This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/v6un0SLKHoyUdlbWhmt_wnpdUDI.roa File: v6un0SLKHoyUdlbWhmt_wnpdUDI.roa (raw, json) Hash identifier: QrFjt3OgZToO6oMj5dfqwQ+OO7th5JfOPvzKriOtW0U= Subject key identifier: BF:AB:A7:D1:22:CA:1E:8C:94:76:56:D6:86:6B:7F:C2:7A:5D:50:32 Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019B77C7503348B95F62F0D9105E1F2BABFD Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/v6un0SLKHoyUdlbWhmt_wnpdUDI.roa Signing time: Thu 01 Jan 2026 04:18:29 +0000 ROA not before: Thu 01 Jan 2026 04:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214823 IP address blocks: 84.247.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:50:33:48:b9:5f:62:f0:d9:10:5e:1f:2b:ab:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Jan 1 04:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfaba7d122ca1e8c947656d6866b7fc27a5d5032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:58:70:89:26:e9:4d:36:2d:33:ec:0c:93:15: fa:42:0e:27:a6:c1:ac:03:98:e3:aa:90:43:6c:a4: e1:c0:e5:b5:d0:24:63:79:11:95:d6:16:5e:14:65: a6:c3:ee:c3:c2:fc:23:47:8e:61:89:76:2a:f2:cb: d3:e7:7d:0b:fe:00:c1:73:78:7d:30:84:33:0c:7d: 69:b1:63:2c:8b:cc:89:95:3f:3d:cf:8a:f0:0d:46: f4:4a:6a:6f:b4:6a:b7:27:5c:e1:53:b2:1f:77:13: 48:7b:52:08:8a:7b:01:d5:93:9f:3f:8b:fb:73:bd: 3b:70:74:a6:01:c8:41:fb:78:8b:69:fe:7e:dc:ab: 7a:e9:ec:30:7c:9e:f5:33:51:22:59:75:c4:b6:4a: d4:50:37:98:20:16:d1:ff:22:41:8a:df:e2:1f:ed: d1:58:d0:d8:e2:ec:84:33:38:52:fb:c8:de:c0:c4: 57:47:96:77:c2:73:af:16:fa:82:a9:58:bf:f0:a2: 86:d4:95:db:fa:59:0d:40:d0:a4:41:6f:ec:b9:4f: ff:61:e7:e6:bc:20:2b:35:e6:90:66:67:8f:46:9b: 31:04:c8:7c:34:87:72:8c:4a:ea:70:12:80:cb:10: 8e:2e:15:58:88:8c:a8:ea:e8:d2:36:f8:af:f9:bb: 92:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:AB:A7:D1:22:CA:1E:8C:94:76:56:D6:86:6B:7F:C2:7A:5D:50:32 X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/v6un0SLKHoyUdlbWhmt_wnpdUDI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.247.20.0/24 Signature Algorithm: sha256WithRSAEncryption 79:32:c7:62:b0:96:46:b4:45:36:86:0f:b5:dc:ff:5a:18:f3: 4b:9f:89:f2:e8:8c:94:ce:19:e6:6a:85:c0:3c:95:2c:5a:87: 22:65:40:72:63:8a:d3:65:62:1a:96:57:95:f7:0c:86:9c:b3: 65:5f:74:b3:27:04:4c:a5:58:77:ea:30:fa:1b:93:ec:ae:db: 37:6a:91:56:36:ab:1a:85:fb:20:72:0a:27:9c:40:e7:c5:dd: f1:43:0b:45:2c:7f:33:14:79:f8:e9:03:61:43:28:b1:44:9e: 9e:ad:89:19:74:a4:e6:19:9e:14:c3:8b:32:51:39:3e:be:54: 84:c6:62:d9:e5:26:ed:75:03:c9:3f:59:64:2f:19:46:de:0a: 06:7d:35:1b:08:1d:1b:f5:54:66:a5:55:05:a3:ce:6e:bd:51: 2f:03:4b:05:25:42:d1:e4:ac:ff:b4:91:42:83:75:00:ee:af: 39:b1:6d:79:5a:10:a7:09:12:5b:a4:10:54:76:96:1d:0a:54: 64:81:8b:22:fc:20:ae:95:aa:c6:a8:2d:ef:8d:be:15:73:a4: d6:68:5a:56:c4:46:9e:72:bc:7a:a2:73:1a:29:be:76:af:28: 8a:2d:b1:aa:a5:ea:00:d1:c3:ee:ca:01:c3:f0:8e:7a:77:1d: 45:31:b5:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x1AzSLlfYvDZEF4fK6v9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMTAxMDQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmFiYTdkMTIyY2ExZThjOTQ3NjU2ZDY4NjZiN2ZjMjdhNWQ1MDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolhwiSbpTTYtM+wMkxX6Qg4npsGs A5jjqpBDbKThwOW10CRjeRGV1hZeFGWmw+7DwvwjR45hiXYq8svT530L/gDBc3h9 MIQzDH1psWMsi8yJlT89z4rwDUb0SmpvtGq3J1zhU7IfdxNIe1IIinsB1ZOfP4v7 c707cHSmAchB+3iLaf5+3Kt66ewwfJ71M1EiWXXEtkrUUDeYIBbR/yJBit/iH+3R WNDY4uyEMzhS+8jewMRXR5Z3wnOvFvqCqVi/8KKG1JXb+lkNQNCkQW/suU//Yefm vCArNeaQZmePRpsxBMh8NIdyjErqcBKAyxCOLhVYiIyo6ujSNviv+buSHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL+rp9Eiyh6MlHZW1oZrf8J6XVAyMB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvdjZ1bjBTTEtIb3lVZGxiV2htdF93bnBkVURJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVPcUMA0G CSqGSIb3DQEBCwUAA4IBAQB5MsdisJZGtEU2hg+13P9aGPNLn4ny6IyUzhnmaoXA PJUsWociZUByY4rTZWIalleV9wyGnLNlX3SzJwRMpVh36jD6G5Psrts3apFWNqsa hfsgcgonnEDnxd3xQwtFLH8zFHn46QNhQyixRJ6erYkZdKTmGZ4Uw4syUTk+vlSE xmLZ5SbtdQPJP1lkLxlG3goGfTUbCB0b9VRmpVUFo85uvVEvA0sFJULR5Kz/tJFC g3UA7q85sW15WhCnCRJbpBBUdpYdClRkgYsi/CCularGqC3vjb4Vc6TWaFpWxEae crx6onMaKb52ryiKLbGqpeoA0cPuygHD8I56dx1FMbV0 -----END CERTIFICATE-----Generated at Thu Jan 1 20:23:16 2026 by rpki-client