This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/c6SA4ELuvQVyR9kqQbJTsDZRqHQ.roa File: c6SA4ELuvQVyR9kqQbJTsDZRqHQ.roa (raw, json) Hash identifier: ezdtKJHH/isz/wjoYibJVODc5GKSAIgaQT3pgWHH64M= Subject key identifier: 73:A4:80:E0:42:EE:BD:05:72:47:D9:2A:41:B2:53:B0:36:51:A8:74 Certificate issuer: /CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c Certificate serial: 019B7F15CF8C6655D10124ECBFE8E5DEF248 Authority key identifier: 7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/c6SA4ELuvQVyR9kqQbJTsDZRqHQ.roa Signing time: Fri 02 Jan 2026 14:21:34 +0000 ROA not before: Fri 02 Jan 2026 14:21:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6453 IP address blocks: 5.11.128.0/17 maxlen: 24 5.24.0.0/14 maxlen: 24 31.140.0.0/14 maxlen: 24 77.67.128.0/17 maxlen: 24 86.108.128.0/17 maxlen: 24 141.196.0.0/16 maxlen: 24 176.89.0.0/16 maxlen: 24 176.90.0.0/15 maxlen: 24 176.227.0.0/17 maxlen: 24 176.237.0.0/16 maxlen: 24 176.238.0.0/16 maxlen: 24 176.239.0.0/16 maxlen: 24 178.240.0.0/13 maxlen: 24 188.56.0.0/14 maxlen: 24 213.43.0.0/16 maxlen: 24 2a02:4e0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:cf:8c:66:55:d1:01:24:ec:bf:e8:e5:de:f2:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c Validity Not Before: Jan 2 14:21:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73a480e042eebd057247d92a41b253b03651a874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:23:69:29:14:68:7c:79:d4:56:3d:b3:67:43: 94:11:50:7b:46:2d:b2:09:52:ae:f9:f6:94:81:51: 9b:60:08:b7:44:ee:30:99:7a:4c:f5:36:ce:5e:7e: c4:19:a6:0c:f6:a8:2a:e4:82:2e:9a:f9:55:48:65: 50:75:c9:e6:a4:5e:25:4b:93:a6:c9:47:ef:9a:55: 1d:41:be:42:77:6e:db:8b:74:24:13:21:25:57:f5: 7d:4c:be:9d:8e:ee:76:5d:ac:6f:fa:f3:e3:5a:3e: 04:db:38:bd:50:30:9e:b6:4f:2c:dd:e8:ab:5e:2d: 13:38:10:ae:06:4d:ee:61:22:2a:bc:32:81:2f:e3: bf:30:79:7e:dd:f3:84:8b:39:be:40:ff:60:c8:4a: 6a:0c:b4:02:f3:0c:f9:ed:10:74:c8:60:e0:67:04: 74:74:b2:a7:33:27:8d:81:17:66:0a:ef:7e:ea:75: bd:6e:41:c4:2b:73:51:bd:15:61:4f:d7:b3:c8:b2: 37:85:3c:df:a5:5b:72:f7:88:fd:e1:03:43:b0:4a: 41:26:51:53:f9:a6:d4:d8:0f:99:74:b4:ae:6f:d4: 5f:76:83:c9:ca:23:96:33:ad:1e:44:ab:87:e2:39: 92:8e:b1:3d:8b:44:46:44:49:fb:76:ee:00:0e:85: ee:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A4:80:E0:42:EE:BD:05:72:47:D9:2A:41:B2:53:B0:36:51:A8:74 X509v3 Authority Key Identifier: keyid:7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/c6SA4ELuvQVyR9kqQbJTsDZRqHQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.11.128.0/17 5.24.0.0/14 31.140.0.0/14 77.67.128.0/17 86.108.128.0/17 141.196.0.0/16 176.89.0.0-176.91.255.255 176.227.0.0/17 176.237.0.0-176.239.255.255 178.240.0.0/13 188.56.0.0/14 213.43.0.0/16 IPv6: 2a02:4e0::/32 Signature Algorithm: sha256WithRSAEncryption 6b:cd:20:45:db:b2:b8:b1:10:7c:ac:eb:8b:2f:58:a0:22:24: 2d:33:c2:45:a3:7a:50:c7:93:37:77:de:31:4c:9e:10:d8:08: 1e:5d:32:f5:01:4b:c7:93:91:db:c2:3c:69:4b:3d:ab:f1:a2: d3:01:cf:dd:10:a8:8b:97:0b:60:15:1e:13:e5:37:70:0a:05: 08:42:c9:fd:f3:6e:af:c9:8f:8d:24:44:50:51:e2:5d:7d:4e: cc:f6:74:c7:22:57:f1:26:c0:86:8e:9d:af:b1:43:05:9b:3e: 58:54:7c:b5:0b:fd:a4:ac:b4:d0:0a:f9:b1:24:18:6b:77:68: 23:cb:bc:ad:cc:7b:06:69:87:03:6d:09:1b:56:9c:b2:2d:3a: d5:8f:d4:55:41:16:70:37:5d:06:c0:7f:a8:cc:35:02:c1:ba: 52:1f:b2:1b:5c:9e:22:10:28:53:a2:db:84:88:3c:0d:68:45: af:eb:83:e4:98:67:2d:1e:14:a7:d6:7a:ba:0c:8b:ec:3a:4b: 64:02:ff:1d:bc:0a:09:fc:9c:4f:f3:22:62:68:8e:27:8d:7d: 60:7e:e1:57:7e:cf:3e:29:e2:f4:22:a7:89:9a:e7:2b:de:e2: b8:42:57:6f:9c:0d:cd:ef:d9:1b:09:0f:fb:3b:40:e3:4c:15: c2:1c:91:bb -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgISAZt/Fc+MZlXRASTsv+jl3vJIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYzY1YTFkY2Y4MjI1ZTdmMTBiZTIwZGRkZTFlMjE2ZTgw MGI2N2MwHhcNMjYwMTAyMTQyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2E0ODBlMDQyZWViZDA1NzI0N2Q5MmE0MWIyNTNiMDM2NTFhODc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCNpKRRofHnUVj2zZ0OUEVB7Ri2y CVKu+faUgVGbYAi3RO4wmXpM9TbOXn7EGaYM9qgq5IIumvlVSGVQdcnmpF4lS5Om yUfvmlUdQb5Cd27bi3QkEyElV/V9TL6dju52Xaxv+vPjWj4E2zi9UDCetk8s3eir Xi0TOBCuBk3uYSIqvDKBL+O/MHl+3fOEizm+QP9gyEpqDLQC8wz57RB0yGDgZwR0 dLKnMyeNgRdmCu9+6nW9bkHEK3NRvRVhT9ezyLI3hTzfpVty94j94QNDsEpBJlFT +abU2A+ZdLSub9RfdoPJyiOWM60eRKuH4jmSjrE9i0RGREn7du4ADoXuLwIDAQAB o4ICYDCCAlwwHQYDVR0OBBYEFHOkgOBC7r0FckfZKkGyU7A2Uah0MB8GA1UdIwQY MBaAFH7GWh3PgiXn8QviDd3h4hboALZ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnNaYUhjLUNKZWZ4Qy1JTjNlSGlGdWdBdG53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84ZTc3ODUtOTQ1MS00NmZiLWIyNDQt N2Q5YjgyMzA1MzdlLzEvYzZTQTRFTHV2UVZ5UjlrcVFiSlRzRFpScUhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi84ZTc3ODUtOTQ1MS00NmZiLWIyNDQtN2Q5YjgyMzA1Mzdl LzEvZnNaYUhjLUNKZWZ4Qy1JTjNlSGlGdWdBdG53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHYGCCsGAQUFBwEHAQH/BGcwZTBUBAIAATBOAwQHBQuAAwMC BRgDAwIfjAMEB01DgAMEB1ZsgAMDAI3EMAoDAwCwWQMDArBYAwQHsOMAMAoDAwCw 7QMDBLDgAwMDsvADAwK8OAMDANUrMA0EAgACMAcDBQAqAgTgMA0GCSqGSIb3DQEB CwUAA4IBAQBrzSBF27K4sRB8rOuLL1igIiQtM8JFo3pQx5M3d94xTJ4Q2AgeXTL1 AUvHk5HbwjxpSz2r8aLTAc/dEKiLlwtgFR4T5TdwCgUIQsn9826vyY+NJERQUeJd fU7M9nTHIlfxJsCGjp2vsUMFmz5YVHy1C/2krLTQCvmxJBhrd2gjy7ytzHsGaYcD bQkbVpyyLTrVj9RVQRZwN10GwH+ozDUCwbpSH7IbXJ4iEChTotuEiDwNaEWv64Pk mGctHhSn1nq6DIvsOktkAv8dvAoJ/JxP8yJiaI4njX1gfuFXfs8+KeL0IqeJmucr 3uK4QldvnA3N79kbCQ/7O0DjTBXCHJG7 -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:50 2026 by rpki-client