This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/T6aVPmNcqE5HPe1U1bzT5Q4XHzY.roa File: T6aVPmNcqE5HPe1U1bzT5Q4XHzY.roa (raw, json) Hash identifier: 8+A3ZIl9Wsa+nE0z7P+iEM6IdzJ3gW89vJMfXzNpKrc= Subject key identifier: 4F:A6:95:3E:63:5C:A8:4E:47:3D:ED:54:D5:BC:D3:E5:0E:17:1F:36 Certificate issuer: /CN=7242a13715fc5578cdc05aaaa68c6a413cdbc9f5 Certificate serial: 019B78346503474E593F1B322BB2AD725F45 Authority key identifier: 72:42:A1:37:15:FC:55:78:CD:C0:5A:AA:A6:8C:6A:41:3C:DB:C9:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/T6aVPmNcqE5HPe1U1bzT5Q4XHzY.roa Signing time: Thu 01 Jan 2026 06:17:38 +0000 ROA not before: Thu 01 Jan 2026 06:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47568 IP address blocks: 94.100.32.0/23 maxlen: 23 94.100.36.0/23 maxlen: 23 185.122.24.0/23 maxlen: 23 185.122.26.0/24 maxlen: 24 185.122.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft rsync://rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:65:03:47:4e:59:3f:1b:32:2b:b2:ad:72:5f:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7242a13715fc5578cdc05aaaa68c6a413cdbc9f5 Validity Not Before: Jan 1 06:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fa6953e635ca84e473ded54d5bcd3e50e171f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e2:02:46:01:9e:0a:cc:a9:65:1c:e3:b5:3d: e3:f6:11:2b:bf:9b:5a:2e:51:fe:fc:56:84:18:bb: dd:3d:01:e2:67:e8:94:90:92:8b:a0:2e:dd:a3:83: 0d:4e:d2:a3:d4:9c:d9:f6:23:0a:51:88:ca:20:e7: 2e:6a:fc:9c:bb:23:05:01:c7:ce:53:11:88:83:38: dd:81:cf:fc:a5:9e:69:1b:f4:01:54:7c:da:b9:8e: 80:80:6c:e1:1c:ac:e6:3e:79:04:68:36:10:d6:4a: f9:a5:1e:3e:b2:48:c8:1c:ed:97:63:f7:6a:85:69: 54:5d:bd:fc:bd:73:a4:99:a7:c5:32:14:6b:9b:2d: aa:98:bf:fb:29:4f:61:f2:ba:4d:45:3d:39:62:c4: a2:b4:9d:c3:42:fa:05:c4:c0:71:6b:91:cf:af:59: 35:fd:22:1b:de:cd:82:72:07:3c:76:a2:2f:92:82: 68:1f:4f:21:32:a1:dd:2d:08:ad:5a:47:70:f3:2d: 7b:5b:a0:ec:3e:df:f4:3e:d6:a8:77:46:06:41:c0: d2:c3:fc:08:fb:d1:b6:3d:5b:e2:7c:cc:65:c0:03: 1e:52:63:4f:4c:c2:15:ac:4a:79:0e:6f:3d:42:e2: 89:57:51:ec:a3:61:fd:69:86:e4:fd:23:05:6d:f5: 84:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A6:95:3E:63:5C:A8:4E:47:3D:ED:54:D5:BC:D3:E5:0E:17:1F:36 X509v3 Authority Key Identifier: keyid:72:42:A1:37:15:FC:55:78:CD:C0:5A:AA:A6:8C:6A:41:3C:DB:C9:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/T6aVPmNcqE5HPe1U1bzT5Q4XHzY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.100.32.0/23 94.100.36.0/23 185.122.24.0/22 Signature Algorithm: sha256WithRSAEncryption 67:2c:bf:ff:57:37:8a:28:ff:81:e6:21:d2:33:b0:11:83:5d: c1:da:c5:6a:8e:64:cf:0a:d6:f0:57:19:0b:0f:af:4f:b2:8e: 70:f4:a0:75:9c:fe:91:4d:d1:b6:6f:0a:d1:38:32:03:8d:b9: c9:cd:21:f4:0b:bd:1e:0b:26:55:28:6f:e1:a0:54:14:40:c4: 43:57:28:b6:c7:fb:f1:4d:93:7e:c5:d2:28:67:fd:5e:31:0f: 71:ae:1b:73:e2:aa:2f:09:a4:c4:cf:42:55:bc:63:a3:76:ae: 36:6d:cb:6b:5f:4e:b9:a1:7b:01:46:aa:0d:a2:5a:28:6d:45: 57:27:58:a1:73:38:12:2b:e4:8e:d3:91:04:01:6e:40:ca:6a: a6:a6:f4:23:47:12:1b:9a:dd:f3:28:c2:7a:2a:d2:72:15:6c: ab:69:7f:95:4a:a8:f2:b3:b9:52:c0:e7:1f:3e:a6:fa:f1:6e: 9e:4b:03:c1:03:c0:20:a1:02:2c:0a:19:89:cb:9d:6f:c3:7a: 59:87:bb:71:13:73:59:a6:98:2c:b9:93:b3:cd:59:e2:2d:cb: 63:ba:51:e5:40:4f:01:46:d6:ae:6e:9c:4a:a4:f3:7d:dd:3c: cf:52:06:1c:f2:18:66:17:e5:0b:e5:9b:41:5e:88:df:e4:db: dd:01:a6:f7 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NGUDR05ZPxsyK7Ktcl9FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNDJhMTM3MTVmYzU1NzhjZGMwNWFhYWE2OGM2YTQxM2Nk YmM5ZjUwHhcNMjYwMTAxMDYxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmE2OTUzZTYzNWNhODRlNDczZGVkNTRkNWJjZDNlNTBlMTcxZjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuICRgGeCsypZRzjtT3j9hErv5ta LlH+/FaEGLvdPQHiZ+iUkJKLoC7do4MNTtKj1JzZ9iMKUYjKIOcuavycuyMFAcfO UxGIgzjdgc/8pZ5pG/QBVHzauY6AgGzhHKzmPnkEaDYQ1kr5pR4+skjIHO2XY/dq hWlUXb38vXOkmafFMhRrmy2qmL/7KU9h8rpNRT05YsSitJ3DQvoFxMBxa5HPr1k1 /SIb3s2Ccgc8dqIvkoJoH08hMqHdLQitWkdw8y17W6DsPt/0Ptaod0YGQcDSw/wI +9G2PVvifMxlwAMeUmNPTMIVrEp5Dm89QuKJV1Hso2H9aYbk/SMFbfWEWQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFE+mlT5jXKhORz3tVNW80+UOFx82MB8GA1UdIwQY MBaAFHJCoTcV/FV4zcBaqqaMakE828n1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2tLaE54WDhWWGpOd0ZxcXBveHFRVHpieWZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85MGFhMWUtMDA5OC00ZmRhLTk4Mjkt YTE1Y2NmNWI0MTNlLzEvVDZhVlBtTmNxRTVIUGUxVTFielQ1UTRYSHpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi85MGFhMWUtMDA5OC00ZmRhLTk4MjktYTE1Y2NmNWI0MTNl LzEvY2tLaE54WDhWWGpOd0ZxcXBveHFRVHpieWZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBXmQgAwQB XmQkAwQCuXoYMA0GCSqGSIb3DQEBCwUAA4IBAQBnLL//VzeKKP+B5iHSM7ARg13B 2sVqjmTPCtbwVxkLD69Pso5w9KB1nP6RTdG2bwrRODIDjbnJzSH0C70eCyZVKG/h oFQUQMRDVyi2x/vxTZN+xdIoZ/1eMQ9xrhtz4qovCaTEz0JVvGOjdq42bctrX065 oXsBRqoNoloobUVXJ1ihczgSK+SO05EEAW5AymqmpvQjRxIbmt3zKMJ6KtJyFWyr aX+VSqjys7lSwOcfPqb68W6eSwPBA8AgoQIsChmJy51vw3pZh7txE3NZppgsuZOz zVniLctjulHlQE8BRtaubpxKpPN93TzPUgYc8hhmF+UL5ZtBXojf5NvdAab3 -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:13 2026 by rpki-client