This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6x-LkkE7DLDFK9ncP54_aTjVfr4.roa File: 6x-LkkE7DLDFK9ncP54_aTjVfr4.roa (raw, json) Hash identifier: vsBZLkemq8EPd+D/ocLbOaKIAFSaQeRRSXzkuYTaMhE= Subject key identifier: EB:1F:8B:92:41:3B:0C:B0:C5:2B:D9:DC:3F:9E:3F:69:38:D5:7E:BE Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84D6D8DC92F6D8A11A8910D598D9DC Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6x-LkkE7DLDFK9ncP54_aTjVfr4.roa Signing time: Fri 02 Jan 2026 16:22:50 +0000 ROA not before: Fri 02 Jan 2026 16:22:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 266539 IP address blocks: 217.60.12.0/24 maxlen: 24 217.60.14.0/24 maxlen: 24 217.60.24.0/24 maxlen: 24 217.60.26.0/24 maxlen: 24 217.60.184.0/23 maxlen: 24 217.60.193.0/24 maxlen: 24 217.60.198.0/24 maxlen: 24 217.60.242.0/24 maxlen: 24 217.60.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d6:d8:dc:92:f6:d8:a1:1a:89:10:d5:98:d9:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb1f8b92413b0cb0c52bd9dc3f9e3f6938d57ebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:66:e2:d8:08:54:63:43:51:09:04:17:23:ec: bd:0f:80:18:27:ca:cd:b4:01:4f:71:38:4c:16:46: 14:d7:e6:01:d3:64:ff:46:a7:54:f2:f8:43:17:5f: f5:3e:9d:3c:7e:85:88:db:ac:fb:09:ca:51:fc:f5: 01:50:de:67:df:b4:a6:5d:51:72:3a:55:a7:02:85: 75:98:35:08:87:fe:a3:79:1d:e4:71:20:8f:ef:5d: 5c:20:a4:50:21:f0:61:c5:e6:34:58:9d:a9:8d:1f: 51:49:e4:83:ec:3a:da:b2:71:5b:90:4c:6c:2c:42: d6:98:5c:5d:e3:10:e9:58:80:91:e7:a5:f0:f5:22: 25:19:d4:d3:f9:6e:20:2e:ef:dd:12:53:eb:68:23: 5d:e7:07:07:33:a3:9a:18:56:68:1a:d5:ce:5e:81: e0:0f:af:ab:fd:98:a7:6c:46:7e:49:68:08:9a:9c: e2:0f:70:15:62:14:f4:4c:16:18:37:92:f7:5b:52: 29:a2:4a:a4:84:cd:80:49:a3:ea:35:71:d8:80:2b: 01:96:0b:0f:17:56:2e:f4:2a:4d:7c:85:c0:7b:19: 83:1a:a4:1c:d1:91:cd:ac:96:38:ed:11:9a:66:b3: 99:20:ac:f6:1d:16:eb:0c:b0:b0:06:a9:61:e6:02: f1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1F:8B:92:41:3B:0C:B0:C5:2B:D9:DC:3F:9E:3F:69:38:D5:7E:BE X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6x-LkkE7DLDFK9ncP54_aTjVfr4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.60.12.0/24 217.60.14.0/24 217.60.24.0/24 217.60.26.0/24 217.60.184.0/23 217.60.193.0/24 217.60.198.0/24 217.60.242.0/24 217.60.250.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:b4:8d:8e:27:9a:25:36:cb:6a:57:e3:e7:11:75:ca:e9:f3: 8f:b2:d5:bb:0b:f9:9f:ed:f1:66:bb:d3:94:2b:dc:06:a6:3b: a9:28:28:b6:d2:72:b4:9f:a8:48:0b:65:8a:e8:1c:30:34:d6: 13:29:f1:18:15:5d:db:38:0a:6e:4f:24:be:52:a2:b7:a4:92: 7f:48:9d:dd:50:6c:9e:7b:52:e0:ac:a2:09:8f:76:58:59:7d: 67:4b:c0:bd:f1:71:6c:f0:9e:7f:57:6c:d2:31:c1:a6:1c:54: 24:b9:b2:d3:4a:23:eb:4f:68:54:d1:40:e6:97:49:75:36:b4: 06:ec:35:7c:8c:67:fd:91:a8:4a:ba:1f:ac:18:b9:ea:fc:1a: 4a:74:78:74:5f:1b:a3:6b:90:04:65:04:53:a9:ef:a6:f1:0a: 66:43:1b:f4:6b:1e:6f:57:52:69:ca:64:ba:d6:2c:55:0a:8f: d9:c2:f2:84:f0:8c:19:a1:e5:cc:90:8b:04:27:68:af:f6:53: bc:be:f9:86:e2:6f:64:7c:94:9b:96:d8:4b:96:5b:13:55:1d: e1:94:d6:b1:c9:1b:7d:2e:6d:fa:2c:25:b5:44:42:fa:11:16: 61:bf:dc:e3:9d:ec:4d:05:b7:0b:e0:4c:27:3b:3f:21:a4:63: 3d:24:ae:3e -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt/hNbY3JL22KEaiRDVmNncMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjFmOGI5MjQxM2IwY2IwYzUyYmQ5ZGMzZjllM2Y2OTM4ZDU3ZWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGbi2AhUY0NRCQQXI+y9D4AYJ8rN tAFPcThMFkYU1+YB02T/RqdU8vhDF1/1Pp08foWI26z7CcpR/PUBUN5n37SmXVFy OlWnAoV1mDUIh/6jeR3kcSCP711cIKRQIfBhxeY0WJ2pjR9RSeSD7DrasnFbkExs LELWmFxd4xDpWICR56Xw9SIlGdTT+W4gLu/dElPraCNd5wcHM6OaGFZoGtXOXoHg D6+r/ZinbEZ+SWgImpziD3AVYhT0TBYYN5L3W1IpokqkhM2ASaPqNXHYgCsBlgsP F1Yu9CpNfIXAexmDGqQc0ZHNrJY47RGaZrOZIKz2HRbrDLCwBqlh5gLxTQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFOsfi5JBOwywxSvZ3D+eP2k41X6+MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvNngtTGtrRTdETERGSzluY1A1NF9hVGpWZnI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQA2TwMAwQA 2TwOAwQA2TwYAwQA2TwaAwQB2Ty4AwQA2TzBAwQA2TzGAwQA2TzyAwQA2Tz6MA0G CSqGSIb3DQEBCwUAA4IBAQB+tI2OJ5olNstqV+PnEXXK6fOPstW7C/mf7fFmu9OU K9wGpjupKCi20nK0n6hIC2WK6BwwNNYTKfEYFV3bOApuTyS+UqK3pJJ/SJ3dUGye e1LgrKIJj3ZYWX1nS8C98XFs8J5/V2zSMcGmHFQkubLTSiPrT2hU0UDml0l1NrQG 7DV8jGf9kahKuh+sGLnq/BpKdHh0Xxuja5AEZQRTqe+m8QpmQxv0ax5vV1JpymS6 1ixVCo/ZwvKE8IwZoeXMkIsEJ2iv9lO8vvmG4m9kfJSblthLllsTVR3hlNaxyRt9 Lm36LCW1REL6ERZhv9zjnexNBbcL4EwnOz8hpGM9JK4+ -----END CERTIFICATE-----Generated at Mon Jan 5 14:32:46 2026 by rpki-client