This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/6ZC-AU-L5WqpZGLxzGOhgHsE1Cg.roa File: 6ZC-AU-L5WqpZGLxzGOhgHsE1Cg.roa (raw, json) Hash identifier: UlcGyQuYQRtTD6A9l9CK5v44VAfVgy8O5yhh3y24c6s= Subject key identifier: E9:90:BE:01:4F:8B:E5:6A:A9:64:62:F1:CC:63:A1:80:7B:04:D4:28 Certificate issuer: /CN=112d0c4f16dc8922129ff6050e235562317565e5 Certificate serial: 019B7A5AD846A84F97AA4564659C19C86616 Authority key identifier: 11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/6ZC-AU-L5WqpZGLxzGOhgHsE1Cg.roa Signing time: Thu 01 Jan 2026 16:18:52 +0000 ROA not before: Thu 01 Jan 2026 16:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51724 IP address blocks: 91.221.36.0/24 maxlen: 24 91.221.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d8:46:a8:4f:97:aa:45:64:65:9c:19:c8:66:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=112d0c4f16dc8922129ff6050e235562317565e5 Validity Not Before: Jan 1 16:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e990be014f8be56aa96462f1cc63a1807b04d428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3f:46:51:1b:91:89:49:8a:79:0e:9a:a1:ed: da:94:db:de:26:fb:d1:84:f8:42:ab:8c:ae:10:be: a0:1d:4b:1f:db:4a:8a:21:18:72:98:dd:2a:7e:b6: 4b:39:2c:54:e4:5e:3b:40:3b:7c:5e:24:f8:44:bf: 12:62:dc:dd:30:66:87:8c:d8:b8:61:d6:f0:f7:97: 9e:74:c8:5f:98:e4:46:e8:7f:df:43:b5:c7:0a:35: d4:a7:28:e8:bf:79:38:ae:83:68:ac:56:0b:c3:f8: a6:7b:20:a2:71:bd:ec:90:9d:0e:1d:99:19:76:7e: b1:3f:8e:81:e3:7e:b2:80:d9:22:27:b4:fe:63:28: 5f:b6:2a:ef:4c:d6:0f:62:ed:5a:8d:44:ee:dc:20: b2:eb:7c:4d:6d:1a:b6:21:c7:3d:16:85:ce:d2:4e: 52:f1:49:32:08:e8:83:b3:00:44:4f:0e:7e:fc:af: bf:51:e3:b9:08:90:e8:43:09:8b:8b:d4:7e:b5:fc: c1:22:f8:64:c7:ac:52:a5:bd:0d:c9:88:be:90:91: 81:3f:dc:5b:07:8e:f4:39:bd:51:00:f5:a1:6b:4b: 63:ee:b0:b3:12:b2:cc:63:a0:b8:dd:ed:82:32:a0: 6d:6c:2a:b6:b3:3c:76:eb:33:90:1a:db:58:61:50: 16:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:90:BE:01:4F:8B:E5:6A:A9:64:62:F1:CC:63:A1:80:7B:04:D4:28 X509v3 Authority Key Identifier: keyid:11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/6ZC-AU-L5WqpZGLxzGOhgHsE1Cg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.221.36.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:1c:76:a3:3b:46:38:af:2e:aa:9e:d1:ad:9a:3f:3b:18:35: eb:03:f9:37:8b:24:b7:ce:9b:70:d8:e2:32:7e:db:e9:97:51: 55:a3:ad:f2:1b:ed:c1:e9:c4:3b:de:b6:23:f4:ed:c6:33:67: b8:7f:08:d0:ea:24:c2:bd:a2:cc:76:ed:0c:8e:86:08:ac:47: 9b:6c:ae:94:44:54:fb:5e:89:ff:f8:07:68:3d:c0:76:44:9e: 80:14:e0:e3:52:fa:c3:52:5d:74:64:22:4c:fa:6f:e6:85:23: 1b:31:69:f6:f5:5b:3f:f7:9a:ad:e5:de:5a:d1:5c:b4:1d:a5: fa:dc:af:97:d0:4d:25:33:b5:04:14:22:4f:a6:1a:4e:e1:1c: 04:a7:f6:a4:56:e7:db:ef:c1:d3:06:02:19:86:3f:69:99:49: 73:e2:0e:ff:ca:9d:79:3e:92:48:d6:8d:fc:d5:20:ec:4c:3f: 74:21:53:e2:13:9c:ad:42:7b:a5:83:28:fd:c1:00:e3:99:3c: 30:5e:2f:9e:ab:8d:2f:78:6e:d5:e8:d2:d3:9b:25:97:70:34: dd:ff:f3:13:12:75:04:1e:4e:f8:17:97:ca:49:99:d0:1e:23: 31:a2:05:85:84:f7:28:ee:66:f5:db:d6:31:cd:09:12:28:20: 5a:15:82:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WthGqE+XqkVkZZwZyGYWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMmQwYzRmMTZkYzg5MjIxMjlmZjYwNTBlMjM1NTYyMzE3 NTY1ZTUwHhcNMjYwMTAxMTYxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTkwYmUwMTRmOGJlNTZhYTk2NDYyZjFjYzYzYTE4MDdiMDRkNDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD9GURuRiUmKeQ6aoe3alNveJvvR hPhCq4yuEL6gHUsf20qKIRhymN0qfrZLOSxU5F47QDt8XiT4RL8SYtzdMGaHjNi4 Ydbw95eedMhfmORG6H/fQ7XHCjXUpyjov3k4roNorFYLw/imeyCicb3skJ0OHZkZ dn6xP46B436ygNkiJ7T+YyhftirvTNYPYu1ajUTu3CCy63xNbRq2Icc9FoXO0k5S 8UkyCOiDswBETw5+/K+/UeO5CJDoQwmLi9R+tfzBIvhkx6xSpb0NyYi+kJGBP9xb B470Ob1RAPWha0tj7rCzErLMY6C43e2CMqBtbCq2szx26zOQGttYYVAWMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOmQvgFPi+VqqWRi8cxjoYB7BNQoMB8GA1UdIwQY MBaAFBEtDE8W3IkiEp/2BQ4jVWIxdWXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVMwTVR4YmNpU0lTbl9ZRkRpTlZZakYxWmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80NTgzMGMtNGE4Ni00MDJjLWExZWUt NDAwOWQ4NzliOTdlLzEvNlpDLUFVLUw1V3FwWkdMeHpHT2hnSHNFMUNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80NTgzMGMtNGE4Ni00MDJjLWExZWUtNDAwOWQ4NzliOTdl LzEvRVMwTVR4YmNpU0lTbl9ZRkRpTlZZakYxWmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW90kMA0G CSqGSIb3DQEBCwUAA4IBAQAvHHajO0Y4ry6qntGtmj87GDXrA/k3iyS3zptw2OIy ftvpl1FVo63yG+3B6cQ73rYj9O3GM2e4fwjQ6iTCvaLMdu0MjoYIrEebbK6URFT7 Xon/+AdoPcB2RJ6AFODjUvrDUl10ZCJM+m/mhSMbMWn29Vs/95qt5d5a0Vy0HaX6 3K+X0E0lM7UEFCJPphpO4RwEp/akVufb78HTBgIZhj9pmUlz4g7/yp15PpJI1o38 1SDsTD90IVPiE5ytQnulgyj9wQDjmTwwXi+eq40veG7V6NLTmyWXcDTd//MTEnUE Hk74F5fKSZnQHiMxogWFhPco7mb129YxzQkSKCBaFYKl -----END CERTIFICATE-----Generated at Tue Feb 10 04:16:59 2026 by rpki-client