This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/h6_aL5pgoLsaIJgKdok7qkIgM6o.roa File: h6_aL5pgoLsaIJgKdok7qkIgM6o.roa (raw, json) Hash identifier: MsbqMbJsONIWn5FHKcqihNnXLAsAL7eIuq+gvHJq75E= Subject key identifier: 87:AF:DA:2F:9A:60:A0:BB:1A:20:98:0A:76:89:3B:AA:42:20:33:AA Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 019B7BA4F5F24A5BACA99DD7F2304DC8DF45 Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/h6_aL5pgoLsaIJgKdok7qkIgM6o.roa Signing time: Thu 01 Jan 2026 22:19:27 +0000 ROA not before: Thu 01 Jan 2026 22:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41540 IP address blocks: 31.172.143.0/24 maxlen: 32 91.231.127.0/24 maxlen: 32 92.60.190.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Feb 2026 01:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:f5:f2:4a:5b:ac:a9:9d:d7:f2:30:4d:c8:df:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: Jan 1 22:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87afda2f9a60a0bb1a20980a76893baa422033aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ce:6c:b6:bd:ef:a2:7f:a1:58:79:60:b3:1b: 1b:84:7d:8e:2b:4c:f4:b2:41:bc:55:66:27:6d:8a: f6:63:fd:dd:12:c8:ab:62:cd:6e:2d:28:67:0e:97: 1e:66:b7:05:4f:a3:9d:55:1c:d1:2b:d3:bd:6c:9f: 60:b7:d8:e7:5e:1a:30:22:3d:d1:e8:d1:83:d4:6e: c7:c5:8b:39:da:a9:e6:cd:92:84:c1:60:0b:5f:91: cd:31:f6:b6:92:0d:1a:86:54:0f:d5:ee:eb:49:2e: 5d:13:64:10:3b:80:1e:ed:a0:c1:36:d4:77:d0:30: 6c:47:1e:ee:33:fc:9b:7f:a9:17:b5:33:cc:8f:a5: 8f:08:07:2f:a9:42:49:b6:37:b7:45:62:4c:2f:9f: a5:d3:65:63:9a:99:98:6a:3b:8b:bb:8a:51:5b:db: ca:19:cf:08:68:22:aa:23:d5:1f:7f:2f:59:64:10: e1:59:9b:cc:65:dc:39:81:19:ab:09:f2:28:eb:c1: ea:23:0f:c9:ec:96:bb:1e:96:84:94:3e:26:28:59: ab:d7:bf:4d:47:2c:fe:44:55:d1:91:b3:33:da:44: 5a:bc:5b:28:11:43:74:89:9c:96:6f:b5:2a:1d:d2: 6d:3d:b5:7b:34:3d:76:d4:97:71:59:bd:ec:44:7e: c9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AF:DA:2F:9A:60:A0:BB:1A:20:98:0A:76:89:3B:AA:42:20:33:AA X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/h6_aL5pgoLsaIJgKdok7qkIgM6o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.172.143.0/24 91.231.127.0/24 92.60.190.0/23 Signature Algorithm: sha256WithRSAEncryption 67:1d:19:47:0a:9c:da:00:c1:00:d4:8e:42:a9:f5:43:fa:18: 4d:12:81:51:8c:f1:d6:2d:16:2c:c0:43:d4:c5:28:50:4f:13: 4e:ef:e6:56:02:6d:ae:ac:5e:d1:93:5c:01:f0:22:af:f6:b0: 15:e5:14:fb:73:29:b6:37:7e:cf:98:29:10:9c:83:b0:69:e6: 28:04:39:fb:70:61:e2:f9:50:cb:44:5b:5e:f1:e1:e7:20:fe: 46:a6:87:17:fe:40:e6:69:0e:5f:08:80:f1:0f:fd:3d:02:db: 4c:36:2f:83:55:e3:4f:01:f4:56:56:ba:4b:76:65:60:db:a0: 29:8a:24:70:86:63:fc:3d:c0:0f:b4:65:b1:fd:7b:f9:66:46: 10:28:cb:df:a7:7c:59:c0:bb:08:c8:8e:18:f1:43:20:c5:ec: 65:26:bf:66:52:35:37:a5:11:4d:0c:4e:09:e0:3e:c6:3a:18: 8f:87:f1:c5:70:24:f8:9d:75:b1:d2:6d:61:1b:dd:29:2a:fb: 4f:4c:10:d8:ba:1a:55:80:ff:29:34:1a:62:c5:c1:74:c1:e9: f3:fa:26:c3:ad:bd:e3:99:03:85:d0:e7:28:41:e5:44:85:44: a5:ad:f9:ec:b6:94:0a:1a:b6:2d:c4:84:1f:4f:0f:65:43:a6: ce:19:6a:44 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7pPXySlusqZ3X8jBNyN9FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjYwMTAxMjIxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2FmZGEyZjlhNjBhMGJiMWEyMDk4MGE3Njg5M2JhYTQyMjAzM2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM5str3von+hWHlgsxsbhH2OK0z0 skG8VWYnbYr2Y/3dEsirYs1uLShnDpceZrcFT6OdVRzRK9O9bJ9gt9jnXhowIj3R 6NGD1G7HxYs52qnmzZKEwWALX5HNMfa2kg0ahlQP1e7rSS5dE2QQO4Ae7aDBNtR3 0DBsRx7uM/ybf6kXtTPMj6WPCAcvqUJJtje3RWJML5+l02VjmpmYajuLu4pRW9vK Gc8IaCKqI9Uffy9ZZBDhWZvMZdw5gRmrCfIo68HqIw/J7Ja7HpaElD4mKFmr179N Ryz+RFXRkbMz2kRavFsoEUN0iZyWb7UqHdJtPbV7ND121JdxWb3sRH7JKQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIev2i+aYKC7GiCYCnaJO6pCIDOqMB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEvaDZfYUw1cGdvTHNhSUpnS2Rvazdxa0lnTTZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAH6yPAwQA W+d/AwQBXDy+MA0GCSqGSIb3DQEBCwUAA4IBAQBnHRlHCpzaAMEA1I5CqfVD+hhN EoFRjPHWLRYswEPUxShQTxNO7+ZWAm2urF7Rk1wB8CKv9rAV5RT7cym2N37PmCkQ nIOwaeYoBDn7cGHi+VDLRFte8eHnIP5GpocX/kDmaQ5fCIDxD/09AttMNi+DVeNP AfRWVrpLdmVg26ApiiRwhmP8PcAPtGWx/Xv5ZkYQKMvfp3xZwLsIyI4Y8UMgxexl Jr9mUjU3pRFNDE4J4D7GOhiPh/HFcCT4nXWx0m1hG90pKvtPTBDYuhpVgP8pNBpi xcF0wenz+ibDrb3jmQOF0OcoQeVEhUSlrfnstpQKGrYtxIQfTw9lQ6bOGWpE -----END CERTIFICATE-----Generated at Sun Feb 8 08:10:02 2026 by rpki-client