This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/b1zJ7NbuL57-e0rkevnmNIo0USU.roa File: b1zJ7NbuL57-e0rkevnmNIo0USU.roa (raw, json) Hash identifier: 6oXQKWkeIUo+oie2lp60DcRhSM6jyLL6Sog8QbpX/bA= Subject key identifier: 6F:5C:C9:EC:D6:EE:2F:9E:FE:7B:4A:E4:7A:F9:E6:34:8A:34:51:25 Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5 Certificate serial: 019B79ECBBD79541C9ACA3D197F1F3B37C89 Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/b1zJ7NbuL57-e0rkevnmNIo0USU.roa Signing time: Thu 01 Jan 2026 14:18:36 +0000 ROA not before: Thu 01 Jan 2026 14:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5065 IP address blocks: 37.143.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 05:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:bb:d7:95:41:c9:ac:a3:d1:97:f1:f3:b3:7c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5 Validity Not Before: Jan 1 14:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f5cc9ecd6ee2f9efe7b4ae47af9e6348a345125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6c:b8:27:8d:67:41:ea:61:be:c3:96:7d:82: 2d:12:41:d7:10:bd:84:83:a3:51:0b:ba:57:e0:f4: ea:21:e7:0e:e2:18:66:75:2c:74:8c:40:09:c0:a7: 60:51:80:84:92:3e:f7:35:0d:af:1e:6e:5c:eb:2f: f8:b6:84:eb:2e:fe:3c:78:a1:cc:64:78:aa:1a:b2: f4:30:6f:da:5b:8f:82:d7:7a:3b:6e:e4:6a:72:86: 98:8c:50:cd:14:36:45:69:30:81:b4:7c:84:3c:16: bd:03:99:00:ab:b0:84:04:98:71:97:10:92:c5:dc: b7:ec:3b:ad:67:25:1a:ef:ea:c8:ff:f7:cd:1f:41: e0:64:9d:06:49:3e:2f:fb:68:9e:9a:87:15:35:fc: 1a:59:fe:46:16:f1:08:b3:c7:d0:98:18:ab:8c:0e: dc:9c:96:b5:d3:85:84:13:0d:bf:36:bb:b6:b3:19: c6:0a:54:64:6a:e3:44:4e:f0:9f:ba:97:a7:eb:fd: 5c:94:16:a3:77:6d:18:aa:ea:49:a5:e1:a4:14:5a: 3b:c9:02:2e:69:48:09:5c:e8:3c:56:9e:87:db:92: 0a:d8:6e:f7:20:64:1b:9a:86:ea:de:8b:ef:fa:37: 7b:24:aa:91:51:e0:da:ee:27:03:40:72:5c:03:55: 97:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:5C:C9:EC:D6:EE:2F:9E:FE:7B:4A:E4:7A:F9:E6:34:8A:34:51:25 X509v3 Authority Key Identifier: keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/b1zJ7NbuL57-e0rkevnmNIo0USU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.143.4.0/22 Signature Algorithm: sha256WithRSAEncryption 41:2e:05:61:d7:33:b2:f7:1f:60:7b:4c:85:ca:49:75:31:05: b1:db:0f:dd:9d:ac:04:f9:97:7d:2b:70:87:ca:10:a4:49:ac: cf:0b:5f:f9:73:0c:33:0f:af:d0:1a:08:1f:e6:f1:31:36:8c: f2:2d:b6:46:dc:6d:73:1f:34:f9:18:74:ff:87:58:ef:f1:97: 1d:d1:81:e9:80:cf:c9:09:01:6e:ad:e7:be:76:63:f1:c6:b5: 29:0e:90:a1:39:13:bb:db:05:24:b7:fc:c2:bf:34:5f:91:5a: aa:0b:38:1a:e8:5c:b0:cd:75:77:34:30:de:ae:ac:59:1b:14: cb:83:96:c2:6b:6e:f0:b7:f1:7a:db:e5:a0:61:a4:bf:ae:7d: f4:04:07:de:24:bb:c8:0c:6d:35:6d:52:e6:74:de:8e:48:e3: 14:9d:48:97:6f:8d:60:32:cc:0f:c9:68:45:af:5b:8c:f9:32: 2d:5a:80:09:35:c6:93:17:50:96:97:2d:7e:de:a2:ee:01:4a: 88:ff:76:da:38:ef:e2:fa:98:07:b7:5a:18:72:52:69:0c:f4: 11:92:b4:25:4c:70:b6:6d:35:ef:f6:14:93:d5:78:0b:e1:ba: 72:cf:7d:02:31:2f:e6:9b:53:f0:85:ef:ad:e4:d9:d1:af:4c: f6:bd:4a:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57LvXlUHJrKPRl/Hzs3yJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNjM2M2Q0MjhiNzkxNWMxMDg4MjVmMDk3MDYwMDRiOGVh M2Q0YjUwHhcNMjYwMTAxMTQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjVjYzllY2Q2ZWUyZjllZmU3YjRhZTQ3YWY5ZTYzNDhhMzQ1MTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymy4J41nQephvsOWfYItEkHXEL2E g6NRC7pX4PTqIecO4hhmdSx0jEAJwKdgUYCEkj73NQ2vHm5c6y/4toTrLv48eKHM ZHiqGrL0MG/aW4+C13o7buRqcoaYjFDNFDZFaTCBtHyEPBa9A5kAq7CEBJhxlxCS xdy37DutZyUa7+rI//fNH0HgZJ0GST4v+2iemocVNfwaWf5GFvEIs8fQmBirjA7c nJa104WEEw2/Nru2sxnGClRkauNETvCfupen6/1clBajd20YqupJpeGkFFo7yQIu aUgJXOg8Vp6H25IK2G73IGQbmobq3ovv+jd7JKqRUeDa7icDQHJcA1WXmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG9cyezW7i+e/ntK5Hr55jSKNFElMB8GA1UdIwQY MBaAFA9jY9Qot5FcEIgl8JcGAEuOo9S1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEt MmUxYzBhZjRmYWE0LzEvYjF6SjdOYnVMNTctZTBya2V2bm1OSW8wVVNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEtMmUxYzBhZjRmYWE0 LzEvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJY8EMA0G CSqGSIb3DQEBCwUAA4IBAQBBLgVh1zOy9x9ge0yFykl1MQWx2w/dnawE+Zd9K3CH yhCkSazPC1/5cwwzD6/QGggf5vExNozyLbZG3G1zHzT5GHT/h1jv8Zcd0YHpgM/J CQFuree+dmPxxrUpDpChORO72wUkt/zCvzRfkVqqCzga6FywzXV3NDDerqxZGxTL g5bCa27wt/F62+WgYaS/rn30BAfeJLvIDG01bVLmdN6OSOMUnUiXb41gMswPyWhF r1uM+TItWoAJNcaTF1CWly1+3qLuAUqI/3baOO/i+pgHt1oYclJpDPQRkrQlTHC2 bTXv9hST1XgL4bpyz30CMS/mm1Pwhe+t5NnRr0z2vUrC -----END CERTIFICATE-----Generated at Mon Jan 19 11:23:47 2026 by rpki-client