This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/JL6Ox6dWBL8ApbzGhHNgHgkH08o.roa File: JL6Ox6dWBL8ApbzGhHNgHgkH08o.roa (raw, json) Hash identifier: ixMKAyIPqjVMfEHJMavyVmPNTt58bhUiJM7XMfqPYcM= Subject key identifier: 24:BE:8E:C7:A7:56:04:BF:00:A5:BC:C6:84:73:60:1E:09:07:D3:CA Certificate issuer: /CN=f920755bf67ba7d7b4d3d001027604ea29b23ed1 Certificate serial: 019B797E179B32A6DAAA5C2484CC647EA8FC Authority key identifier: F9:20:75:5B:F6:7B:A7:D7:B4:D3:D0:01:02:76:04:EA:29:B2:3E:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/JL6Ox6dWBL8ApbzGhHNgHgkH08o.roa Signing time: Thu 01 Jan 2026 12:17:45 +0000 ROA not before: Thu 01 Jan 2026 12:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204179 IP address blocks: 109.74.24.0/23 maxlen: 23 2a0d:41c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:17:9b:32:a6:da:aa:5c:24:84:cc:64:7e:a8:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f920755bf67ba7d7b4d3d001027604ea29b23ed1 Validity Not Before: Jan 1 12:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24be8ec7a75604bf00a5bcc68473601e0907d3ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ba:1e:1e:07:b2:6a:67:56:65:f0:6a:6e:00: 06:98:f4:8a:08:76:c3:6f:7d:ef:05:a0:d9:97:c1: e1:56:f1:0b:e8:1e:7f:d8:f8:26:c5:f5:95:cd:92: 17:2d:00:0d:9b:3a:65:23:cf:57:b9:64:8b:e6:6a: b9:e1:d0:2b:e9:bc:03:42:4e:cc:ef:c5:45:9a:e0: 6d:16:90:7f:61:24:be:08:53:de:33:c5:1c:db:cb: c9:49:1a:0b:9f:04:eb:3b:57:64:20:7c:40:d0:ac: 16:aa:8c:a1:af:7b:b2:1f:be:3a:1a:62:5a:2f:61: 2a:fa:34:ff:e6:de:9d:5c:ac:5a:64:0e:2c:19:7b: 9c:df:d1:a2:97:69:02:e0:3b:34:f8:fd:12:3d:4e: bb:b2:ec:70:b8:1c:0d:bc:21:f0:fe:d7:f6:fa:9f: 5e:05:d6:6b:8d:df:f6:dd:a0:ee:87:35:5d:57:d3: 1f:19:7b:35:76:8a:8f:65:9a:27:e8:9b:78:16:bd: 85:81:ad:89:89:39:fe:80:88:6d:50:8a:5e:1d:46: 83:55:19:0b:5a:52:26:18:41:bb:bf:79:9c:95:6e: 3b:5c:36:d9:80:71:5e:2a:8f:67:f7:77:85:23:8c: 4e:17:46:ee:8a:9c:02:83:fb:77:b2:a8:5e:8a:1b: ad:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BE:8E:C7:A7:56:04:BF:00:A5:BC:C6:84:73:60:1E:09:07:D3:CA X509v3 Authority Key Identifier: keyid:F9:20:75:5B:F6:7B:A7:D7:B4:D3:D0:01:02:76:04:EA:29:B2:3E:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/JL6Ox6dWBL8ApbzGhHNgHgkH08o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.74.24.0/23 IPv6: 2a0d:41c0::/32 Signature Algorithm: sha256WithRSAEncryption b8:9d:c7:12:8e:7b:47:23:e4:0f:2f:53:02:8a:cf:31:f5:58: 7c:c5:b4:85:d8:0c:37:1a:12:a6:76:a3:5d:15:42:c3:de:17: 5a:7f:2f:44:68:8c:e4:99:b0:20:63:38:33:52:cf:51:de:35: de:f2:52:b2:e0:78:7c:37:31:6e:f4:49:e7:a8:46:34:92:f5: c0:26:cc:8b:1a:97:e2:0f:20:33:7c:d4:22:79:c4:60:46:dd: b3:f5:81:b7:31:c6:b1:11:c5:e0:32:99:22:93:c7:a1:42:a0: 2b:25:c4:f9:9a:b1:35:f4:14:07:e1:8a:88:40:51:1a:ea:6f: 74:03:6d:99:9e:2c:17:68:1a:2f:73:07:04:3b:a2:2a:75:47: 7d:45:a4:c6:ec:5f:a5:c9:fe:82:13:bc:75:02:da:8c:82:b1: bd:67:e5:d1:19:4b:1a:ed:dd:cb:6e:69:d2:fb:20:2e:8a:4f: d4:7d:54:2f:88:88:04:ca:1f:0e:82:2c:94:ee:c5:82:6a:ba: 39:04:b2:fb:1e:c9:c9:cb:cb:27:4a:18:cd:47:d6:53:ee:61: fd:eb:8f:a5:ba:52:ca:88:0a:ff:99:c6:bf:ae:aa:ee:65:da: e5:47:75:98:da:81:70:21:e7:1a:89:ae:c0:20:6e:9b:d7:4c: 4c:3d:7c:1a -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5fhebMqbaqlwkhMxkfqj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MjA3NTViZjY3YmE3ZDdiNGQzZDAwMTAyNzYwNGVhMjli MjNlZDEwHhcNMjYwMTAxMTIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGJlOGVjN2E3NTYwNGJmMDBhNWJjYzY4NDczNjAxZTA5MDdkM2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwboeHgeyamdWZfBqbgAGmPSKCHbD b33vBaDZl8HhVvEL6B5/2PgmxfWVzZIXLQANmzplI89XuWSL5mq54dAr6bwDQk7M 78VFmuBtFpB/YSS+CFPeM8Uc28vJSRoLnwTrO1dkIHxA0KwWqoyhr3uyH746GmJa L2Eq+jT/5t6dXKxaZA4sGXuc39Gil2kC4Ds0+P0SPU67suxwuBwNvCHw/tf2+p9e BdZrjd/23aDuhzVdV9MfGXs1doqPZZon6Jt4Fr2Fga2JiTn+gIhtUIpeHUaDVRkL WlImGEG7v3mclW47XDbZgHFeKo9n93eFI4xOF0buipwCg/t3sqheihutAQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCS+jsenVgS/AKW8xoRzYB4JB9PKMB8GA1UdIwQY MBaAFPkgdVv2e6fXtNPQAQJ2BOopsj7RMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1TQjFXX1o3cDllMDA5QUJBbllFNmlteVB0RS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvNmI3YzNkLTg0Y2MtNGM3MC1iYzZm LTllNTQ0ZDI0NmZkNy8xL0pMNk94NmRXQkw4QXBiekdoSE5nSGdrSDA4by5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZjQvNmI3YzNkLTg0Y2MtNGM3MC1iYzZmLTllNTQ0ZDI0NmZk Ny8xLzEtU0IxV19aN3A5ZTAwOUFCQW5ZRTZpbXlQdEUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAFtShgw DQQCAAIwBwMFACoNQcAwDQYJKoZIhvcNAQELBQADggEBALidxxKOe0cj5A8vUwKK zzH1WHzFtIXYDDcaEqZ2o10VQsPeF1p/L0RojOSZsCBjODNSz1HeNd7yUrLgeHw3 MW70SeeoRjSS9cAmzIsal+IPIDN81CJ5xGBG3bP1gbcxxrERxeAymSKTx6FCoCsl xPmasTX0FAfhiohAURrqb3QDbZmeLBdoGi9zBwQ7oip1R31FpMbsX6XJ/oITvHUC 2oyCsb1n5dEZSxrt3ctuadL7IC6KT9R9VC+IiATKHw6CLJTuxYJqujkEsvseycnL yydKGM1H1lPuYf3rj6W6UsqICv+Zxr+uqu5l2uVHdZjagXAh5xqJrsAgbpvXTEw9 fBo= -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:37 2026 by rpki-client