This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/cR6x0vLdxI4x05ul_LVXsq7MnqU.roa File: cR6x0vLdxI4x05ul_LVXsq7MnqU.roa (raw, json) Hash identifier: /OUTznC+BkcDgve8ewD5il9ebAp8LWHdj9gcHu5jy28= Subject key identifier: 71:1E:B1:D2:F2:DD:C4:8E:31:D3:9B:A5:FC:B5:57:B2:AE:CC:9E:A5 Certificate issuer: /CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8 Certificate serial: 019B7A5AFAE809331ADB15A6457D8484E687 Authority key identifier: AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/cR6x0vLdxI4x05ul_LVXsq7MnqU.roa Signing time: Thu 01 Jan 2026 16:19:01 +0000 ROA not before: Thu 01 Jan 2026 16:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6712 IP address blocks: 82.117.240.0/24 maxlen: 24 82.117.246.0/24 maxlen: 24 91.250.0.0/19 maxlen: 24 91.250.32.0/19 maxlen: 24 2a00:1210:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:fa:e8:09:33:1a:db:15:a6:45:7d:84:84:e6:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8 Validity Not Before: Jan 1 16:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=711eb1d2f2ddc48e31d39ba5fcb557b2aecc9ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ed:a4:47:47:76:a0:21:a2:1f:ad:6a:8e:94: d7:57:3a:4b:9c:49:67:0a:ae:cd:1b:68:35:89:8b: 3c:b7:e4:f5:1c:9a:cc:d3:c1:74:9e:21:36:02:ba: 2a:ac:eb:e8:d5:30:16:57:94:61:f2:01:b0:bc:73: cc:0a:24:c7:ba:ab:17:09:73:ec:8d:59:03:24:c8: a7:78:65:83:00:5f:9a:2e:dc:79:a9:3a:64:06:84: 9a:db:41:34:e3:14:8e:69:5e:70:25:54:59:43:61: c3:a3:05:b9:51:ff:03:3f:a0:d6:57:02:c5:14:dd: 5b:f2:7e:8c:e2:b0:0e:11:6d:70:4c:bd:43:7f:d9: 71:a4:f8:32:b5:32:98:c5:28:99:34:4d:7f:3a:3f: fb:75:b5:ca:3b:b7:1f:e1:96:11:cd:70:0b:bb:05: 62:41:2a:eb:0c:89:8c:b4:d9:9b:32:89:0d:23:10: 3d:91:bf:77:2b:bb:27:bd:f5:c4:cb:fd:cb:31:20: 23:ae:5d:e8:83:7c:f7:77:ea:9c:91:7f:eb:4d:70: 26:1f:c9:f4:1c:6c:82:b1:c4:59:89:a3:5b:ba:c6: 1b:98:43:88:61:6d:6d:42:9c:fb:54:fb:4b:b2:c3: 20:eb:80:70:0e:b6:09:4e:c9:6e:f5:fa:ca:48:5f: 0d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1E:B1:D2:F2:DD:C4:8E:31:D3:9B:A5:FC:B5:57:B2:AE:CC:9E:A5 X509v3 Authority Key Identifier: keyid:AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/cR6x0vLdxI4x05ul_LVXsq7MnqU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.117.240.0/24 82.117.246.0/24 91.250.0.0/18 IPv6: 2a00:1210:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 91:c2:1c:bd:df:03:e8:1b:b6:4a:d3:f0:6c:d7:b6:f3:ff:cc: c9:2a:b4:50:93:c5:d6:66:b1:c8:b7:8b:c9:62:84:e1:8a:69: 32:03:f9:41:56:72:84:44:02:bc:a1:7f:66:b2:f4:b7:c4:79: 2e:4d:a4:7c:21:7d:0c:60:b0:0b:df:a8:fd:58:a6:98:e8:15: 5e:70:f3:b0:f4:94:3d:3f:13:af:c7:9b:28:0d:ae:d5:81:63: 0b:a6:84:98:48:b0:b1:32:9e:bd:c8:5c:93:a1:7d:93:3d:c8: ae:80:f0:9b:fc:5b:6e:96:1a:00:0f:99:71:ed:4b:69:0c:c4: 34:ba:a3:52:01:d2:9d:af:75:b3:3f:06:60:e0:8b:f5:6c:69: 82:80:f8:71:fd:8c:09:55:ae:4e:26:4b:6d:f3:ec:a7:e9:ae: bd:24:24:17:0b:86:3e:fb:60:e7:87:63:b3:1f:ce:a7:f0:21: 63:3d:65:fc:1e:7e:df:9d:23:a9:f5:dc:00:f5:95:f8:86:14: f1:b6:61:ef:99:c7:77:22:1f:e1:81:f3:81:77:98:ca:1c:59: 93:f0:0e:be:10:3c:de:56:ce:1b:00:cb:64:82:59:2e:0d:8e: 43:16:d2:38:81:83:3f:7c:84:c2:bd:f0:83:44:01:56:88:b4: d5:5f:e3:6a -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt6WvroCTMa2xWmRX2EhOaHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlN2E5YjE3NDVhNWE3MGMzYmY3YmNjMmMyZWUxNjY0NjBh ZmY3YTgwHhcNMjYwMTAxMTYxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTFlYjFkMmYyZGRjNDhlMzFkMzliYTVmY2I1NTdiMmFlY2M5ZWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru2kR0d2oCGiH61qjpTXVzpLnEln Cq7NG2g1iYs8t+T1HJrM08F0niE2AroqrOvo1TAWV5Rh8gGwvHPMCiTHuqsXCXPs jVkDJMineGWDAF+aLtx5qTpkBoSa20E04xSOaV5wJVRZQ2HDowW5Uf8DP6DWVwLF FN1b8n6M4rAOEW1wTL1Df9lxpPgytTKYxSiZNE1/Oj/7dbXKO7cf4ZYRzXALuwVi QSrrDImMtNmbMokNIxA9kb93K7snvfXEy/3LMSAjrl3og3z3d+qckX/rTXAmH8n0 HGyCscRZiaNbusYbmEOIYW1tQpz7VPtLssMg64BwDrYJTslu9frKSF8NbQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFHEesdLy3cSOMdObpfy1V7KuzJ6lMB8GA1UdIwQY MBaAFK56mxdFpacMO/e8wsLuFmRgr/eoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm5xYkYwV2xwd3c3OTd6Q3d1NFdaR0N2OTZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy82ZTkwOWQtZDMyNS00OGExLTk0NDMt Y2M5YTc1OGM5OTE2LzEvY1I2eDB2TGR4STR4MDV1bF9MVlhzcTdNbnFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy82ZTkwOWQtZDMyNS00OGExLTk0NDMtY2M5YTc1OGM5OTE2 LzEvcm5xYkYwV2xwd3c3OTd6Q3d1NFdaR0N2OTZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAUnXwAwQA UnX2AwQGW/oAMA8EAgACMAkDBwAqABIQ//8wDQYJKoZIhvcNAQELBQADggEBAJHC HL3fA+gbtkrT8GzXtvP/zMkqtFCTxdZmsci3i8lihOGKaTID+UFWcoREAryhf2ay 9LfEeS5NpHwhfQxgsAvfqP1YppjoFV5w87D0lD0/E6/HmygNrtWBYwumhJhIsLEy nr3IXJOhfZM9yK6A8Jv8W26WGgAPmXHtS2kMxDS6o1IB0p2vdbM/BmDgi/VsaYKA +HH9jAlVrk4mS23z7Kfprr0kJBcLhj77YOeHY7MfzqfwIWM9Zfweft+dI6n13AD1 lfiGFPG2Ye+Zx3ciH+GB84F3mMocWZPwDr4QPN5WzhsAy2SCWS4NjkMW0jiBgz98 hMK98INEAVaItNVf42o= -----END CERTIFICATE-----Generated at Tue Feb 10 00:29:50 2026 by rpki-client