This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/_kecmz5wOrK7gIei5HshIFKgYnk.roa File: _kecmz5wOrK7gIei5HshIFKgYnk.roa (raw, json) Hash identifier: oq5fC/PMeXxhdzroEzJ+3bMsZ8OSQI5v+Sc2hvXm5Tc= Subject key identifier: FE:47:9C:9B:3E:70:3A:B2:BB:80:87:A2:E4:7B:21:20:52:A0:62:79 Certificate issuer: /CN=6b5157e419fb5a18ba2beaf2de545f2bb3decfd1 Certificate serial: 019B76EB98B8C5A52D4BE7B16C349AD73525 Authority key identifier: 6B:51:57:E4:19:FB:5A:18:BA:2B:EA:F2:DE:54:5F:2B:B3:DE:CF:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/_kecmz5wOrK7gIei5HshIFKgYnk.roa Signing time: Thu 01 Jan 2026 00:18:30 +0000 ROA not before: Thu 01 Jan 2026 00:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60698 IP address blocks: 193.17.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:98:b8:c5:a5:2d:4b:e7:b1:6c:34:9a:d7:35:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5157e419fb5a18ba2beaf2de545f2bb3decfd1 Validity Not Before: Jan 1 00:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe479c9b3e703ab2bb8087a2e47b212052a06279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8e:2c:2b:c3:14:ef:e1:e4:5a:5f:42:39:cb: 67:e0:24:d4:09:ff:96:a5:eb:c4:89:8f:43:ba:92: a2:59:d7:e6:01:2c:3f:99:95:d1:9b:b9:9a:95:09: ff:26:b6:4d:b7:fa:64:ae:a9:ab:65:67:bc:3d:e9: 56:b1:60:7e:42:f0:9c:6d:f7:23:94:ec:af:2d:6c: 4c:1b:4a:48:a4:d3:cb:11:32:b5:3f:80:98:1f:f6: 3b:db:54:1a:ab:06:e9:0d:e9:a5:8e:bf:d5:aa:a8: 31:4f:36:49:0b:4f:93:d4:2b:5e:5c:49:b5:05:88: 0b:fe:5b:81:fe:7e:e0:cc:c4:ce:7b:93:ec:90:0f: 25:4f:4b:92:36:df:5b:11:38:7c:40:8e:cd:ea:3b: eb:18:9c:3a:cb:7b:8a:7b:78:dd:db:63:f2:22:b6: 89:cc:61:b6:a2:19:28:66:f2:61:e7:c5:3f:64:22: af:cb:38:31:5d:d8:4e:66:94:f4:83:83:1a:7c:62: 3b:8d:f6:5b:d8:c3:f0:00:05:f8:dc:66:fd:2e:ef: bd:e1:6c:46:0d:f2:7b:10:ba:20:9c:c7:d3:54:9b: f9:db:8f:4d:7e:37:01:89:c4:24:51:72:a0:53:f9: 51:0a:b9:7f:39:7b:e8:40:e3:60:5f:f0:07:b4:14: 63:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:47:9C:9B:3E:70:3A:B2:BB:80:87:A2:E4:7B:21:20:52:A0:62:79 X509v3 Authority Key Identifier: keyid:6B:51:57:E4:19:FB:5A:18:BA:2B:EA:F2:DE:54:5F:2B:B3:DE:CF:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/_kecmz5wOrK7gIei5HshIFKgYnk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.94.0/24 Signature Algorithm: sha256WithRSAEncryption 54:32:1f:1e:36:32:da:65:62:92:7b:03:af:0f:3a:14:43:41: 9b:91:45:3c:27:f2:3a:04:e2:e5:71:6b:cd:e6:9f:2c:90:61: ae:4c:bf:6e:e3:d0:fb:f6:b1:a4:c9:2c:70:8d:0c:a5:c6:5f: ab:6a:80:2d:c5:7a:db:ff:5b:13:dd:ef:71:fc:62:d7:4c:d0: fe:ef:8c:a5:52:cc:3e:c8:fc:d2:df:4b:34:16:21:6c:96:ff: 2a:94:ca:aa:b3:4c:48:52:ca:7e:ba:ec:49:1e:07:05:40:38: 13:c4:35:f1:00:4a:cb:ba:9b:85:e9:63:2e:d4:33:32:91:c6: 97:e0:26:01:5f:d1:c1:e0:87:31:2c:87:60:a8:18:c1:76:0f: e6:02:aa:6d:39:99:25:4b:bd:d6:f9:56:06:b8:6f:83:e0:75: ce:df:dc:36:61:e9:39:ef:29:e3:cf:ed:69:3f:f4:17:6a:c6: e1:5d:de:be:a6:df:ab:45:04:d4:db:b3:d1:6c:7a:43:a2:0f: 09:ad:a7:8c:ac:fd:cf:0f:cb:ad:de:73:d5:9b:b3:be:b4:d6: 00:ff:26:cf:53:9b:25:30:9a:36:23:df:39:6f:b8:d6:14:07: aa:49:19:25:d7:2f:9c:37:39:96:65:e7:93:87:a8:92:25:9e: 75:0c:fc:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt265i4xaUtS+exbDSa1zUlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNTE1N2U0MTlmYjVhMThiYTJiZWFmMmRlNTQ1ZjJiYjNk ZWNmZDEwHhcNMjYwMTAxMDAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTQ3OWM5YjNlNzAzYWIyYmI4MDg3YTJlNDdiMjEyMDUyYTA2Mjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2o4sK8MU7+HkWl9COctn4CTUCf+W pevEiY9DupKiWdfmASw/mZXRm7malQn/JrZNt/pkrqmrZWe8PelWsWB+QvCcbfcj lOyvLWxMG0pIpNPLETK1P4CYH/Y721QaqwbpDemljr/VqqgxTzZJC0+T1CteXEm1 BYgL/luB/n7gzMTOe5PskA8lT0uSNt9bETh8QI7N6jvrGJw6y3uKe3jd22PyIraJ zGG2ohkoZvJh58U/ZCKvyzgxXdhOZpT0g4MafGI7jfZb2MPwAAX43Gb9Lu+94WxG DfJ7ELognMfTVJv5249NfjcBicQkUXKgU/lRCrl/OXvoQONgX/AHtBRjqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP5HnJs+cDqyu4CHouR7ISBSoGJ5MB8GA1UdIwQY MBaAFGtRV+QZ+1oYuivq8t5UXyuz3s/RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFGWDVCbjdXaGk2Sy1yeTNsUmZLN1BlejlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iNmNhMWItNjdkYy00MDRmLThkNjEt MzI4OTFhNTgzMzdmLzEvX2tlY216NXdPcks3Z0llaTVIc2hJRktnWW5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9iNmNhMWItNjdkYy00MDRmLThkNjEtMzI4OTFhNTgzMzdm LzEvYTFGWDVCbjdXaGk2Sy1yeTNsUmZLN1BlejlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRFeMA0G CSqGSIb3DQEBCwUAA4IBAQBUMh8eNjLaZWKSewOvDzoUQ0GbkUU8J/I6BOLlcWvN 5p8skGGuTL9u49D79rGkySxwjQylxl+raoAtxXrb/1sT3e9x/GLXTND+74ylUsw+ yPzS30s0FiFslv8qlMqqs0xIUsp+uuxJHgcFQDgTxDXxAErLupuF6WMu1DMykcaX 4CYBX9HB4IcxLIdgqBjBdg/mAqptOZklS73W+VYGuG+D4HXO39w2Yek57ynjz+1p P/QXasbhXd6+pt+rRQTU27PRbHpDog8JraeMrP3PD8ut3nPVm7O+tNYA/ybPU5sl MJo2I985b7jWFAeqSRkl1y+cNzmWZeeTh6iSJZ51DPw3 -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:27 2026 by rpki-client