This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/f6Gl5ia878MGtM32MXnrZU8aNMI.roa File: f6Gl5ia878MGtM32MXnrZU8aNMI.roa (raw, json) Hash identifier: DY0u0e2tgwdLOC3jP4WK/B8b0MSVRVEFdP0Swwb6Kq0= Subject key identifier: 7F:A1:A5:E6:26:BC:EF:C3:06:B4:CD:F6:31:79:EB:65:4F:1A:34:C2 Certificate issuer: /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c Certificate serial: 019B7910333469468848533D155F4198B8B6 Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/f6Gl5ia878MGtM32MXnrZU8aNMI.roa Signing time: Thu 01 Jan 2026 10:17:43 +0000 ROA not before: Thu 01 Jan 2026 10:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61084 IP address blocks: 84.54.13.0/24 maxlen: 24 176.98.41.0/24 maxlen: 24 193.31.116.0/24 maxlen: 24 213.226.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:33:34:69:46:88:48:53:3d:15:5f:41:98:b8:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c Validity Not Before: Jan 1 10:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fa1a5e626bcefc306b4cdf63179eb654f1a34c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0a:24:40:a1:56:eb:04:27:2f:ef:8c:d1:64: 30:62:df:18:26:fe:7c:bd:bc:ca:bb:36:b1:d1:5b: 29:e3:16:5c:e6:45:48:39:cc:25:63:69:e2:02:d3: 20:aa:43:81:6a:75:4c:cd:29:ff:9c:3c:98:fa:c5: 29:36:d6:0b:ba:8b:02:f2:1d:7b:9c:6c:5a:13:5f: 0f:0b:6a:8e:9c:ac:22:ce:17:58:61:0c:3b:33:9b: ca:39:fe:ba:fc:eb:76:6c:77:28:9c:cd:27:8f:73: 06:06:36:b6:ff:6a:fb:d4:dc:7f:2b:fb:46:d5:9f: 82:cf:58:2e:ee:51:b0:24:fb:c9:30:ec:11:61:32: f6:f4:c9:6b:17:7d:fa:aa:ac:76:60:f5:3f:7e:14: 17:69:a2:f3:e3:0e:9c:5b:1b:5b:16:fb:14:eb:ec: 59:d3:04:a5:36:f5:07:6f:90:fd:b3:68:65:d1:8a: d1:2e:64:a1:80:36:a2:9b:8a:22:1a:17:a2:8e:d0: 55:ed:f9:52:01:09:66:83:20:66:65:94:66:4d:db: eb:80:27:99:d7:29:7c:d5:45:db:b4:01:6d:bc:9d: 27:42:2f:f9:c3:c9:ee:2d:4c:33:af:de:42:30:2f: 58:17:88:d0:5c:bd:af:5c:51:15:22:72:96:e2:c8: b5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A1:A5:E6:26:BC:EF:C3:06:B4:CD:F6:31:79:EB:65:4F:1A:34:C2 X509v3 Authority Key Identifier: keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/f6Gl5ia878MGtM32MXnrZU8aNMI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.54.13.0/24 176.98.41.0/24 193.31.116.0/24 213.226.119.0/24 Signature Algorithm: sha256WithRSAEncryption 75:eb:d2:a4:0b:c8:a6:f0:86:a8:a9:4f:44:a6:d8:7b:58:ce: c3:82:9a:a5:29:fa:7a:23:84:d3:7d:49:b6:54:88:ea:07:93: 44:06:93:5e:72:b4:20:98:05:7c:01:97:e3:d4:7c:10:cd:14: be:a8:ce:96:00:cc:ad:ed:f5:79:88:be:bc:58:7b:71:c2:dd: 45:c0:9f:14:a8:a6:42:14:eb:6e:48:f7:65:21:ab:25:92:a6: e7:7d:ed:ee:a5:e9:22:6e:71:67:95:ec:b7:7d:b4:6b:01:4f: df:ed:1e:69:6d:aa:43:4f:57:4d:48:d9:14:ec:35:9d:cd:e7: 30:5c:39:c4:9d:68:61:a3:3f:d9:fe:c8:8b:81:cf:16:94:ee: 0d:d0:c3:b9:7d:c3:71:77:c7:d3:6e:fe:31:51:b2:9e:c7:44: 99:a0:f3:50:92:73:d5:28:e7:eb:f7:1b:b4:cd:20:10:ce:1a: 1d:0b:f6:e6:10:ff:1e:af:ad:c4:6b:15:9f:06:d5:f3:1f:90: 2d:c0:fc:21:ca:16:00:af:11:b2:bf:ae:e7:ef:11:ea:77:d5: 27:50:62:3d:0f:fe:ce:21:35:49:96:da:dd:7d:c1:4a:89:7c: 11:b6:58:fd:12:e7:7c:80:9e:a9:7b:09:68:aa:e0:3f:4c:a4: 3a:b1:6e:c0 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5EDM0aUaISFM9FV9BmLi2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYTI3MzliMjBjMjU5YzVkMWIzODhkMTQ1M2Y2ZjE3OTlm MjhmNmMwHhcNMjYwMTAxMTAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmExYTVlNjI2YmNlZmMzMDZiNGNkZjYzMTc5ZWI2NTRmMWEzNGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogokQKFW6wQnL++M0WQwYt8YJv58 vbzKuzax0Vsp4xZc5kVIOcwlY2niAtMgqkOBanVMzSn/nDyY+sUpNtYLuosC8h17 nGxaE18PC2qOnKwizhdYYQw7M5vKOf66/Ot2bHconM0nj3MGBja2/2r71Nx/K/tG 1Z+Cz1gu7lGwJPvJMOwRYTL29MlrF336qqx2YPU/fhQXaaLz4w6cWxtbFvsU6+xZ 0wSlNvUHb5D9s2hl0YrRLmShgDaim4oiGheijtBV7flSAQlmgyBmZZRmTdvrgCeZ 1yl81UXbtAFtvJ0nQi/5w8nuLUwzr95CMC9YF4jQXL2vXFEVInKW4si10wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFH+hpeYmvO/DBrTN9jF562VPGjTCMB8GA1UdIwQY MBaAFHGic5sgwlnF0bOI0UU/bxeZ8o9sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80OTlkZjMtYmQ0Zi00ZTQwLThmODIt YTM4NTU1MDVlYTJlLzEvZjZHbDVpYTg3OE1HdE0zMk1YbnJaVThhTk1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC80OTlkZjMtYmQ0Zi00ZTQwLThmODItYTM4NTU1MDVlYTJl LzEvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVDYNAwQA sGIpAwQAwR90AwQA1eJ3MA0GCSqGSIb3DQEBCwUAA4IBAQB169KkC8im8IaoqU9E pth7WM7DgpqlKfp6I4TTfUm2VIjqB5NEBpNecrQgmAV8AZfj1HwQzRS+qM6WAMyt 7fV5iL68WHtxwt1FwJ8UqKZCFOtuSPdlIaslkqbnfe3upekibnFnley3fbRrAU/f 7R5pbapDT1dNSNkU7DWdzecwXDnEnWhhoz/Z/siLgc8WlO4N0MO5fcNxd8fTbv4x UbKex0SZoPNQknPVKOfr9xu0zSAQzhodC/bmEP8er63EaxWfBtXzH5AtwPwhyhYA rxGyv67n7xHqd9UnUGI9D/7OITVJltrdfcFKiXwRtlj9Eud8gJ6pewloquA/TKQ6 sW7A -----END CERTIFICATE-----Generated at Thu Feb 5 11:40:33 2026 by rpki-client