This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/6lfGv8k68GhJfpCtD-OYR6WFhMM.roa File: 6lfGv8k68GhJfpCtD-OYR6WFhMM.roa (raw, json) Hash identifier: hRZoZNE1zfUjpEY2IrJl4n+tjpdwbaQl0JLh8/g+Xrg= Subject key identifier: EA:57:C6:BF:C9:3A:F0:68:49:7E:90:AD:0F:E3:98:47:A5:85:84:C3 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 019B77C6B8B6E4233303C68586B7E3624EF4 Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/6lfGv8k68GhJfpCtD-OYR6WFhMM.roa Signing time: Thu 01 Jan 2026 04:17:50 +0000 ROA not before: Thu 01 Jan 2026 04:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 92.60.72.0/23 maxlen: 23 92.60.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b8:b6:e4:23:33:03:c6:85:86:b7:e3:62:4e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Jan 1 04:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea57c6bfc93af068497e90ad0fe39847a58584c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:93:c5:19:26:c0:45:93:0f:f9:1d:05:b9:e8: 3c:29:8a:6f:58:e4:cf:6c:81:9c:ce:6f:7d:49:1d: 4b:ca:ce:c8:6a:b5:91:1f:1c:2a:a2:38:6d:cd:8e: b0:63:5a:1e:c0:24:ce:c2:0b:4a:5a:bf:94:73:76: e1:f2:35:77:6c:78:13:bf:c7:97:60:c7:18:56:ca: ef:f0:f2:e7:12:ab:c0:26:36:fd:8d:24:09:bf:4b: aa:03:ab:3b:fb:bb:62:fb:f4:2f:45:7c:dc:e3:e6: 8f:67:84:9e:cc:21:38:20:39:ad:af:9e:23:b6:82: 8e:9e:69:72:45:47:89:3b:90:7c:03:74:62:45:45: d4:af:ea:bd:24:cf:73:da:57:d7:05:9c:59:ae:c2: 3f:01:53:cb:fd:25:6c:59:23:1a:5f:14:e8:cc:7c: eb:d1:6f:98:cf:92:81:e9:b2:8c:bd:0a:92:43:f3: 87:a7:38:f0:91:aa:de:67:95:26:9f:c3:ff:29:b6: ac:02:c3:54:c0:b4:4c:15:bc:b3:a9:7c:58:52:54: 78:75:90:ac:c5:b0:ec:38:b4:33:e9:82:16:6e:70: 7c:e7:45:bd:f8:43:16:98:8e:ac:98:c0:13:b5:79: 0c:d9:9f:1e:8e:97:2e:b7:54:8e:af:9a:86:96:77: 07:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:57:C6:BF:C9:3A:F0:68:49:7E:90:AD:0F:E3:98:47:A5:85:84:C3 X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/6lfGv8k68GhJfpCtD-OYR6WFhMM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.60.72.0-92.60.74.255 Signature Algorithm: sha256WithRSAEncryption 6a:d3:d9:de:b7:1b:fd:e0:c4:ec:7d:6e:2a:de:ed:d8:5c:e2: 7e:3b:e4:64:e3:4c:02:08:33:34:c0:cf:73:7a:1b:a3:c2:53: b8:3f:df:13:57:1d:42:f9:8f:28:91:c3:f2:f6:ed:ef:ce:82: 66:5f:56:6b:2d:cf:07:12:33:06:68:30:02:33:27:1a:d1:f1: 8d:1d:1a:bb:92:3f:48:f6:89:f3:94:c9:03:5c:72:cb:15:36: e9:90:39:e5:57:da:21:6f:9a:e5:d2:8b:d8:35:4a:c0:28:e6: fb:1c:c4:7b:1a:02:4e:99:13:17:c7:88:f3:14:87:db:7e:84: 87:3e:71:89:f9:ee:83:65:81:13:81:14:11:41:4e:f3:70:d5: cd:3a:31:66:60:e6:4a:a6:77:73:db:6a:cb:e1:2e:b6:49:dd: a3:d8:2d:e2:28:97:bb:b4:3f:4e:de:52:d3:4e:9a:5e:f2:c4: d4:8f:fb:80:fb:91:8d:e9:44:80:6a:d5:50:38:fd:aa:4f:56: e3:35:56:bf:b2:81:f5:6e:9d:fb:fc:ab:b9:1c:60:e9:c9:63: 77:9e:b4:b0:db:b7:e2:ac:19:db:97:d3:8e:04:10:84:a7:e2: 5f:72:8d:22:58:15:02:e0:0c:d7:2b:32:8a:90:f1:58:98:6d: c7:af:96:4b -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xri25CMzA8aFhrfjYk70MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjYwMTAxMDQxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTU3YzZiZmM5M2FmMDY4NDk3ZTkwYWQwZmUzOTg0N2E1ODU4NGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5PFGSbARZMP+R0Fueg8KYpvWOTP bIGczm99SR1Lys7IarWRHxwqojhtzY6wY1oewCTOwgtKWr+Uc3bh8jV3bHgTv8eX YMcYVsrv8PLnEqvAJjb9jSQJv0uqA6s7+7ti+/QvRXzc4+aPZ4SezCE4IDmtr54j toKOnmlyRUeJO5B8A3RiRUXUr+q9JM9z2lfXBZxZrsI/AVPL/SVsWSMaXxTozHzr 0W+Yz5KB6bKMvQqSQ/OHpzjwkareZ5Umn8P/KbasAsNUwLRMFbyzqXxYUlR4dZCs xbDsOLQz6YIWbnB850W9+EMWmI6smMATtXkM2Z8ejpcut1SOr5qGlncHCwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFOpXxr/JOvBoSX6QrQ/jmEelhYTDMB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvNmxmR3Y4azY4R2hKZnBDdEQtT1lSNldGaE1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANcPEgD BABcPEowDQYJKoZIhvcNAQELBQADggEBAGrT2d63G/3gxOx9bire7dhc4n475GTj TAIIMzTAz3N6G6PCU7g/3xNXHUL5jyiRw/L27e/OgmZfVmstzwcSMwZoMAIzJxrR 8Y0dGruSP0j2ifOUyQNccssVNumQOeVX2iFvmuXSi9g1SsAo5vscxHsaAk6ZExfH iPMUh9t+hIc+cYn57oNlgROBFBFBTvNw1c06MWZg5kqmd3PbasvhLrZJ3aPYLeIo l7u0P07eUtNOml7yxNSP+4D7kY3pRIBq1VA4/apPVuM1Vr+ygfVunfv8q7kcYOnJ Y3eetLDbt+KsGduX044EEISn4l9yjSJYFQLgDNcrMoqQ8ViYbcevlks= -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:11 2026 by rpki-client