This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/dieif6B3-n1CtnjNEaCTJNKrqPg.roa File: dieif6B3-n1CtnjNEaCTJNKrqPg.roa (raw, json) Hash identifier: 7u7vg/43NiCU3DUEb9PVM9cUrhpXjUXVZVYXO6pzSzs= Subject key identifier: 76:27:A2:7F:A0:77:FA:7D:42:B6:78:CD:11:A0:93:24:D2:AB:A8:F8 Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 019B9CF498FBF7C4F88C2AE0447ED6B473CC Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/dieif6B3-n1CtnjNEaCTJNKrqPg.roa Signing time: Thu 08 Jan 2026 09:33:54 +0000 ROA not before: Thu 08 Jan 2026 09:33:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 194.59.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9c:f4:98:fb:f7:c4:f8:8c:2a:e0:44:7e:d6:b4:73:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Jan 8 09:33:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7627a27fa077fa7d42b678cd11a09324d2aba8f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d4:8f:3d:77:44:53:76:dd:82:30:a8:73:41: 54:08:e2:c3:bc:3b:6e:b0:b0:1e:54:75:89:f9:91: 66:2a:af:34:1a:4c:c7:f4:90:5a:d3:98:18:8d:7a: 05:46:66:2a:2e:a4:04:c4:31:aa:a7:4a:f6:ba:a1: dc:e6:d4:dd:2e:5b:4e:5f:86:34:a9:93:42:80:f5: 5d:d2:d5:47:e2:ea:c9:14:e9:d8:58:0b:81:67:76: 18:ca:21:0f:6b:76:0b:ad:1b:69:1c:19:21:ed:a5: 58:f2:89:27:c2:05:34:59:d6:3d:e0:38:58:98:05: bb:c9:04:e0:c3:25:66:18:fc:d5:96:8e:d4:19:9e: 89:2d:0b:2c:54:9f:8e:32:db:93:a7:09:8e:c5:c4: 72:64:75:3f:44:26:77:a7:9e:e3:80:31:3d:8b:53: 1a:62:d7:76:0c:27:07:7b:64:17:72:56:63:44:72: 07:c8:a1:25:b5:7e:14:b3:df:27:88:e4:8d:e1:94: e8:de:39:0c:41:e6:fb:dc:37:ed:43:3a:af:52:b4: c2:0d:e7:57:b8:a1:fd:f2:cf:99:70:dd:15:75:34: 0d:cc:d8:df:54:33:26:c4:78:7c:31:ca:42:a4:99: 00:6d:78:55:3c:8a:d7:5d:36:80:59:fc:b6:1b:33: b2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:27:A2:7F:A0:77:FA:7D:42:B6:78:CD:11:A0:93:24:D2:AB:A8:F8 X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/dieif6B3-n1CtnjNEaCTJNKrqPg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.59.6.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:94:ee:da:96:90:22:df:38:6a:69:d1:15:b9:8b:8b:9b:c7: 9f:69:a0:d7:e7:c5:fd:4e:09:00:e2:5d:33:19:0b:f0:fe:a7: 05:6e:a3:a6:bf:bb:1b:14:f9:ab:be:28:0a:1f:97:ac:21:7a: 27:18:c6:4b:ec:ec:e3:3e:9d:53:d9:d5:a1:0a:80:46:80:1a: 79:17:ce:5f:d8:e1:b0:de:7c:b2:0d:75:aa:bc:d4:df:2c:4e: ec:b1:50:d8:03:91:b1:a8:4c:f0:20:43:8a:0e:fd:ea:d5:15: 2e:5b:d2:4f:66:a7:ae:ff:e2:7f:45:3a:a5:8c:02:b5:3e:9b: 2f:2b:2c:7d:0d:da:72:d9:55:d8:5c:18:d0:27:6c:f3:98:4d: cf:21:1e:4a:0d:11:63:bd:20:38:bf:e2:1a:ca:cb:5e:fa:2a: ae:c2:90:28:93:6e:02:8c:7c:c7:bd:cb:1d:89:fc:b3:32:c9: 5d:20:c1:c5:9c:b6:52:22:f2:7f:de:4f:48:43:9f:b9:53:15: 50:5d:bd:2d:86:a4:04:57:b3:94:d5:f3:21:3f:56:da:83:74: 04:0a:e4:37:e9:aa:12:e2:30:68:49:57:8c:32:a8:39:47:fa: 21:5a:f1:d3:6a:79:3c:02:e4:ec:99:02:95:e4:69:a6:95:f7: f5:c2:cf:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuc9Jj798T4jCrgRH7WtHPMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjYwMTA4MDkzMzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjI3YTI3ZmEwNzdmYTdkNDJiNjc4Y2QxMWEwOTMyNGQyYWJhOGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNSPPXdEU3bdgjCoc0FUCOLDvDtu sLAeVHWJ+ZFmKq80GkzH9JBa05gYjXoFRmYqLqQExDGqp0r2uqHc5tTdLltOX4Y0 qZNCgPVd0tVH4urJFOnYWAuBZ3YYyiEPa3YLrRtpHBkh7aVY8oknwgU0WdY94DhY mAW7yQTgwyVmGPzVlo7UGZ6JLQssVJ+OMtuTpwmOxcRyZHU/RCZ3p57jgDE9i1Ma Ytd2DCcHe2QXclZjRHIHyKEltX4Us98niOSN4ZTo3jkMQeb73DftQzqvUrTCDedX uKH98s+ZcN0VdTQNzNjfVDMmxHh8McpCpJkAbXhVPIrXXTaAWfy2GzOy3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHYnon+gd/p9QrZ4zRGgkyTSq6j4MB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvZGllaWY2QjMtbjFDdG5qTkVhQ1RKTktycVBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjsGMA0G CSqGSIb3DQEBCwUAA4IBAQCPlO7alpAi3zhqadEVuYuLm8efaaDX58X9TgkA4l0z GQvw/qcFbqOmv7sbFPmrvigKH5esIXonGMZL7OzjPp1T2dWhCoBGgBp5F85f2OGw 3nyyDXWqvNTfLE7ssVDYA5GxqEzwIEOKDv3q1RUuW9JPZqeu/+J/RTqljAK1Ppsv Kyx9Ddpy2VXYXBjQJ2zzmE3PIR5KDRFjvSA4v+Iayste+iquwpAok24CjHzHvcsd ifyzMsldIMHFnLZSIvJ/3k9IQ5+5UxVQXb0thqQEV7OU1fMhP1bag3QECuQ36aoS 4jBoSVeMMqg5R/ohWvHTank8AuTsmQKV5Gmmlff1ws+V -----END CERTIFICATE-----Generated at Wed Jan 21 18:23:04 2026 by rpki-client