This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/6HdhKoBXAtdyvCLBXYceUEgkG_w.roa File: 6HdhKoBXAtdyvCLBXYceUEgkG_w.roa (raw, json) Hash identifier: e5lfNI/c3zfYBAg85/aYkCAmj1r5btvuHTM0GNLkW7I= Subject key identifier: E8:77:61:2A:80:57:02:D7:72:BC:22:C1:5D:87:1E:50:48:24:1B:FC Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef Certificate serial: 019B76EADDDA2A04577D2D0A195A13FF0621 Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/6HdhKoBXAtdyvCLBXYceUEgkG_w.roa Signing time: Thu 01 Jan 2026 00:17:42 +0000 ROA not before: Thu 01 Jan 2026 00:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208103 IP address blocks: 176.119.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:dd:da:2a:04:57:7d:2d:0a:19:5a:13:ff:06:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef Validity Not Before: Jan 1 00:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e877612a805702d772bc22c15d871e5048241bfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:14:47:b6:fb:39:e9:3a:9a:41:13:d4:20:ff: a6:c0:fe:4d:39:de:7e:e8:b8:3a:63:f4:0a:6f:a6: d8:16:5a:44:89:b7:27:92:55:22:46:b1:27:04:b4: b4:f4:2d:32:58:d9:33:72:c8:70:9a:d0:34:d8:e9: 43:86:d1:d6:5a:57:fb:ca:09:13:23:83:17:4c:96: 11:05:42:2a:d4:03:e9:9b:1d:73:16:85:2e:7c:b8: 1a:bb:fc:ab:b8:9a:2f:24:5b:f2:9a:db:29:59:c2: de:5d:f9:96:c7:fb:99:47:ba:03:20:e1:0c:d7:99: 45:b8:c8:e1:45:b4:63:57:0f:db:9c:a1:01:c5:d3: cf:5c:b1:de:d1:fc:cb:be:bc:a6:bc:cb:41:2b:0f: 48:e8:23:94:85:7f:7c:1e:75:43:b3:ed:42:78:0a: 76:83:25:b7:d5:ae:3a:61:84:a8:e8:e9:4c:5a:7d: 11:04:43:4d:2a:69:4c:f7:82:c2:12:b6:02:8a:17: e9:80:42:bc:ea:2e:24:c5:b1:79:4a:b1:36:51:be: e0:b3:27:cf:10:2a:79:a8:df:5d:3f:e6:a5:4a:3b: bf:9b:f3:99:72:49:8f:e9:80:fe:99:28:76:0a:53: 93:6a:72:a4:1c:e0:35:77:1b:7d:e2:af:f3:6f:e1: aa:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:77:61:2A:80:57:02:D7:72:BC:22:C1:5D:87:1E:50:48:24:1B:FC X509v3 Authority Key Identifier: keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/6HdhKoBXAtdyvCLBXYceUEgkG_w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.119.206.0/24 Signature Algorithm: sha256WithRSAEncryption 79:56:a0:68:ff:d0:98:2e:60:39:ce:d6:3d:50:7d:10:b1:4e: 6e:c4:0c:fd:61:cb:51:71:28:d6:c4:b9:0e:a5:dc:5e:c8:a4: e1:6c:41:67:a6:3b:3b:f5:b9:61:43:c2:c5:dc:2d:d8:58:3c: 8a:f0:e1:24:f6:14:e2:7b:c8:9a:1e:e3:c9:9c:33:25:7f:44: ce:54:86:02:07:5b:1d:52:6c:bb:d0:71:e4:8a:74:53:36:66: d0:36:7f:23:43:e3:32:04:a5:6b:5e:7d:2e:8c:79:31:0a:98: 1b:33:4a:74:ec:60:d9:6f:0d:86:40:00:3e:cb:40:e4:82:b1: 7f:e9:a0:a4:d4:e1:fc:45:dd:dc:a5:f3:24:13:fe:c4:f5:fb: db:24:3c:74:24:f2:77:0e:8a:0f:d2:97:d5:7d:c9:f2:52:47: 1d:e3:75:5a:91:2b:ec:76:bf:e6:e9:32:d1:c0:9d:d7:70:48: d9:e4:ec:df:6b:8e:f2:b1:53:d0:26:76:56:e5:51:24:0d:98: 12:53:87:9a:d3:bd:98:13:a4:cd:94:ba:8b:0d:f7:eb:66:9f: 30:d8:32:34:05:7a:1f:bb:d0:4d:be:b3:57:ba:2a:e5:cc:fc: 96:e3:c5:29:ac:6c:d8:e6:d9:e2:c9:da:0f:3d:cb:f5:dd:96: c7:f7:a7:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26t3aKgRXfS0KGVoT/wYhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDNhNTE1NjgzZTlkZGI4NWQzOGU3YWIzOWMzM2FlZGFj YWY3ZWYwHhcNMjYwMTAxMDAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODc3NjEyYTgwNTcwMmQ3NzJiYzIyYzE1ZDg3MWU1MDQ4MjQxYmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRRHtvs56TqaQRPUIP+mwP5NOd5+ 6Lg6Y/QKb6bYFlpEibcnklUiRrEnBLS09C0yWNkzcshwmtA02OlDhtHWWlf7ygkT I4MXTJYRBUIq1APpmx1zFoUufLgau/yruJovJFvymtspWcLeXfmWx/uZR7oDIOEM 15lFuMjhRbRjVw/bnKEBxdPPXLHe0fzLvrymvMtBKw9I6COUhX98HnVDs+1CeAp2 gyW31a46YYSo6OlMWn0RBENNKmlM94LCErYCihfpgEK86i4kxbF5SrE2Ub7gsyfP ECp5qN9dP+alSju/m/OZckmP6YD+mSh2ClOTanKkHOA1dxt94q/zb+GqDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOh3YSqAVwLXcrwiwV2HHlBIJBv8MB8GA1UdIwQY MBaAFAjTpRVoPp3bhdOOerOcM67ayvfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82N2NmYTAtYTMyYi00MDYzLTkzNzAt MGI1YzVkOTQ0MjZhLzEvNkhkaEtvQlhBdGR5dkNMQlhZY2VVRWdrR193LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82N2NmYTAtYTMyYi00MDYzLTkzNzAtMGI1YzVkOTQ0MjZh LzEvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHfOMA0G CSqGSIb3DQEBCwUAA4IBAQB5VqBo/9CYLmA5ztY9UH0QsU5uxAz9YctRcSjWxLkO pdxeyKThbEFnpjs79blhQ8LF3C3YWDyK8OEk9hTie8iaHuPJnDMlf0TOVIYCB1sd Umy70HHkinRTNmbQNn8jQ+MyBKVrXn0ujHkxCpgbM0p07GDZbw2GQAA+y0DkgrF/ 6aCk1OH8Rd3cpfMkE/7E9fvbJDx0JPJ3DooP0pfVfcnyUkcd43VakSvsdr/m6TLR wJ3XcEjZ5Ozfa47ysVPQJnZW5VEkDZgSU4ea072YE6TNlLqLDffrZp8w2DI0BXof u9BNvrNXuirlzPyW48UprGzY5tniydoPPcv13ZbH96eV -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:42 2026 by rpki-client