fb:42:96:71: 3f:0c:bb:91:3a:3b:9a:e4:16:14:01:23:88:27:f7: 62:b9:eb:ea:ec:3a:b6:fc:c9:b9:6c:cc:28:a3:29: ac:b5:5b:47:31:c8:20:af:ba:34:97:d6:ca:43:de: 44:8d:76:f4:ce:69:8f:49:40:bd:61:bc:d3:ab:bd: ce:5d:df:e0:d7:c9:e8:90:0c:a3:23:d1:41:c2:00: e2:66:99:2f:2c:84:cf:07:7c:f5:ee:b6:44:82:89: f6:3b:78:15:10:4e:cc:ee:d8:d8:c2:2d:8c:ef:5c: e3:41:46:52:91:d7:0e:c9:72:86:b2:6b:fd:33:37: 3b:f8:0a:98:28:c6:ec:07:96:52:78:02:94:90:5a: 39:46:a7:dd:ad:bd:e8:01:66:43:bd:40:6b:e0:be: a4:3c:85:24:b0:bb:3d:37:c7:0a:b5:64:6a:f4:18: 1b:6c:03:c9:5a:a0:c2:82:56:e8:f3:5b:c0:a0:fc: 0d:d1:68:8d:d8:15:aa:26:02:ce:8c:8c:99:93:55: a7:97:87:a4:5d:21:8f:7a:15:7f:34:f7:09:bb:d1: 9e:36:2f:de:f5:e3:a3:e5:46:72:4d:0a:09:2d:fd: 34:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A0:58:A5:C2:4E:DF:EC:2C:8D:01:4B:39:AC:69:5C:D4:C1:CB:C7 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/v6BYpcJO3-wsjQFLOaxpXNTBy8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.68.35.0/24 Signature Algorithm: sha256WithRSAEncryption 52:d8:72:e1:06:be:5e:cf:c7:29:23:d8:e7:4d:21:be:6a:82: ae:44:a5:68:43:25:88:a3:eb:ae:f8:04:cc:79:af:15:98:44: 50:33:93:79:b8:80:1e:15:e7:28:cf:a8:04:52:bb:8a:f5:a8: 88:a8:9c:57:c5:79:ad:3e:b8:16:fb:66:2d:c9:e1:f3:8c:e7: 98:3f:a2:0c:2d:e9:fa:5b:85:3f:b3:55:27:e6:28:75:15:74: 38:00:50:ac:33:d3:c1:af:e3:14:89:d8:48:6a:c8:f6:8c:49: 0a:9d:67:d1:a0:bc:8b:4a:ef:29:f2:35:02:e0:29:fd:16:f2: 22:ed:c4:07:4c:db:51:d0:7d:bd:c2:6b:f3:6d:50:d2:6d:00: 12:92:c0:a1:da:e3:10:fb:26:a8:fb:63:10:71:71:7f:be:08: 8f:92:06:d1:58:46:15:6a:b6:db:fe:ef:4e:1c:54:c4:fd:6d: 90:44:25:1e:b4:b0:5a:fd:a3:11:8d:aa:65:8e:a8:7b:a6:16: ca:2b:ee:c5:30:c6:24:7b:00:8f:be:33:c2:88:34:35:26:f7: 66:a0:d8:fc:6e:3e:74:a7:ae:75:a1:b6:87:43:e4:2f:bc:9c: 6c:39:f4:96:8b:26:a9:e4:b6:00:f5:42:c7:bc:fb:af:05:d7: 9d:02:77:1d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EHDmlPXPYEj1Bysp9y07MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmEwNThhNWMyNGVkZmVjMmM4ZDAxNGIzOWFjNjk1Y2Q0YzFjYmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA740FzO8NsD/Y0t2UPAYWxMpqAtCP w5UAhPtClnE/DLuROjua5BYUASOIJ/diuevq7Dq2/Mm5bMwooymstVtHMcggr7o0 l9bKQ95EjXb0zmmPSUC9YbzTq73OXd/g18nokAyjI9FBwgDiZpkvLITPB3z17rZE gon2O3gVEE7M7tjYwi2M71zjQUZSkdcOyXKGsmv9Mzc7+AqYKMbsB5ZSeAKUkFo5 Rqfdrb3oAWZDvUBr4L6kPIUksLs9N8cKtWRq9BgbbAPJWqDCglbo81vAoPwN0WiN 2BWqJgLOjIyZk1Wnl4ekXSGPehV/NPcJu9GeNi/e9eOj5UZyTQoJLf00RQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL+gWKXCTt/sLI0BSzmsaVzUwcvHMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvdjZCWXBjSk8zLXdzalFGTE9heHBYTlRCeThjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EQjMA0G CSqGSIb3DQEBCwUAA4IBAQBS2HLhBr5ez8cpI9jnTSG+aoKuRKVoQyWIo+uu+ATM ea8VmERQM5N5uIAeFecoz6gEUruK9aiIqJxXxXmtPrgW+2YtyeHzjOeYP6IMLen6 W4U/s1Un5ih1FXQ4AFCsM9PBr+MUidhIasj2jEkKnWfRoLyLSu8p8jUC4Cn9FvIi 7cQHTNtR0H29wmvzbVDSbQASksCh2uMQ+yao+2MQcXF/vgiPkgbRWEYVarbb/u9O HFTE/W2QRCUetLBa/aMRjapljqh7phbKK+7FMMYkewCPvjPCiDQ1JvdmoNj8bj50 p651obaHQ+QvvJxsOfSWiyap5LYA9ULHvPuvBdedAncd -----END CERTIFICATE-----Generated at Wed Jan 21 13:31:58 2026 by rpki-client