This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/cQCDgJdM56OvB-BfvF6zionxI8Y.roa File: cQCDgJdM56OvB-BfvF6zionxI8Y.roa (raw, json) Hash identifier: +/gYe8nRfG+QFdVNaYVDkUqqDuLW/SmfqR2wjvDlTHY= Subject key identifier: 71:00:83:80:97:4C:E7:A3:AF:07:E0:5F:BC:5E:B3:8A:89:F1:23:C6 Certificate issuer: /CN=88e9fa23da4fe97aa9e0f39115620559a29f6b70 Certificate serial: 019B797F3785E425B5683B388439D40268C2 Authority key identifier: 88:E9:FA:23:DA:4F:E9:7A:A9:E0:F3:91:15:62:05:59:A2:9F:6B:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/cQCDgJdM56OvB-BfvF6zionxI8Y.roa Signing time: Thu 01 Jan 2026 12:18:58 +0000 ROA not before: Thu 01 Jan 2026 12:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212288 IP address blocks: 83.242.108.0/23 maxlen: 24 83.242.108.0/24 maxlen: 24 83.242.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft rsync://rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:37:85:e4:25:b5:68:3b:38:84:39:d4:02:68:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88e9fa23da4fe97aa9e0f39115620559a29f6b70 Validity Not Before: Jan 1 12:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71008380974ce7a3af07e05fbc5eb38a89f123c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:25:48:ba:f7:e4:25:a5:1d:12:2f:5c:c5:e5: e5:38:7a:15:02:de:4c:e0:8d:ab:2c:08:6a:1a:85: c1:ff:88:24:0e:0a:2a:e5:43:eb:14:3f:af:b1:4e: 9b:44:01:d2:ae:5b:47:f1:80:fc:b1:89:41:2e:2d: 56:28:cd:32:a4:7c:7e:b4:b3:85:5c:73:3e:77:f2: 64:7d:35:a7:79:98:68:7b:3d:c3:e5:87:ec:6e:63: df:95:25:9a:d8:9c:d1:d6:fb:92:d6:88:1d:b1:01: 58:4c:70:ae:5f:51:f9:be:b5:c1:cc:0e:2b:79:d1: 69:12:9c:fa:2c:8e:6b:32:80:d4:d2:a7:33:1c:a2: b2:5d:89:92:91:68:c4:84:b5:66:18:86:ff:a0:ff: 4b:8a:b5:b4:0e:86:5d:da:0d:b4:e0:8e:77:91:d8: c0:87:bd:2c:ae:a2:2e:39:f8:50:30:a9:29:2e:40: 15:aa:59:4f:f4:75:d8:8d:8f:60:20:4a:b1:86:b6: 3c:89:07:2f:da:40:e7:84:7c:60:b6:f6:73:38:9f: 71:11:04:76:40:3b:55:44:1b:7c:0b:39:af:bc:0b: 72:27:fd:26:ac:82:67:92:25:52:88:36:ee:74:b5: 27:29:b9:15:d9:c8:6f:9d:8d:dc:77:58:ba:ac:bc: dd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:00:83:80:97:4C:E7:A3:AF:07:E0:5F:BC:5E:B3:8A:89:F1:23:C6 X509v3 Authority Key Identifier: keyid:88:E9:FA:23:DA:4F:E9:7A:A9:E0:F3:91:15:62:05:59:A2:9F:6B:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/cQCDgJdM56OvB-BfvF6zionxI8Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.242.108.0/23 Signature Algorithm: sha256WithRSAEncryption ad:11:9c:84:22:9a:54:5c:01:f5:c4:a0:c1:bd:7a:96:93:77: ce:0f:a4:bf:41:02:0a:14:f7:dc:fb:3d:3d:40:7e:bf:e4:14: d6:c2:3f:f0:74:e7:a0:10:4f:6c:11:c9:80:86:52:98:cd:43: 51:ec:21:fe:fa:f8:f0:00:2a:e4:40:7c:72:7c:55:87:29:b2: 5a:89:0c:d0:03:f3:fb:0b:59:b1:98:e6:67:6a:af:a0:c3:66: 35:1b:85:18:c3:90:a2:9f:98:33:f6:28:ca:11:d3:ed:8b:41: e5:7c:c6:3c:ae:ba:6b:41:3b:17:2d:10:e6:a1:82:89:40:05: f5:ee:4d:73:0e:72:cc:d9:2f:cc:3e:80:b9:59:7b:e5:e3:9c: 8b:5f:72:3e:ae:57:2e:04:20:95:d5:28:1a:b2:3d:86:b6:f4: 50:23:c7:ad:05:ac:d9:49:95:16:6a:2c:29:3c:93:a7:ea:ad: 6e:d6:7a:c8:4a:8a:51:9a:d0:7d:ee:ff:6a:8d:d5:5f:96:9b: 16:aa:9d:50:94:7a:d3:20:e3:39:f1:a7:46:2f:f9:70:ad:51: 1f:8c:9f:47:af:72:fd:2f:14:cb:0b:d6:cf:95:2b:4e:59:f4: 86:56:f3:c3:c0:5e:b9:80:2c:7a:57:6c:2b:3f:2f:06:3c:38: 55:e9:a9:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fzeF5CW1aDs4hDnUAmjCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZTlmYTIzZGE0ZmU5N2FhOWUwZjM5MTE1NjIwNTU5YTI5 ZjZiNzAwHhcNMjYwMTAxMTIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTAwODM4MDk3NGNlN2EzYWYwN2UwNWZiYzVlYjM4YTg5ZjEyM2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiVIuvfkJaUdEi9cxeXlOHoVAt5M 4I2rLAhqGoXB/4gkDgoq5UPrFD+vsU6bRAHSrltH8YD8sYlBLi1WKM0ypHx+tLOF XHM+d/JkfTWneZhoez3D5YfsbmPflSWa2JzR1vuS1ogdsQFYTHCuX1H5vrXBzA4r edFpEpz6LI5rMoDU0qczHKKyXYmSkWjEhLVmGIb/oP9LirW0DoZd2g204I53kdjA h70srqIuOfhQMKkpLkAVqllP9HXYjY9gIEqxhrY8iQcv2kDnhHxgtvZzOJ9xEQR2 QDtVRBt8CzmvvAtyJ/0mrIJnkiVSiDbudLUnKbkV2chvnY3cd1i6rLzdRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHEAg4CXTOejrwfgX7xes4qJ8SPGMB8GA1UdIwQY MBaAFIjp+iPaT+l6qeDzkRViBVmin2twMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaU9uNkk5cFA2WHFwNFBPUkZXSUZXYUtmYTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS82ZDE1YzAtODBjYy00ZWRmLThmMTQt M2UyNDc4OTQ3ZTZlLzEvY1FDRGdKZE01Nk92Qi1CZnZGNnppb254SThZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS82ZDE1YzAtODBjYy00ZWRmLThmMTQtM2UyNDc4OTQ3ZTZl LzEvaU9uNkk5cFA2WHFwNFBPUkZXSUZXYUtmYTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBU/JsMA0G CSqGSIb3DQEBCwUAA4IBAQCtEZyEIppUXAH1xKDBvXqWk3fOD6S/QQIKFPfc+z09 QH6/5BTWwj/wdOegEE9sEcmAhlKYzUNR7CH++vjwACrkQHxyfFWHKbJaiQzQA/P7 C1mxmOZnaq+gw2Y1G4UYw5Cin5gz9ijKEdPti0HlfMY8rrprQTsXLRDmoYKJQAX1 7k1zDnLM2S/MPoC5WXvl45yLX3I+rlcuBCCV1Sgasj2GtvRQI8etBazZSZUWaiwp PJOn6q1u1nrISopRmtB97v9qjdVflpsWqp1QlHrTIOM58adGL/lwrVEfjJ9Hr3L9 LxTLC9bPlStOWfSGVvPDwF65gCx6V2wrPy8GPDhV6akC -----END CERTIFICATE-----Generated at Mon Feb 9 22:29:21 2026 by rpki-client