This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/_m6GvXmq9vQvFl4bwzQRB6sflhI.roa File: _m6GvXmq9vQvFl4bwzQRB6sflhI.roa (raw, json) Hash identifier: AZjOMr8qO9VAWfHSiy/5FT2sWE2JvhWAQ/fGuS6o/8g= Subject key identifier: FE:6E:86:BD:79:AA:F6:F4:2F:16:5E:1B:C3:34:11:07:AB:1F:96:12 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D47C139887995ADF99CA4429181F9 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/_m6GvXmq9vQvFl4bwzQRB6sflhI.roa Signing time: Fri 02 Jan 2026 06:20:23 +0000 ROA not before: Fri 02 Jan 2026 06:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62096 IP address blocks: 192.159.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:47:c1:39:88:79:95:ad:f9:9c:a4:42:91:81:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe6e86bd79aaf6f42f165e1bc3341107ab1f9612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ec:41:66:49:69:1a:c2:62:5a:5f:a8:6d:e0: 10:01:f9:85:8b:ab:99:34:f8:d0:c1:bd:f6:df:a6: 79:2e:f2:29:99:4b:2f:d9:7f:40:95:9a:f0:84:07: 20:aa:16:1f:d9:4f:cd:79:ef:fd:f4:bb:ba:d9:e0: 90:d0:22:37:0b:ca:9e:05:8a:f1:9d:06:e5:0f:2b: fd:c3:6c:0c:91:d7:e7:78:27:a9:e7:67:22:7a:eb: 17:29:c7:dc:62:8b:9f:28:18:8a:1e:c0:49:c6:50: 7c:97:2f:15:67:d3:e9:1a:20:bb:aa:57:f8:ba:38: c2:18:55:26:e7:bc:30:38:32:79:f0:f3:be:3b:33: 18:5d:8a:2c:53:d7:52:9f:a0:aa:14:44:80:1f:cc: 81:ff:4c:f1:f3:65:62:87:6f:94:af:a3:e9:5b:b8: 81:1b:1a:3e:a5:bf:9a:32:bf:93:14:e8:ea:b5:fa: 48:5c:14:23:5d:7d:ba:5d:47:c5:08:68:f4:67:bb: 6c:cf:84:22:41:83:83:3f:30:c5:fb:41:8c:8e:8d: d5:5e:0c:74:e4:ff:b4:cb:6a:e7:9d:62:47:2d:9b: 62:3d:f1:4c:83:64:41:f2:ca:b6:91:8c:f8:ef:7c: 48:c8:ec:9b:c0:1a:c9:89:01:a9:e5:00:9b:30:20: de:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:6E:86:BD:79:AA:F6:F4:2F:16:5E:1B:C3:34:11:07:AB:1F:96:12 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/_m6GvXmq9vQvFl4bwzQRB6sflhI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.159.102.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:42:49:29:71:39:bd:e8:3d:92:5a:17:a6:af:f0:5f:f4:59: 11:ae:2d:df:2e:66:93:a2:34:af:1b:e0:74:0b:dd:59:a5:85: 7f:d2:49:3a:53:04:40:3b:48:9d:45:6c:0c:19:5e:26:ba:4b: 7b:ef:51:77:00:5a:07:a1:e4:25:f5:84:59:9e:10:c4:bd:0e: 0b:7e:8e:cc:c8:3e:fc:73:44:f2:95:17:0a:18:31:8d:ee:ab: 93:13:2e:42:2d:69:74:48:7e:93:bc:04:9b:aa:d8:79:d7:11: a1:51:cf:5a:58:0c:70:e9:99:87:38:e3:60:4d:02:36:f9:90: 12:28:23:6a:cd:d4:94:97:e0:90:4c:9e:1a:f6:eb:73:d4:9e: 67:6b:70:4e:8d:7d:28:dc:1b:d9:b6:de:2a:7d:63:68:b8:3e: b1:1f:a6:61:14:38:85:23:eb:1a:32:31:b4:d0:f2:cf:a0:11: 64:f6:e4:63:07:43:ee:a1:0c:cd:30:a8:5e:38:e7:3a:27:e8: 63:f7:56:1f:8c:45:5d:64:b8:1e:09:3e:6b:c9:b8:19:93:54: 5e:a4:94:fd:b6:73:f9:b1:56:ba:f5:bd:ac:36:23:86:d3:8c: 21:71:0a:fb:ed:2c:00:ae:79:92:b6:01:e9:67:24:c9:c7:4f: 6f:05:02:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XUfBOYh5la35nKRCkYH5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTZlODZiZDc5YWFmNmY0MmYxNjVlMWJjMzM0MTEwN2FiMWY5NjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlexBZklpGsJiWl+obeAQAfmFi6uZ NPjQwb3236Z5LvIpmUsv2X9AlZrwhAcgqhYf2U/Nee/99Lu62eCQ0CI3C8qeBYrx nQblDyv9w2wMkdfneCep52cieusXKcfcYoufKBiKHsBJxlB8ly8VZ9PpGiC7qlf4 ujjCGFUm57wwODJ58PO+OzMYXYosU9dSn6CqFESAH8yB/0zx82Vih2+Ur6PpW7iB Gxo+pb+aMr+TFOjqtfpIXBQjXX26XUfFCGj0Z7tsz4QiQYODPzDF+0GMjo3VXgx0 5P+0y2rnnWJHLZtiPfFMg2RB8sq2kYz473xIyOybwBrJiQGp5QCbMCDe9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP5uhr15qvb0LxZeG8M0EQerH5YSMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvX202R3ZYbXE5dlF2Rmw0Ynd6UVJCNnNmbGhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJ9mMA0G CSqGSIb3DQEBCwUAA4IBAQBqQkkpcTm96D2SWhemr/Bf9FkRri3fLmaTojSvG+B0 C91ZpYV/0kk6UwRAO0idRWwMGV4mukt771F3AFoHoeQl9YRZnhDEvQ4Lfo7MyD78 c0TylRcKGDGN7quTEy5CLWl0SH6TvASbqth51xGhUc9aWAxw6ZmHOONgTQI2+ZAS KCNqzdSUl+CQTJ4a9utz1J5na3BOjX0o3BvZtt4qfWNouD6xH6ZhFDiFI+saMjG0 0PLPoBFk9uRjB0PuoQzNMKheOOc6J+hj91YfjEVdZLgeCT5rybgZk1RepJT9tnP5 sVa69b2sNiOG04whcQr77SwArnmStgHpZyTJx09vBQJT -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:56 2026 by rpki-client