This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/MX6IKcbu6nbrcpKUTFeckfpRtKY.roa File: MX6IKcbu6nbrcpKUTFeckfpRtKY.roa (raw, json) Hash identifier: Nhzod3LsBM1lbTTIfaXha3ceYkrv/UztfLRskLbxjnU= Subject key identifier: 31:7E:88:29:C6:EE:EA:76:EB:72:92:94:4C:57:9C:91:FA:51:B4:A6 Certificate issuer: /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6 Certificate serial: 019B7C80A1139EC7D9786E3BAD92569AF105 Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/MX6IKcbu6nbrcpKUTFeckfpRtKY.roa Signing time: Fri 02 Jan 2026 02:19:23 +0000 ROA not before: Fri 02 Jan 2026 02:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200373 IP address blocks: 193.56.28.0/24 maxlen: 24 2a14:6380::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a1:13:9e:c7:d9:78:6e:3b:ad:92:56:9a:f1:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6 Validity Not Before: Jan 2 02:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=317e8829c6eeea76eb7292944c579c91fa51b4a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ea:9a:5d:69:bc:14:e9:c1:41:74:c0:19:77: f6:ea:28:72:31:79:e5:fc:40:84:79:6c:3f:d9:10: 33:e4:d7:16:e7:a6:c3:7d:87:3d:81:05:8b:6a:fa: 22:fc:0f:d5:b2:af:ce:78:44:3d:62:ab:68:cb:99: e7:1e:d0:97:64:df:ff:82:91:9e:76:ef:8f:12:df: 77:6e:46:c9:8a:75:fa:33:66:62:de:7f:5c:8f:3a: 52:f6:d7:78:77:0e:e4:7e:94:a5:7e:9e:61:bf:25: f2:64:f3:d4:bd:a5:04:27:e5:34:e6:c0:3f:fb:78: 65:46:3c:31:22:57:7f:43:49:ea:ff:9e:9c:a7:31: 51:55:37:54:93:0f:65:6c:1a:6c:40:b9:41:8a:c2: 1e:6a:e6:27:8a:51:20:3a:40:c2:dd:44:bc:67:d1: 1a:c4:a1:1b:18:b5:2e:90:10:42:16:a7:c6:1f:40: 1b:53:ba:d9:39:ae:16:8b:59:6e:62:0c:17:a3:b8: 47:02:c8:7c:f9:bc:59:e3:0b:c5:1e:56:4e:77:05: 5b:7e:c6:52:74:2f:bd:c8:8e:38:1b:24:4f:b6:40: e6:73:7c:2d:9f:cb:ad:88:24:91:68:93:4a:c4:a2: 15:fa:04:e4:0a:41:ed:c9:68:1d:d0:83:d1:4a:2f: 9e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:7E:88:29:C6:EE:EA:76:EB:72:92:94:4C:57:9C:91:FA:51:B4:A6 X509v3 Authority Key Identifier: keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/MX6IKcbu6nbrcpKUTFeckfpRtKY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.56.28.0/24 IPv6: 2a14:6380::/29 Signature Algorithm: sha256WithRSAEncryption 16:bd:29:46:0a:81:72:45:1a:e0:0a:a0:94:e4:1e:58:56:6a: 6a:05:31:ea:2a:7d:81:59:ec:a5:d6:01:7d:ca:45:10:85:f1: 45:55:92:ca:a6:df:0b:f5:32:dd:fa:51:6f:61:70:fe:71:58: a1:53:23:7b:d5:de:d7:47:09:1f:fb:01:a4:86:ed:1f:6b:ee: eb:cb:66:4b:bc:a4:00:c5:84:4e:ed:72:e4:83:af:b4:ca:64: fe:4d:08:9d:b6:91:a2:69:92:81:ef:6d:1e:6d:6c:17:d7:55: b7:c7:bc:6d:c9:0d:a7:2d:33:d0:de:be:b2:61:e9:86:4d:1e: 7e:3e:da:03:99:6a:d5:6c:c2:5d:06:91:c4:09:30:9c:5d:ce: d6:21:94:14:22:9e:e5:81:5c:4e:10:47:12:51:3c:13:63:01: 26:95:0d:f3:7b:fe:d4:48:b7:f2:3d:24:e0:0c:1b:e6:80:1f: 6a:f7:3e:93:ce:92:41:f6:cd:7c:f9:3d:1e:b1:12:e6:84:d9: 91:fb:43:b6:dd:93:65:be:e2:4b:60:dd:24:e4:7f:db:22:bb: 70:74:11:11:5e:ec:4c:9d:c1:98:05:08:de:dc:fe:5e:3a:df: f7:73:cc:68:55:f2:e5:0b:f8:02:89:3d:81:ac:62:03:3f:de: 31:9a:6c:a5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gKETnsfZeG47rZJWmvEFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjN2ZiZDY3NzQ0MWNiYjVjMGJkNDdiY2QyZjM4YmExOTJh MzM2YTYwHhcNMjYwMTAyMDIxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTdlODgyOWM2ZWVlYTc2ZWI3MjkyOTQ0YzU3OWM5MWZhNTFiNGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOqaXWm8FOnBQXTAGXf26ihyMXnl /ECEeWw/2RAz5NcW56bDfYc9gQWLavoi/A/Vsq/OeEQ9Yqtoy5nnHtCXZN//gpGe du+PEt93bkbJinX6M2Zi3n9cjzpS9td4dw7kfpSlfp5hvyXyZPPUvaUEJ+U05sA/ +3hlRjwxIld/Q0nq/56cpzFRVTdUkw9lbBpsQLlBisIeauYnilEgOkDC3US8Z9Ea xKEbGLUukBBCFqfGH0AbU7rZOa4Wi1luYgwXo7hHAsh8+bxZ4wvFHlZOdwVbfsZS dC+9yI44GyRPtkDmc3wtn8utiCSRaJNKxKIV+gTkCkHtyWgd0IPRSi+e1wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDF+iCnG7up263KSlExXnJH6UbSmMB8GA1UdIwQY MBaAFNx/vWd0Qcu1wL1HvNLzi6GSozamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iMjVjM2EtMGMwYi00ZDRlLTk4MTMt NzZkM2Q0ODBmYTY4LzEvTVg2SUtjYnU2bmJyY3BLVVRGZWNrZnBSdEtZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iMjVjM2EtMGMwYi00ZDRlLTk4MTMtNzZkM2Q0ODBmYTY4 LzEvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwTgcMA0E AgACMAcDBQMqFGOAMA0GCSqGSIb3DQEBCwUAA4IBAQAWvSlGCoFyRRrgCqCU5B5Y VmpqBTHqKn2BWeyl1gF9ykUQhfFFVZLKpt8L9TLd+lFvYXD+cVihUyN71d7XRwkf +wGkhu0fa+7ry2ZLvKQAxYRO7XLkg6+0ymT+TQidtpGiaZKB720ebWwX11W3x7xt yQ2nLTPQ3r6yYemGTR5+PtoDmWrVbMJdBpHECTCcXc7WIZQUIp7lgVxOEEcSUTwT YwEmlQ3ze/7USLfyPSTgDBvmgB9q9z6TzpJB9s18+T0esRLmhNmR+0O23ZNlvuJL YN0k5H/bIrtwdBERXuxMncGYBQje3P5eOt/3c8xoVfLlC/gCiT2BrGIDP94xmmyl -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:06 2026 by rpki-client