This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/A6bS9MJ8yre_3dAu3nPGm8Z-iC8.roa File: A6bS9MJ8yre_3dAu3nPGm8Z-iC8.roa (raw, json) Hash identifier: aAYbB32YuDe6wK9PH2k9OTcq9zpop8zHvpCVPrmNr5w= Subject key identifier: 03:A6:D2:F4:C2:7C:CA:B7:BF:DD:D0:2E:DE:73:C6:9B:C6:7E:88:2F Certificate issuer: /CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b Certificate serial: 019B797E451D6E3A327D781E1AB327CEC65B Authority key identifier: A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/A6bS9MJ8yre_3dAu3nPGm8Z-iC8.roa Signing time: Thu 01 Jan 2026 12:17:56 +0000 ROA not before: Thu 01 Jan 2026 12:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 109.202.124.0/24 maxlen: 24 109.202.126.0/24 maxlen: 24 2a03:e182::/32 maxlen: 32 2a03:e183::/32 maxlen: 32 2a03:e184::/32 maxlen: 32 2a03:e185::/32 maxlen: 32 2a03:e186::/32 maxlen: 32 2a03:e187::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:45:1d:6e:3a:32:7d:78:1e:1a:b3:27:ce:c6:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b Validity Not Before: Jan 1 12:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03a6d2f4c27ccab7bfddd02ede73c69bc67e882f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:16:03:69:62:82:cf:b6:ed:ab:7b:ea:c8:e4: 93:cc:39:63:45:02:3d:fb:d5:57:1a:b8:b9:70:47: c3:b1:9e:2b:27:52:52:b0:d1:2c:e6:99:19:04:ba: 41:1e:86:a8:3c:25:14:93:c2:ec:d7:fa:2a:a8:78: a0:2d:f8:a5:eb:0b:b9:10:b8:62:3a:08:09:d7:7e: f6:41:aa:d0:86:57:f5:a5:cc:9e:20:31:7a:79:9a: 82:55:18:99:e7:34:b3:8d:6f:ea:67:fc:80:55:19: d3:03:95:4b:c9:73:90:bc:af:f0:64:94:44:73:9c: fd:a7:68:09:65:7b:aa:17:42:fa:54:21:95:f3:4d: d0:7e:5c:d3:24:a8:59:0d:a2:c2:8c:ca:a0:6e:b7: cd:c1:b3:c9:b6:ff:80:99:da:7d:dc:62:bb:66:b0: 1c:57:bb:79:df:9e:5b:dd:a8:32:bf:07:a1:1b:f5: 79:84:5b:e1:cc:8a:59:bc:70:1c:ae:71:1f:16:12: a1:56:98:72:e6:d9:f8:a5:c3:3d:e5:2c:60:02:66: 04:e6:a9:fa:e2:c5:0f:cc:d4:5c:ac:33:3d:b2:b5: 5c:45:49:25:4e:d8:fa:4f:d8:97:83:96:be:e5:4a: 5e:25:7e:07:83:af:08:4d:93:09:be:68:7a:64:72: 61:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A6:D2:F4:C2:7C:CA:B7:BF:DD:D0:2E:DE:73:C6:9B:C6:7E:88:2F X509v3 Authority Key Identifier: keyid:A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/A6bS9MJ8yre_3dAu3nPGm8Z-iC8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.202.124.0/24 109.202.126.0/24 IPv6: 2a03:e182::-2a03:e187:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 18:40:67:aa:34:a5:35:a5:c4:b3:f5:93:62:db:3e:2a:25:34: fa:24:27:f1:10:0d:8a:48:f1:8c:4b:74:69:9a:44:3d:b2:af: fc:f5:7e:32:49:20:dd:32:f2:72:05:25:45:a0:7b:c7:2c:6a: f0:29:ed:ba:f9:d1:db:e3:bf:b6:ed:13:7a:c2:78:ab:c9:d4: 1e:f2:00:3d:d3:09:65:a2:7d:ab:b8:46:93:be:85:7b:11:6e: b5:c4:e0:ac:b1:ae:af:0c:8f:c0:d4:be:75:d0:04:a5:85:06: 67:cb:c9:44:c7:7e:33:81:c7:c8:de:bc:c6:9a:b0:dd:4c:13: 4f:9a:4a:d0:ec:5b:71:4f:7f:2a:10:82:b3:90:a8:6f:5e:1f: d5:70:c1:d0:e5:03:00:33:e5:fd:6e:09:68:d1:7f:10:0f:4d: 63:a3:c9:36:c8:d0:98:ab:15:9f:2b:b3:c9:6b:8e:2d:79:cc: 73:f0:26:dc:21:2a:95:97:08:2e:d7:89:bc:12:6a:01:de:30: 8e:e1:72:72:3d:89:72:62:71:f1:1f:59:8f:16:d0:b4:08:98: 6c:e6:db:95:52:36:f2:52:00:91:42:73:77:c7:27:e5:2d:ec: 56:07:4d:0e:64:60:df:6f:42:e4:2a:6b:d8:b1:45:67:50:dd: 7f:bc:05:54 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt5fkUdbjoyfXgeGrMnzsZbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0N2Y3MDhjMzRhNWU3MWRhZjNkMmU1NGI5OWFiNzRmMDY5 ZWY4MGIwHhcNMjYwMTAxMTIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2E2ZDJmNGMyN2NjYWI3YmZkZGQwMmVkZTczYzY5YmM2N2U4ODJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhYDaWKCz7btq3vqyOSTzDljRQI9 +9VXGri5cEfDsZ4rJ1JSsNEs5pkZBLpBHoaoPCUUk8Ls1/oqqHigLfil6wu5ELhi OggJ1372QarQhlf1pcyeIDF6eZqCVRiZ5zSzjW/qZ/yAVRnTA5VLyXOQvK/wZJRE c5z9p2gJZXuqF0L6VCGV803QflzTJKhZDaLCjMqgbrfNwbPJtv+Amdp93GK7ZrAc V7t5355b3agyvwehG/V5hFvhzIpZvHAcrnEfFhKhVphy5tn4pcM95SxgAmYE5qn6 4sUPzNRcrDM9srVcRUklTtj6T9iXg5a+5UpeJX4Hg68ITZMJvmh6ZHJhwQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFAOm0vTCfMq3v93QLt5zxpvGfogvMB8GA1UdIwQY MBaAFKR/cIw0pecdrz0uVLmat08GnvgLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEg5d2pEU2w1eDJ2UFM1VXVacTNUd2FlLUFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8wMTlhMWUtYmU5OC00MTRjLThjMmMt NmIyN2ZmMjI1N2M2LzEvQTZiUzlNSjh5cmVfM2RBdTNuUEdtOFotaUM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8wMTlhMWUtYmU5OC00MTRjLThjMmMtNmIyN2ZmMjI1N2M2 LzEvcEg5d2pEU2w1eDJ2UFM1VXVacTNUd2FlLUFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQAbcp8AwQA bcp+MBYEAgACMBAwDgMFASoD4YIDBQMqA+GAMA0GCSqGSIb3DQEBCwUAA4IBAQAY QGeqNKU1pcSz9ZNi2z4qJTT6JCfxEA2KSPGMS3RpmkQ9sq/89X4ySSDdMvJyBSVF oHvHLGrwKe26+dHb47+27RN6wnirydQe8gA90wllon2ruEaTvoV7EW61xOCssa6v DI/A1L510ASlhQZny8lEx34zgcfI3rzGmrDdTBNPmkrQ7FtxT38qEIKzkKhvXh/V cMHQ5QMAM+X9bglo0X8QD01jo8k2yNCYqxWfK7PJa44tecxz8CbcISqVlwgu14m8 EmoB3jCO4XJyPYlyYnHxH1mPFtC0CJhs5tuVUjbyUgCRQnN3xyflLexWB00OZGDf b0LkKmvYsUVnUN1/vAVU -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:04 2026 by rpki-client