This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/6k_8Ry46ufIMlLNL3Vyss6dmqJg.roa File: 6k_8Ry46ufIMlLNL3Vyss6dmqJg.roa (raw, json) Hash identifier: ckIzjsDp2tzcwJkmRuzZHNnhVct2HecFAgceUTxWQmI= Subject key identifier: EA:4F:FC:47:2E:3A:B9:F2:0C:94:B3:4B:DD:5C:AC:B3:A7:66:A8:98 Certificate issuer: /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f Certificate serial: 019B7CED028F0B516004972D327D07CA7C75 Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/6k_8Ry46ufIMlLNL3Vyss6dmqJg.roa Signing time: Fri 02 Jan 2026 04:17:45 +0000 ROA not before: Fri 02 Jan 2026 04:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 92.119.60.0/24 maxlen: 24 92.119.61.0/24 maxlen: 24 92.119.62.0/24 maxlen: 24 92.119.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:02:8f:0b:51:60:04:97:2d:32:7d:07:ca:7c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f Validity Not Before: Jan 2 04:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea4ffc472e3ab9f20c94b34bdd5cacb3a766a898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:fe:f7:79:d2:4a:05:b3:dd:ed:fc:92:7b:ca: be:e2:55:3c:8e:40:0d:23:16:92:a2:dc:ca:16:49: d8:7f:af:42:76:50:f7:c9:aa:38:9a:ed:f1:75:3f: a5:6f:47:7c:ce:db:0c:1a:e4:8d:c2:5d:56:8e:ca: 69:21:f0:5a:34:af:95:33:77:5d:46:ff:fa:7b:62: 1e:eb:b1:20:83:60:95:8b:a2:4e:e8:da:42:a4:db: 58:77:60:f9:24:3c:0a:4d:86:8e:1d:a9:4d:58:52: 82:33:43:9c:62:50:4f:46:b9:90:e7:fe:ba:32:4f: 72:ca:04:ba:b9:8b:aa:5b:39:f3:48:29:f2:c1:d6: 6d:ca:a0:9d:d3:36:f7:20:38:f7:b1:2f:9f:be:cc: a2:6b:fd:dd:17:7d:ac:e2:ef:54:3d:ed:35:f7:e4: 7a:33:af:0b:32:a1:2e:e3:74:ba:57:0f:28:d8:e0: 9c:c4:b5:91:8f:ff:2a:f0:b7:7d:ec:cc:c6:37:62: 23:6f:70:f5:8c:17:e8:c1:fb:33:4c:d2:ac:b5:11: 75:e2:b0:e5:02:b7:58:c9:79:35:42:cd:b9:4b:13: 7e:a9:d8:4f:71:e9:47:81:95:1e:59:26:de:0a:83: 74:2d:a1:31:31:95:71:0c:28:2d:48:42:45:b2:6f: c5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4F:FC:47:2E:3A:B9:F2:0C:94:B3:4B:DD:5C:AC:B3:A7:66:A8:98 X509v3 Authority Key Identifier: keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/6k_8Ry46ufIMlLNL3Vyss6dmqJg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.119.60.0/22 Signature Algorithm: sha256WithRSAEncryption c8:76:9e:26:41:db:5b:ae:cd:3f:cb:5e:0b:6c:70:89:96:9c: 18:5d:1e:2f:03:2c:1f:64:62:90:62:f6:15:51:1a:dd:f9:30: ef:74:a3:bd:cf:56:fd:cd:dd:bd:d8:60:13:82:c3:5b:db:cc: 4d:07:2d:f7:c8:b8:e8:87:21:74:8f:c9:da:e2:d8:85:01:9e: 80:0e:a7:6d:ef:41:97:2d:e5:d3:02:b9:bd:7a:cd:9f:79:ec: f8:2d:12:75:ee:c1:45:ee:f5:49:4a:1c:14:67:fa:9b:9f:3e: e3:3d:ba:93:79:8e:74:a5:79:bd:e3:98:e9:ab:ca:3d:40:ba: fd:0f:e3:97:07:03:97:e6:e1:c1:73:1d:f0:54:02:71:d8:2b: b2:81:af:32:7a:8b:d2:9b:be:d9:47:a7:ec:e2:a1:aa:c6:c0: 45:d2:5e:92:58:44:d7:94:aa:65:be:da:db:fb:5d:74:40:23: 70:15:5f:f1:7c:69:14:e3:ba:3b:78:cf:87:ee:8b:11:63:6d: b1:50:82:a3:ae:62:e2:16:a0:d2:01:49:4e:d4:fd:04:32:fe: 72:58:8d:53:5a:83:4a:02:6f:81:8a:d5:fe:bc:8e:f9:50:d3: c3:cb:d8:8d:b0:77:24:1c:f4:a0:87:94:e7:3e:b7:7a:8b:37: 1f:0e:85:4b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87QKPC1FgBJctMn0Hynx1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYjZkOTAyNjM3MmNmY2U4ZmRlODIzYzNlZjljOWY3OTBh YWUxNGYwHhcNMjYwMTAyMDQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTRmZmM0NzJlM2FiOWYyMGM5NGIzNGJkZDVjYWNiM2E3NjZhODk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4f73edJKBbPd7fySe8q+4lU8jkAN IxaSotzKFknYf69CdlD3yao4mu3xdT+lb0d8ztsMGuSNwl1WjsppIfBaNK+VM3dd Rv/6e2Ie67Egg2CVi6JO6NpCpNtYd2D5JDwKTYaOHalNWFKCM0OcYlBPRrmQ5/66 Mk9yygS6uYuqWznzSCnywdZtyqCd0zb3IDj3sS+fvsyia/3dF32s4u9UPe019+R6 M68LMqEu43S6Vw8o2OCcxLWRj/8q8Ld97MzGN2Ijb3D1jBfowfszTNKstRF14rDl ArdYyXk1Qs25SxN+qdhPcelHgZUeWSbeCoN0LaExMZVxDCgtSEJFsm/FTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOpP/EcuOrnyDJSzS91crLOnZqiYMB8GA1UdIwQY MBaAFLO22QJjcs/Oj96CPD75yfeQquFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczdiWkFtTnl6ODZQM29JOFB2bko5NUNxNFU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84MzFkNTMtMDRlMC00NTczLWFjZjct ZDRmMTJiMzdhMzE4LzEvNmtfOFJ5NDZ1ZklNbExOTDNWeXNzNmRtcUpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy84MzFkNTMtMDRlMC00NTczLWFjZjctZDRmMTJiMzdhMzE4 LzEvczdiWkFtTnl6ODZQM29JOFB2bko5NUNxNFU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXHc8MA0G CSqGSIb3DQEBCwUAA4IBAQDIdp4mQdtbrs0/y14LbHCJlpwYXR4vAywfZGKQYvYV URrd+TDvdKO9z1b9zd292GATgsNb28xNBy33yLjohyF0j8na4tiFAZ6ADqdt70GX LeXTArm9es2feez4LRJ17sFF7vVJShwUZ/qbnz7jPbqTeY50pXm945jpq8o9QLr9 D+OXBwOX5uHBcx3wVAJx2Cuyga8yeovSm77ZR6fs4qGqxsBF0l6SWETXlKplvtrb +110QCNwFV/xfGkU47o7eM+H7osRY22xUIKjrmLiFqDSAUlO1P0EMv5yWI1TWoNK Am+BitX+vI75UNPDy9iNsHckHPSgh5TnPrd6izcfDoVL -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:15 2026 by rpki-client