This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/6BPdGU_-MzQ3p-QVBS5wxsSbqIA.roa File: 6BPdGU_-MzQ3p-QVBS5wxsSbqIA.roa (raw, json) Hash identifier: OTv2XEJolNR8TAIm4a6NTDxE9WsD3wHCkSRiEecs+hA= Subject key identifier: E8:13:DD:19:4F:FE:33:34:37:A7:E4:15:05:2E:70:C6:C4:9B:A8:80 Certificate issuer: /CN=acf910f36291c3c224ddb596d956543197f163de Certificate serial: 019B79ED1CD8DE05E1852EAACBCCDED27C73 Authority key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/6BPdGU_-MzQ3p-QVBS5wxsSbqIA.roa Signing time: Thu 01 Jan 2026 14:19:00 +0000 ROA not before: Thu 01 Jan 2026 14:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19551 IP address blocks: 217.147.124.0/22 maxlen: 22 217.147.124.0/24 maxlen: 24 217.147.125.0/24 maxlen: 24 217.147.126.0/24 maxlen: 24 217.147.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 23:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:1c:d8:de:05:e1:85:2e:aa:cb:cc:de:d2:7c:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acf910f36291c3c224ddb596d956543197f163de Validity Not Before: Jan 1 14:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e813dd194ffe333437a7e415052e70c6c49ba880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f8:c4:7d:cb:76:92:49:be:de:1c:fb:27:27: da:d1:29:30:e5:3f:9a:44:2e:cb:9f:2a:9b:fd:8e: 71:04:02:09:d4:8e:d2:d8:69:f6:63:12:01:a2:ff: 37:97:e0:26:f6:8e:9a:39:a8:ed:e5:db:a3:3a:25: 7b:3c:65:b9:6e:4d:cd:88:ce:62:2f:b9:92:92:2d: 5c:9f:8b:c3:fa:1b:80:a7:18:ac:97:3d:e7:00:49: 36:3c:59:a5:85:3a:2a:44:e1:1a:e1:bf:1c:29:ed: af:b9:e2:f9:da:5e:f9:df:74:9c:90:5c:4d:88:48: 03:4f:d5:4f:a9:e3:c6:c0:b8:aa:32:f6:66:ff:81: 6a:f7:0d:5b:d0:1a:ca:1f:c0:1a:b9:d3:8b:3f:6f: f1:d1:8b:04:32:4c:08:68:57:4d:9a:04:1b:97:64: cf:9a:08:7c:86:db:22:5d:98:6b:6b:50:87:05:3c: 13:02:0e:11:36:5d:6f:aa:24:e2:16:61:7f:ba:22: 98:fd:1b:51:ca:15:28:a1:ac:5c:8b:c7:ea:30:a0: e4:63:db:48:6c:6e:b7:a9:ec:1b:62:ce:8f:47:40: b4:d1:db:75:7d:4d:9b:c9:7b:f9:fe:61:4c:88:2a: a3:b9:90:91:06:8c:bd:70:34:d3:32:3e:09:61:59: 20:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:13:DD:19:4F:FE:33:34:37:A7:E4:15:05:2E:70:C6:C4:9B:A8:80 X509v3 Authority Key Identifier: keyid:AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/6BPdGU_-MzQ3p-QVBS5wxsSbqIA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.147.124.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:df:81:16:46:1a:bf:fd:47:e2:9c:ca:c1:42:93:16:9e:3a: 3e:92:3f:54:49:32:f7:81:3c:d4:48:b6:d0:d0:a9:91:2e:f0: 63:3e:a3:34:4f:cc:67:27:97:63:04:32:4c:35:17:fd:a5:df: 35:5e:c4:ce:74:69:1d:00:7e:4e:b7:cc:c8:9a:29:09:d0:88: 7f:47:fb:76:47:0b:c9:fc:cb:18:2d:b8:03:41:fe:dd:28:e6: 35:22:4d:6a:a8:50:dd:9d:d9:03:ff:55:f7:49:e1:94:0c:3c: 06:ba:a7:ac:d1:0f:7f:61:cf:3e:da:d2:85:ad:e8:46:67:00: 4e:77:da:cb:c9:ae:1d:a1:30:03:53:1d:31:10:b5:1c:5f:3a: 03:74:76:48:5e:5b:c0:8b:65:f0:6c:91:20:e5:75:36:2a:cc: 44:98:1b:21:0c:d4:e5:a5:60:e9:0d:46:fe:af:cf:38:b0:6b: ee:f5:d2:ba:bf:9c:78:f6:81:9c:fa:37:1b:98:78:da:d6:05: cb:ff:1b:6c:d4:73:08:36:30:19:c2:c0:85:28:cb:74:7c:68: 88:cd:9d:50:7a:ce:5f:52:56:f0:07:c0:7c:b9:3c:06:b0:fe: a4:ec:34:70:de:b9:89:7b:49:75:e3:76:a6:6e:16:ac:6a:48: b6:55:4a:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57RzY3gXhhS6qy8ze0nxzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZjkxMGYzNjI5MWMzYzIyNGRkYjU5NmQ5NTY1NDMxOTdm MTYzZGUwHhcNMjYwMTAxMTQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODEzZGQxOTRmZmUzMzM0MzdhN2U0MTUwNTJlNzBjNmM0OWJhODgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufjEfct2kkm+3hz7Jyfa0Skw5T+a RC7Lnyqb/Y5xBAIJ1I7S2Gn2YxIBov83l+Am9o6aOajt5dujOiV7PGW5bk3NiM5i L7mSki1cn4vD+huApxislz3nAEk2PFmlhToqROEa4b8cKe2vueL52l7533SckFxN iEgDT9VPqePGwLiqMvZm/4Fq9w1b0BrKH8AaudOLP2/x0YsEMkwIaFdNmgQbl2TP mgh8htsiXZhra1CHBTwTAg4RNl1vqiTiFmF/uiKY/RtRyhUooaxci8fqMKDkY9tI bG63qewbYs6PR0C00dt1fU2byXv5/mFMiCqjuZCRBoy9cDTTMj4JYVkglwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOgT3RlP/jM0N6fkFQUucMbEm6iAMB8GA1UdIwQY MBaAFKz5EPNikcPCJN21ltlWVDGX8WPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xZjVlMDctMzJiNi00MTE0LThiMGQt ZDNiNThmNjk4MTQ4LzEvNkJQZEdVXy1NelEzcC1RVkJTNXd4c1NicUlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8xZjVlMDctMzJiNi00MTE0LThiMGQtZDNiNThmNjk4MTQ4 LzEvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ZN8MA0G CSqGSIb3DQEBCwUAA4IBAQAL34EWRhq//UfinMrBQpMWnjo+kj9USTL3gTzUSLbQ 0KmRLvBjPqM0T8xnJ5djBDJMNRf9pd81XsTOdGkdAH5Ot8zImikJ0Ih/R/t2RwvJ /MsYLbgDQf7dKOY1Ik1qqFDdndkD/1X3SeGUDDwGuqes0Q9/Yc8+2tKFrehGZwBO d9rLya4doTADUx0xELUcXzoDdHZIXlvAi2XwbJEg5XU2KsxEmBshDNTlpWDpDUb+ r884sGvu9dK6v5x49oGc+jcbmHja1gXL/xts1HMINjAZwsCFKMt0fGiIzZ1Qes5f UlbwB8B8uTwGsP6k7DRw3rmJe0l143ambhasaki2VUrv -----END CERTIFICATE-----Generated at Tue Jan 20 07:47:58 2026 by rpki-client