This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/6SfBDoyfsTmm1mRpfbVHUgPIiO0.roa File: 6SfBDoyfsTmm1mRpfbVHUgPIiO0.roa (raw, json) Hash identifier: mhMaDP22Cm+kaRi3w+odof2fSxz3QNCIZTnea/2LJgc= Subject key identifier: E9:27:C1:0E:8C:9F:B1:39:A6:D6:64:69:7D:B5:47:52:03:C8:88:ED Certificate issuer: /CN=943e3f4856dac2a005c3a52347114dec453934b8 Certificate serial: 019B7AC936831D38D6DE4B080DD476949C66 Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/6SfBDoyfsTmm1mRpfbVHUgPIiO0.roa Signing time: Thu 01 Jan 2026 18:19:25 +0000 ROA not before: Thu 01 Jan 2026 18:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 176.127.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:36:83:1d:38:d6:de:4b:08:0d:d4:76:94:9c:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8 Validity Not Before: Jan 1 18:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e927c10e8c9fb139a6d664697db5475203c888ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c6:19:02:49:34:ab:f9:9c:fe:71:dd:28:7a: b5:30:f0:62:17:71:8d:8c:fe:de:fe:89:f9:4c:51: 73:2b:57:34:d2:55:97:ed:60:05:bf:7d:d7:ff:16: ea:af:cf:ac:07:08:95:89:21:cf:46:7e:d4:22:69: d4:0e:30:32:65:7c:0e:78:a1:cd:85:46:19:9b:22: 64:62:f4:86:36:3c:b1:7d:5f:ae:8f:fc:75:0a:45: 87:d0:0c:66:6c:a5:7b:49:c2:08:af:64:e7:97:17: 0c:61:76:bb:41:c2:f4:28:e0:b9:f2:45:b5:7b:58: 7f:37:61:f6:84:6a:57:12:28:ee:ba:cc:e7:54:a7: 09:60:0c:c0:75:aa:a8:3f:4c:25:9e:f6:27:1b:d4: c6:cd:a8:bc:41:8f:64:3b:d1:36:69:da:6e:40:8a: 23:5f:ed:4e:61:9d:f8:5b:ea:25:3c:37:b7:42:59: 77:53:96:8c:62:c5:02:ce:69:10:eb:37:49:eb:eb: 4d:34:71:62:9a:dc:82:23:d5:9f:28:3e:1f:5d:37: 49:86:e4:b5:6a:4b:e5:27:9f:f3:8c:ee:11:97:64: 22:28:eb:4e:c4:1f:a0:f8:fe:47:0d:5a:e6:85:9c: d7:11:3e:c6:5b:77:55:44:fb:14:42:f1:41:43:13: da:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:27:C1:0E:8C:9F:B1:39:A6:D6:64:69:7D:B5:47:52:03:C8:88:ED X509v3 Authority Key Identifier: keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/6SfBDoyfsTmm1mRpfbVHUgPIiO0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.127.0.0/17 Signature Algorithm: sha256WithRSAEncryption 2b:03:fb:76:1e:0c:41:4e:4b:16:77:92:d5:5d:af:49:1b:a5: d0:34:e4:b1:dd:ee:cd:45:74:de:20:0e:1e:94:9b:b2:ae:82: f2:0d:e0:e6:6e:b8:46:5e:ea:de:2c:d5:c9:22:7a:00:fa:41: af:c3:fa:79:34:74:b2:b2:eb:9f:95:1a:5d:e4:b4:8b:bf:61: 5c:6f:be:6b:cf:fa:85:b4:56:7f:b8:aa:72:fb:a5:69:44:fa: 3f:85:23:81:57:a8:9e:a6:f0:e7:df:16:16:d2:8e:be:13:78: b8:99:af:f7:72:9c:90:43:22:a6:8f:78:84:d5:57:06:cb:ba: 69:95:e2:a8:bd:27:24:53:ab:76:d0:40:15:89:22:d1:d8:9e: 41:0a:4a:a2:e0:78:ec:da:6b:3a:4a:5d:ae:9b:d0:40:9f:bc: 8f:18:29:74:15:f3:67:5c:9a:56:53:10:76:a1:d6:af:ec:e9: de:6a:27:7e:61:ae:2a:d2:09:2c:81:a2:30:d5:e8:a1:58:5d: 3c:bd:af:b5:32:d0:e5:fb:8c:5c:b6:fa:8b:a6:29:80:34:36: 96:1c:f4:20:6f:0f:0f:29:48:4e:99:ba:97:14:cd:bb:8e:f4: 80:79:f5:f0:74:13:6f:d6:b0:89:f9:de:f5:05:db:b6:eb:56: c9:06:70:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yTaDHTjW3ksIDdR2lJxmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0M2UzZjQ4NTZkYWMyYTAwNWMzYTUyMzQ3MTE0ZGVjNDUz OTM0YjgwHhcNMjYwMTAxMTgxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTI3YzEwZThjOWZiMTM5YTZkNjY0Njk3ZGI1NDc1MjAzYzg4OGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sYZAkk0q/mc/nHdKHq1MPBiF3GN jP7e/on5TFFzK1c00lWX7WAFv33X/xbqr8+sBwiViSHPRn7UImnUDjAyZXwOeKHN hUYZmyJkYvSGNjyxfV+uj/x1CkWH0AxmbKV7ScIIr2TnlxcMYXa7QcL0KOC58kW1 e1h/N2H2hGpXEijuusznVKcJYAzAdaqoP0wlnvYnG9TGzai8QY9kO9E2adpuQIoj X+1OYZ34W+olPDe3Qll3U5aMYsUCzmkQ6zdJ6+tNNHFimtyCI9WfKD4fXTdJhuS1 akvlJ5/zjO4Rl2QiKOtOxB+g+P5HDVrmhZzXET7GW3dVRPsUQvFBQxPaLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOknwQ6Mn7E5ptZkaX21R1IDyIjtMB8GA1UdIwQY MBaAFJQ+P0hW2sKgBcOlI0cRTexFOTS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEQ0X1NGYmF3cUFGdzZValJ4Rk43RVU1TkxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84YzE1NDQtN2NmMi00ODcxLWExZGYt MDI1M2QwNGZiOGZmLzEvNlNmQkRveWZzVG1tMW1ScGZiVkhVZ1BJaU8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy84YzE1NDQtN2NmMi00ODcxLWExZGYtMDI1M2QwNGZiOGZm LzEvbEQ0X1NGYmF3cUFGdzZValJ4Rk43RVU1TkxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHsH8AMA0G CSqGSIb3DQEBCwUAA4IBAQArA/t2HgxBTksWd5LVXa9JG6XQNOSx3e7NRXTeIA4e lJuyroLyDeDmbrhGXureLNXJInoA+kGvw/p5NHSysuuflRpd5LSLv2Fcb75rz/qF tFZ/uKpy+6VpRPo/hSOBV6iepvDn3xYW0o6+E3i4ma/3cpyQQyKmj3iE1VcGy7pp leKovSckU6t20EAViSLR2J5BCkqi4Hjs2ms6Sl2um9BAn7yPGCl0FfNnXJpWUxB2 odav7Oneaid+Ya4q0gksgaIw1eihWF08va+1MtDl+4xctvqLpimANDaWHPQgbw8P KUhOmbqXFM27jvSAefXwdBNv1rCJ+d71Bdu261bJBnBl -----END CERTIFICATE-----Generated at Mon Jan 19 11:48:27 2026 by rpki-client