This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/6q8Cn_ihD-9lGbIg6cUdTCqh-Mk.roa File: 6q8Cn_ihD-9lGbIg6cUdTCqh-Mk.roa (raw, json) Hash identifier: M11btvF49Fo+UxYGyhJ5kL+ajzcw91sm72buQLeP3aw= Subject key identifier: EA:AF:02:9F:F8:A1:0F:EF:65:19:B2:20:E9:C5:1D:4C:2A:A1:F8:C9 Certificate issuer: /CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770 Certificate serial: 019B7F82FA68933C49FBDEFCD7692CA0DD53 Authority key identifier: 9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/6q8Cn_ihD-9lGbIg6cUdTCqh-Mk.roa Signing time: Fri 02 Jan 2026 16:20:48 +0000 ROA not before: Fri 02 Jan 2026 16:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9044 IP address blocks: 193.27.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:fa:68:93:3c:49:fb:de:fc:d7:69:2c:a0:dd:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770 Validity Not Before: Jan 2 16:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eaaf029ff8a10fef6519b220e9c51d4c2aa1f8c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9d:c4:54:d9:6c:b2:5b:7f:8f:7c:ab:c3:60: 78:e7:6b:3a:d5:b3:ec:9a:ab:1f:e8:80:f7:9a:93: 2d:95:a6:e2:73:32:05:14:98:8d:37:4b:fb:06:6e: 9d:a9:38:6a:f9:d4:2e:b7:f9:52:ec:19:58:0f:01: c6:3c:4b:3f:33:11:ca:77:50:6d:48:c4:0a:80:9e: 82:79:71:9c:72:08:fc:fa:ae:7b:5c:e2:5c:c0:ef: f4:62:d1:45:d7:41:40:f9:39:2e:31:dc:b6:76:dd: 5f:c7:bc:77:da:c0:e3:9b:01:29:ff:49:b6:b6:dd: 42:17:f0:0e:37:ab:3f:0b:e9:60:a8:14:3d:f2:ec: 96:4f:44:ac:2a:74:77:6e:b9:c6:47:f5:8e:da:f1: 33:45:5e:44:f5:e7:74:96:1e:5c:36:73:02:9b:b3: 9a:ad:77:76:e3:0e:e4:c8:09:31:2b:7a:48:b9:6d: 23:b6:ef:d2:4c:c1:88:f6:2c:0c:4e:39:6c:cb:c2: 8b:e8:3e:19:f8:17:a9:d1:f0:b5:61:18:bd:6a:55: 91:22:fd:16:d4:0a:46:77:3b:73:4e:76:4d:f8:8f: e0:b6:83:ed:f4:fd:dd:26:d2:ae:bd:90:b1:3f:01: f3:2f:e3:e2:6e:87:4d:6f:b1:8a:97:b2:63:1f:7e: 3f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AF:02:9F:F8:A1:0F:EF:65:19:B2:20:E9:C5:1D:4C:2A:A1:F8:C9 X509v3 Authority Key Identifier: keyid:9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/6q8Cn_ihD-9lGbIg6cUdTCqh-Mk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.27.43.0/24 Signature Algorithm: sha256WithRSAEncryption aa:66:21:77:03:33:8a:6d:23:18:5b:9f:6c:7a:66:1b:41:dd: db:b5:1a:0a:f3:77:bb:8d:9f:a4:e5:51:fc:6a:bd:a5:d4:87: fc:8b:3e:82:e9:4d:25:a0:93:f2:c5:83:04:e7:5f:c7:a6:7b: 22:1c:98:2a:12:83:78:01:1b:9e:4b:cf:5a:86:44:31:64:af: 6f:12:35:28:3b:ef:d9:aa:24:f2:59:ef:51:fc:c9:9f:98:64: 9d:9a:db:86:5f:fa:05:6d:7c:d3:db:4e:d9:55:a0:03:ea:e9: e3:32:0e:3a:9e:f5:18:b7:63:0d:24:4f:73:11:3b:ab:ee:17: f7:ce:86:79:e8:56:5c:a4:84:3d:53:13:4e:3b:4b:4f:84:d9: e3:bf:6c:b8:ca:79:86:09:c6:ff:6d:e5:ab:cf:de:26:53:4b: 31:3c:78:0b:48:e4:6f:92:fa:05:d6:a4:4e:d7:98:6f:b3:6c: c1:73:a0:9d:44:07:e8:bb:fe:a2:c9:57:31:05:cd:f8:75:b6: f1:45:27:9c:eb:d8:c1:84:5d:f0:32:2d:84:e7:ea:d5:f5:2e: c6:0d:d7:c4:01:d4:69:12:6e:23:3e:3f:7d:0b:1e:63:19:63: 4f:e9:5c:0e:99:24:ba:41:62:1b:ef:55:0f:b8:ba:4b:8a:3c: 01:df:9e:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gvpokzxJ+97812ksoN1TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNzQwY2QzYjY2YjYwZTE4YjNkOTZmZmIzZjQyMThkNzli NWI3NzAwHhcNMjYwMTAyMTYyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWFmMDI5ZmY4YTEwZmVmNjUxOWIyMjBlOWM1MWQ0YzJhYTFmOGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Z3EVNlsslt/j3yrw2B452s61bPs mqsf6ID3mpMtlabiczIFFJiNN0v7Bm6dqThq+dQut/lS7BlYDwHGPEs/MxHKd1Bt SMQKgJ6CeXGccgj8+q57XOJcwO/0YtFF10FA+TkuMdy2dt1fx7x32sDjmwEp/0m2 tt1CF/AON6s/C+lgqBQ98uyWT0SsKnR3brnGR/WO2vEzRV5E9ed0lh5cNnMCm7Oa rXd24w7kyAkxK3pIuW0jtu/STMGI9iwMTjlsy8KL6D4Z+Bep0fC1YRi9alWRIv0W 1ApGdztzTnZN+I/gtoPt9P3dJtKuvZCxPwHzL+PibodNb7GKl7JjH34/mwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOqvAp/4oQ/vZRmyIOnFHUwqofjJMB8GA1UdIwQY MBaAFJ50DNO2a2Dhiz2W/7P0IY15tbdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xZGU2MTMtNjFiOS00YjA3LWFkNDct NTBlNGIwNTA0ZjQ4LzEvNnE4Q25faWhELTlsR2JJZzZjVWRUQ3FoLU1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8xZGU2MTMtNjFiOS00YjA3LWFkNDctNTBlNGIwNTA0ZjQ4 LzEvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRsrMA0G CSqGSIb3DQEBCwUAA4IBAQCqZiF3AzOKbSMYW59semYbQd3btRoK83e7jZ+k5VH8 ar2l1If8iz6C6U0loJPyxYME51/HpnsiHJgqEoN4ARueS89ahkQxZK9vEjUoO+/Z qiTyWe9R/MmfmGSdmtuGX/oFbXzT207ZVaAD6unjMg46nvUYt2MNJE9zETur7hf3 zoZ56FZcpIQ9UxNOO0tPhNnjv2y4ynmGCcb/beWrz94mU0sxPHgLSORvkvoF1qRO 15hvs2zBc6CdRAfou/6iyVcxBc34dbbxRSec69jBhF3wMi2E5+rV9S7GDdfEAdRp Em4jPj99Cx5jGWNP6VwOmSS6QWIb71UPuLpLijwB356J -----END CERTIFICATE-----Generated at Mon Jan 26 19:16:26 2026 by rpki-client