This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/H6-G_w57PwFFZvg2QgmnUtjDDiI.roa File: H6-G_w57PwFFZvg2QgmnUtjDDiI.roa (raw, json) Hash identifier: y/L9KV3Gdb+g4dMiiWg8dTcSH3OiKNJZ0cgRonPQvF0= Subject key identifier: 1F:AF:86:FF:0E:7B:3F:01:45:66:F8:36:42:09:A7:52:D8:C3:0E:22 Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Certificate serial: 019B79105AC118B7051A35C890723DF90C73 Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/H6-G_w57PwFFZvg2QgmnUtjDDiI.roa Signing time: Thu 01 Jan 2026 10:17:53 +0000 ROA not before: Thu 01 Jan 2026 10:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46450 IP address blocks: 193.3.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 21:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:5a:c1:18:b7:05:1a:35:c8:90:72:3d:f9:0c:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Validity Not Before: Jan 1 10:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1faf86ff0e7b3f014566f8364209a752d8c30e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bf:23:f3:00:b1:0e:3b:05:21:dc:f5:81:4b: a4:c2:3d:fa:08:5c:ba:43:9e:5f:a7:d9:d4:b9:66: 9a:cd:cd:2d:fa:28:09:a6:5f:40:de:75:d0:ba:db: a0:b2:d8:dd:28:51:3e:9f:26:23:07:b1:99:a6:51: 30:c2:40:47:8f:63:4e:57:99:e7:9d:63:9a:ba:61: 09:4d:8d:bf:5f:6e:ba:69:89:0f:84:08:73:3b:4e: 2b:69:27:24:df:c1:db:80:e6:83:6e:6a:ce:b0:49: 47:86:bf:70:19:62:97:fd:46:06:db:7d:5a:e5:a9: 3a:a0:a2:2e:c6:f8:9a:ed:aa:4e:d8:48:c1:0e:46: b1:0c:0d:e4:cc:11:63:28:74:77:ca:3a:35:85:68: 9d:dc:3e:eb:ac:30:2a:ce:2b:0f:1e:29:79:68:26: 73:c9:34:72:c0:af:93:e7:8a:b8:09:ff:fb:9b:b7: 6c:b9:5f:89:0f:62:ef:6f:da:fd:27:31:e8:a7:d5: 2c:9a:d5:dc:e7:68:4c:2a:61:b2:69:dc:1e:9b:d2: 76:41:c5:28:15:2e:2c:e1:a2:96:9d:a2:6a:8c:eb: 97:fb:f1:c7:99:de:7e:74:cb:7a:90:2f:c1:6b:cf: 8f:97:b3:50:51:8e:71:f1:a0:4d:a6:d7:71:1d:40: 21:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AF:86:FF:0E:7B:3F:01:45:66:F8:36:42:09:A7:52:D8:C3:0E:22 X509v3 Authority Key Identifier: keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/H6-G_w57PwFFZvg2QgmnUtjDDiI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.3.20.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:d2:2c:f5:fa:04:08:80:06:50:24:21:f6:90:2a:d1:75:ae: f3:9b:b5:9c:d2:39:82:ee:84:20:08:84:78:01:74:49:67:3a: e8:35:3c:77:b8:3e:82:5a:4b:8b:ee:7e:30:05:72:12:6b:9e: c0:5f:9b:01:89:21:35:97:b9:e1:33:24:8f:87:c5:b8:7b:b1: 02:15:db:26:2a:22:70:65:bd:b2:d3:b6:8d:35:dc:06:53:d9: b7:90:8a:c3:5c:e5:e6:31:8b:b8:05:08:d8:a1:96:db:f3:41: 79:54:ee:82:59:f4:8e:c4:90:df:ef:ec:3e:df:4c:f4:11:d5: bc:ee:82:00:f2:d6:26:16:56:a7:44:d7:7f:07:96:f3:7f:e6: 83:67:87:ea:9e:48:2e:8a:17:fd:28:d4:83:41:e4:91:e0:7e: 3f:0f:6e:dc:0a:1f:a7:54:af:f1:b2:9b:cf:06:22:9e:b6:f4: e7:0d:56:22:22:b6:a6:63:37:ce:4b:d4:6a:2f:ff:ca:76:94: 46:37:48:5d:9d:e0:34:e6:c7:5f:67:db:ff:4c:5c:7b:a4:70: 61:83:ac:c7:05:4f:86:df:d8:1a:e4:7c:1d:81:bb:fe:0e:63: d7:ec:4d:b5:1e:b5:c2:78:71:41:f5:3b:0f:80:62:6d:b6:77: b7:94:00:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EFrBGLcFGjXIkHI9+QxzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl NGQxZDcwHhcNMjYwMTAxMTAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmFmODZmZjBlN2IzZjAxNDU2NmY4MzY0MjA5YTc1MmQ4YzMwZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur8j8wCxDjsFIdz1gUukwj36CFy6 Q55fp9nUuWaazc0t+igJpl9A3nXQutugstjdKFE+nyYjB7GZplEwwkBHj2NOV5nn nWOaumEJTY2/X266aYkPhAhzO04raSck38HbgOaDbmrOsElHhr9wGWKX/UYG231a 5ak6oKIuxvia7apO2EjBDkaxDA3kzBFjKHR3yjo1hWid3D7rrDAqzisPHil5aCZz yTRywK+T54q4Cf/7m7dsuV+JD2Lvb9r9JzHop9UsmtXc52hMKmGyadwem9J2QcUo FS4s4aKWnaJqjOuX+/HHmd5+dMt6kC/Ba8+Pl7NQUY5x8aBNptdxHUAhgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB+vhv8Oez8BRWb4NkIJp1LYww4iMB8GA1UdIwQY MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt ZGRmNTY3ZWRlZDAzLzEvSDYtR193NTdQd0ZGWnZnMlFnbW5VdGpERGlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQMUMA0G CSqGSIb3DQEBCwUAA4IBAQB70iz1+gQIgAZQJCH2kCrRda7zm7Wc0jmC7oQgCIR4 AXRJZzroNTx3uD6CWkuL7n4wBXISa57AX5sBiSE1l7nhMySPh8W4e7ECFdsmKiJw Zb2y07aNNdwGU9m3kIrDXOXmMYu4BQjYoZbb80F5VO6CWfSOxJDf7+w+30z0EdW8 7oIA8tYmFlanRNd/B5bzf+aDZ4fqnkguihf9KNSDQeSR4H4/D27cCh+nVK/xspvP BiKetvTnDVYiIramYzfOS9RqL//KdpRGN0hdneA05sdfZ9v/TFx7pHBhg6zHBU+G 39ga5Hwdgbv+DmPX7E21HrXCeHFB9TsPgGJttne3lACR -----END CERTIFICATE-----Generated at Thu Jan 22 07:29:58 2026 by rpki-client