This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/6P9heqcjWC1rgYXIRmhdx-97RQI.roa File: 6P9heqcjWC1rgYXIRmhdx-97RQI.roa (raw, json) Hash identifier: Wmt5NIZ7B735D829/2kh7N0lg+ZEmMiQ2DIicb7NPis= Subject key identifier: E8:FF:61:7A:A7:23:58:2D:6B:81:85:C8:46:68:5D:C7:EF:7B:45:02 Certificate issuer: /CN=427ce5719caa681adbd493a8d9a38a675d6bd639 Certificate serial: 019B7C7F14F87F663B3545A18F3FAEC1973B Authority key identifier: 42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/6P9heqcjWC1rgYXIRmhdx-97RQI.roa Signing time: Fri 02 Jan 2026 02:17:41 +0000 ROA not before: Fri 02 Jan 2026 02:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197573 IP address blocks: 176.52.184.0/24 maxlen: 24 2a02:f181::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 20:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:14:f8:7f:66:3b:35:45:a1:8f:3f:ae:c1:97:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=427ce5719caa681adbd493a8d9a38a675d6bd639 Validity Not Before: Jan 2 02:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8ff617aa723582d6b8185c846685dc7ef7b4502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:eb:09:95:14:51:7b:42:db:a7:30:39:93:08: 63:71:6b:bc:fa:8b:4b:41:41:09:c3:36:27:4e:01: c6:4b:b9:22:40:82:12:9a:60:6c:f5:cd:79:91:d5: 9b:90:81:33:7d:65:3b:24:a1:91:ce:d6:25:2f:5d: 01:20:51:28:9a:ed:02:cf:20:f7:99:81:60:29:c7: 16:b0:de:1a:6f:1c:c8:51:53:0a:1f:e5:80:ed:34: 9a:3a:77:eb:f5:ce:d1:13:b6:f5:63:4a:eb:96:1c: ab:c0:f9:8e:a0:d9:78:ff:b2:9a:62:e8:55:e7:1a: 1b:50:e3:04:91:87:f4:29:8e:88:d3:c2:7f:0d:77: 6a:14:34:04:02:f9:03:0e:77:e2:18:2a:0f:e8:52: 5f:64:ab:1c:b7:e2:3f:23:6b:d5:c9:8a:de:1a:fe: cc:75:a7:54:b1:70:6f:a3:a5:22:31:d9:b1:4e:3e: 26:a1:fc:c3:f2:d1:de:fd:8a:5a:80:aa:3a:b7:5a: 89:c0:1b:e9:9c:2a:49:7f:6b:db:9d:83:d5:2f:9c: 72:ca:80:e8:42:49:d5:ea:67:a8:ea:fd:e0:48:a2: 2d:7a:ac:bc:b6:3b:df:a1:a6:84:f3:15:bb:90:c5: f7:ff:88:19:5c:bb:f9:6d:ec:b9:4c:40:01:4b:99: 9f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FF:61:7A:A7:23:58:2D:6B:81:85:C8:46:68:5D:C7:EF:7B:45:02 X509v3 Authority Key Identifier: keyid:42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/6P9heqcjWC1rgYXIRmhdx-97RQI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.52.184.0/24 IPv6: 2a02:f181::/48 Signature Algorithm: sha256WithRSAEncryption 98:ff:4b:d9:e1:ab:10:02:86:6d:49:3c:3c:ec:57:45:4b:68: ee:80:24:ef:5a:4e:9b:03:9a:7c:d7:15:b2:a0:1b:6d:e8:86: f4:fc:f3:92:fc:6f:7f:26:c6:00:d6:02:16:30:61:4c:4c:89: 68:4e:ab:91:05:d8:00:a7:5f:f7:f7:fd:36:dc:88:ca:1f:d2: 7f:66:d3:0b:34:bb:d7:f3:aa:91:d5:74:fa:86:0d:2d:f8:da: 24:4c:0a:3f:2e:33:80:06:3e:ac:d6:97:f2:af:15:cf:cc:d1: 6b:03:1c:df:1b:d7:8e:b1:40:c4:a6:30:bb:c5:85:f0:44:8d: 2e:ae:30:a4:22:39:45:57:42:a6:9c:98:51:91:a2:6b:09:67: f7:d6:41:c1:4c:a4:d4:1c:8c:c2:b1:2d:d3:f1:43:06:0d:93: 93:3c:99:1e:72:22:d4:75:9e:fb:24:6c:69:df:7a:0b:ab:52: 26:9a:75:25:20:ce:8f:fa:58:d4:9f:49:23:b2:ac:59:e9:fd: e0:48:c0:5b:11:10:d8:d3:52:33:54:26:fa:eb:0b:c9:55:07: 61:eb:cc:bb:ee:0e:51:70:7c:53:ea:9e:24:56:31:23:9a:18: b8:64:2a:1c:e8:a5:9a:e8:bb:bd:a8:fa:3d:27:1b:14:9c:ef: 47:96:82:92 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8fxT4f2Y7NUWhjz+uwZc7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyN2NlNTcxOWNhYTY4MWFkYmQ0OTNhOGQ5YTM4YTY3NWQ2 YmQ2MzkwHhcNMjYwMTAyMDIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGZmNjE3YWE3MjM1ODJkNmI4MTg1Yzg0NjY4NWRjN2VmN2I0NTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+sJlRRRe0LbpzA5kwhjcWu8+otL QUEJwzYnTgHGS7kiQIISmmBs9c15kdWbkIEzfWU7JKGRztYlL10BIFEomu0CzyD3 mYFgKccWsN4abxzIUVMKH+WA7TSaOnfr9c7RE7b1Y0rrlhyrwPmOoNl4/7KaYuhV 5xobUOMEkYf0KY6I08J/DXdqFDQEAvkDDnfiGCoP6FJfZKsct+I/I2vVyYreGv7M dadUsXBvo6UiMdmxTj4mofzD8tHe/YpagKo6t1qJwBvpnCpJf2vbnYPVL5xyyoDo QknV6meo6v3gSKIteqy8tjvfoaaE8xW7kMX3/4gZXLv5bey5TEABS5mfaQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOj/YXqnI1gta4GFyEZoXcfve0UCMB8GA1UdIwQY MBaAFEJ85XGcqmga29STqNmjimdda9Y5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW56bGNaeXFhQnJiMUpPbzJhT0taMTFyMWprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8zZTM1NDgtZmRiNS00ZGVkLWJhNTkt MDkxYzJkMzAzZmU4LzEvNlA5aGVxY2pXQzFyZ1lYSVJtaGR4LTk3UlFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8zZTM1NDgtZmRiNS00ZGVkLWJhNTktMDkxYzJkMzAzZmU4 LzEvUW56bGNaeXFhQnJiMUpPbzJhT0taMTFyMWprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAsDS4MA8E AgACMAkDBwAqAvGBAAAwDQYJKoZIhvcNAQELBQADggEBAJj/S9nhqxAChm1JPDzs V0VLaO6AJO9aTpsDmnzXFbKgG23ohvT885L8b38mxgDWAhYwYUxMiWhOq5EF2ACn X/f3/TbciMof0n9m0ws0u9fzqpHVdPqGDS342iRMCj8uM4AGPqzWl/KvFc/M0WsD HN8b146xQMSmMLvFhfBEjS6uMKQiOUVXQqacmFGRomsJZ/fWQcFMpNQcjMKxLdPx QwYNk5M8mR5yItR1nvskbGnfegurUiaadSUgzo/6WNSfSSOyrFnp/eBIwFsRENjT UjNUJvrrC8lVB2HrzLvuDlFwfFPqniRWMSOaGLhkKhzopZrou72o+j0nGxSc70eW gpI= -----END CERTIFICATE-----Generated at Sat Jan 3 01:33:26 2026 by rpki-client