This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/6mH6k6-yfE-5uJguxrrxcn8Nc78.roa File: 6mH6k6-yfE-5uJguxrrxcn8Nc78.roa (raw, json) Hash identifier: w+XRQI8DwIMKW+5qZ+WNzfdMTML+TBZqmZMFXNnfl/k= Subject key identifier: EA:61:FA:93:AF:B2:7C:4F:B9:B8:98:2E:C6:BA:F1:72:7F:0D:73:BF Certificate issuer: /CN=fbeff76e12dc14c744aa726e01741727c46dc159 Certificate serial: 019B7EA5983C0B3D2539763C3E298C55764F Authority key identifier: FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/6mH6k6-yfE-5uJguxrrxcn8Nc78.roa Signing time: Fri 02 Jan 2026 12:19:00 +0000 ROA not before: Fri 02 Jan 2026 12:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24939 IP address blocks: 193.111.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:98:3c:0b:3d:25:39:76:3c:3e:29:8c:55:76:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbeff76e12dc14c744aa726e01741727c46dc159 Validity Not Before: Jan 2 12:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea61fa93afb27c4fb9b8982ec6baf1727f0d73bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:85:2a:de:8f:9f:37:2f:a6:c0:97:da:95:78: 27:f1:59:58:6f:03:d0:cc:de:c0:93:91:0f:f9:e0: cf:6b:2c:21:65:d4:f6:dc:1c:ca:da:c8:58:f8:86: c2:d2:16:e6:3d:f2:e8:01:53:90:1a:e9:8d:e4:5f: 34:f7:8b:ef:53:c5:7f:bb:b7:e1:5d:49:e2:93:4e: 5e:cd:c6:91:57:04:bf:0c:f1:ea:ed:75:1d:7b:76: 7d:98:60:a6:86:13:97:cb:ae:8d:15:d3:ce:05:13: 5f:01:43:1f:d7:ce:c1:ef:65:b7:37:37:1e:5c:59: e3:23:01:00:8b:5e:1f:80:87:01:83:da:fc:a3:1a: 9d:10:1b:98:e1:e4:81:83:5a:99:35:aa:0c:cb:a4: f8:42:c9:27:2b:d9:66:77:88:41:f2:f4:75:45:d4: de:96:1b:df:6b:97:c3:62:c5:a5:c5:c7:7a:b9:72: 77:b2:82:a7:bb:32:77:0b:ad:5c:8f:27:c6:12:91: c7:e9:45:b3:eb:76:e5:3c:97:90:ac:05:03:6c:ac: fb:fc:4b:20:1c:30:f2:1b:b8:0b:89:6f:aa:f7:1b: e6:83:10:b5:bc:73:1b:a2:84:24:dd:d1:99:88:79: ec:48:12:a3:6d:fc:4d:63:0a:f4:3e:ef:1f:99:ae: ec:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:61:FA:93:AF:B2:7C:4F:B9:B8:98:2E:C6:BA:F1:72:7F:0D:73:BF X509v3 Authority Key Identifier: keyid:FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/6mH6k6-yfE-5uJguxrrxcn8Nc78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.216.0/22 Signature Algorithm: sha256WithRSAEncryption bb:87:57:bd:0c:b3:4a:23:5d:d4:dc:ec:05:76:22:03:94:4e: bb:b2:5b:60:b5:c0:a3:7f:10:61:c6:2d:81:4f:71:a7:55:1b: 3b:59:f1:2e:4e:30:53:d9:d2:5c:f6:8e:d5:8d:0f:ad:03:89: f1:f3:37:74:bd:fc:68:0f:6e:ab:5a:89:3e:1a:ef:6f:9f:8d: f6:04:53:2e:15:96:fd:5a:23:9a:51:0c:d1:e6:4b:38:77:cd: c3:2a:22:88:6c:d2:b7:e9:fd:69:9d:13:09:12:6b:1e:2a:f7: 98:a3:5a:90:d7:6e:09:85:45:50:33:ee:a7:d4:cc:d2:13:8a: 59:dd:8c:71:b3:bc:7e:21:5e:80:a2:e3:b9:5c:f0:83:05:1f: 40:98:d1:e5:6a:82:06:80:97:f7:63:80:47:43:9a:8f:ed:ad: 26:fc:04:d0:0b:13:3b:0c:e3:49:8a:83:2b:ac:f5:9c:4b:f3: 31:e5:cb:52:e5:7d:ab:94:7d:27:08:70:e4:04:39:e0:80:ed: 48:1e:10:00:d2:10:42:6e:87:3a:6c:97:72:b2:11:51:63:33: 42:b4:f1:a7:aa:3d:d3:dd:e4:c5:c3:b5:40:cd:1d:43:32:fd: f7:73:2d:ec:2a:73:be:c6:ca:ee:20:6c:d9:1e:74:44:64:79: 28:e7:15:67 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+pZg8Cz0lOXY8PimMVXZPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZWZmNzZlMTJkYzE0Yzc0NGFhNzI2ZTAxNzQxNzI3YzQ2 ZGMxNTkwHhcNMjYwMTAyMTIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTYxZmE5M2FmYjI3YzRmYjliODk4MmVjNmJhZjE3MjdmMGQ3M2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoUq3o+fNy+mwJfalXgn8VlYbwPQ zN7Ak5EP+eDPaywhZdT23BzK2shY+IbC0hbmPfLoAVOQGumN5F8094vvU8V/u7fh XUnik05ezcaRVwS/DPHq7XUde3Z9mGCmhhOXy66NFdPOBRNfAUMf187B72W3Nzce XFnjIwEAi14fgIcBg9r8oxqdEBuY4eSBg1qZNaoMy6T4QsknK9lmd4hB8vR1RdTe lhvfa5fDYsWlxcd6uXJ3soKnuzJ3C61cjyfGEpHH6UWz63blPJeQrAUDbKz7/Esg HDDyG7gLiW+q9xvmgxC1vHMbooQk3dGZiHnsSBKjbfxNYwr0Pu8fma7sKQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFOph+pOvsnxPubiYLsa68XJ/DXO/MB8GA1UdIwQY MBaAFPvv924S3BTHRKpybgF0FyfEbcFZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0tXzNiaExjRk1kRXFuSnVBWFFYSjhSdHdWay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvZDgwMWY3LTI4MjQtNGVhOS1hZDhm LTNiOGY1MDhhNzU0YS8xLzZtSDZrNi15ZkUtNXVKZ3V4cnJ4Y244TmM3OC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNWYvZDgwMWY3LTI4MjQtNGVhOS1hZDhmLTNiOGY1MDhhNzU0 YS8xLzEtLV8zYmhMY0ZNZEVxbkp1QVhRWEo4UnR3VmsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALBb9gw DQYJKoZIhvcNAQELBQADggEBALuHV70Ms0ojXdTc7AV2IgOUTruyW2C1wKN/EGHG LYFPcadVGztZ8S5OMFPZ0lz2jtWND60DifHzN3S9/GgPbqtaiT4a72+fjfYEUy4V lv1aI5pRDNHmSzh3zcMqIohs0rfp/WmdEwkSax4q95ijWpDXbgmFRVAz7qfUzNIT ilndjHGzvH4hXoCi47lc8IMFH0CY0eVqggaAl/djgEdDmo/trSb8BNALEzsM40mK gyus9ZxL8zHly1LlfauUfScIcOQEOeCA7UgeEADSEEJuhzpsl3KyEVFjM0K08aeq PdPd5MXDtUDNHUMy/fdzLewqc77Gyu4gbNkedERkeSjnFWc= -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:06 2026 by rpki-client