This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/6C3RxLRpZvjkhDqeNyvhxuNtNTA.roa File: 6C3RxLRpZvjkhDqeNyvhxuNtNTA.roa (raw, json) Hash identifier: kl9YGSouHVzVMvRPPAag8+zWXrah44Y/BhsIajbDopE= Subject key identifier: E8:2D:D1:C4:B4:69:66:F8:E4:84:3A:9E:37:2B:E1:C6:E3:6D:35:30 Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55 Certificate serial: 019B79104E9AF9454E93586F898631EC377C Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/6C3RxLRpZvjkhDqeNyvhxuNtNTA.roa Signing time: Thu 01 Jan 2026 10:17:50 +0000 ROA not before: Thu 01 Jan 2026 10:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197091 IP address blocks: 217.11.136.0/22 maxlen: 22 217.11.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:4e:9a:f9:45:4e:93:58:6f:89:86:31:ec:37:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55 Validity Not Before: Jan 1 10:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e82dd1c4b46966f8e4843a9e372be1c6e36d3530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2a:73:27:94:15:41:15:2c:d1:39:4f:6a:88: 6b:90:5f:3b:a4:a1:d1:44:3a:44:1e:ee:06:76:74: 98:8f:10:40:93:90:6f:2b:60:12:a8:b4:fb:1a:63: bf:44:9b:84:47:7c:7e:3e:8b:34:4a:b5:d1:2f:35: 3b:15:53:17:c2:9c:a7:7f:bb:3f:b6:c5:fd:2f:6d: 54:62:d4:8b:32:aa:d4:8c:ae:c0:6f:59:75:c9:b8: 65:80:ca:5d:fc:a2:ff:19:68:f1:a3:a3:ee:91:79: 51:c3:d4:7b:3e:69:20:d8:e3:de:3e:76:7c:63:9f: ff:7a:81:97:7d:71:36:bb:0c:2f:a7:c6:32:81:2c: e4:ed:a6:4d:ef:c0:86:81:e4:ea:1c:8a:bd:11:03: cf:25:62:4b:40:2a:33:15:37:c5:ac:bf:dd:c6:4f: fb:db:3f:46:54:73:46:53:70:59:49:50:9b:48:d6: eb:b8:db:65:0d:d5:b8:b9:c5:72:07:19:0e:25:59: 19:4f:7a:2d:96:3e:dc:84:91:fc:f4:48:df:19:f8: c3:6d:67:f3:b1:c2:28:a6:48:e1:e2:9e:c8:a8:32: 88:df:7b:32:f1:c8:1f:58:69:55:59:86:09:52:97: e5:4d:1c:7e:f2:1b:d6:d8:85:e7:ec:89:0d:8b:82: 32:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:2D:D1:C4:B4:69:66:F8:E4:84:3A:9E:37:2B:E1:C6:E3:6D:35:30 X509v3 Authority Key Identifier: keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/6C3RxLRpZvjkhDqeNyvhxuNtNTA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.11.136.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:ab:29:93:be:1d:66:c7:10:49:0e:77:d7:8c:b9:cc:46:f4: c6:2c:34:6f:0b:32:b5:64:ab:c3:b5:57:9b:67:57:f0:6a:d4: 19:5a:e8:d4:58:91:03:45:25:37:18:6f:86:d5:6d:21:71:f1: a8:bc:96:24:5c:6c:68:64:c0:02:cd:e9:9b:df:9f:73:13:11: 96:14:1d:37:0d:55:1c:39:bc:d1:d1:ab:8c:49:6d:d8:52:bd: fe:95:6c:fa:d1:a7:5f:16:10:07:fd:4e:e8:9d:a9:00:19:91: 39:dd:d5:c2:6d:34:0f:ac:19:c1:e2:fb:fd:01:10:4c:d4:2f: 0d:33:61:fe:83:b3:68:dc:d5:e4:9e:69:ce:54:4c:fc:fe:12: d0:c9:c2:79:17:ea:cc:98:c4:0f:3b:3e:2b:86:f0:68:9d:2a: 14:40:bd:31:d9:16:0d:72:88:f2:07:ca:d2:93:eb:0d:2d:1d: a1:8b:c8:ae:84:c8:7b:4a:d5:9e:e1:61:5d:cc:99:da:cb:9a: ed:d2:5b:f6:dd:01:da:df:4c:ac:98:07:7b:4a:c1:51:c4:74: ca:0d:cf:a4:14:90:ad:b3:38:18:2a:c0:ff:e7:3f:e2:4d:ad: 39:cf:55:e6:b3:b6:73:b0:a5:ba:5f:79:7a:2d:e9:fc:bc:5a: d4:64:f3:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EE6a+UVOk1hviYYx7Dd8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMGExMjMxZDFjMjdhNzU0ZTQ2ZWYxMGU5MmE3MzBhZTE1 ZDBmNTUwHhcNMjYwMTAxMTAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODJkZDFjNGI0Njk2NmY4ZTQ4NDNhOWUzNzJiZTFjNmUzNmQzNTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCpzJ5QVQRUs0TlPaohrkF87pKHR RDpEHu4GdnSYjxBAk5BvK2ASqLT7GmO/RJuER3x+Pos0SrXRLzU7FVMXwpynf7s/ tsX9L21UYtSLMqrUjK7Ab1l1ybhlgMpd/KL/GWjxo6PukXlRw9R7Pmkg2OPePnZ8 Y5//eoGXfXE2uwwvp8YygSzk7aZN78CGgeTqHIq9EQPPJWJLQCozFTfFrL/dxk/7 2z9GVHNGU3BZSVCbSNbruNtlDdW4ucVyBxkOJVkZT3otlj7chJH89EjfGfjDbWfz scIopkjh4p7IqDKI33sy8cgfWGlVWYYJUpflTRx+8hvW2IXn7IkNi4Iy7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOgt0cS0aWb45IQ6njcr4cbjbTUwMB8GA1UdIwQY MBaAFHAKEjHRwnp1TkbvEOkqcwrhXQ9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgt YWI3OWEzNzg5ZjhmLzEvNkMzUnhMUnBadmpraERxZU55dmh4dU50TlRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgtYWI3OWEzNzg5Zjhm LzEvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2QuIMA0G CSqGSIb3DQEBCwUAA4IBAQAeqymTvh1mxxBJDnfXjLnMRvTGLDRvCzK1ZKvDtVeb Z1fwatQZWujUWJEDRSU3GG+G1W0hcfGovJYkXGxoZMACzemb359zExGWFB03DVUc ObzR0auMSW3YUr3+lWz60adfFhAH/U7onakAGZE53dXCbTQPrBnB4vv9ARBM1C8N M2H+g7No3NXknmnOVEz8/hLQycJ5F+rMmMQPOz4rhvBonSoUQL0x2RYNcojyB8rS k+sNLR2hi8iuhMh7StWe4WFdzJnay5rt0lv23QHa30ysmAd7SsFRxHTKDc+kFJCt szgYKsD/5z/iTa05z1Xms7ZzsKW6X3l6Len8vFrUZPNu -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:06 2026 by rpki-client