This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/6Q3hJK7l5gtN_Lr_bBxFEB7LRps.roa File: 6Q3hJK7l5gtN_Lr_bBxFEB7LRps.roa (raw, json) Hash identifier: iw8Ogmc/LXNOPuyk5RisCNNGw5P8+o4St4o7kNLdmFM= Subject key identifier: E9:0D:E1:24:AE:E5:E6:0B:4D:FC:BA:FF:6C:1C:45:10:1E:CB:46:9B Certificate issuer: /CN=950082a85946722c7fc1c864f0fbd80dc54dcd29 Certificate serial: 019B7910EB56CC78EFF7E7E6542E072549A6 Authority key identifier: 95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/6Q3hJK7l5gtN_Lr_bBxFEB7LRps.roa Signing time: Thu 01 Jan 2026 10:18:30 +0000 ROA not before: Thu 01 Jan 2026 10:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 91.240.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:eb:56:cc:78:ef:f7:e7:e6:54:2e:07:25:49:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=950082a85946722c7fc1c864f0fbd80dc54dcd29 Validity Not Before: Jan 1 10:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e90de124aee5e60b4dfcbaff6c1c45101ecb469b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:30:62:8e:b5:5c:36:58:a9:42:94:66:e3:13: 97:49:9c:dd:a6:9f:04:cd:fa:9b:1f:57:23:ac:87: 8e:73:42:4b:94:06:13:8c:3f:0e:3b:47:04:07:4f: 28:fa:bc:ae:68:83:b0:e5:d4:a0:a1:c2:39:f4:24: a1:ab:6d:b6:48:58:5f:75:e5:48:c6:6e:fb:dd:17: 66:2d:a7:62:de:6f:e9:7a:89:f6:8c:f5:6f:32:93: 01:01:ce:ee:a2:bd:1c:97:a9:fe:d9:39:0c:7c:9f: 19:06:3d:18:e1:b5:d9:93:06:f9:15:eb:e9:b7:4c: c6:4e:e1:ae:83:03:68:a7:cb:e1:2d:fb:d5:57:3b: 99:06:c4:e5:88:b8:de:ee:c5:d9:b8:d9:e7:29:04: 50:f5:ac:5a:ec:c4:73:18:46:22:dd:c1:d4:47:76: 13:ff:d9:5c:83:30:dd:2f:da:93:0b:0b:3f:08:e3: e2:62:bc:88:3f:dd:29:d2:c9:87:27:49:7d:f3:e8: 84:e0:f9:5b:b7:09:ee:b6:56:09:d4:62:16:be:b8: a9:d4:cf:21:73:9f:4d:f5:f0:16:f5:04:e3:5b:9c: 49:65:11:98:7f:8e:85:0e:a1:47:d3:8e:3c:9c:14: 72:15:43:0f:d4:4e:8c:49:71:95:59:1b:95:3a:93: c7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:0D:E1:24:AE:E5:E6:0B:4D:FC:BA:FF:6C:1C:45:10:1E:CB:46:9B X509v3 Authority Key Identifier: keyid:95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/6Q3hJK7l5gtN_Lr_bBxFEB7LRps.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.233.0/24 Signature Algorithm: sha256WithRSAEncryption 79:c6:ba:8c:4c:f3:3a:72:93:ab:0a:65:b4:18:e4:e5:7d:1e: a0:92:39:5b:a3:35:23:dd:8b:15:4b:a8:a8:57:80:d7:9f:5c: 03:91:93:7f:9a:ba:09:9b:b2:6a:6e:06:59:2e:d1:15:0c:c6: 1c:e5:0b:1f:03:0b:4e:29:22:a5:d0:0a:04:d2:9d:7f:20:0d: 6c:98:56:be:1f:c5:42:de:80:cf:02:48:e1:d6:e7:e6:61:33: 77:d0:9f:3a:5e:61:a9:c7:52:db:35:57:dd:85:9c:ad:f9:01: cb:4f:34:28:01:02:f5:67:4c:61:16:d0:da:6f:19:23:2d:e6: eb:21:5b:0b:ab:97:5b:85:8a:23:51:86:eb:e6:0d:0d:a7:b2: 16:e8:8b:64:55:15:9a:53:e6:ba:b9:ff:6a:64:c1:e1:de:21: 58:fb:24:72:3a:94:bf:bf:6c:d0:e3:3c:d6:db:fd:c2:b5:fa: 51:7a:fc:2f:ae:11:cb:96:cf:2b:03:4a:2f:5b:a1:5e:c2:ec: a5:58:16:3c:9a:74:fb:1e:83:04:81:e6:6f:4c:68:cf:2e:e4: 5c:2e:91:8c:b7:69:bb:f3:a7:44:92:e6:ed:c4:c0:0a:22:90: 4a:ec:b7:80:9f:75:f9:97:c2:a8:9b:e2:0f:ee:e5:0b:86:8d: 44:0d:85:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EOtWzHjv9+fmVC4HJUmmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MDA4MmE4NTk0NjcyMmM3ZmMxYzg2NGYwZmJkODBkYzU0 ZGNkMjkwHhcNMjYwMTAxMTAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTBkZTEyNGFlZTVlNjBiNGRmY2JhZmY2YzFjNDUxMDFlY2I0NjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTBijrVcNlipQpRm4xOXSZzdpp8E zfqbH1cjrIeOc0JLlAYTjD8OO0cEB08o+ryuaIOw5dSgocI59CShq222SFhfdeVI xm773RdmLadi3m/peon2jPVvMpMBAc7uor0cl6n+2TkMfJ8ZBj0Y4bXZkwb5Fevp t0zGTuGugwNop8vhLfvVVzuZBsTliLje7sXZuNnnKQRQ9axa7MRzGEYi3cHUR3YT /9lcgzDdL9qTCws/COPiYryIP90p0smHJ0l98+iE4PlbtwnutlYJ1GIWvrip1M8h c59N9fAW9QTjW5xJZRGYf46FDqFH0448nBRyFUMP1E6MSXGVWRuVOpPHIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOkN4SSu5eYLTfy6/2wcRRAey0abMB8GA1UdIwQY MBaAFJUAgqhZRnIsf8HIZPD72A3FTc0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFFDQ3FGbEdjaXhfd2NoazhQdllEY1ZOelNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zNGU0MGYtZTFkMi00ZDI5LTg5YzUt YzY5YTdmMDNlMThmLzEvNlEzaEpLN2w1Z3ROX0xyX2JCeEZFQjdMUnBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8zNGU0MGYtZTFkMi00ZDI5LTg5YzUtYzY5YTdmMDNlMThm LzEvbFFDQ3FGbEdjaXhfd2NoazhQdllEY1ZOelNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/DpMA0G CSqGSIb3DQEBCwUAA4IBAQB5xrqMTPM6cpOrCmW0GOTlfR6gkjlbozUj3YsVS6io V4DXn1wDkZN/mroJm7JqbgZZLtEVDMYc5QsfAwtOKSKl0AoE0p1/IA1smFa+H8VC 3oDPAkjh1ufmYTN30J86XmGpx1LbNVfdhZyt+QHLTzQoAQL1Z0xhFtDabxkjLebr IVsLq5dbhYojUYbr5g0Np7IW6ItkVRWaU+a6uf9qZMHh3iFY+yRyOpS/v2zQ4zzW 2/3CtfpRevwvrhHLls8rA0ovW6FewuylWBY8mnT7HoMEgeZvTGjPLuRcLpGMt2m7 86dEkubtxMAKIpBK7LeAn3X5l8Kom+IP7uULho1EDYXY -----END CERTIFICATE-----Generated at Fri Jan 9 00:58:29 2026 by rpki-client