This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/6lpK862MjF7SxKwBug7SDaIDhBI.roa File: 6lpK862MjF7SxKwBug7SDaIDhBI.roa (raw, json) Hash identifier: 9PT+ip5WLMpeUVZjhYTWufmbO06R+9SyidouC6/apXQ= Subject key identifier: EA:5A:4A:F3:AD:8C:8C:5E:D2:C4:AC:01:BA:0E:D2:0D:A2:03:84:12 Certificate issuer: /CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74 Certificate serial: 019B7CED53650AE17BFCB262A2D2E949ECFD Authority key identifier: 83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/6lpK862MjF7SxKwBug7SDaIDhBI.roa Signing time: Fri 02 Jan 2026 04:18:06 +0000 ROA not before: Fri 02 Jan 2026 04:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29104 IP address blocks: 91.213.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:53:65:0a:e1:7b:fc:b2:62:a2:d2:e9:49:ec:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74 Validity Not Before: Jan 2 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea5a4af3ad8c8c5ed2c4ac01ba0ed20da2038412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:08:a3:81:01:6a:67:a2:3d:88:ec:75:37:c7: 4b:bb:73:65:3a:eb:87:d5:5b:a2:8b:71:b1:99:8e: 9e:48:7d:6e:ff:0d:c2:71:0a:21:de:d0:1c:17:20: c1:63:a9:4b:a3:2e:15:3d:c7:86:38:8a:74:bb:fb: 38:c8:f6:e5:e5:e1:5a:41:c2:23:3b:0a:b6:9f:79: a3:b3:72:d8:2f:07:16:f7:9b:1b:fc:b9:2f:86:ca: 31:a1:f2:32:38:98:2c:d2:8c:91:3e:60:62:cc:79: e1:2e:2b:45:63:66:ae:50:1c:68:2f:3a:b9:1e:87: d7:bc:0e:5c:c2:f7:6d:a3:ee:95:f3:95:47:af:36: 8a:08:2f:72:c8:17:cf:43:d2:0f:44:31:f3:9d:24: 10:cd:7c:3c:59:ce:25:c8:05:4d:7f:dd:13:be:d4: 4f:bc:ae:24:64:a2:a3:74:ec:a4:77:fe:f7:c4:1a: 05:86:69:ac:0d:f4:90:14:a2:6e:50:2a:be:dd:f9: b7:05:95:be:e3:da:0b:05:9a:6d:7c:4b:ef:da:62: a1:f5:3f:2c:3a:a1:d5:ea:f1:71:d0:25:b7:73:cb: ac:c0:41:7e:0d:a5:7b:e9:7c:dd:fa:4e:b0:ed:da: 26:1d:9a:bf:d4:33:03:52:e9:a3:ad:6e:eb:25:26: 94:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:5A:4A:F3:AD:8C:8C:5E:D2:C4:AC:01:BA:0E:D2:0D:A2:03:84:12 X509v3 Authority Key Identifier: keyid:83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/6lpK862MjF7SxKwBug7SDaIDhBI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.180.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:71:61:f4:ac:7d:ac:ba:1b:e1:bb:19:7f:37:93:bd:fb:2f: 8d:69:56:24:5d:7a:fe:38:22:55:36:58:4b:2f:4d:eb:b7:1a: e7:31:bc:f6:9e:6e:1c:a2:ce:54:c5:9c:5c:1d:3f:c0:ca:da: e0:b3:dc:75:d4:8f:59:ed:22:66:4f:15:11:33:81:76:63:a3: 03:4e:92:f9:39:c2:2a:97:d0:ba:00:04:b2:8f:f4:ac:13:f1: 39:7a:75:d9:67:ff:a8:44:e2:c7:3b:07:39:3d:19:9c:e4:13: 12:ae:1e:86:22:dc:99:80:95:1e:b0:b3:13:eb:41:ed:9c:49: 5e:dc:4c:5e:50:9b:84:7f:b7:93:f3:1e:d4:37:95:ba:64:69: 65:df:b0:79:20:15:8f:0d:0e:fa:7c:3b:6f:be:9f:d3:b3:f2: 9a:10:72:61:d0:58:f7:66:6e:a5:17:19:b6:91:09:69:e6:cf: 37:3b:0c:12:fd:ee:f1:dd:38:52:88:83:ac:96:ad:bd:61:c7: e3:10:b7:da:41:cc:b5:7c:1b:28:65:f2:72:ef:60:e4:93:5a: 5c:08:d5:ab:e4:1f:a6:83:1d:6d:80:ce:b8:83:f7:ab:8c:61: 24:e8:a9:2f:ca:f4:76:b2:38:53:2e:0c:5f:0b:04:3d:c8:08: c6:2a:ed:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87VNlCuF7/LJiotLpSez9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNDhjY2U0ZmI2ZDM2MTQwZWI3ZDU2ZmVkMjg5YjM4NzFm YzRkNzQwHhcNMjYwMTAyMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTVhNGFmM2FkOGM4YzVlZDJjNGFjMDFiYTBlZDIwZGEyMDM4NDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQijgQFqZ6I9iOx1N8dLu3NlOuuH 1Vuii3GxmY6eSH1u/w3CcQoh3tAcFyDBY6lLoy4VPceGOIp0u/s4yPbl5eFaQcIj Owq2n3mjs3LYLwcW95sb/LkvhsoxofIyOJgs0oyRPmBizHnhLitFY2auUBxoLzq5 HofXvA5cwvdto+6V85VHrzaKCC9yyBfPQ9IPRDHznSQQzXw8Wc4lyAVNf90TvtRP vK4kZKKjdOykd/73xBoFhmmsDfSQFKJuUCq+3fm3BZW+49oLBZptfEvv2mKh9T8s OqHV6vFx0CW3c8uswEF+DaV76Xzd+k6w7domHZq/1DMDUumjrW7rJSaU5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOpaSvOtjIxe0sSsAboO0g2iA4QSMB8GA1UdIwQY MBaAFINIzOT7bTYUDrfVb+0omzhx/E10MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzBqTTVQdHROaFFPdDlWdjdTaWJPSEg4VFhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hZmFlN2MtNmViZi00NTQzLWJjMmYt YjhjM2RkNzY2MTNlLzEvNmxwSzg2Mk1qRjdTeEt3QnVnN1NEYUlEaEJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9hZmFlN2MtNmViZi00NTQzLWJjMmYtYjhjM2RkNzY2MTNl LzEvZzBqTTVQdHROaFFPdDlWdjdTaWJPSEg4VFhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9W0MA0G CSqGSIb3DQEBCwUAA4IBAQA8cWH0rH2suhvhuxl/N5O9+y+NaVYkXXr+OCJVNlhL L03rtxrnMbz2nm4cos5UxZxcHT/Aytrgs9x11I9Z7SJmTxURM4F2Y6MDTpL5OcIq l9C6AASyj/SsE/E5enXZZ/+oROLHOwc5PRmc5BMSrh6GItyZgJUesLMT60HtnEle 3ExeUJuEf7eT8x7UN5W6ZGll37B5IBWPDQ76fDtvvp/Ts/KaEHJh0Fj3Zm6lFxm2 kQlp5s83OwwS/e7x3ThSiIOslq29YcfjELfaQcy1fBsoZfJy72Dkk1pcCNWr5B+m gx1tgM64g/erjGEk6KkvyvR2sjhTLgxfCwQ9yAjGKu3H -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:45 2026 by rpki-client