This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/yYNRRHKgdOtFCz00-g6t9I_K7Go.roa File: yYNRRHKgdOtFCz00-g6t9I_K7Go.roa (raw, json) Hash identifier: IitB/79yukkXZTOZinZCbobPH0H2QgNqEDx9S8eqm08= Subject key identifier: C9:83:51:44:72:A0:74:EB:45:0B:3D:34:FA:0E:AD:F4:8F:CA:EC:6A Certificate issuer: /CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae Certificate serial: 019B7A5B745CEF9EC39B681E62C7A7F5DA1C Authority key identifier: 6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/yYNRRHKgdOtFCz00-g6t9I_K7Go.roa Signing time: Thu 01 Jan 2026 16:19:32 +0000 ROA not before: Thu 01 Jan 2026 16:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8762 IP address blocks: 147.95.0.0/16 maxlen: 16 147.95.128.0/20 maxlen: 20 147.95.160.0/24 maxlen: 24 147.95.200.0/24 maxlen: 24 147.95.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 04:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:74:5c:ef:9e:c3:9b:68:1e:62:c7:a7:f5:da:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae Validity Not Before: Jan 1 16:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c983514472a074eb450b3d34fa0eadf48fcaec6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b2:74:52:fb:f1:67:60:47:a8:69:a4:7b:3b: 09:15:5b:a2:99:4d:f0:40:d6:f7:0f:87:34:d7:a8: 79:70:6f:89:5c:af:73:36:b0:05:e9:ed:57:32:48: e9:4c:6b:37:2c:02:26:ae:74:1a:3e:1a:8f:74:40: a2:0c:73:60:c7:a9:3d:cf:a1:da:71:cf:70:30:a2: 81:3d:a3:f4:2e:a2:d3:ad:15:0e:33:35:10:db:f7: 51:88:11:72:26:f7:16:6a:b4:99:47:8f:7c:69:ae: 49:83:52:b9:83:09:b1:6f:0b:36:d7:ac:f2:ac:ed: cd:7a:d8:c3:69:62:2c:74:e4:ff:d6:fc:28:fa:ec: 52:2f:45:eb:55:2d:58:7a:6f:69:1e:74:89:9e:43: 66:ef:8b:f5:67:8a:9c:ef:1a:8e:21:22:a3:13:38: 4d:c9:16:98:92:c7:fd:cc:52:df:14:9b:fb:fd:fd: 65:0d:fb:36:83:a6:58:cc:ea:9c:e7:52:ab:0f:84: e6:0b:80:76:a8:46:78:af:bf:ec:08:aa:ad:3d:dd: b2:ee:04:97:8d:9c:56:da:94:89:cf:44:2c:f3:9f: 9e:8e:d3:7f:87:a5:58:8a:6f:c3:42:c4:38:26:63: 32:e3:00:c9:99:4a:5a:bc:07:15:12:bc:ca:75:70: 5c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:83:51:44:72:A0:74:EB:45:0B:3D:34:FA:0E:AD:F4:8F:CA:EC:6A X509v3 Authority Key Identifier: keyid:6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/yYNRRHKgdOtFCz00-g6t9I_K7Go.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.95.0.0/16 Signature Algorithm: sha256WithRSAEncryption 69:2a:a8:4c:11:6b:96:cf:01:20:cd:a0:3e:76:48:61:bf:5b: aa:cc:e8:3e:12:31:29:c1:1f:ea:43:4b:2e:38:08:cf:8a:67: 85:6c:c3:e1:4b:72:ca:89:bb:c1:fe:16:51:ea:fd:cf:52:f8: 92:ed:17:fe:44:74:b1:b1:24:c2:69:e9:87:99:b2:36:16:85: 96:b6:d7:33:51:7b:7d:67:2b:66:37:ad:39:87:66:14:57:23: 5d:67:45:c8:ca:6a:1b:e0:47:ed:1a:2b:35:f9:a8:b8:7f:eb: d5:aa:86:32:90:56:7d:99:58:d0:51:9e:6e:58:7b:9d:8e:98: 78:c7:cf:ce:1e:a6:90:c9:f3:97:a5:7e:06:45:37:f9:93:6c: dd:84:b3:db:9a:fc:75:60:74:0f:59:37:34:9f:42:87:be:2b: 95:2e:5d:e3:f0:0e:a1:0e:53:16:34:67:a6:55:8b:85:06:c3: 92:16:14:ed:29:01:35:c1:bd:49:5c:1b:69:1b:34:3c:de:34: c0:b6:62:20:ca:88:9f:46:e8:68:c8:7a:88:33:dc:b8:01:9c: af:f9:5d:47:a0:85:38:91:f2:20:b0:d2:05:a2:f2:f1:ff:9e: 27:2c:78:7e:3c:70:f1:37:50:31:3a:c2:38:ea:cf:24:a9:fd: d3:9a:c7:d1 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt6W3Rc757Dm2geYsen9docMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMzRmYTUzZDFkODRkYmFiZTY5OGQ1YmJjY2FlZGYxMDlk MTU3YWUwHhcNMjYwMTAxMTYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTgzNTE0NDcyYTA3NGViNDUwYjNkMzRmYTBlYWRmNDhmY2FlYzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbJ0UvvxZ2BHqGmkezsJFVuimU3w QNb3D4c016h5cG+JXK9zNrAF6e1XMkjpTGs3LAImrnQaPhqPdECiDHNgx6k9z6Ha cc9wMKKBPaP0LqLTrRUOMzUQ2/dRiBFyJvcWarSZR498aa5Jg1K5gwmxbws216zy rO3NetjDaWIsdOT/1vwo+uxSL0XrVS1Yem9pHnSJnkNm74v1Z4qc7xqOISKjEzhN yRaYksf9zFLfFJv7/f1lDfs2g6ZYzOqc51KrD4TmC4B2qEZ4r7/sCKqtPd2y7gSX jZxW2pSJz0Qs85+ejtN/h6VYim/DQsQ4JmMy4wDJmUpavAcVErzKdXBcyQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFMmDUURyoHTrRQs9NPoOrfSPyuxqMB8GA1UdIwQY MBaAFGs0+lPR2E26vmmNW7zK7fEJ0VeuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXpUNlU5SFlUYnEtYVkxYnZNcnQ4UW5SVjY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81MjhkZTEtOGY2OC00Y2I5LWI2Y2Ut ZmZhYWEyOTlhZjYxLzEveVlOUlJIS2dkT3RGQ3owMC1nNnQ5SV9LN0dvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi81MjhkZTEtOGY2OC00Y2I5LWI2Y2UtZmZhYWEyOTlhZjYx LzEvYXpUNlU5SFlUYnEtYVkxYnZNcnQ4UW5SVjY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAk18wDQYJ KoZIhvcNAQELBQADggEBAGkqqEwRa5bPASDNoD52SGG/W6rM6D4SMSnBH+pDSy44 CM+KZ4Vsw+FLcsqJu8H+FlHq/c9S+JLtF/5EdLGxJMJp6YeZsjYWhZa21zNRe31n K2Y3rTmHZhRXI11nRcjKahvgR+0aKzX5qLh/69WqhjKQVn2ZWNBRnm5Ye52OmHjH z84eppDJ85elfgZFN/mTbN2Es9ua/HVgdA9ZNzSfQoe+K5UuXePwDqEOUxY0Z6ZV i4UGw5IWFO0pATXBvUlcG2kbNDzeNMC2YiDKiJ9G6GjIeogz3LgBnK/5XUeghTiR 8iCw0gWi8vH/nicseH48cPE3UDE6wjjqzySp/dOax9E= -----END CERTIFICATE-----Generated at Mon Feb 2 14:03:23 2026 by rpki-client