This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/bH6tjXnYtUAt8u-NGNT0t-DnFoY.roa File: bH6tjXnYtUAt8u-NGNT0t-DnFoY.roa (raw, json) Hash identifier: it3vJQNoSAFPdXxbk0rvKR5rwALiR1gzaPHvmGFvmfg= Subject key identifier: 6C:7E:AD:8D:79:D8:B5:40:2D:F2:EF:8D:18:D4:F4:B7:E0:E7:16:86 Certificate issuer: /CN=ad442bdda2a35320a96d806bf168d5b84a76d426 Certificate serial: 019B7F15A3610F1E64C91D229AA6D9834CB0 Authority key identifier: AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/bH6tjXnYtUAt8u-NGNT0t-DnFoY.roa Signing time: Fri 02 Jan 2026 14:21:22 +0000 ROA not before: Fri 02 Jan 2026 14:21:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60395 IP address blocks: 195.10.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a3:61:0f:1e:64:c9:1d:22:9a:a6:d9:83:4c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad442bdda2a35320a96d806bf168d5b84a76d426 Validity Not Before: Jan 2 14:21:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c7ead8d79d8b5402df2ef8d18d4f4b7e0e71686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:61:00:d9:f1:d2:52:50:75:88:90:02:56:45: d9:a4:ab:78:33:80:88:b2:cc:4f:15:06:8a:d6:44: cb:5a:42:92:e5:c7:25:96:22:3c:37:81:ce:df:20: 14:d8:61:3c:cd:96:bc:fc:66:3e:39:8d:d0:79:12: 86:65:2a:d8:d3:c3:e4:cd:b1:20:c8:93:da:81:ff: 32:80:dc:5e:8c:e6:fa:6f:bc:91:31:f7:29:87:05: c2:c1:84:8c:c1:c2:d2:c5:c9:a3:f4:a4:e4:c9:d0: d5:47:c0:23:7d:0e:b4:3a:cd:d0:f9:73:00:f2:cc: c0:aa:d2:c3:eb:ef:63:b1:4b:73:03:4c:cf:e0:d8: b5:82:06:26:60:b1:11:c0:52:b3:5f:fd:f2:d0:dd: 4b:48:21:99:05:ff:2c:fd:95:20:c8:b2:60:f7:19: 48:3a:22:61:43:f4:3e:6d:94:b8:9e:a1:32:28:56: 71:d1:96:3a:f7:9a:48:79:e1:82:1e:39:e4:ab:79: bf:68:2d:bd:3b:ab:23:7a:90:65:41:ba:f6:53:03: 90:6a:e8:a2:e5:16:a5:1a:45:77:e3:15:e6:7c:7b: 46:52:80:e4:fc:56:fa:34:e0:22:16:c4:ce:28:63: 17:bc:fa:9e:69:a5:3c:cf:02:90:1b:10:9a:70:cc: ab:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7E:AD:8D:79:D8:B5:40:2D:F2:EF:8D:18:D4:F4:B7:E0:E7:16:86 X509v3 Authority Key Identifier: keyid:AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/bH6tjXnYtUAt8u-NGNT0t-DnFoY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.10.222.0/24 Signature Algorithm: sha256WithRSAEncryption d4:14:25:d2:82:7d:c6:63:c1:c7:3c:d6:55:02:a3:2e:60:f7: 69:fb:67:24:a4:be:a0:55:a2:a4:00:80:59:8b:c9:30:d0:e8: e2:8c:02:3c:3f:c8:38:55:a7:06:84:4a:4e:21:6a:ba:60:5f: 5a:a8:68:ec:17:ae:9c:f1:c9:f9:cc:47:f6:2c:45:6a:48:2b: 38:92:ca:a0:56:8e:36:47:62:29:9c:ad:81:93:52:18:67:96: e6:0d:44:2c:87:5e:61:90:91:9e:a1:fe:3a:56:44:7c:b0:0c: 03:c9:68:fd:2b:cc:b7:7e:ad:41:07:3c:a0:38:61:d4:f8:7e: b7:a6:7e:c6:10:b3:e9:44:79:8a:f8:cf:bd:00:7d:af:b0:7e: 68:00:2a:99:6d:34:be:c0:42:09:7b:df:54:05:b0:c0:7d:cc: 41:0f:9e:18:3e:b4:a3:ec:0c:bd:5c:42:cb:4d:99:e8:40:32: e1:96:32:40:fd:a2:13:83:ec:54:ed:ba:ad:8a:b6:23:0a:9e: 13:71:5b:f9:04:e6:72:3b:ac:e6:42:d2:68:fc:6f:46:ff:88: 39:7d:d4:b8:b2:b0:00:a8:96:6b:b8:36:8c:42:ea:d9:7a:65: da:90:85:e8:07:e7:d5:c9:fd:b3:68:d6:81:2a:e4:5f:1a:7f: f3:bd:31:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FaNhDx5kyR0imqbZg0ywMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNDQyYmRkYTJhMzUzMjBhOTZkODA2YmYxNjhkNWI4NGE3 NmQ0MjYwHhcNMjYwMTAyMTQyMTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzdlYWQ4ZDc5ZDhiNTQwMmRmMmVmOGQxOGQ0ZjRiN2UwZTcxNjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWEA2fHSUlB1iJACVkXZpKt4M4CI ssxPFQaK1kTLWkKS5cclliI8N4HO3yAU2GE8zZa8/GY+OY3QeRKGZSrY08PkzbEg yJPagf8ygNxejOb6b7yRMfcphwXCwYSMwcLSxcmj9KTkydDVR8AjfQ60Os3Q+XMA 8szAqtLD6+9jsUtzA0zP4Ni1ggYmYLERwFKzX/3y0N1LSCGZBf8s/ZUgyLJg9xlI OiJhQ/Q+bZS4nqEyKFZx0ZY695pIeeGCHjnkq3m/aC29O6sjepBlQbr2UwOQauii 5RalGkV34xXmfHtGUoDk/Fb6NOAiFsTOKGMXvPqeaaU8zwKQGxCacMyrSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGx+rY152LVALfLvjRjU9Lfg5xaGMB8GA1UdIwQY MBaAFK1EK92io1MgqW2Aa/Fo1bhKdtQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclVRcjNhS2pVeUNwYllCcjhXalZ1RXAyMUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9kZDY3MmQtZTk4MC00ZGNhLTkxOTUt ODU5ZGJjYTM4NzE0LzEvYkg2dGpYbll0VUF0OHUtTkdOVDB0LURuRm9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9kZDY3MmQtZTk4MC00ZGNhLTkxOTUtODU5ZGJjYTM4NzE0 LzEvclVRcjNhS2pVeUNwYllCcjhXalZ1RXAyMUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwreMA0G CSqGSIb3DQEBCwUAA4IBAQDUFCXSgn3GY8HHPNZVAqMuYPdp+2ckpL6gVaKkAIBZ i8kw0OjijAI8P8g4VacGhEpOIWq6YF9aqGjsF66c8cn5zEf2LEVqSCs4ksqgVo42 R2IpnK2Bk1IYZ5bmDUQsh15hkJGeof46VkR8sAwDyWj9K8y3fq1BBzygOGHU+H63 pn7GELPpRHmK+M+9AH2vsH5oACqZbTS+wEIJe99UBbDAfcxBD54YPrSj7Ay9XELL TZnoQDLhljJA/aITg+xU7bqtirYjCp4TcVv5BOZyO6zmQtJo/G9G/4g5fdS4srAA qJZruDaMQurZemXakIXoB+fVyf2zaNaBKuRfGn/zvTEE -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:17 2026 by rpki-client