This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/m6f0KblgDdn2oDmiijUoJd1_umI.roa File: m6f0KblgDdn2oDmiijUoJd1_umI.roa (raw, json) Hash identifier: QlWp9v6ktsMkYvji1hdedyPM7rbbm0wOY1KKEhtnmFw= Subject key identifier: 9B:A7:F4:29:B9:60:0D:D9:F6:A0:39:A2:8A:35:28:25:DD:7F:BA:62 Certificate issuer: /CN=2b1707889794cea0622bd4921d6bdbdd56ef0b06 Certificate serial: 019B7F15283AA9DB30731ABE1245FC0A3B38 Authority key identifier: 2B:17:07:88:97:94:CE:A0:62:2B:D4:92:1D:6B:DB:DD:56:EF:0B:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/m6f0KblgDdn2oDmiijUoJd1_umI.roa Signing time: Fri 02 Jan 2026 14:20:51 +0000 ROA not before: Fri 02 Jan 2026 14:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212067 IP address blocks: 83.97.72.0/24 maxlen: 24 2a13:5380::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:28:3a:a9:db:30:73:1a:be:12:45:fc:0a:3b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b1707889794cea0622bd4921d6bdbdd56ef0b06 Validity Not Before: Jan 2 14:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ba7f429b9600dd9f6a039a28a352825dd7fba62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e5:40:ab:1d:4b:ef:98:27:0b:90:ee:24:18: 09:e0:0c:48:88:47:03:73:6c:04:84:09:8b:50:92: 30:74:31:4d:4a:fc:e4:4d:20:37:b2:69:8b:d8:4c: bf:b8:8a:84:db:81:e2:69:99:51:c3:80:8d:17:81: 3a:8b:2d:87:45:b4:20:53:23:94:de:d3:79:2a:c1: 68:48:e1:75:42:ec:26:14:46:cf:91:f0:9b:14:d8: e7:e8:bd:3d:75:cb:ad:63:10:60:35:fc:c9:ab:3a: db:f4:01:4c:6b:22:58:67:e1:ee:e9:0f:86:c0:5f: e0:ac:7c:3c:6c:89:7d:0d:49:ab:95:7f:b8:a9:8e: 1c:58:6e:cd:dd:b9:9c:ca:9d:98:b0:64:a5:c5:88: 98:cc:63:31:41:14:45:54:61:00:c8:6a:65:31:be: 92:87:94:42:b3:31:05:36:37:42:29:7f:18:80:44: 2e:9e:fa:ab:d0:de:9e:24:99:09:9c:2b:b6:9f:cb: 67:11:02:b3:4b:0e:8f:75:91:7f:fe:26:6f:b2:e1: a1:3d:0d:ce:6e:a9:e3:84:d4:21:d2:2e:f0:8d:6f: 29:31:de:d4:d9:e9:91:bf:58:c4:35:64:a4:66:b4: 67:27:3c:51:89:5c:07:07:7d:40:ef:5d:92:f0:61: ff:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A7:F4:29:B9:60:0D:D9:F6:A0:39:A2:8A:35:28:25:DD:7F:BA:62 X509v3 Authority Key Identifier: keyid:2B:17:07:88:97:94:CE:A0:62:2B:D4:92:1D:6B:DB:DD:56:EF:0B:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/m6f0KblgDdn2oDmiijUoJd1_umI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.97.72.0/24 IPv6: 2a13:5380::/29 Signature Algorithm: sha256WithRSAEncryption 2c:b3:18:bc:b9:fc:d2:fb:ae:69:2b:cc:3b:7d:c0:c0:ee:4d: 74:8d:ba:ec:8f:48:8b:cb:23:de:f9:ee:ea:e7:68:e2:42:80: 0d:be:e7:5a:d8:19:91:a3:e4:87:ba:13:18:65:ad:a1:70:df: d7:fa:22:6e:18:3a:e9:e3:17:b5:23:d0:47:a0:c4:2b:36:62: f4:49:dd:ed:82:ee:45:01:a0:a9:26:60:b1:5c:e4:1e:2a:59: 1c:7a:6d:11:fc:e9:13:27:a0:54:ac:2d:7c:d6:00:e5:48:14: 7f:52:84:ae:9a:fe:b3:f6:e2:3d:40:b9:15:2e:ec:d1:bf:d3: eb:fb:52:eb:29:fc:f9:ea:ae:44:b2:7a:a2:6e:25:d9:ae:5e: 86:c1:fe:61:ca:dd:da:26:95:1a:ad:e4:cd:f8:82:b1:43:de: 21:ab:0c:95:c4:1b:4e:92:aa:5b:69:2b:2f:7f:2d:2a:c6:d0: 8f:85:bb:5b:b1:99:b5:03:3b:92:49:a1:35:39:f6:be:3a:b5: c6:8b:b0:bc:ec:b5:a7:7a:ea:97:ef:21:66:00:89:cd:62:41: 3a:db:6c:48:53:4e:34:2e:64:ac:25:4d:1f:f9:88:9a:08:74: b1:49:61:49:b8:88:95:2a:e4:aa:cc:d4:bb:78:1c:04:91:d4: 5a:ff:47:68 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FSg6qdswcxq+EkX8Cjs4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMTcwNzg4OTc5NGNlYTA2MjJiZDQ5MjFkNmJkYmRkNTZl ZjBiMDYwHhcNMjYwMTAyMTQyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmE3ZjQyOWI5NjAwZGQ5ZjZhMDM5YTI4YTM1MjgyNWRkN2ZiYTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuVAqx1L75gnC5DuJBgJ4AxIiEcD c2wEhAmLUJIwdDFNSvzkTSA3smmL2Ey/uIqE24HiaZlRw4CNF4E6iy2HRbQgUyOU 3tN5KsFoSOF1QuwmFEbPkfCbFNjn6L09dcutYxBgNfzJqzrb9AFMayJYZ+Hu6Q+G wF/grHw8bIl9DUmrlX+4qY4cWG7N3bmcyp2YsGSlxYiYzGMxQRRFVGEAyGplMb6S h5RCszEFNjdCKX8YgEQunvqr0N6eJJkJnCu2n8tnEQKzSw6PdZF//iZvsuGhPQ3O bqnjhNQh0i7wjW8pMd7U2emRv1jENWSkZrRnJzxRiVwHB31A712S8GH/awIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJun9Cm5YA3Z9qA5ooo1KCXdf7piMB8GA1UdIwQY MBaAFCsXB4iXlM6gYivUkh1r291W7wsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3hjSGlKZVV6cUJpSzlTU0hXdmIzVmJ2Q3dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iYWNjNzctZGYzMC00OTQxLWJlMzMt ZGNiNWI5ZTg4ZTlhLzEvbTZmMEtibGdEZG4yb0RtaWlqVW9KZDFfdW1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9iYWNjNzctZGYzMC00OTQxLWJlMzMtZGNiNWI5ZTg4ZTlh LzEvS3hjSGlKZVV6cUJpSzlTU0hXdmIzVmJ2Q3dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAU2FIMA0E AgACMAcDBQMqE1OAMA0GCSqGSIb3DQEBCwUAA4IBAQAssxi8ufzS+65pK8w7fcDA 7k10jbrsj0iLyyPe+e7q52jiQoANvuda2BmRo+SHuhMYZa2hcN/X+iJuGDrp4xe1 I9BHoMQrNmL0Sd3tgu5FAaCpJmCxXOQeKlkcem0R/OkTJ6BUrC181gDlSBR/UoSu mv6z9uI9QLkVLuzRv9Pr+1LrKfz56q5EsnqibiXZrl6Gwf5hyt3aJpUareTN+IKx Q94hqwyVxBtOkqpbaSsvfy0qxtCPhbtbsZm1AzuSSaE1Ofa+OrXGi7C87LWneuqX 7yFmAInNYkE622xIU040LmSsJU0f+YiaCHSxSWFJuIiVKuSqzNS7eBwEkdRa/0do -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:19 2026 by rpki-client