This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/6Ov23BLHXZEo_g6Qvsh9lD8PAKA.roa File: 6Ov23BLHXZEo_g6Qvsh9lD8PAKA.roa (raw, json) Hash identifier: 8GvbG6s3RPwfopIs9XgARrrF1rjC6XY19ETpAszLP8I= Subject key identifier: E8:EB:F6:DC:12:C7:5D:91:28:FE:0E:90:BE:C8:7D:94:3F:0F:00:A0 Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 019B7CED99C9DAE66F2AA58022D82560E7C8 Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/6Ov23BLHXZEo_g6Qvsh9lD8PAKA.roa Signing time: Fri 02 Jan 2026 04:18:24 +0000 ROA not before: Fri 02 Jan 2026 04:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 62.90.135.0/24 maxlen: 24 147.234.8.0/21 maxlen: 24 147.234.74.0/24 maxlen: 24 147.234.75.0/24 maxlen: 24 147.234.81.0/24 maxlen: 24 147.234.88.0/24 maxlen: 24 147.234.89.0/24 maxlen: 24 194.90.1.0/24 maxlen: 24 199.203.1.0/24 maxlen: 24 212.143.194.0/24 maxlen: 24 212.143.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:99:c9:da:e6:6f:2a:a5:80:22:d8:25:60:e7:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: Jan 2 04:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8ebf6dc12c75d9128fe0e90bec87d943f0f00a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:37:1b:e9:58:1c:f4:0d:a7:3d:aa:43:43:e7: 58:72:c9:56:f4:4c:a6:57:52:49:b1:6f:20:e5:26: 4d:a2:7c:37:d2:21:92:2a:ed:c2:0d:62:f8:14:84: c8:06:98:0b:c2:48:a4:ac:7c:84:81:e0:98:c1:b5: c3:58:b1:3e:0e:0b:c0:93:32:30:89:74:db:e9:9b: 1d:91:6e:75:7f:bd:c3:06:2b:2a:0a:4b:67:e8:b4: 7d:13:60:64:5f:12:67:38:56:14:35:c6:fa:1c:63: 2a:31:93:d4:ca:b8:df:90:76:26:13:03:98:f6:a0: d7:5e:1a:64:ea:7e:44:24:e1:19:71:73:ba:bd:0e: 1e:7d:eb:f9:6e:76:7d:fc:d8:9d:60:e2:03:fc:df: 47:c1:ca:0c:fd:58:2f:b6:b8:34:ad:27:c5:12:f7: 45:a5:ef:94:5e:f9:71:9b:24:64:07:be:e5:f6:da: 59:37:6b:3e:99:d7:44:0b:27:9b:2e:a2:d3:da:41: 9f:4f:34:a4:ce:1e:71:d2:7b:c3:db:55:12:55:ae: 3e:09:d5:4e:7c:f7:46:54:dd:07:9f:97:59:7a:9c: 99:a4:df:43:d7:7a:1e:c8:d9:4d:71:48:af:97:6b: c0:c4:59:8f:a7:27:1b:a0:61:9a:31:52:ed:7e:e5: 25:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:EB:F6:DC:12:C7:5D:91:28:FE:0E:90:BE:C8:7D:94:3F:0F:00:A0 X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/6Ov23BLHXZEo_g6Qvsh9lD8PAKA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.90.135.0/24 147.234.8.0/21 147.234.74.0/23 147.234.81.0/24 147.234.88.0/23 194.90.1.0/24 199.203.1.0/24 212.143.194.0/24 212.143.211.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:a3:71:57:24:1e:3f:5c:97:fa:08:ec:4e:7a:9d:c8:6b:d8: 20:98:ff:cd:9a:a5:d9:98:dd:12:4c:8e:15:33:9b:af:fc:fc: 6f:a1:91:bc:50:8d:10:7c:74:65:ee:9a:50:f6:50:48:be:e8: 3e:cc:27:3e:f4:fd:a3:e8:13:0a:db:23:9b:e4:91:bd:95:8d: 0f:cf:95:dc:be:e4:f6:0c:72:96:de:4c:2c:96:96:13:28:79: 10:ce:bb:a8:b7:24:03:ec:3e:7c:3f:e4:98:58:eb:52:63:79: 05:04:4d:09:a5:a0:f5:22:63:2d:9d:6b:9f:86:bf:4b:c9:d7: 6d:44:57:11:b5:e1:02:00:86:e4:b9:98:78:8c:f3:67:5a:a7: 6e:2e:d1:6c:dc:01:32:46:61:f9:dd:35:2c:a2:be:cc:2c:39: fe:72:0c:59:d6:e3:28:ce:00:af:0b:ef:80:8c:a3:a4:44:cb: 58:bf:3a:46:d7:52:4e:f8:37:d7:11:62:78:45:57:5a:a3:b3: 2f:34:d8:be:ff:6b:47:c7:e1:06:3b:6b:9f:f8:c9:5e:01:4e: c1:97:69:9d:f1:8f:f3:39:2d:74:ff:ac:86:82:72:ec:24:fc: 32:ce:3a:11:71:ac:13:62:16:3e:9f:fe:e3:35:1e:13:bc:89: 7c:b3:69:c3 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt87ZnJ2uZvKqWAItglYOfIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjYwMTAyMDQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGViZjZkYzEyYzc1ZDkxMjhmZTBlOTBiZWM4N2Q5NDNmMGYwMGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzcb6Vgc9A2nPapDQ+dYcslW9Eym V1JJsW8g5SZNonw30iGSKu3CDWL4FITIBpgLwkikrHyEgeCYwbXDWLE+DgvAkzIw iXTb6ZsdkW51f73DBisqCktn6LR9E2BkXxJnOFYUNcb6HGMqMZPUyrjfkHYmEwOY 9qDXXhpk6n5EJOEZcXO6vQ4efev5bnZ9/NidYOID/N9HwcoM/Vgvtrg0rSfFEvdF pe+UXvlxmyRkB77l9tpZN2s+mddECyebLqLT2kGfTzSkzh5x0nvD21USVa4+CdVO fPdGVN0Hn5dZepyZpN9D13oeyNlNcUivl2vAxFmPpycboGGaMVLtfuUl6QIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFOjr9twSx12RKP4OkL7IfZQ/DwCgMB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEvNk92MjNCTEhYWkVvX2c2UXZzaDlsRDhQQUtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAPlqHAwQD k+oIAwQBk+pKAwQAk+pRAwQBk+pYAwQAwloBAwQAx8sBAwQA1I/CAwQA1I/TMA0G CSqGSIb3DQEBCwUAA4IBAQBdo3FXJB4/XJf6COxOep3Ia9ggmP/NmqXZmN0STI4V M5uv/PxvoZG8UI0QfHRl7ppQ9lBIvug+zCc+9P2j6BMK2yOb5JG9lY0Pz5XcvuT2 DHKW3kwslpYTKHkQzruotyQD7D58P+SYWOtSY3kFBE0JpaD1ImMtnWufhr9Lyddt RFcRteECAIbkuZh4jPNnWqduLtFs3AEyRmH53TUsor7MLDn+cgxZ1uMozgCvC++A jKOkRMtYvzpG11JO+DfXEWJ4RVdao7MvNNi+/2tHx+EGO2uf+MleAU7Bl2md8Y/z OS10/6yGgnLsJPwyzjoRcawTYhY+n/7jNR4TvIl8s2nD -----END CERTIFICATE-----Generated at Wed Jan 7 22:30:52 2026 by rpki-client