This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/g6LflxVUqJ6UcpGu8wQciw7t30I.roa File: g6LflxVUqJ6UcpGu8wQciw7t30I.roa (raw, json) Hash identifier: jf55mddW2DvJtTkk+2SE+AEw8KLhuZMEYNNyLaLfpSo= Subject key identifier: 83:A2:DF:97:15:54:A8:9E:94:72:91:AE:F3:04:1C:8B:0E:ED:DF:42 Certificate issuer: /CN=3a6c606f20cecfe312cc6c814dec9904b6db7c3c Certificate serial: 019B797E8FAC05A462C0DD155CD87D608B3B Authority key identifier: 3A:6C:60:6F:20:CE:CF:E3:12:CC:6C:81:4D:EC:99:04:B6:DB:7C:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/g6LflxVUqJ6UcpGu8wQciw7t30I.roa Signing time: Thu 01 Jan 2026 12:18:15 +0000 ROA not before: Thu 01 Jan 2026 12:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62129 IP address blocks: 5.134.88.0/21 maxlen: 21 45.11.100.0/22 maxlen: 22 185.55.204.0/22 maxlen: 22 2a04:d5c0::/29 maxlen: 29 2a0e:8d00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:8f:ac:05:a4:62:c0:dd:15:5c:d8:7d:60:8b:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a6c606f20cecfe312cc6c814dec9904b6db7c3c Validity Not Before: Jan 1 12:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83a2df971554a89e947291aef3041c8b0eeddf42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3e:3d:73:7f:7f:1a:d9:00:fe:4f:31:ae:00: 02:ad:9c:3c:d3:88:98:df:7e:de:d1:40:10:51:bf: ec:7a:58:65:7f:fd:12:50:4e:ca:49:e6:2b:49:da: 67:f6:2d:ae:54:19:74:31:27:d6:81:f0:3d:8c:62: 2f:72:59:5d:1f:58:66:15:14:46:27:ce:0f:a3:93: 29:ed:ec:be:94:d5:aa:78:5e:6d:08:f3:75:45:12: cd:04:63:92:0c:b3:9f:66:0c:6c:59:64:b9:a7:9f: 18:7b:1e:ed:cb:2b:8a:b7:2c:f9:0d:ab:6f:27:a5: 69:6b:93:00:2f:12:90:61:3a:89:13:62:1e:97:56: 01:e0:21:e0:c1:38:fe:ee:2f:f9:c0:a6:fe:ee:24: 9a:19:b0:a7:68:bb:ff:bb:4c:3f:8b:15:35:ac:53: 86:88:37:18:7d:8f:bc:d6:7f:97:98:9f:31:5e:74: 88:79:b0:16:a0:b2:42:c3:3a:44:bb:bc:cf:f6:70: e2:fd:c3:52:18:1e:dd:27:7a:be:a3:c8:2d:40:1b: be:f0:a0:e9:c7:9c:d6:0f:c9:4e:d7:87:90:97:ed: a1:d1:8b:91:8e:ea:a4:12:df:a5:da:94:5e:5e:87: a7:f2:84:cd:9a:59:b9:85:41:62:fd:57:12:33:50: e6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A2:DF:97:15:54:A8:9E:94:72:91:AE:F3:04:1C:8B:0E:ED:DF:42 X509v3 Authority Key Identifier: keyid:3A:6C:60:6F:20:CE:CF:E3:12:CC:6C:81:4D:EC:99:04:B6:DB:7C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/g6LflxVUqJ6UcpGu8wQciw7t30I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.134.88.0/21 45.11.100.0/22 185.55.204.0/22 IPv6: 2a04:d5c0::/29 2a0e:8d00::/29 Signature Algorithm: sha256WithRSAEncryption 69:e1:3b:98:73:f0:17:b4:bc:70:2b:b7:f8:a2:cc:8a:1f:9d: ea:6e:0a:23:11:80:72:d4:50:9a:90:89:85:f0:eb:0a:04:ae: f9:11:e1:83:0e:bc:be:05:f0:a5:e0:83:90:05:8f:c2:a0:82: 52:a0:23:da:9c:2f:cb:5a:10:01:c7:d1:57:ae:0e:b5:18:1c: 72:ba:fa:91:04:2d:30:67:77:8f:ac:37:f1:66:16:4a:e8:8d: 6e:0c:85:e4:5e:1d:76:03:d7:0c:1e:61:95:67:f1:6d:82:3c: 02:c0:bd:f7:c9:7c:ae:15:8b:53:46:c7:da:46:bd:6b:e6:00: da:08:a2:fd:9c:f5:be:4a:af:af:9f:86:ea:fd:b0:b0:f5:08: c4:84:53:c6:bd:ed:b7:9d:bb:0a:c2:3a:30:ba:33:e6:cc:74: 7a:0d:20:45:3a:de:a0:6e:64:bd:0a:23:c3:9e:72:9d:f2:86: 85:fd:26:58:c1:0b:ce:37:ab:57:04:bc:45:0b:15:89:dd:ec: a2:9a:bf:3c:dc:91:2b:5a:2d:86:8b:6d:72:d7:8a:a4:01:92: 81:2d:30:78:17:df:5a:2f:61:9b:c7:e6:e6:14:95:6b:fc:bc: 2f:42:4f:eb:fc:bf:79:35:7e:2c:80:48:d3:bc:3b:74:38:76: 15:03:41:fe -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt5fo+sBaRiwN0VXNh9YIs7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNmM2MDZmMjBjZWNmZTMxMmNjNmM4MTRkZWM5OTA0YjZk YjdjM2MwHhcNMjYwMTAxMTIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2EyZGY5NzE1NTRhODllOTQ3MjkxYWVmMzA0MWM4YjBlZWRkZjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz49c39/GtkA/k8xrgACrZw804iY 337e0UAQUb/selhlf/0SUE7KSeYrSdpn9i2uVBl0MSfWgfA9jGIvclldH1hmFRRG J84Po5Mp7ey+lNWqeF5tCPN1RRLNBGOSDLOfZgxsWWS5p58Yex7tyyuKtyz5Datv J6Vpa5MALxKQYTqJE2Iel1YB4CHgwTj+7i/5wKb+7iSaGbCnaLv/u0w/ixU1rFOG iDcYfY+81n+XmJ8xXnSIebAWoLJCwzpEu7zP9nDi/cNSGB7dJ3q+o8gtQBu+8KDp x5zWD8lO14eQl+2h0YuRjuqkEt+l2pReXoen8oTNmlm5hUFi/VcSM1DmywIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFIOi35cVVKielHKRrvMEHIsO7d9CMB8GA1UdIwQY MBaAFDpsYG8gzs/jEsxsgU3smQS223w8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT214Z2J5RE96LU1Tekd5QlRleVpCTGJiZkR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi84YzNmNmYtNWFlOS00OTJlLTlkM2Et NzUwZDYyZTllNTNhLzEvZzZMZmx4VlVxSjZVY3BHdTh3UWNpdzd0MzBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi84YzNmNmYtNWFlOS00OTJlLTlkM2EtNzUwZDYyZTllNTNh LzEvT214Z2J5RE96LU1Tekd5QlRleVpCTGJiZkR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQDBYZYAwQC LQtkAwQCuTfMMBQEAgACMA4DBQMqBNXAAwUDKg6NADANBgkqhkiG9w0BAQsFAAOC AQEAaeE7mHPwF7S8cCu3+KLMih+d6m4KIxGActRQmpCJhfDrCgSu+RHhgw68vgXw peCDkAWPwqCCUqAj2pwvy1oQAcfRV64OtRgccrr6kQQtMGd3j6w38WYWSuiNbgyF 5F4ddgPXDB5hlWfxbYI8AsC998l8rhWLU0bH2ka9a+YA2gii/Zz1vkqvr5+G6v2w sPUIxIRTxr3tt527CsI6MLoz5sx0eg0gRTreoG5kvQojw55ynfKGhf0mWMELzjer VwS8RQsVid3sopq/PNyRK1othottcteKpAGSgS0weBffWi9hm8fm5hSVa/y8L0JP 6/y/eTV+LIBI07w7dDh2FQNB/g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:16 2026 by rpki-client