This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/6SrhIYq9krVCM2Q_wIAA5M-Z-Lc.roa File: 6SrhIYq9krVCM2Q_wIAA5M-Z-Lc.roa (raw, json) Hash identifier: sAYJD+I7oIyAkdboyJMkSqHc+dfvfVcmdQnsD35+5Do= Subject key identifier: E9:2A:E1:21:8A:BD:92:B5:42:33:64:3F:C0:80:00:E4:CF:99:F8:B7 Certificate issuer: /CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b Certificate serial: 019B7B35EC0FDC142948B5D1E3A0A350ED08 Authority key identifier: D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/6SrhIYq9krVCM2Q_wIAA5M-Z-Lc.roa Signing time: Thu 01 Jan 2026 20:18:10 +0000 ROA not before: Thu 01 Jan 2026 20:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59595 IP address blocks: 31.135.184.0/22 maxlen: 22 31.135.188.0/23 maxlen: 23 31.135.190.0/24 maxlen: 24 31.135.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:ec:0f:dc:14:29:48:b5:d1:e3:a0:a3:50:ed:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b Validity Not Before: Jan 1 20:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e92ae1218abd92b54233643fc08000e4cf99f8b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:13:f3:35:d8:2a:b1:2d:84:ce:b5:b4:e2:d0: ad:77:21:c7:08:8c:b4:e4:88:ac:26:59:9d:4c:80: bf:36:7b:42:ed:00:59:60:e7:3f:13:c3:21:3f:d5: 01:41:68:2e:22:b6:90:53:01:7b:e4:00:e8:b5:66: 09:10:dd:97:86:05:e9:0c:3f:da:5e:8f:0c:b2:c0: cd:c2:72:7a:80:e6:0e:b2:f7:d7:9b:db:d5:fc:a4: 6c:81:2d:62:0f:22:fb:c9:49:27:6d:d2:8b:d1:81: b5:4d:06:29:e0:37:16:c0:66:66:5f:f4:90:0a:d5: cb:70:34:c0:7e:c8:43:74:69:c1:de:13:f2:f6:8a: 25:d1:43:69:aa:85:00:fd:0a:16:8c:b7:ce:cc:e3: d7:08:d0:3f:4e:b6:9a:25:5b:fd:59:96:64:58:e7: 9e:6e:25:bf:4c:d2:41:f2:e1:0c:23:41:d1:9a:19: f0:97:b2:49:8c:10:9a:7c:00:dd:69:0c:9e:ad:9d: b2:bb:06:fc:a3:14:89:a4:1d:54:b8:96:7e:50:56: ec:22:4e:ce:16:07:6a:08:43:01:ea:9e:55:39:01: 16:64:97:31:f5:c7:cd:b9:15:01:56:cc:bc:40:24: 0f:26:0e:ad:c0:14:63:1d:3d:90:77:7e:82:82:f5: 12:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2A:E1:21:8A:BD:92:B5:42:33:64:3F:C0:80:00:E4:CF:99:F8:B7 X509v3 Authority Key Identifier: keyid:D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/6SrhIYq9krVCM2Q_wIAA5M-Z-Lc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.135.184.0/21 Signature Algorithm: sha256WithRSAEncryption 0a:9a:e3:99:6c:db:ba:00:3f:07:43:bc:43:85:1a:35:2a:4e: c8:47:c3:80:4b:fe:46:b0:2d:5b:8e:b6:71:a6:1c:fa:cb:91: 2a:7b:c9:e3:28:b1:3e:09:f1:aa:18:9b:dd:14:16:7c:4b:22: e4:c3:36:8d:9d:eb:58:16:cf:76:5c:b2:e5:52:ef:7b:d4:c3: dc:f0:ba:c1:c2:c4:5a:04:df:c1:6d:6b:e5:a4:c1:39:cf:06: ff:74:74:59:8b:f7:54:f6:85:c6:1e:28:89:16:c4:b8:55:75: e1:f7:11:a6:80:6d:4a:ba:57:ce:3e:bd:4a:c5:2e:cd:37:f7: ee:da:c4:06:07:47:3f:36:ff:c3:bf:3c:1f:60:c1:33:73:e4: b1:fa:2a:93:c3:c5:27:73:5c:37:1d:15:c0:97:aa:0c:5f:21: 5f:35:a7:37:f5:73:ed:88:53:5a:07:f2:80:7a:14:87:8b:ca: 4e:46:c5:7c:7c:34:c9:89:9d:4b:10:9b:44:5c:70:d2:aa:c6: 19:97:f6:98:4c:f7:9b:95:f8:21:6f:ea:4e:5d:7a:72:80:ac: d4:82:5f:0d:c4:f1:9a:67:76:07:c7:5b:64:9f:7f:e3:c0:67: f4:ce:58:25:82:3e:13:09:43:37:72:f6:9a:8f:0d:c5:d1:62: 7b:11:cb:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NewP3BQpSLXR46CjUO0IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZWJiMTE2NmMwNjBkYjI1ZGY5NGYwMmJkMmY4ZjlkYTZj NGRkNGIwHhcNMjYwMTAxMjAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTJhZTEyMThhYmQ5MmI1NDIzMzY0M2ZjMDgwMDBlNGNmOTlmOGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9hPzNdgqsS2EzrW04tCtdyHHCIy0 5IisJlmdTIC/NntC7QBZYOc/E8MhP9UBQWguIraQUwF75ADotWYJEN2XhgXpDD/a Xo8MssDNwnJ6gOYOsvfXm9vV/KRsgS1iDyL7yUknbdKL0YG1TQYp4DcWwGZmX/SQ CtXLcDTAfshDdGnB3hPy9ool0UNpqoUA/QoWjLfOzOPXCNA/TraaJVv9WZZkWOee biW/TNJB8uEMI0HRmhnwl7JJjBCafADdaQyerZ2yuwb8oxSJpB1UuJZ+UFbsIk7O FgdqCEMB6p5VOQEWZJcx9cfNuRUBVsy8QCQPJg6twBRjHT2Qd36CgvUSLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOkq4SGKvZK1QjNkP8CAAOTPmfi3MB8GA1UdIwQY MBaAFNLrsRZsBg2yXflPAr0vj52mxN1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHV1eEZtd0dEYkpkLVU4Q3ZTLVBuYWJFM1VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mYmQzODItMTBkMC00Njg0LTg4MzYt ZWVkMWQwOTY3MDc4LzEvNlNyaElZcTlrclZDTTJRX3dJQUE1TS1aLUxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9mYmQzODItMTBkMC00Njg0LTg4MzYtZWVkMWQwOTY3MDc4 LzEvMHV1eEZtd0dEYkpkLVU4Q3ZTLVBuYWJFM1VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDH4e4MA0G CSqGSIb3DQEBCwUAA4IBAQAKmuOZbNu6AD8HQ7xDhRo1Kk7IR8OAS/5GsC1bjrZx phz6y5Eqe8njKLE+CfGqGJvdFBZ8SyLkwzaNnetYFs92XLLlUu971MPc8LrBwsRa BN/BbWvlpME5zwb/dHRZi/dU9oXGHiiJFsS4VXXh9xGmgG1KulfOPr1KxS7NN/fu 2sQGB0c/Nv/DvzwfYMEzc+Sx+iqTw8Unc1w3HRXAl6oMXyFfNac39XPtiFNaB/KA ehSHi8pORsV8fDTJiZ1LEJtEXHDSqsYZl/aYTPeblfghb+pOXXpygKzUgl8NxPGa Z3YHx1tkn3/jwGf0zlglgj4TCUM3cvaajw3F0WJ7EcsE -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:01 2026 by rpki-client