This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/6Xa6Oj1TguzeA_SQbiZ2-KR-l9w.roa File: 6Xa6Oj1TguzeA_SQbiZ2-KR-l9w.roa (raw, json) Hash identifier: yZGWLtJQG1fe7kFdqMH4OaCwstlt/mm4AHRs9oE0umw= Subject key identifier: E9:76:BA:3A:3D:53:82:EC:DE:03:F4:90:6E:26:76:F8:A4:7E:97:DC Certificate issuer: /CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa Certificate serial: 019B7C1249C1F50F7A7EBF97981C189D960B Authority key identifier: AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/6Xa6Oj1TguzeA_SQbiZ2-KR-l9w.roa Signing time: Fri 02 Jan 2026 00:18:51 +0000 ROA not before: Fri 02 Jan 2026 00:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21137 IP address blocks: 194.4.140.0/24 maxlen: 24 194.4.141.0/24 maxlen: 24 194.4.142.0/24 maxlen: 24 194.4.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:49:c1:f5:0f:7a:7e:bf:97:98:1c:18:9d:96:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa Validity Not Before: Jan 2 00:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e976ba3a3d5382ecde03f4906e2676f8a47e97dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ba:d4:81:e9:96:40:c5:58:d3:44:34:b4:40: b4:c0:59:9b:90:81:aa:06:88:11:73:cf:ea:c6:90: 71:b3:10:2f:a3:74:3a:2c:ce:d0:b2:d9:b0:2e:5f: c8:3b:a2:36:53:bf:d2:7a:14:ea:1c:fa:48:c3:b8: 71:47:d9:fc:fd:19:e2:dc:8b:bd:18:84:52:be:b0: ca:98:f3:98:6b:28:3e:fe:7d:33:34:24:d8:4e:8a: cc:93:58:fc:65:c2:88:c5:c5:3e:c7:db:c7:46:ad: 2c:a7:00:5b:10:8f:ef:10:29:d8:e7:9c:48:ce:18: 73:1b:ad:27:5c:90:0c:4e:03:e7:94:55:8e:f6:c4: 8a:3a:e5:fe:f8:52:7a:aa:4d:ef:a2:58:fa:95:e0: 7a:da:d4:d4:f2:94:78:db:29:f4:5d:0f:54:0c:59: d3:0e:3a:9b:c9:b9:10:67:03:79:72:fe:15:70:a1: 0c:c5:bc:52:e4:8d:91:16:8c:83:44:af:ef:9b:1f: 39:e4:e2:4b:68:c0:94:e8:8d:85:5c:4d:68:2a:ff: 5c:b4:27:02:a6:c7:a4:70:87:cb:3b:e0:ef:7c:98: fc:72:54:78:fc:96:2f:61:9a:9b:5a:78:d4:d4:a0: 0e:a9:10:79:52:ee:d7:55:a1:02:4e:72:84:0b:aa: f7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:76:BA:3A:3D:53:82:EC:DE:03:F4:90:6E:26:76:F8:A4:7E:97:DC X509v3 Authority Key Identifier: keyid:AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/6Xa6Oj1TguzeA_SQbiZ2-KR-l9w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.4.140.0/22 Signature Algorithm: sha256WithRSAEncryption 86:f8:3a:76:a2:35:3c:dd:83:08:ec:1a:39:52:18:25:77:50: 74:67:c5:0f:07:d1:58:e1:10:8b:a7:1e:91:72:8c:71:e7:38: 4f:4d:ff:69:17:74:39:c0:9a:87:4a:67:19:9a:8f:fa:12:8a: 12:30:71:93:9d:29:5c:6a:58:2c:8a:66:e8:83:a0:ed:fb:a4: 2e:af:f6:d0:3d:f6:a6:3d:5d:d0:df:0b:2f:e0:12:76:1a:35: 82:1a:09:0c:e4:55:10:97:6e:9f:0b:04:06:9a:c8:53:0f:0d: be:e2:96:4c:d9:e2:54:d2:61:72:8c:45:8f:7c:5d:bc:37:6d: d4:7e:1e:38:d9:d1:5d:75:4d:24:06:5d:bb:ee:0f:f8:85:3c: 78:3e:e5:99:04:7a:54:fa:95:1b:74:61:88:98:49:ea:b1:35: 6a:b0:75:31:1d:ec:45:a3:ff:1a:40:70:23:d2:aa:e6:cb:c4: 7c:bb:4b:18:02:a8:60:8f:8e:54:5a:bf:56:b6:1b:29:52:da: c8:db:32:29:80:57:aa:17:b7:33:10:05:66:ab:d2:b3:1c:55: b3:05:63:4c:c2:71:77:87:78:0b:eb:8e:c3:84:0d:81:db:91: 4d:0b:00:ec:bc:ac:55:1e:0d:f5:3e:7f:50:22:e7:52:30:de: 52:44:78:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EknB9Q96fr+XmBwYnZYLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlM2FkYjU4YzEwOGI4YmIxM2U0M2MxNWVlYTNjNzg5OWI2 NGEzYWEwHhcNMjYwMTAyMDAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTc2YmEzYTNkNTM4MmVjZGUwM2Y0OTA2ZTI2NzZmOGE0N2U5N2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9LrUgemWQMVY00Q0tEC0wFmbkIGq BogRc8/qxpBxsxAvo3Q6LM7QstmwLl/IO6I2U7/SehTqHPpIw7hxR9n8/Rni3Iu9 GIRSvrDKmPOYayg+/n0zNCTYTorMk1j8ZcKIxcU+x9vHRq0spwBbEI/vECnY55xI zhhzG60nXJAMTgPnlFWO9sSKOuX++FJ6qk3volj6leB62tTU8pR42yn0XQ9UDFnT DjqbybkQZwN5cv4VcKEMxbxS5I2RFoyDRK/vmx855OJLaMCU6I2FXE1oKv9ctCcC psekcIfLO+DvfJj8clR4/JYvYZqbWnjU1KAOqRB5Uu7XVaECTnKEC6r3+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOl2ujo9U4Ls3gP0kG4mdvikfpfcMB8GA1UdIwQY MBaAFK4621jBCLi7E+Q8Fe6jx4mbZKOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmpyYldNRUl1THNUNUR3VjdxUEhpWnRrbzZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9kODFhYTItOGE1NS00MGRiLTk2ZGMt OGZiYjUxMjhhMmM5LzEvNlhhNk9qMVRndXplQV9TUWJpWjItS1ItbDl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9kODFhYTItOGE1NS00MGRiLTk2ZGMtOGZiYjUxMjhhMmM5 LzEvcmpyYldNRUl1THNUNUR3VjdxUEhpWnRrbzZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwgSMMA0G CSqGSIb3DQEBCwUAA4IBAQCG+Dp2ojU83YMI7Bo5Uhgld1B0Z8UPB9FY4RCLpx6R coxx5zhPTf9pF3Q5wJqHSmcZmo/6EooSMHGTnSlcalgsimbog6Dt+6Qur/bQPfam PV3Q3wsv4BJ2GjWCGgkM5FUQl26fCwQGmshTDw2+4pZM2eJU0mFyjEWPfF28N23U fh442dFddU0kBl277g/4hTx4PuWZBHpU+pUbdGGImEnqsTVqsHUxHexFo/8aQHAj 0qrmy8R8u0sYAqhgj45UWr9WthspUtrI2zIpgFeqF7czEAVmq9KzHFWzBWNMwnF3 h3gL647DhA2B25FNCwDsvKxVHg31Pn9QIudSMN5SRHhp -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:22 2026 by rpki-client