This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/nGbIVWhps3UHxhstB6YJ_xOK-Bc.roa File: nGbIVWhps3UHxhstB6YJ_xOK-Bc.roa (raw, json) Hash identifier: UAJt17CKwokf5TiXBHPy3xcrVlpfB1owep0x5mOCX4o= Subject key identifier: 9C:66:C8:55:68:69:B3:75:07:C6:1B:2D:07:A6:09:FF:13:8A:F8:17 Certificate issuer: /CN=7927f6d0062a9766bd58f0d075c4f0d10257e606 Certificate serial: 019B7D5C0F73AE4E73410217CB1C2FEAF36D Authority key identifier: 79:27:F6:D0:06:2A:97:66:BD:58:F0:D0:75:C4:F0:D1:02:57:E6:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/nGbIVWhps3UHxhstB6YJ_xOK-Bc.roa Signing time: Fri 02 Jan 2026 06:19:03 +0000 ROA not before: Fri 02 Jan 2026 06:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198457 IP address blocks: 91.234.232.0/24 maxlen: 24 2001:678:1004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:0f:73:ae:4e:73:41:02:17:cb:1c:2f:ea:f3:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7927f6d0062a9766bd58f0d075c4f0d10257e606 Validity Not Before: Jan 2 06:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c66c8556869b37507c61b2d07a609ff138af817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3a:02:ec:c5:55:eb:dc:47:50:e7:ca:5f:50: 2a:e2:ff:bd:80:f4:51:b0:36:ce:75:5f:ff:3b:08: 49:8e:be:99:dc:16:a4:ec:bd:d4:e2:b9:58:5d:94: ad:ea:e5:dd:c4:5d:f8:f8:29:1a:29:50:6b:6c:f2: ec:9a:f7:e1:98:44:30:3b:a1:9c:fb:0c:9f:af:ac: ff:87:7b:4e:8c:cb:dc:8d:2f:df:39:bf:6c:04:f2: 6b:a1:03:93:10:12:54:c9:01:3c:4a:5d:00:9f:85: fa:46:78:4c:b7:49:cd:49:ec:2b:77:1a:cd:e8:a4: 24:39:a5:42:bd:ce:57:b3:8a:f5:7f:d8:8a:f4:4c: e1:2b:1e:cb:d8:9c:14:c8:1e:fb:00:38:9b:67:6f: 5d:99:b3:e9:05:15:d3:8d:7a:8b:27:68:d7:90:f9: d7:88:ae:19:15:b9:83:d9:06:66:60:97:3e:e1:f7: 26:34:22:ca:41:11:cd:a0:55:dc:3a:08:fb:2a:e1: 15:4b:b1:6b:08:a1:d0:9d:13:6b:9a:58:ff:9d:2f: 57:24:c0:a2:19:99:f8:10:69:99:64:c0:f9:9d:26: d7:32:2c:3f:5e:04:21:c3:2f:69:b8:c9:70:0e:57: 1d:35:be:70:36:cb:e5:dd:2d:c0:b0:2a:b3:88:e7: 05:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:66:C8:55:68:69:B3:75:07:C6:1B:2D:07:A6:09:FF:13:8A:F8:17 X509v3 Authority Key Identifier: keyid:79:27:F6:D0:06:2A:97:66:BD:58:F0:D0:75:C4:F0:D1:02:57:E6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/nGbIVWhps3UHxhstB6YJ_xOK-Bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.232.0/24 IPv6: 2001:678:1004::/48 Signature Algorithm: sha256WithRSAEncryption 60:73:bc:09:51:55:3b:59:32:2f:79:e1:6d:9a:91:35:75:0a: a3:8d:cc:2e:9b:57:e5:17:eb:ac:a2:5b:9b:4b:e0:a6:81:4e: c3:40:70:51:b6:a2:8b:7d:e4:24:a2:27:01:4d:f7:31:01:5f: d4:28:9d:d0:45:eb:fc:6e:a4:f0:55:b6:b6:97:8d:bd:5e:c4: 19:a0:16:6e:25:9e:9f:90:f9:1b:ff:da:a4:ba:69:b2:5c:83: 2d:b5:6f:d7:26:5b:79:21:d5:87:6b:76:05:c3:e4:a9:0d:0a: 7d:f5:81:6e:0c:37:e2:25:bb:03:86:36:97:98:ca:1a:f6:7a: a6:04:04:c2:79:a6:01:e8:c0:a1:f3:92:aa:94:a3:c7:b5:2b: 25:46:df:fa:e5:a2:ec:c6:fd:14:5a:ec:cf:10:c2:8d:61:8b: 24:71:de:4a:21:e1:f5:b6:cd:8d:cb:24:22:ed:9c:44:7a:17: 1e:91:79:06:49:5e:5a:79:0e:b4:04:bf:25:5c:2a:4c:2e:80: 52:01:04:b2:e5:90:ee:15:3d:46:d4:0c:b3:84:45:da:ba:8e: 04:02:93:b8:32:81:25:06:e6:04:4a:cb:ea:7a:39:ae:72:74: b8:c5:f6:da:cb:31:7e:53:85:bf:9d:a5:69:5a:98:cf:3d:b1: 19:0c:6c:31 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9XA9zrk5zQQIXyxwv6vNtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MjdmNmQwMDYyYTk3NjZiZDU4ZjBkMDc1YzRmMGQxMDI1 N2U2MDYwHhcNMjYwMTAyMDYxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzY2Yzg1NTY4NjliMzc1MDdjNjFiMmQwN2E2MDlmZjEzOGFmODE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ToC7MVV69xHUOfKX1Aq4v+9gPRR sDbOdV//OwhJjr6Z3Bak7L3U4rlYXZSt6uXdxF34+CkaKVBrbPLsmvfhmEQwO6Gc +wyfr6z/h3tOjMvcjS/fOb9sBPJroQOTEBJUyQE8Sl0An4X6RnhMt0nNSewrdxrN 6KQkOaVCvc5Xs4r1f9iK9EzhKx7L2JwUyB77ADibZ29dmbPpBRXTjXqLJ2jXkPnX iK4ZFbmD2QZmYJc+4fcmNCLKQRHNoFXcOgj7KuEVS7FrCKHQnRNrmlj/nS9XJMCi GZn4EGmZZMD5nSbXMiw/XgQhwy9puMlwDlcdNb5wNsvl3S3AsCqziOcFFQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJxmyFVoabN1B8YbLQemCf8TivgXMB8GA1UdIwQY MBaAFHkn9tAGKpdmvVjw0HXE8NECV+YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVNmMjBBWXFsMmE5V1BEUWRjVHcwUUpYNWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kNmE5YjEtNTUyYi00NmVjLWEzMWIt YzVkMGNiN2I3ZGY1LzEvbkdiSVZXaHBzM1VIeGhzdEI2WUpfeE9LLUJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9kNmE5YjEtNTUyYi00NmVjLWEzMWItYzVkMGNiN2I3ZGY1 LzEvZVNmMjBBWXFsMmE5V1BEUWRjVHcwUUpYNWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW+roMA8E AgACMAkDBwAgAQZ4EAQwDQYJKoZIhvcNAQELBQADggEBAGBzvAlRVTtZMi954W2a kTV1CqONzC6bV+UX66yiW5tL4KaBTsNAcFG2oot95CSiJwFN9zEBX9QondBF6/xu pPBVtraXjb1exBmgFm4lnp+Q+Rv/2qS6abJcgy21b9cmW3kh1YdrdgXD5KkNCn31 gW4MN+IluwOGNpeYyhr2eqYEBMJ5pgHowKHzkqqUo8e1KyVG3/rlouzG/RRa7M8Q wo1hiyRx3koh4fW2zY3LJCLtnER6Fx6ReQZJXlp5DrQEvyVcKkwugFIBBLLlkO4V PUbUDLOERdq6jgQCk7gygSUG5gRKy+p6Oa5ydLjF9trLMX5Thb+dpWlamM89sRkM bDE= -----END CERTIFICATE-----Generated at Tue Jan 27 08:47:10 2026 by rpki-client