This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6K6RdSmIhw-ZUVaTwKYORSAHh5A.roa File: 6K6RdSmIhw-ZUVaTwKYORSAHh5A.roa (raw, json) Hash identifier: MY+pn27vhhcDYIWX+vOXvON8INDPWElm6GjjbA3HwJY= Subject key identifier: E8:AE:91:75:29:88:87:0F:99:51:56:93:C0:A6:0E:45:20:07:87:90 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84E2583223DD9E28A65FF499B4C3E2 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6K6RdSmIhw-ZUVaTwKYORSAHh5A.roa Signing time: Fri 02 Jan 2026 16:22:53 +0000 ROA not before: Fri 02 Jan 2026 16:22:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399461 IP address blocks: 217.60.100.0/22 maxlen: 24 217.60.108.0/22 maxlen: 24 217.60.112.0/22 maxlen: 24 217.60.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:e2:58:32:23:dd:9e:28:a6:5f:f4:99:b4:c3:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8ae91752988870f99515693c0a60e4520078790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fd:1e:af:d2:d3:d5:06:1f:88:ed:fc:01:2c: 90:ad:01:a3:c9:5b:34:f7:93:7d:0e:2e:b0:59:d7: f3:99:1a:4e:21:ca:33:60:ca:05:ae:20:09:63:3d: ba:e9:d1:25:46:f8:a9:2f:77:a0:73:2c:cb:34:36: fa:61:48:2d:fb:6a:91:24:dc:10:07:2a:83:cc:c7: e1:a1:f2:53:f0:b2:af:a0:06:84:b0:92:7a:e6:4f: ef:8f:9f:5c:89:16:07:79:37:48:8b:34:57:5b:3b: 12:17:92:cb:15:f8:73:13:bb:95:0d:61:3f:c6:3a: d4:05:ff:81:38:35:70:7e:d5:0d:c7:64:31:1c:3d: 0f:cb:ac:ce:9d:6d:a9:3c:f7:7a:53:6b:fa:b4:27: 88:a4:70:3d:ea:86:aa:34:43:95:95:97:13:68:77: cb:0a:d6:c3:66:4b:3a:45:f4:b0:91:ae:cf:71:64: d1:27:ce:d2:5d:9a:b5:9f:fe:45:95:33:02:b6:75: ee:61:6f:68:0a:77:76:44:d7:4b:55:9a:23:4a:2e: 39:bc:13:97:33:e0:a7:9f:0f:a0:2f:4c:53:71:39: ee:09:97:53:e5:35:52:8f:66:76:94:ee:c7:e9:ef: 9a:1f:3b:60:62:23:47:3c:66:a5:00:fe:78:73:80: b8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AE:91:75:29:88:87:0F:99:51:56:93:C0:A6:0E:45:20:07:87:90 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6K6RdSmIhw-ZUVaTwKYORSAHh5A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.60.100.0/22 217.60.108.0-217.60.115.255 217.60.124.0/22 Signature Algorithm: sha256WithRSAEncryption 74:4f:7b:b6:65:d9:9d:8c:f4:69:45:3c:af:47:26:13:d2:45: 17:eb:9b:8e:a5:ca:99:08:5b:ac:9d:2e:e2:b9:96:4f:bb:77: d2:99:97:f8:aa:2b:fa:e4:29:23:0b:1e:d6:b7:7b:49:19:62: 27:ca:27:41:bd:5d:fb:cb:62:d6:3c:f9:c9:a5:8c:60:24:4a: a3:62:c7:85:29:84:80:96:14:51:31:01:5f:4c:ba:23:6d:97: 19:fb:61:1f:48:3a:d6:df:bb:7d:30:1f:30:2f:9d:d9:bc:e5: c5:a7:c4:b4:f7:0c:b6:55:27:3a:06:eb:7b:9d:d4:4a:c0:cd: 83:e8:dc:f4:84:05:5e:03:25:34:4d:e6:22:fd:2b:7c:ad:7b: a6:be:7f:16:fd:f3:a9:a1:9f:84:a1:f1:d2:ad:43:f9:c9:da: 69:ad:ec:96:ee:d6:dd:0b:8d:f5:e0:71:47:a3:5c:ba:4f:cf: ee:c8:44:e6:ff:1b:13:1e:4f:18:12:47:e2:3d:3e:78:fa:d2: 61:91:cb:8e:4f:5b:4c:d9:29:bb:e1:c4:f3:ed:7c:ca:6d:c4: 42:6f:66:76:cf:7b:43:90:ec:cb:d7:4b:8f:ad:40:1b:d4:7d: 66:4a:71:a9:7b:89:09:eb:2f:e7:be:45:b3:12:b8:5e:3d:d3: 24:82:6e:58 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt/hOJYMiPdniimX/SZtMPiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGFlOTE3NTI5ODg4NzBmOTk1MTU2OTNjMGE2MGU0NTIwMDc4NzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkv0er9LT1QYfiO38ASyQrQGjyVs0 95N9Di6wWdfzmRpOIcozYMoFriAJYz266dElRvipL3egcyzLNDb6YUgt+2qRJNwQ ByqDzMfhofJT8LKvoAaEsJJ65k/vj59ciRYHeTdIizRXWzsSF5LLFfhzE7uVDWE/ xjrUBf+BODVwftUNx2QxHD0Py6zOnW2pPPd6U2v6tCeIpHA96oaqNEOVlZcTaHfL CtbDZks6RfSwka7PcWTRJ87SXZq1n/5FlTMCtnXuYW9oCnd2RNdLVZojSi45vBOX M+Cnnw+gL0xTcTnuCZdT5TVSj2Z2lO7H6e+aHztgYiNHPGalAP54c4C4LwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFOiukXUpiIcPmVFWk8CmDkUgB4eQMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvNks2UmRTbUlody1aVVZhVHdLWU9SU0FIaDVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQC2TxkMAwD BALZPGwDBALZPHADBALZPHwwDQYJKoZIhvcNAQELBQADggEBAHRPe7Zl2Z2M9GlF PK9HJhPSRRfrm46lypkIW6ydLuK5lk+7d9KZl/iqK/rkKSMLHta3e0kZYifKJ0G9 XfvLYtY8+cmljGAkSqNix4UphICWFFExAV9MuiNtlxn7YR9IOtbfu30wHzAvndm8 5cWnxLT3DLZVJzoG63ud1ErAzYPo3PSEBV4DJTRN5iL9K3yte6a+fxb986mhn4Sh 8dKtQ/nJ2mmt7Jbu1t0LjfXgcUejXLpPz+7IROb/GxMeTxgSR+I9Pnj60mGRy45P W0zZKbvhxPPtfMptxEJvZnbPe0OQ7MvXS4+tQBvUfWZKcal7iQnrL+e+RbMSuF49 0ySCblg= -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:45 2026 by rpki-client