This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6S6poZhLRD8kjTtvvMHYsPrWMqE.roa File: 6S6poZhLRD8kjTtvvMHYsPrWMqE.roa (raw, json) Hash identifier: QF3npVB0Aa2vO8UzSu76rt/AnqgO/nqUJqwji2xRkpw= Subject key identifier: E9:2E:A9:A1:98:4B:44:3F:24:8D:3B:6F:BC:C1:D8:B0:FA:D6:32:A1 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCBA55ED2368CA9906932699EA7D40E Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6S6poZhLRD8kjTtvvMHYsPrWMqE.roa Signing time: Fri 02 Jan 2026 08:20:56 +0000 ROA not before: Fri 02 Jan 2026 08:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 267507 IP address blocks: 37.202.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:a5:5e:d2:36:8c:a9:90:69:32:69:9e:a7:d4:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e92ea9a1984b443f248d3b6fbcc1d8b0fad632a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4c:cc:d2:bb:c1:c3:88:0a:42:6a:0c:05:c4: 00:a8:07:d3:a9:b9:52:70:60:03:cf:43:ff:c6:62: 8a:ad:08:63:6f:2d:d6:35:60:29:bd:df:ce:38:0f: 8b:9f:af:6d:54:e2:de:f0:2a:30:3b:6d:01:2e:37: f0:ed:2b:a4:7e:e8:42:e3:de:d9:a2:b9:f8:14:8b: 93:6f:13:fa:32:8d:08:0f:f5:f9:df:3f:17:b1:d8: 43:b6:96:6e:27:ff:db:54:58:68:b6:bd:fe:5e:a8: 0c:be:7f:e1:6c:28:95:4b:cd:e3:db:67:5a:49:c0: 7a:15:85:e6:1b:12:2c:34:cd:35:48:62:8a:cc:e7: 3f:ee:96:29:7e:58:b9:e4:fb:e8:1b:5e:f5:36:23: 1a:7e:6f:dd:35:38:03:78:20:d6:bc:d1:2c:20:16: 1b:85:ef:4d:95:41:fd:be:94:02:87:c0:7a:f9:4b: 33:62:83:ee:d9:33:8c:90:8f:80:90:32:c3:66:9b: a8:1e:cb:13:bc:b7:76:d8:d9:84:0d:3e:3a:a9:02: 4b:2a:a2:72:f1:00:38:4a:f0:e0:06:8c:f3:fc:2a: 65:08:e6:11:4f:1c:28:b3:5a:ab:21:e8:3b:2f:ca: 08:48:39:da:c1:96:4c:67:42:37:ac:66:ea:f5:68: c0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2E:A9:A1:98:4B:44:3F:24:8D:3B:6F:BC:C1:D8:B0:FA:D6:32:A1 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6S6poZhLRD8kjTtvvMHYsPrWMqE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.218.0/24 Signature Algorithm: sha256WithRSAEncryption a1:a9:05:83:07:46:5a:b0:1e:9e:46:1c:40:a4:50:d0:b6:cd: 8b:55:cf:98:79:14:ee:cb:a3:15:2e:2a:e6:58:34:74:74:a5: 56:cf:4a:c4:89:ca:61:6c:44:49:f6:e2:29:46:db:7a:8d:c9: a6:63:1b:ff:1b:da:f4:41:aa:01:62:44:45:59:87:60:10:9a: 2a:73:e4:22:ef:50:e3:d1:ae:c5:39:e0:f8:de:bb:18:1b:1a: d5:3e:47:0c:5e:fc:ef:dd:89:29:d4:f6:58:d5:28:5c:b9:7c: 8c:da:5e:dc:1a:08:76:1f:4f:2e:aa:a9:37:09:4d:0a:c1:82: 28:f5:60:f4:4c:68:89:dc:07:2e:71:f1:c6:1f:dd:6a:37:e5: 1a:7f:5e:fa:1a:35:99:bf:ed:64:18:73:ab:cd:86:b0:5f:b3: 00:cc:55:c3:7d:6f:b5:f9:c2:ad:3c:2d:cf:0a:0a:2b:25:5a: 80:8f:ef:2b:06:da:9d:0e:81:15:cf:1c:43:ac:d2:63:df:36: d0:86:e4:b5:e5:09:35:8c:02:f5:bc:d8:18:17:80:4d:5a:f7: f2:bb:b6:42:70:37:ec:a1:25:a3:cc:d2:dc:e5:d8:b5:4e:94: fc:b8:82:bd:0a:8e:5b:85:1f:f7:9a:8f:84:d7:71:27:96:d3: dd:32:aa:5c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y6Ve0jaMqZBpMmmep9QOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTJlYTlhMTk4NGI0NDNmMjQ4ZDNiNmZiY2MxZDhiMGZhZDYzMmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0zM0rvBw4gKQmoMBcQAqAfTqblS cGADz0P/xmKKrQhjby3WNWApvd/OOA+Ln69tVOLe8CowO20BLjfw7SukfuhC497Z orn4FIuTbxP6Mo0ID/X53z8XsdhDtpZuJ//bVFhotr3+XqgMvn/hbCiVS83j22da ScB6FYXmGxIsNM01SGKKzOc/7pYpfli55PvoG171NiMafm/dNTgDeCDWvNEsIBYb he9NlUH9vpQCh8B6+UszYoPu2TOMkI+AkDLDZpuoHssTvLd22NmEDT46qQJLKqJy 8QA4SvDgBozz/CplCOYRTxwos1qrIeg7L8oISDnawZZMZ0I3rGbq9WjA3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOkuqaGYS0Q/JI07b7zB2LD61jKhMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvNlM2cG9aaExSRDhralR0dnZNSFlzUHJXTXFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJcraMA0G CSqGSIb3DQEBCwUAA4IBAQChqQWDB0ZasB6eRhxApFDQts2LVc+YeRTuy6MVLirm WDR0dKVWz0rEicphbERJ9uIpRtt6jcmmYxv/G9r0QaoBYkRFWYdgEJoqc+Qi71Dj 0a7FOeD43rsYGxrVPkcMXvzv3Ykp1PZY1ShcuXyM2l7cGgh2H08uqqk3CU0KwYIo 9WD0TGiJ3AcucfHGH91qN+Uaf176GjWZv+1kGHOrzYawX7MAzFXDfW+1+cKtPC3P CgorJVqAj+8rBtqdDoEVzxxDrNJj3zbQhuS15Qk1jAL1vNgYF4BNWvfyu7ZCcDfs oSWjzNLc5di1TpT8uIK9Co5bhR/3mo+E13EnltPdMqpc -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:26 2026 by rpki-client