This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/6w_LmvhXnOF2ik3DDNvsrEWVCI8.roa File: 6w_LmvhXnOF2ik3DDNvsrEWVCI8.roa (raw, json) Hash identifier: 6W4Vav7RSMNSHDF7FWCiUK0cI2saEqhD9eRkDI4fbG4= Subject key identifier: EB:0F:CB:9A:F8:57:9C:E1:76:8A:4D:C3:0C:DB:EC:AC:45:95:08:8F Certificate issuer: /CN=ddd058eef19d11ba0eabaf046e72a26e5e572643 Certificate serial: 019BF9EF078EB61E505C774889E091B8D8CF Authority key identifier: DD:D0:58:EE:F1:9D:11:BA:0E:AB:AF:04:6E:72:A2:6E:5E:57:26:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/6w_LmvhXnOF2ik3DDNvsrEWVCI8.roa Signing time: Mon 26 Jan 2026 10:52:30 +0000 ROA not before: Mon 26 Jan 2026 10:52:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3209 IP address blocks: 193.34.207.0/24 maxlen: 24 195.200.70.0/24 maxlen: 24 195.200.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:ef:07:8e:b6:1e:50:5c:77:48:89:e0:91:b8:d8:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddd058eef19d11ba0eabaf046e72a26e5e572643 Validity Not Before: Jan 26 10:52:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb0fcb9af8579ce1768a4dc30cdbecac4595088f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7c:57:59:50:4f:38:16:db:d2:ab:b4:06:3d: 9a:a8:f5:6b:0f:eb:09:86:23:8e:d6:d1:e5:d6:86: 4e:65:ae:e7:28:a8:fc:d7:06:91:a8:58:b3:2e:bf: 70:2d:79:15:e6:63:94:67:80:21:f8:a0:6d:a1:22: 0a:ec:28:b4:38:bc:00:3a:51:42:1b:87:83:fa:08: 3b:c7:5f:45:d5:e3:67:15:f5:c3:1b:05:e1:ac:56: 06:53:2b:76:fa:e5:93:94:ba:53:1e:94:08:8f:c1: f9:36:b3:70:3d:da:9c:ac:38:dc:f5:f7:23:80:2f: 58:95:42:8a:b8:90:d1:a3:f8:f2:a2:4a:19:82:49: ae:84:2c:fd:ed:e0:d5:94:85:45:3b:45:6d:82:be: 55:19:ac:56:98:1b:7c:e9:83:53:7f:ea:8c:2e:7a: 86:d1:6b:ee:14:1c:c5:40:0a:eb:b4:5a:14:e7:83: 70:16:5d:c3:ec:ec:31:ff:00:4e:f9:08:cb:a1:fd: 98:74:39:ae:46:00:36:0c:17:2f:05:5e:1c:ab:76: 15:83:7b:e5:e4:47:2d:93:89:e3:09:d7:47:b4:29: d8:01:a8:57:f9:44:e2:74:1f:32:0d:5d:16:10:c0: 4b:c3:b2:f8:a3:3b:41:dd:19:7c:af:f9:33:b9:0e: a4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0F:CB:9A:F8:57:9C:E1:76:8A:4D:C3:0C:DB:EC:AC:45:95:08:8F X509v3 Authority Key Identifier: keyid:DD:D0:58:EE:F1:9D:11:BA:0E:AB:AF:04:6E:72:A2:6E:5E:57:26:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/6w_LmvhXnOF2ik3DDNvsrEWVCI8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.207.0/24 195.200.70.0/23 Signature Algorithm: sha256WithRSAEncryption a3:cb:83:d8:15:d0:df:82:33:21:b2:c7:bc:c8:5d:a5:a0:66: 76:14:07:b2:2d:f6:17:0b:38:cc:54:0b:3c:e5:2b:40:3d:dd: a0:ee:c4:e7:d1:70:3e:1f:e3:4b:dd:6c:e8:47:00:d7:a2:d2: b6:94:24:f1:0f:c3:be:f6:06:0a:b1:45:3a:3b:93:1d:78:bd: 84:7d:16:3d:b6:95:3f:b5:98:f9:6b:30:e6:4a:65:43:00:22: 81:69:7a:eb:28:a0:a4:11:d2:90:14:c6:57:8b:4a:63:d7:6b: f8:5b:71:9f:98:b3:e3:d8:78:d9:ce:34:81:a0:9c:f2:f2:f7: bc:98:db:a8:ed:28:7b:05:ee:04:e4:2d:35:0a:e0:dd:d7:29: 2c:31:05:46:f6:f5:35:9e:69:b7:a5:b3:6a:22:ec:87:b4:aa: b3:e5:4b:f9:e7:7a:95:70:c1:3c:b0:b2:65:ba:8c:6f:5b:91: 94:c5:f6:c1:4c:95:d2:59:e0:a1:e6:1a:7e:97:4f:b9:57:2a: 29:84:30:24:a4:f6:dc:f6:83:95:29:a5:f5:91:b1:0d:19:29: 46:37:67:6c:97:bf:20:0a:5d:f5:63:ed:96:26:ec:9d:a1:71: 5e:b5:c2:21:b6:7c:98:bc:d3:19:2f:20:01:b0:5b:f2:d4:d4: 40:ef:74:70 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZv57weOth5QXHdIieCRuNjPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZDA1OGVlZjE5ZDExYmEwZWFiYWYwNDZlNzJhMjZlNWU1 NzI2NDMwHhcNMjYwMTI2MTA1MjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjBmY2I5YWY4NTc5Y2UxNzY4YTRkYzMwY2RiZWNhYzQ1OTUwODhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3xXWVBPOBbb0qu0Bj2aqPVrD+sJ hiOO1tHl1oZOZa7nKKj81waRqFizLr9wLXkV5mOUZ4Ah+KBtoSIK7Ci0OLwAOlFC G4eD+gg7x19F1eNnFfXDGwXhrFYGUyt2+uWTlLpTHpQIj8H5NrNwPdqcrDjc9fcj gC9YlUKKuJDRo/jyokoZgkmuhCz97eDVlIVFO0Vtgr5VGaxWmBt86YNTf+qMLnqG 0WvuFBzFQArrtFoU54NwFl3D7Owx/wBO+QjLof2YdDmuRgA2DBcvBV4cq3YVg3vl 5Ectk4njCddHtCnYAahX+UTidB8yDV0WEMBLw7L4oztB3Rl8r/kzuQ6kIwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOsPy5r4V5zhdopNwwzb7KxFlQiPMB8GA1UdIwQY MBaAFN3QWO7xnRG6DquvBG5yom5eVyZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2RCWTd2R2RFYm9PcTY4RWJuS2libDVYSmtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lNDgzNGYtZTVkMC00YjY0LTkyY2Ut ZjU0OTkzMzZjMmI0LzEvNndfTG12aFhuT0YyaWszREROdnNyRVdWQ0k4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9lNDgzNGYtZTVkMC00YjY0LTkyY2UtZjU0OTkzMzZjMmI0 LzEvM2RCWTd2R2RFYm9PcTY4RWJuS2libDVYSmtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwSLPAwQB w8hGMA0GCSqGSIb3DQEBCwUAA4IBAQCjy4PYFdDfgjMhsse8yF2loGZ2FAeyLfYX CzjMVAs85StAPd2g7sTn0XA+H+NL3WzoRwDXotK2lCTxD8O+9gYKsUU6O5MdeL2E fRY9tpU/tZj5azDmSmVDACKBaXrrKKCkEdKQFMZXi0pj12v4W3GfmLPj2HjZzjSB oJzy8ve8mNuo7Sh7Be4E5C01CuDd1yksMQVG9vU1nmm3pbNqIuyHtKqz5Uv553qV cME8sLJluoxvW5GUxfbBTJXSWeCh5hp+l0+5VyophDAkpPbc9oOVKaX1kbENGSlG N2dsl78gCl31Y+2WJuydoXFetcIhtnyYvNMZLyABsFvy1NRA73Rw -----END CERTIFICATE-----Generated at Mon Jan 26 21:32:14 2026 by rpki-client