This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/6oUVf4YojdnKJI23FjW6Uxu5qpo.roa File: 6oUVf4YojdnKJI23FjW6Uxu5qpo.roa (raw, json) Hash identifier: 6Y30jRs+1MOBeMJ5NwM5lbTcqPYPzsKJHmKP4y+KYMA= Subject key identifier: EA:85:15:7F:86:28:8D:D9:CA:24:8D:B7:16:35:BA:53:1B:B9:AA:9A Certificate issuer: /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75 Certificate serial: 019B79ED1BF959E4FECC5B310C67B95DCFCB Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/6oUVf4YojdnKJI23FjW6Uxu5qpo.roa Signing time: Thu 01 Jan 2026 14:19:00 +0000 ROA not before: Thu 01 Jan 2026 14:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42630 IP address blocks: 193.200.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:1b:f9:59:e4:fe:cc:5b:31:0c:67:b9:5d:cf:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75 Validity Not Before: Jan 1 14:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea85157f86288dd9ca248db71635ba531bb9aa9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a2:e7:26:2d:5a:ea:99:72:7a:80:9e:c7:71: f5:d6:fa:43:79:ca:34:d3:61:6a:e1:e4:db:69:a8: da:a6:f3:16:f2:5d:49:e5:83:20:bc:f7:c2:4c:c8: 4a:ef:5f:b7:77:f1:5f:59:ed:21:b2:9f:c9:74:03: 3f:f4:b7:42:bf:5b:4b:51:a8:22:cd:09:1f:43:8f: e3:ec:e3:58:23:2c:d7:6f:3b:7e:73:3f:ec:47:01: cd:5c:52:e1:9b:66:ad:f7:4c:2c:7d:1d:71:4d:13: c2:9c:a1:ec:37:cb:c6:f5:b3:c2:4e:42:09:b5:e4: bb:7d:53:35:ec:0d:1c:4f:8d:76:af:95:48:07:c4: 2a:7f:56:d1:a8:a0:48:7d:c6:33:14:fb:94:80:2d: 32:d5:2c:ad:5f:57:73:de:63:9d:7c:e8:3f:fa:e9: 03:41:0c:1c:a3:8c:93:b1:a7:97:43:75:35:f1:d4: 24:78:b4:c3:5a:84:5e:6a:15:3f:22:32:83:d5:44: 0c:38:dc:0b:6a:80:a6:d1:02:f5:16:d1:0f:6a:7d: e2:69:d0:10:84:c0:0d:0b:26:47:40:10:1b:7d:a7: ea:ee:67:f0:b9:97:cc:f8:7d:31:ee:49:e1:20:8d: 7b:de:a2:5d:fb:28:29:81:ca:d2:af:b1:b7:b1:56: e3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:85:15:7F:86:28:8D:D9:CA:24:8D:B7:16:35:BA:53:1B:B9:AA:9A X509v3 Authority Key Identifier: keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/6oUVf4YojdnKJI23FjW6Uxu5qpo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.58.0/23 Signature Algorithm: sha256WithRSAEncryption 52:01:a4:1d:37:62:4b:de:8d:2e:a3:9d:34:4f:b3:12:5c:6a: dd:45:a0:ee:ba:50:70:58:61:39:e8:86:4a:55:bf:a0:cb:da: 58:b8:50:11:0a:6c:c3:c4:ac:97:c8:41:89:ef:63:72:95:4c: cc:00:f0:ca:c3:28:91:f6:ca:55:b1:02:77:f2:33:f0:c9:0a: 9f:93:93:b1:c6:0b:97:01:7f:48:5b:c4:f8:d6:5c:59:8e:3a: df:08:d3:23:40:ac:35:79:87:24:cc:8b:a7:62:f7:52:90:1c: 16:16:43:96:8d:26:08:15:d9:c0:36:47:e6:aa:98:2b:b9:c3: bc:75:e6:25:69:af:04:2f:5a:20:4b:66:5e:f5:15:bc:37:5c: a9:78:c5:3b:31:a6:01:16:c2:4a:de:5a:8a:4e:53:b9:55:36: d0:75:9e:0b:88:bb:da:cc:c4:39:98:a2:01:3b:fa:97:ba:29: c5:1c:68:4f:e3:55:7c:db:0a:7e:5b:6b:26:66:de:c2:cb:eb: 2c:af:e7:fc:26:74:75:2f:c5:06:93:0c:1c:b7:8f:0e:ae:ea: 61:59:3d:a2:d4:91:4c:ed:bc:6a:be:3f:ce:fe:ad:b8:1f:59: b2:6a:cf:40:71:1b:33:a4:d2:40:32:17:9b:da:9e:47:11:f9: 2f:e9:ad:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Rv5WeT+zFsxDGe5Xc/LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYzEyMWUxNTQ1ZGYzZTViYjg2ZTkxODhmMjgyNWZhZDc0 NzdmNzUwHhcNMjYwMTAxMTQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTg1MTU3Zjg2Mjg4ZGQ5Y2EyNDhkYjcxNjM1YmE1MzFiYjlhYTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6LnJi1a6plyeoCex3H11vpDeco0 02Fq4eTbaajapvMW8l1J5YMgvPfCTMhK71+3d/FfWe0hsp/JdAM/9LdCv1tLUagi zQkfQ4/j7ONYIyzXbzt+cz/sRwHNXFLhm2at90wsfR1xTRPCnKHsN8vG9bPCTkIJ teS7fVM17A0cT412r5VIB8Qqf1bRqKBIfcYzFPuUgC0y1SytX1dz3mOdfOg/+ukD QQwco4yTsaeXQ3U18dQkeLTDWoReahU/IjKD1UQMONwLaoCm0QL1FtEPan3iadAQ hMANCyZHQBAbfafq7mfwuZfM+H0x7knhII173qJd+ygpgcrSr7G3sVbjKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOqFFX+GKI3ZyiSNtxY1ulMbuaqaMB8GA1UdIwQY MBaAFC7BIeFUXfPlu4bpGI8oJfrXR391MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgt OWY1MjJhMjg0NTk1LzEvNm9VVmY0WW9qZG5LSkkyM0ZqVzZVeHU1cXBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgtOWY1MjJhMjg0NTk1 LzEvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwcg6MA0G CSqGSIb3DQEBCwUAA4IBAQBSAaQdN2JL3o0uo500T7MSXGrdRaDuulBwWGE56IZK Vb+gy9pYuFARCmzDxKyXyEGJ72NylUzMAPDKwyiR9spVsQJ38jPwyQqfk5OxxguX AX9IW8T41lxZjjrfCNMjQKw1eYckzIunYvdSkBwWFkOWjSYIFdnANkfmqpgrucO8 deYlaa8EL1ogS2Ze9RW8N1ypeMU7MaYBFsJK3lqKTlO5VTbQdZ4LiLvazMQ5mKIB O/qXuinFHGhP41V82wp+W2smZt7Cy+ssr+f8JnR1L8UGkwwct48OruphWT2i1JFM 7bxqvj/O/q24H1myas9AcRszpNJAMheb2p5HEfkv6a2O -----END CERTIFICATE-----Generated at Tue Feb 10 04:16:53 2026 by rpki-client