This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/3h0POrtVf5nJ4mgIC0AN_6072nA.roa File: 3h0POrtVf5nJ4mgIC0AN_6072nA.roa (raw, json) Hash identifier: wWqhTW//DXt8BkOdsP6vJO3z7/S5yHx7Zy7mNRD3gCQ= Subject key identifier: DE:1D:0F:3A:BB:55:7F:99:C9:E2:68:08:0B:40:0D:FF:AD:3B:DA:70 Certificate issuer: /CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29 Certificate serial: 019B7AC94A4342C1C8738C61ECC4AE89532F Authority key identifier: F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/3h0POrtVf5nJ4mgIC0AN_6072nA.roa Signing time: Thu 01 Jan 2026 18:19:30 +0000 ROA not before: Thu 01 Jan 2026 18:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212136 IP address blocks: 5.172.178.0/24 maxlen: 24 5.181.12.0/24 maxlen: 24 81.22.46.0/24 maxlen: 24 81.22.47.0/24 maxlen: 24 91.214.116.0/24 maxlen: 24 176.56.32.0/24 maxlen: 24 176.111.174.0/24 maxlen: 24 185.122.204.0/24 maxlen: 24 185.228.248.0/24 maxlen: 24 185.247.187.0/24 maxlen: 24 194.31.9.0/24 maxlen: 24 213.232.254.0/24 maxlen: 24 2a10:aa80::/30 maxlen: 30 2a10:aa84::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:4a:43:42:c1:c8:73:8c:61:ec:c4:ae:89:53:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29 Validity Not Before: Jan 1 18:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de1d0f3abb557f99c9e268080b400dffad3bda70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:21:7f:fc:a0:c7:7c:7d:a8:24:c3:d5:93:b6: be:42:d1:4d:b8:21:79:b7:02:0a:f0:b7:60:ec:2e: bd:7d:c0:1d:9d:e2:6c:21:d3:18:9d:41:97:f4:70: 7c:3c:fc:22:93:1a:cb:d3:c9:bb:d0:ce:d5:1d:ba: f4:62:45:ec:7a:c3:34:4e:d0:34:83:8b:2a:56:80: 0c:1d:ef:3b:47:e2:03:41:05:5b:68:2e:ef:44:4a: 20:b1:cd:6f:0d:30:09:68:c0:ae:9d:3b:71:07:6f: c4:18:2a:c9:13:ff:f1:c2:ba:39:97:13:09:ca:84: 43:76:2c:b7:08:43:77:e8:14:61:98:83:85:b3:f2: ed:fe:b4:de:35:44:cd:19:31:b1:95:21:a6:87:10: 78:09:14:3b:3d:99:e0:96:22:43:5b:4a:69:57:bd: b7:dd:c8:01:f7:93:64:bb:89:88:bd:0e:3b:0c:5f: 0a:ac:a7:8e:12:dd:fc:a8:89:08:87:ed:7c:21:aa: ec:24:4d:a4:02:85:9c:47:50:c2:f5:80:93:64:9a: 69:2f:17:cf:16:7a:c2:ac:68:58:6e:a5:37:12:63: c8:8d:1f:14:25:96:6e:03:f9:8a:f8:3e:9d:c4:a7: 4e:41:9c:b8:d9:16:36:74:55:a5:4c:09:47:8a:5f: af:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1D:0F:3A:BB:55:7F:99:C9:E2:68:08:0B:40:0D:FF:AD:3B:DA:70 X509v3 Authority Key Identifier: keyid:F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/3h0POrtVf5nJ4mgIC0AN_6072nA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.172.178.0/24 5.181.12.0/24 81.22.46.0/23 91.214.116.0/24 176.56.32.0/24 176.111.174.0/24 185.122.204.0/24 185.228.248.0/24 185.247.187.0/24 194.31.9.0/24 213.232.254.0/24 IPv6: 2a10:aa80::/29 Signature Algorithm: sha256WithRSAEncryption 08:b3:3b:68:00:e1:09:d8:d9:bc:a5:29:1f:20:15:f8:1e:20: 1a:28:d9:c9:6d:8d:e7:0c:13:91:8c:b6:10:59:96:db:a0:74: 8f:7b:45:27:6a:66:ee:eb:15:d0:bd:c3:8d:ce:47:e6:a5:0d: c1:cd:3e:14:5c:9a:b0:6d:f8:ff:d3:88:82:f6:73:68:5e:b9: ae:46:0d:50:dc:8a:a8:43:1a:b6:57:a5:8d:ac:56:48:65:5b: 6a:02:48:23:56:00:92:33:24:ef:ff:7c:ec:c4:f9:50:f5:ea: 3a:49:a1:d3:af:9b:60:68:d9:6b:29:b5:99:fd:0e:22:fa:35: f8:e5:73:7f:3e:33:99:ae:08:d5:0b:53:93:08:4c:48:9d:f5: 61:6c:bf:2c:07:77:a8:a3:f3:3e:2e:a2:91:c9:4a:e0:44:3a: f2:9e:88:4a:28:87:5f:0c:43:17:3c:f0:5c:74:53:7c:48:a5: a1:49:81:97:ac:6e:4e:25:b0:5a:92:6e:db:a7:8b:3d:25:48: 50:31:7f:01:0c:73:15:14:1f:08:cb:06:5c:73:9e:8d:57:e7: 2b:65:bc:a9:b8:b7:24:0b:c0:c8:70:eb:ad:53:f9:bc:79:2e: 47:a8:e6:bf:09:52:2b:fe:59:bc:ed:e7:a7:4d:71:2b:4f:8a: 3d:cf:33:42 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgISAZt6yUpDQsHIc4xh7MSuiVMvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YzZiN2RkNTE3NWJlOGRiN2EwNTIyZjdkNGU0MWM1YzQy YzZiMjkwHhcNMjYwMTAxMTgxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTFkMGYzYWJiNTU3Zjk5YzllMjY4MDgwYjQwMGRmZmFkM2JkYTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyF//KDHfH2oJMPVk7a+QtFNuCF5 twIK8Ldg7C69fcAdneJsIdMYnUGX9HB8PPwikxrL08m70M7VHbr0YkXsesM0TtA0 g4sqVoAMHe87R+IDQQVbaC7vREogsc1vDTAJaMCunTtxB2/EGCrJE//xwro5lxMJ yoRDdiy3CEN36BRhmIOFs/Lt/rTeNUTNGTGxlSGmhxB4CRQ7PZngliJDW0ppV723 3cgB95Nku4mIvQ47DF8KrKeOEt38qIkIh+18IarsJE2kAoWcR1DC9YCTZJppLxfP FnrCrGhYbqU3EmPIjR8UJZZuA/mK+D6dxKdOQZy42RY2dFWlTAlHil+vIwIDAQAB o4ICVDCCAlAwHQYDVR0OBBYEFN4dDzq7VX+ZyeJoCAtADf+tO9pwMB8GA1UdIwQY MBaAFPTGt91Rdb6Nt6BSL31OQcXELGspMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU1hMzNWRjF2bzIzb0ZJdmZVNUJ4Y1FzYXlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNWY3MTQtNDcyYy00ODU2LWFhNGIt OWIyMWI2ZjY2NzlhLzEvM2gwUE9ydFZmNW5KNG1nSUMwQU5fNjA3Mm5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9jNWY3MTQtNDcyYy00ODU2LWFhNGItOWIyMWI2ZjY2Nzlh LzEvOU1hMzNWRjF2bzIzb0ZJdmZVNUJ4Y1FzYXlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQABayyAwQA BbUMAwQBURYuAwQAW9Z0AwQAsDggAwQAsG+uAwQAuXrMAwQAueT4AwQAufe7AwQA wh8JAwQA1ej+MA0EAgACMAcDBQMqEKqAMA0GCSqGSIb3DQEBCwUAA4IBAQAIszto AOEJ2Nm8pSkfIBX4HiAaKNnJbY3nDBORjLYQWZbboHSPe0Unambu6xXQvcONzkfm pQ3BzT4UXJqwbfj/04iC9nNoXrmuRg1Q3IqoQxq2V6WNrFZIZVtqAkgjVgCSMyTv /3zsxPlQ9eo6SaHTr5tgaNlrKbWZ/Q4i+jX45XN/PjOZrgjVC1OTCExInfVhbL8s B3eoo/M+LqKRyUrgRDrynohKKIdfDEMXPPBcdFN8SKWhSYGXrG5OJbBakm7bp4s9 JUhQMX8BDHMVFB8IywZcc56NV+crZbypuLckC8DIcOutU/m8eS5HqOa/CVIr/lm8 7eenTXErT4o9zzNC -----END CERTIFICATE-----Generated at Tue Feb 10 03:07:14 2026 by rpki-client