This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/u6VMLfo2hFwMf4kQ5ZftZmatqDk.roa File: u6VMLfo2hFwMf4kQ5ZftZmatqDk.roa (raw, json) Hash identifier: DdPY8vR2Q6a4hS5C9hkvVESee8uGHUFzRXgB12kaTWY= Subject key identifier: BB:A5:4C:2D:FA:36:84:5C:0C:7F:89:10:E5:97:ED:66:66:AD:A8:39 Certificate issuer: /CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81 Certificate serial: 019B78A253978B4AAB44479BDB3914F3D02F Authority key identifier: D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/u6VMLfo2hFwMf4kQ5ZftZmatqDk.roa Signing time: Thu 01 Jan 2026 08:17:42 +0000 ROA not before: Thu 01 Jan 2026 08:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15699 IP address blocks: 194.36.122.0/23 maxlen: 32 194.36.138.0/23 maxlen: 32 195.162.18.0/23 maxlen: 32 2a0a:1680::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:53:97:8b:4a:ab:44:47:9b:db:39:14:f3:d0:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81 Validity Not Before: Jan 1 08:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bba54c2dfa36845c0c7f8910e597ed6666ada839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:36:3d:58:3a:40:b0:91:5a:81:d1:c4:d1:d4: 4e:e1:ff:25:d2:dc:59:d9:b2:ff:d7:52:5c:82:2c: 02:35:2f:50:ea:b5:26:18:9a:82:e7:da:d0:98:db: 3a:72:47:36:05:f7:71:ea:fb:d3:f4:3d:5e:c4:54: 13:5b:8b:7d:03:fc:b2:6f:b6:19:b8:f4:a8:ae:fd: fa:d8:0d:71:10:8f:e4:a1:c3:44:e4:b0:be:e6:67: a6:7e:3b:28:07:95:ca:a3:0b:2e:4d:b8:e1:f9:d7: 81:f1:c6:58:31:2b:db:56:b0:36:a8:a7:01:e5:e9: 4c:9f:b0:30:53:88:b7:a8:ef:c0:2e:0d:7f:f0:5f: d2:c6:84:be:c8:b8:51:87:a5:43:9c:10:95:af:b2: ea:69:a3:35:8a:bc:56:1c:10:7c:a1:1c:fb:75:fd: b9:2c:a7:b0:cb:38:0d:19:02:49:f4:40:6d:c1:e0: 0a:0b:16:98:de:4b:ba:9c:7b:de:3e:3d:0b:0d:65: 3e:36:76:94:c2:ef:66:5f:f0:e7:d4:13:a6:dd:59: 3f:bf:4a:95:e2:2e:fc:a4:44:cf:2f:97:1b:08:df: 23:11:6a:af:f5:a9:ad:4e:c0:99:7c:b7:26:bc:a5: 5b:da:51:0d:cb:1a:94:5c:c8:55:1d:ca:7a:89:2c: 49:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A5:4C:2D:FA:36:84:5C:0C:7F:89:10:E5:97:ED:66:66:AD:A8:39 X509v3 Authority Key Identifier: keyid:D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/u6VMLfo2hFwMf4kQ5ZftZmatqDk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.36.122.0/23 194.36.138.0/23 195.162.18.0/23 IPv6: 2a0a:1680::/29 Signature Algorithm: sha256WithRSAEncryption 00:a1:0e:81:8c:e2:e9:0d:93:ad:96:c3:70:14:f3:32:ba:03: 59:41:4a:43:6f:71:47:9e:38:f9:85:a9:8e:3f:ea:2c:bb:8d: f8:ba:21:2f:df:07:19:31:d8:a3:47:94:14:58:49:50:cf:15: a1:01:a7:bc:81:be:4e:b5:32:2d:e7:36:8a:07:98:3c:c9:5a: 47:b9:99:81:1d:f3:55:67:5a:46:a9:b6:64:88:8c:4a:fe:8b: a3:e3:46:43:43:d4:21:92:24:fb:87:3e:a4:27:9e:1e:e9:8f: 2d:4b:83:b9:b6:3e:3e:ba:01:0c:0d:5d:72:84:00:4a:38:bc: f6:28:6e:00:5b:ba:cf:a9:aa:34:5a:37:8f:7e:6b:ee:fd:c8: 87:61:e8:b4:58:9d:5c:c1:ec:51:f3:ca:4d:38:39:97:43:3b: e4:93:32:02:e1:65:b9:26:c1:7c:44:5e:80:0d:16:aa:a8:92: 41:75:a7:41:bd:6e:7f:f4:02:eb:83:2d:8c:5d:63:e4:41:68: e0:a5:3d:85:bb:14:2e:92:72:b8:22:77:bd:11:1a:f8:f4:e9: 3c:e3:32:65:51:fa:70:db:b9:ea:32:54:57:ab:4e:4b:ff:5b: 01:56:18:f1:87:e8:ae:87:15:fc:3e:87:fc:37:06:65:bf:c9: b8:21:95:8b -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt4olOXi0qrREeb2zkU89AvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMjdjNjA5ZmFmNGE2YzIyYWRmMWY4YzRhNzBhMDdhZTdj ZjJlODEwHhcNMjYwMTAxMDgxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmE1NGMyZGZhMzY4NDVjMGM3Zjg5MTBlNTk3ZWQ2NjY2YWRhODM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzY9WDpAsJFagdHE0dRO4f8l0txZ 2bL/11JcgiwCNS9Q6rUmGJqC59rQmNs6ckc2Bfdx6vvT9D1exFQTW4t9A/yyb7YZ uPSorv362A1xEI/kocNE5LC+5memfjsoB5XKowsuTbjh+deB8cZYMSvbVrA2qKcB 5elMn7AwU4i3qO/ALg1/8F/SxoS+yLhRh6VDnBCVr7LqaaM1irxWHBB8oRz7df25 LKewyzgNGQJJ9EBtweAKCxaY3ku6nHvePj0LDWU+NnaUwu9mX/Dn1BOm3Vk/v0qV 4i78pETPL5cbCN8jEWqv9amtTsCZfLcmvKVb2lENyxqUXMhVHcp6iSxJjQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFLulTC36NoRcDH+JEOWX7WZmrag5MB8GA1UdIwQY MBaAFNAnxgn69KbCKt8fjEpwoHrnzy6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMENmR0NmcjBwc0lxM3gtTVNuQ2dldWZQTG9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mNzFkNmYtN2VhNy00NWZjLWIxYjUt M2FjYjgxNDkwNGEwLzEvdTZWTUxmbzJoRndNZjRrUTVaZnRabWF0cURrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mNzFkNmYtN2VhNy00NWZjLWIxYjUtM2FjYjgxNDkwNGEw LzEvMENmR0NmcjBwc0lxM3gtTVNuQ2dldWZQTG9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBwiR6AwQB wiSKAwQBw6ISMA0EAgACMAcDBQMqChaAMA0GCSqGSIb3DQEBCwUAA4IBAQAAoQ6B jOLpDZOtlsNwFPMyugNZQUpDb3FHnjj5hamOP+osu434uiEv3wcZMdijR5QUWElQ zxWhAae8gb5OtTIt5zaKB5g8yVpHuZmBHfNVZ1pGqbZkiIxK/ouj40ZDQ9QhkiT7 hz6kJ54e6Y8tS4O5tj4+ugEMDV1yhABKOLz2KG4AW7rPqao0WjePfmvu/ciHYei0 WJ1cwexR88pNODmXQzvkkzIC4WW5JsF8RF6ADRaqqJJBdadBvW5/9ALrgy2MXWPk QWjgpT2FuxQuknK4Ine9ERr49Ok84zJlUfpw27nqMlRXq05L/1sBVhjxh+iuhxX8 Pof8NwZlv8m4IZWL -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:10 2026 by rpki-client