This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/6CW7JYEKskJr6yo0DDu4CWa4jUI.roa File: 6CW7JYEKskJr6yo0DDu4CWa4jUI.roa (raw, json) Hash identifier: adF3q2VLnpMi1Z/r5xi4cFiAP5apevVr8J5nUI/Kilc= Subject key identifier: E8:25:BB:25:81:0A:B2:42:6B:EB:2A:34:0C:3B:B8:09:66:B8:8D:42 Certificate issuer: /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341 Certificate serial: 019B7B367D69373E049425920E5678F377F5 Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/6CW7JYEKskJr6yo0DDu4CWa4jUI.roa Signing time: Thu 01 Jan 2026 20:18:47 +0000 ROA not before: Thu 01 Jan 2026 20:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 132.231.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 08:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:7d:69:37:3e:04:94:25:92:0e:56:78:f3:77:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341 Validity Not Before: Jan 1 20:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e825bb25810ab2426beb2a340c3bb80966b88d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:79:e6:db:85:f7:a9:ec:64:cc:d3:d8:f6:ef: 0c:fe:e6:6e:e5:23:95:02:c8:1a:1c:2c:55:1b:5b: 83:4a:db:cf:6a:00:31:89:de:5b:64:77:79:85:40: 66:6c:e7:57:34:21:49:be:d1:21:ea:73:2d:1e:e5: c7:04:62:1a:3e:e3:e1:09:4f:7e:cc:d8:40:ea:b2: b3:51:60:52:64:5b:57:3d:2d:2e:5c:9d:60:d5:b8: a6:87:98:83:66:cf:1f:69:54:af:09:af:4f:88:a8: 12:15:7f:91:1a:2a:bb:4e:3f:88:72:ea:3a:18:89: b4:0f:05:fd:88:cc:cf:e4:f0:95:08:2a:64:ca:d1: aa:d5:34:7d:94:db:5a:89:56:16:41:38:a2:bb:c9: 0c:bc:30:c7:7b:3a:06:ae:20:93:a6:22:2d:72:b2: c8:ae:80:7d:c8:c9:28:31:1a:ad:ae:00:c0:b1:e2: c0:04:8c:43:e7:e2:b0:31:87:4a:70:01:a4:ee:f6: f6:06:29:07:53:fe:7a:29:ba:6b:59:67:2e:c4:55: f7:cc:e7:1a:d8:27:12:32:20:0d:37:d5:5d:3e:08: 9e:bb:94:b1:c2:cc:90:ac:f3:1c:51:14:0e:08:fc: 84:ee:58:49:9e:92:ff:2e:e2:41:bc:4f:66:c6:e9: df:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:25:BB:25:81:0A:B2:42:6B:EB:2A:34:0C:3B:B8:09:66:B8:8D:42 X509v3 Authority Key Identifier: keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/6CW7JYEKskJr6yo0DDu4CWa4jUI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.231.0.0/16 Signature Algorithm: sha256WithRSAEncryption 10:a7:32:ec:d1:6b:0f:e2:25:24:46:7f:2a:51:11:b3:6b:7f: 0d:bb:27:0c:36:d9:1f:b3:c8:3f:2d:1c:c8:1e:d3:ca:a4:e1: 78:68:a6:ac:db:2f:b7:ff:24:e3:71:be:3c:7b:7d:ba:fe:9f: 03:33:20:ce:70:62:85:7a:06:52:2b:85:e4:2a:ff:6b:7a:ed: cb:0c:8d:b9:98:d2:c8:78:94:a5:8d:c2:88:07:d7:ff:08:e7: fc:2e:41:45:89:37:49:95:c1:71:70:3b:f0:70:a1:b9:8a:6c: 22:6f:23:49:aa:6c:9d:27:72:62:92:bc:fa:d9:a0:94:8c:e9: ca:13:ba:12:13:c1:2d:7d:d9:a7:7d:43:1d:e2:00:77:3e:3b: f6:f0:e8:3f:98:2f:0a:29:6d:90:b3:13:ae:93:d1:38:27:84: ab:d2:6e:a1:eb:e7:dd:9f:6f:82:8e:36:3b:46:6c:f7:29:de: 52:24:7f:7e:e9:06:52:3f:1b:25:a4:0f:6a:0d:9d:a0:6a:e3: cb:d4:1c:eb:f3:9d:e2:32:83:91:7a:8e:73:e3:9a:58:db:72: f6:02:53:fd:78:9b:b7:ca:98:5d:9a:2d:1e:ed:86:fa:1f:30: 87:ae:56:2c:0a:ae:19:cd:b3:ef:0b:83:23:40:b9:b6:67:23: 4a:75:2f:4e -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt7Nn1pNz4ElCWSDlZ483f1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZjI4MGFlNTE5NTUwYzdhN2Y0OTUzYWIyN2Q3YWU3ZGRl YjEzNDEwHhcNMjYwMTAxMjAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODI1YmIyNTgxMGFiMjQyNmJlYjJhMzQwYzNiYjgwOTY2Yjg4ZDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXnm24X3qexkzNPY9u8M/uZu5SOV AsgaHCxVG1uDStvPagAxid5bZHd5hUBmbOdXNCFJvtEh6nMtHuXHBGIaPuPhCU9+ zNhA6rKzUWBSZFtXPS0uXJ1g1bimh5iDZs8faVSvCa9PiKgSFX+RGiq7Tj+Icuo6 GIm0DwX9iMzP5PCVCCpkytGq1TR9lNtaiVYWQTiiu8kMvDDHezoGriCTpiItcrLI roB9yMkoMRqtrgDAseLABIxD5+KwMYdKcAGk7vb2BikHU/56KbprWWcuxFX3zOca 2CcSMiANN9VdPgieu5SxwsyQrPMcURQOCPyE7lhJnpL/LuJBvE9mxunfjwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFOgluyWBCrJCa+sqNAw7uAlmuI1CMB8GA1UdIwQY MBaAFInygK5RlVDHp/SVOrJ9eufd6xNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mZGNlNGMtMmVhNS00N2ViLTk0YmMt NWI1MGVhODhlZWFiLzEvNkNXN0pZRUtza0pyNnlvMEREdTRDV2E0alVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mZGNlNGMtMmVhNS00N2ViLTk0YmMtNWI1MGVhODhlZWFi LzEvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhOcwDQYJ KoZIhvcNAQELBQADggEBABCnMuzRaw/iJSRGfypREbNrfw27Jww22R+zyD8tHMge 08qk4XhopqzbL7f/JONxvjx7fbr+nwMzIM5wYoV6BlIrheQq/2t67csMjbmY0sh4 lKWNwogH1/8I5/wuQUWJN0mVwXFwO/BwobmKbCJvI0mqbJ0ncmKSvPrZoJSM6coT uhITwS192ad9Qx3iAHc+O/bw6D+YLwopbZCzE66T0TgnhKvSbqHr592fb4KONjtG bPcp3lIkf37pBlI/GyWkD2oNnaBq48vUHOvzneIyg5F6jnPjmljbcvYCU/14m7fK mF2aLR7thvofMIeuViwKrhnNs+8LgyNAubZnI0p1L04= -----END CERTIFICATE-----Generated at Tue Jan 27 11:25:13 2026 by rpki-client