This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/6PnH-I0v0o7AGL6ifiGT8peyJ0k.roa File: 6PnH-I0v0o7AGL6ifiGT8peyJ0k.roa (raw, json) Hash identifier: tFSqOOC1Lg0SA1A3rDQWgBL5K2qm5q+QWpyCruQ1mJU= Subject key identifier: E8:F9:C7:F8:8D:2F:D2:8E:C0:18:BE:A2:7E:21:93:F2:97:B2:27:49 Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 019B79EBDF41C26EA4464D6732C4C782BAA9 Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/6PnH-I0v0o7AGL6ifiGT8peyJ0k.roa Signing time: Thu 01 Jan 2026 14:17:39 +0000 ROA not before: Thu 01 Jan 2026 14:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49135 IP address blocks: 80.123.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:df:41:c2:6e:a4:46:4d:67:32:c4:c7:82:ba:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Jan 1 14:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8f9c7f88d2fd28ec018bea27e2193f297b22749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:53:fa:d6:be:fb:2f:ed:43:24:85:66:68:39: b0:26:f5:fd:17:41:21:ed:1b:d6:d0:b8:77:91:42: e4:b0:95:9d:18:38:e4:e2:db:86:ee:ca:b7:14:b9: 6f:c0:d0:1b:48:6a:40:75:18:bd:28:c1:58:c8:12: 4d:e4:fb:f9:dd:32:b4:00:4c:ed:32:4a:b0:40:47: 7e:42:fb:a1:e7:af:fe:42:8b:0b:ac:42:71:6a:b9: 61:08:52:ce:5c:f4:b7:49:78:5e:b8:40:71:fb:34: 42:b8:30:fd:fa:c2:d2:55:14:f4:40:e3:f8:5b:56: d2:55:be:9a:3d:e9:bc:18:d1:fa:26:40:ab:7f:42: ec:36:91:9c:f3:11:6a:89:80:c8:75:9d:2f:db:52: 50:a9:b6:7b:e9:63:1e:9d:03:ff:08:ce:ca:b8:1b: da:69:f8:cd:4a:99:16:25:39:01:f9:4f:3f:18:8d: cf:72:a2:41:94:f0:7d:b5:ac:84:e1:7b:08:4f:4f: ba:d2:d5:7d:cc:25:51:87:2a:28:2a:ba:4b:eb:aa: 2a:8d:53:8a:5d:57:a8:39:4d:d1:d3:7a:33:5b:3e: e2:76:34:be:27:21:c8:34:b7:3e:bc:23:1e:12:00: 9b:78:e2:71:35:c2:6f:df:b7:4c:e9:1c:b2:bc:66: 93:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F9:C7:F8:8D:2F:D2:8E:C0:18:BE:A2:7E:21:93:F2:97:B2:27:49 X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/6PnH-I0v0o7AGL6ifiGT8peyJ0k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.123.153.0/24 Signature Algorithm: sha256WithRSAEncryption a0:75:e5:ff:ad:9d:33:81:47:08:b5:b1:5f:bb:59:2a:94:05: 44:b0:d4:43:ea:03:39:a5:52:1a:76:fd:5c:78:b2:30:35:66: 92:25:4e:3c:a1:85:a9:35:b8:bf:b3:ce:5d:e4:ca:b9:16:15: d2:05:4d:05:eb:0f:27:6e:f1:4a:d2:8d:b9:d2:03:c9:51:cf: 2b:ee:1f:ea:84:bf:65:1d:3e:a4:a8:6b:42:b6:d9:c9:c4:3c: 7e:a9:82:02:4a:91:dc:64:2f:8d:b6:a8:a9:bc:8b:c1:a2:51: a5:1e:51:81:7f:73:ff:af:b3:d4:6e:fd:93:af:65:24:4e:b3: 60:98:68:6f:1f:3e:d7:4a:54:dc:a3:5e:44:ee:18:c3:e5:6c: a1:92:00:a3:02:29:4c:35:ec:4d:78:a2:63:c4:7e:9e:b9:80: 5b:61:82:57:6c:e9:98:f0:3c:58:b1:0a:50:99:29:52:a4:77: fa:8d:f7:cf:6a:7d:88:90:27:c3:ba:a6:73:d6:46:8e:90:f9: ea:e1:11:d6:fe:44:53:cb:26:bd:fe:7e:bb:02:cf:e8:a3:85: 2f:21:27:b6:c6:f0:cd:cf:32:d9:bc:3c:d8:20:25:88:0f:99: 76:78:c9:9c:e6:3e:48:48:14:e7:3d:7e:ee:3e:47:6e:b8:91: 87:86:fa:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5699Bwm6kRk1nMsTHgrqpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjYwMTAxMTQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGY5YzdmODhkMmZkMjhlYzAxOGJlYTI3ZTIxOTNmMjk3YjIyNzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FP61r77L+1DJIVmaDmwJvX9F0Eh 7RvW0Lh3kULksJWdGDjk4tuG7sq3FLlvwNAbSGpAdRi9KMFYyBJN5Pv53TK0AEzt MkqwQEd+Qvuh56/+QosLrEJxarlhCFLOXPS3SXheuEBx+zRCuDD9+sLSVRT0QOP4 W1bSVb6aPem8GNH6JkCrf0LsNpGc8xFqiYDIdZ0v21JQqbZ76WMenQP/CM7KuBva afjNSpkWJTkB+U8/GI3PcqJBlPB9tayE4XsIT0+60tV9zCVRhyooKrpL66oqjVOK XVeoOU3R03ozWz7idjS+JyHINLc+vCMeEgCbeOJxNcJv37dM6RyyvGaTJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOj5x/iNL9KOwBi+on4hk/KXsidJMB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvNlBuSC1JMHYwbzdBR0w2aWZpR1Q4cGV5SjBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUHuZMA0G CSqGSIb3DQEBCwUAA4IBAQCgdeX/rZ0zgUcItbFfu1kqlAVEsNRD6gM5pVIadv1c eLIwNWaSJU48oYWpNbi/s85d5Mq5FhXSBU0F6w8nbvFK0o250gPJUc8r7h/qhL9l HT6kqGtCttnJxDx+qYICSpHcZC+NtqipvIvBolGlHlGBf3P/r7PUbv2Tr2UkTrNg mGhvHz7XSlTco15E7hjD5WyhkgCjAilMNexNeKJjxH6euYBbYYJXbOmY8DxYsQpQ mSlSpHf6jffPan2IkCfDuqZz1kaOkPnq4RHW/kRTyya9/n67As/oo4UvISe2xvDN zzLZvDzYICWID5l2eMmc5j5ISBTnPX7uPkduuJGHhvoC -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:34 2026 by rpki-client