This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/E6Ku4wYPHHcV7axToFO9WYCK0AA.roa File: E6Ku4wYPHHcV7axToFO9WYCK0AA.roa (raw, json) Hash identifier: a+/AYeM7cEKM+06SAznDYFOOwLpsP46dfemwn3eakp8= Subject key identifier: 13:A2:AE:E3:06:0F:1C:77:15:ED:AC:53:A0:53:BD:59:80:8A:D0:00 Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F839B479487AC53F8675D4BA8F7E013 Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/E6Ku4wYPHHcV7axToFO9WYCK0AA.roa Signing time: Fri 02 Jan 2026 16:21:29 +0000 ROA not before: Fri 02 Jan 2026 16:21:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42938 IP address blocks: 37.230.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:9b:47:94:87:ac:53:f8:67:5d:4b:a8:f7:e0:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13a2aee3060f1c7715edac53a053bd59808ad000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:af:65:44:eb:f8:02:4f:fc:26:a8:ba:3e:6e: 3d:a0:eb:d6:2c:7e:e8:6f:6b:55:29:5a:5c:ca:7a: ce:fd:12:08:9d:80:c3:bb:1c:7a:25:11:d2:0b:e6: 87:61:5d:52:c2:db:5b:c7:bc:d8:02:39:a1:13:2d: ce:46:dc:c8:9f:bf:57:b6:6e:20:5e:87:cb:6b:da: f8:3e:2c:86:45:fe:a0:fa:42:dc:45:fb:1b:c0:e9: 96:ee:46:05:1c:d3:00:45:9c:73:8e:8a:5e:a6:97: 98:10:71:90:8a:fe:dc:0d:b8:7d:7b:cc:b6:a8:93: 84:f8:c6:f7:c4:92:e1:d6:c8:4c:c6:c1:ab:fa:53: 31:11:28:42:67:0e:2b:4b:16:7c:5b:64:8a:d5:d9: 69:46:44:70:06:c6:14:e5:3d:a4:82:61:3a:c0:24: 8a:4d:ca:4a:6d:02:2f:3f:08:fe:95:75:bd:55:16: df:64:83:c2:1f:22:a6:d8:2c:6f:5a:fd:47:77:60: fa:63:72:c4:e8:f3:54:80:ca:55:c4:d9:22:9c:0b: 9f:ba:9e:53:54:27:af:8a:95:63:07:4c:71:00:82: 9c:b7:a0:47:18:94:0b:05:51:4a:46:4c:c0:c7:25: 25:98:4e:07:db:3b:d7:33:ba:12:e5:c8:f8:39:7e: 55:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A2:AE:E3:06:0F:1C:77:15:ED:AC:53:A0:53:BD:59:80:8A:D0:00 X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/E6Ku4wYPHHcV7axToFO9WYCK0AA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.247.0/24 Signature Algorithm: sha256WithRSAEncryption 40:d6:6b:ca:80:81:46:99:31:7f:da:9a:fb:a0:28:fe:d4:2a: fd:9f:f1:a7:5d:3e:7b:02:18:0b:83:b4:cb:06:18:b5:34:ad: 7f:af:35:06:cc:79:b6:91:86:0b:81:17:55:e8:be:fe:ba:b6: 18:6a:d2:e1:e9:41:8d:3e:92:9d:8e:53:4f:23:7f:04:08:99: 42:a1:9e:fa:2e:0a:cf:e2:da:93:5a:b0:ba:e6:5e:cf:22:99: 83:0c:5f:80:82:13:a6:e9:69:d7:f6:66:7c:69:70:a2:19:c8: 79:ca:a2:45:ec:5d:c7:66:d6:3e:91:4e:cc:a7:39:93:d5:aa: 89:16:99:81:16:90:10:3d:c7:60:09:f2:24:68:8a:fd:b6:29: 78:50:69:fc:14:6e:30:8d:8c:0e:44:a3:59:92:28:ca:d5:a0: c6:20:d9:d6:63:93:9b:27:fe:a8:19:6d:5a:0d:64:4a:02:5f: c1:74:c3:cb:ad:9e:a2:a7:14:e5:a7:15:97:ea:51:73:6c:8d: d1:8f:84:56:de:ca:4b:10:8d:b3:26:bf:18:02:65:af:88:9b: 36:93:36:95:d9:84:2b:83:38:bc:11:e9:7a:0c:68:7b:1f:cb: 12:14:bf:34:47:c7:64:ef:b4:ed:9a:96:99:6f:d9:1a:ce:a5: 2e:f7:46:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g5tHlIesU/hnXUuo9+ATMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2EyYWVlMzA2MGYxYzc3MTVlZGFjNTNhMDUzYmQ1OTgwOGFkMDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK9lROv4Ak/8Jqi6Pm49oOvWLH7o b2tVKVpcynrO/RIInYDDuxx6JRHSC+aHYV1Swttbx7zYAjmhEy3ORtzIn79Xtm4g XofLa9r4PiyGRf6g+kLcRfsbwOmW7kYFHNMARZxzjopeppeYEHGQiv7cDbh9e8y2 qJOE+Mb3xJLh1shMxsGr+lMxEShCZw4rSxZ8W2SK1dlpRkRwBsYU5T2kgmE6wCSK TcpKbQIvPwj+lXW9VRbfZIPCHyKm2CxvWv1Hd2D6Y3LE6PNUgMpVxNkinAufup5T VCevipVjB0xxAIKct6BHGJQLBVFKRkzAxyUlmE4H2zvXM7oS5cj4OX5V7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBOiruMGDxx3Fe2sU6BTvVmAitAAMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvRTZLdTR3WVBISGNWN2F4VG9GTzlXWUNLMEFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJeb3MA0G CSqGSIb3DQEBCwUAA4IBAQBA1mvKgIFGmTF/2pr7oCj+1Cr9n/GnXT57AhgLg7TL Bhi1NK1/rzUGzHm2kYYLgRdV6L7+urYYatLh6UGNPpKdjlNPI38ECJlCoZ76LgrP 4tqTWrC65l7PIpmDDF+AghOm6WnX9mZ8aXCiGch5yqJF7F3HZtY+kU7MpzmT1aqJ FpmBFpAQPcdgCfIkaIr9til4UGn8FG4wjYwORKNZkijK1aDGINnWY5ObJ/6oGW1a DWRKAl/BdMPLrZ6ipxTlpxWX6lFzbI3Rj4RW3spLEI2zJr8YAmWviJs2kzaV2YQr gzi8Eel6DGh7H8sSFL80R8dk77TtmpaZb9kazqUu90bU -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:19 2026 by rpki-client