This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/6k0OMuOP0Fr8S28K6CtONtqUfkw.roa File: 6k0OMuOP0Fr8S28K6CtONtqUfkw.roa (raw, json) Hash identifier: 3zJ6zvrW9zET9sG94HYF65wAU7HN5ba3ByIrr+sLqS4= Subject key identifier: EA:4D:0E:32:E3:8F:D0:5A:FC:4B:6F:0A:E8:2B:4E:36:DA:94:7E:4C Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C6AF89E07BAEF1C096D6E4BD9EA96E Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/6k0OMuOP0Fr8S28K6CtONtqUfkw.roa Signing time: Thu 01 Jan 2026 04:17:48 +0000 ROA not before: Thu 01 Jan 2026 04:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205569 IP address blocks: 46.8.50.0/23 maxlen: 23 46.8.50.0/24 maxlen: 24 46.8.51.0/24 maxlen: 24 109.248.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:af:89:e0:7b:ae:f1:c0:96:d6:e4:bd:9e:a9:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea4d0e32e38fd05afc4b6f0ae82b4e36da947e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ef:49:47:de:47:fa:74:8b:07:29:df:f8:f1: 52:a9:65:86:d3:08:82:0a:30:9c:0f:cf:e0:ac:0e: b8:b0:a2:c5:f7:12:e9:8a:e0:4d:ad:2d:24:a9:7b: 9c:90:8b:4f:f9:ab:71:fd:31:a6:c4:97:30:58:76: bd:15:48:c2:49:c2:74:02:47:27:b4:77:1e:93:9d: 83:6c:91:77:27:b4:f4:b7:82:07:31:08:05:d0:fe: f8:1d:25:3a:1b:a6:0c:6f:d8:57:19:99:41:f4:17: f2:4a:4a:09:ba:23:03:09:b3:f2:0f:7d:f4:aa:a6: 4e:ce:b2:65:5c:00:66:32:67:86:7c:b6:04:a9:c3: 50:a5:25:6b:d7:5c:ed:2a:39:9a:32:72:77:23:40: e8:0f:7f:90:2e:05:e2:7b:21:47:ab:d2:c3:66:e0: 6a:ee:be:b3:fc:10:27:51:82:73:42:ab:07:68:d6: 86:56:0b:47:b1:2e:91:9f:f3:a4:b5:c2:33:76:ef: fe:ea:d8:2f:f6:a9:80:22:63:60:fa:22:f3:03:57: 63:3d:92:87:10:c4:ec:7d:bf:9c:b2:24:f9:85:01: 3a:9b:0c:95:8e:a2:04:d2:42:bc:2f:4f:f8:ff:12: 81:b7:67:3c:13:9b:a0:a5:68:ca:59:6c:18:ac:57: 2d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4D:0E:32:E3:8F:D0:5A:FC:4B:6F:0A:E8:2B:4E:36:DA:94:7E:4C X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/6k0OMuOP0Fr8S28K6CtONtqUfkw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.8.50.0/23 109.248.60.0/24 Signature Algorithm: sha256WithRSAEncryption ae:a9:ce:19:26:6f:64:3d:c7:ea:53:8b:59:34:a5:60:08:4f: 8d:79:2d:7d:45:cd:9f:39:0b:3d:9d:10:34:37:1a:6b:c4:f9: ac:4c:73:37:ae:7b:20:50:d1:c1:1e:94:20:8f:a4:20:46:a1: b4:df:d5:a1:48:8e:ad:ef:59:b5:d1:ce:0d:7f:49:d7:ad:f6: 24:d6:bb:53:f5:9b:ff:ac:06:9c:cb:55:ff:ff:d0:84:a1:84: 9c:a6:28:7b:a5:03:cf:e9:dc:93:24:f0:78:96:76:2f:b4:4f: 64:f2:f1:f1:5c:ad:e6:5a:3b:76:8a:98:62:fd:dd:a3:dd:46: 9a:a6:5a:01:1e:f3:05:71:84:85:07:1a:e9:d0:d0:98:0c:b6: b6:a4:7d:8f:84:3c:55:80:a7:3c:71:ba:b2:28:d0:6f:5e:9f: 13:5b:f6:4c:ed:50:c2:5b:30:0a:d1:24:67:da:b1:12:d0:fd: 9b:fc:7c:2f:69:5c:b9:b3:22:d8:c0:cc:b4:e4:e6:dd:56:ec: 21:c8:cd:94:a4:f3:d9:0d:89:c2:eb:96:cc:b6:69:c3:3d:9b: 6c:98:bb:b8:33:2f:8b:e6:cb:ec:4a:27:68:76:4c:fa:c2:73: 0f:d9:93:a4:c3:8b:7c:f2:01:17:6c:65:28:1b:e9:b5:92:08: 9c:6d:24:80 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xq+J4Huu8cCW1uS9nqluMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTRkMGUzMmUzOGZkMDVhZmM0YjZmMGFlODJiNGUzNmRhOTQ3ZTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu9JR95H+nSLBynf+PFSqWWG0wiC CjCcD8/grA64sKLF9xLpiuBNrS0kqXuckItP+atx/TGmxJcwWHa9FUjCScJ0Akcn tHcek52DbJF3J7T0t4IHMQgF0P74HSU6G6YMb9hXGZlB9BfySkoJuiMDCbPyD330 qqZOzrJlXABmMmeGfLYEqcNQpSVr11ztKjmaMnJ3I0DoD3+QLgXieyFHq9LDZuBq 7r6z/BAnUYJzQqsHaNaGVgtHsS6Rn/OktcIzdu/+6tgv9qmAImNg+iLzA1djPZKH EMTsfb+csiT5hQE6mwyVjqIE0kK8L0/4/xKBt2c8E5ugpWjKWWwYrFctkwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOpNDjLjj9Ba/EtvCugrTjbalH5MMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvNmswT011T1AwRnI4UzI4SzZDdE9OdHFVZmt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLggyAwQA bfg8MA0GCSqGSIb3DQEBCwUAA4IBAQCuqc4ZJm9kPcfqU4tZNKVgCE+NeS19Rc2f OQs9nRA0NxprxPmsTHM3rnsgUNHBHpQgj6QgRqG039WhSI6t71m10c4Nf0nXrfYk 1rtT9Zv/rAacy1X//9CEoYScpih7pQPP6dyTJPB4lnYvtE9k8vHxXK3mWjt2iphi /d2j3UaaploBHvMFcYSFBxrp0NCYDLa2pH2PhDxVgKc8cbqyKNBvXp8TW/ZM7VDC WzAK0SRn2rES0P2b/HwvaVy5syLYwMy05ObdVuwhyM2UpPPZDYnC65bMtmnDPZts mLu4My+L5svsSidodkz6wnMP2ZOkw4t88gEXbGUoG+m1kgicbSSA -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:40 2026 by rpki-client