This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/6gnkz6OkX6AmjbUFly1wXQMc5Hc.roa File: 6gnkz6OkX6AmjbUFly1wXQMc5Hc.roa (raw, json) Hash identifier: m39tlNEbvl+KvzNcowhejD0YaetaJPWZmQdZ2mQ/k74= Subject key identifier: EA:09:E4:CF:A3:A4:5F:A0:26:8D:B5:05:97:2D:70:5D:03:1C:E4:77 Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520 Certificate serial: 019B78A29F2E16AF030010AF3695F4A5A2D7 Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/6gnkz6OkX6AmjbUFly1wXQMc5Hc.roa Signing time: Thu 01 Jan 2026 08:18:01 +0000 ROA not before: Thu 01 Jan 2026 08:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 80.254.236.0/22 maxlen: 24 193.187.168.0/22 maxlen: 24 194.39.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:9f:2e:16:af:03:00:10:af:36:95:f4:a5:a2:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520 Validity Not Before: Jan 1 08:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea09e4cfa3a45fa0268db505972d705d031ce477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:39:04:9d:04:ba:6c:5a:96:9d:53:74:f5:de: ac:3c:1d:6b:39:9b:44:ec:d4:92:30:52:a0:9e:32: f3:68:05:df:b5:e9:0f:2a:95:c7:9b:ec:15:f4:a2: 7c:0e:98:b4:79:cc:a7:6a:0e:e1:85:95:0c:8e:d6: f2:48:ce:8c:e9:0e:d0:0a:0e:21:d4:62:2b:c0:1d: ae:69:4b:41:2a:a3:56:b8:59:bc:b7:87:7b:68:36: 66:8a:6c:42:e9:58:1b:2d:65:61:de:2f:cb:44:10: 0d:57:ef:2d:2a:b7:d9:b8:7b:62:df:ae:0f:17:bd: a6:0c:51:a5:2c:6f:f6:4c:c5:61:a3:dc:8a:97:09: ec:7c:89:90:35:4e:95:3f:c7:2e:b3:28:d2:a3:0c: 91:0f:cb:12:40:4b:a1:05:fc:74:3f:06:9d:1b:ae: 26:1f:41:55:7c:d8:82:77:73:58:ee:73:1d:ef:a6: 8b:f1:6a:3b:7d:c2:05:2b:1d:24:db:dc:dc:d0:c9: 83:35:9f:a4:df:33:61:a4:ef:1b:fe:6d:1a:f2:f6: a7:af:48:9b:9d:43:7b:1a:f9:20:6a:53:2a:08:35: 4f:fa:5f:ed:db:7e:ed:ef:c8:9e:19:be:a3:07:ce: 88:60:ef:8d:57:a7:a9:94:b3:7c:da:41:2a:0b:31: 28:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:09:E4:CF:A3:A4:5F:A0:26:8D:B5:05:97:2D:70:5D:03:1C:E4:77 X509v3 Authority Key Identifier: keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/6gnkz6OkX6AmjbUFly1wXQMc5Hc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.254.236.0/22 193.187.168.0/22 194.39.68.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:1c:83:88:b6:c1:23:32:c5:84:7f:e2:d9:f9:c9:91:31:93: 1c:32:55:95:c7:8c:0e:b0:0c:88:83:45:b1:77:22:45:66:9c: 95:aa:e3:b0:ae:f1:dc:d4:e6:ff:d8:f4:36:31:59:d2:70:1b: 02:ec:62:4c:e3:3b:05:79:fe:0b:ee:10:80:1c:15:da:d6:04: 77:1f:fb:b2:5d:b5:1b:5e:b7:53:71:28:e4:ad:67:69:0e:55: 61:f1:3f:60:24:f4:eb:97:3b:23:f6:ab:f2:eb:78:76:05:f9: a1:05:8c:8a:b5:70:64:02:b0:be:5a:d5:e6:be:bd:70:23:d1: 5d:11:0b:78:b5:ea:93:23:9f:f4:0e:bb:bd:7e:9d:1c:f0:ac: f2:80:30:d3:2d:b6:f7:f3:70:81:24:38:00:7d:e3:71:90:bf: de:94:4b:73:a7:1f:2c:3b:bd:99:af:73:f9:28:77:f1:27:85: 4b:7d:4e:8f:f7:46:b1:66:27:51:03:ed:1e:93:98:84:a6:d5: 79:4f:ac:17:47:a7:bf:d1:e0:57:ab:c0:a2:44:0f:a6:a1:0b: da:cc:16:f1:9f:10:d2:3e:c5:2a:b1:44:5f:34:ba:1c:dc:b9: 9a:d1:fc:ce:fc:71:f4:47:10:06:1b:71:1a:21:0a:da:30:71: 8f:a2:b9:a2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4op8uFq8DABCvNpX0paLXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNmM2NjBiMzBmNTY5MmIyYjE2ZTI4OWIyNDkwMWM1MThm ZGE1MjAwHhcNMjYwMTAxMDgxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTA5ZTRjZmEzYTQ1ZmEwMjY4ZGI1MDU5NzJkNzA1ZDAzMWNlNDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjkEnQS6bFqWnVN09d6sPB1rOZtE 7NSSMFKgnjLzaAXftekPKpXHm+wV9KJ8Dpi0ecynag7hhZUMjtbySM6M6Q7QCg4h 1GIrwB2uaUtBKqNWuFm8t4d7aDZmimxC6VgbLWVh3i/LRBANV+8tKrfZuHti364P F72mDFGlLG/2TMVho9yKlwnsfImQNU6VP8cusyjSowyRD8sSQEuhBfx0PwadG64m H0FVfNiCd3NY7nMd76aL8Wo7fcIFKx0k29zc0MmDNZ+k3zNhpO8b/m0a8vanr0ib nUN7GvkgalMqCDVP+l/t237t78ieGb6jB86IYO+NV6eplLN82kEqCzEoAwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOoJ5M+jpF+gJo21BZctcF0DHOR3MB8GA1UdIwQY MBaAFBJsZgsw9WkrKxbiibJJAcUY/aUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjIt NDM4YWNiNzJmYzViLzEvNmdua3o2T2tYNkFtamJVRmx5MXdYUU1jNUhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjItNDM4YWNiNzJmYzVi LzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCUP7sAwQC wbuoAwQCwidEMA0GCSqGSIb3DQEBCwUAA4IBAQANHIOItsEjMsWEf+LZ+cmRMZMc MlWVx4wOsAyIg0WxdyJFZpyVquOwrvHc1Ob/2PQ2MVnScBsC7GJM4zsFef4L7hCA HBXa1gR3H/uyXbUbXrdTcSjkrWdpDlVh8T9gJPTrlzsj9qvy63h2BfmhBYyKtXBk ArC+WtXmvr1wI9FdEQt4teqTI5/0Dru9fp0c8KzygDDTLbb383CBJDgAfeNxkL/e lEtzpx8sO72Zr3P5KHfxJ4VLfU6P90axZidRA+0ek5iEptV5T6wXR6e/0eBXq8Ci RA+moQvazBbxnxDSPsUqsURfNLoc3Lma0fzO/HH0RxAGG3EaIQraMHGPormi -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:10 2026 by rpki-client