This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/1-6ezC4ws-re074_0lZflV6lAHx8.roa File: 1-6ezC4ws-re074_0lZflV6lAHx8.roa (raw, json) Hash identifier: kEOES4MztcE3O8QylRZZGu/8lQPpHJ9hB55AhznvNdw= Subject key identifier: FB:A7:B3:0B:8C:2C:FA:B7:B4:EF:8F:F4:95:97:E5:57:A9:40:1F:1F Certificate issuer: /CN=9edc3ff166155e6988be8095fcb420001d8be21d Certificate serial: 019B77C74DD67305160D5597E731E7BF69C2 Authority key identifier: 9E:DC:3F:F1:66:15:5E:69:88:BE:80:95:FC:B4:20:00:1D:8B:E2:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/1-6ezC4ws-re074_0lZflV6lAHx8.roa Signing time: Thu 01 Jan 2026 04:18:28 +0000 ROA not before: Thu 01 Jan 2026 04:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209491 IP address blocks: 171.22.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4d:d6:73:05:16:0d:55:97:e7:31:e7:bf:69:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9edc3ff166155e6988be8095fcb420001d8be21d Validity Not Before: Jan 1 04:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fba7b30b8c2cfab7b4ef8ff49597e557a9401f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:49:82:d7:db:83:40:8a:ce:74:cf:99:71:08: 6d:1f:14:4f:60:1c:b6:31:1a:0b:60:c2:e6:28:d5: 30:96:50:93:fd:7d:ec:c1:13:7d:04:c4:48:46:00: c4:c8:22:41:0f:c8:6c:66:19:21:a5:6f:84:b4:19: 6c:a5:f0:37:a2:5c:5b:ef:69:fd:5b:65:fc:e5:28: ea:a1:c8:ad:50:dd:b6:ca:be:e0:19:1b:9d:58:50: dc:b0:8a:48:37:68:b4:80:f2:c3:4f:77:72:1f:26: ac:15:92:85:f0:df:eb:f9:4e:d3:7d:83:5f:68:be: 28:a0:d1:df:46:80:73:30:cf:a0:fb:37:48:29:50: ec:f8:e0:e2:d3:f7:94:26:da:d7:75:76:d2:8e:61: 0a:71:ce:4b:db:28:b4:d4:ba:21:83:f0:7a:95:3d: 78:d3:43:c6:65:bf:85:f3:7f:c4:24:8f:3a:af:60: bb:d4:c2:5e:6e:d0:bb:73:11:4d:66:04:01:44:8b: be:40:fc:5b:db:1a:dd:de:8d:0e:40:15:fc:1a:39: 86:7e:9f:40:c9:aa:0e:8b:99:9c:10:90:c8:4c:45: 71:3c:5c:33:22:ed:87:72:3e:0e:9b:54:a5:02:48: ac:a6:34:67:e4:4a:c2:79:10:dc:1d:95:b2:1d:48: 41:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A7:B3:0B:8C:2C:FA:B7:B4:EF:8F:F4:95:97:E5:57:A9:40:1F:1F X509v3 Authority Key Identifier: keyid:9E:DC:3F:F1:66:15:5E:69:88:BE:80:95:FC:B4:20:00:1D:8B:E2:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/1-6ezC4ws-re074_0lZflV6lAHx8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.22.20.0/22 Signature Algorithm: sha256WithRSAEncryption 27:32:80:e9:4b:cc:77:0e:4b:e3:14:88:1d:f6:e2:65:e8:fe: ac:88:5b:8b:ee:53:e9:25:f9:2f:06:da:9c:6a:c1:21:d0:a2: d4:9b:35:09:f1:4a:52:a2:ae:89:b1:9d:5a:31:b7:14:45:05: 68:50:6b:c8:75:7d:b3:1f:07:f7:95:ff:f9:33:85:ff:f0:69: 23:25:99:50:da:b3:e8:31:a5:39:f4:44:e3:3c:b8:c2:53:65: b9:0a:66:90:56:3f:78:2f:3e:c8:c0:a8:fa:8b:40:c1:da:b0: dd:0d:1c:36:73:7e:42:62:f3:7b:a3:bc:47:8e:bf:68:e7:9c: 8e:a6:ab:75:b0:e7:88:ce:d8:cc:7e:08:39:81:fc:5c:69:f7: 2e:10:6c:82:96:9d:49:be:d0:69:8e:50:f1:d0:22:26:4c:b5: 3f:2e:5c:65:1a:64:27:2f:67:e8:7d:fa:95:96:3a:c0:bf:85: 5a:12:fc:5c:17:a2:27:7a:a9:e4:bc:65:7f:21:11:1b:ce:b8: 2f:83:4f:62:28:8a:f8:ae:9f:83:20:d3:92:3c:ce:72:f6:0f: c3:74:70:41:c6:b0:f3:48:4e:50:84:d8:f5:f2:d7:69:77:e6: 9c:58:d2:c5:24:8d:74:3b:92:50:06:3b:5b:3d:b4:e2:2f:60: 65:0c:0a:73 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3x03WcwUWDVWX5zHnv2nCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZGMzZmYxNjYxNTVlNjk4OGJlODA5NWZjYjQyMDAwMWQ4 YmUyMWQwHhcNMjYwMTAxMDQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmE3YjMwYjhjMmNmYWI3YjRlZjhmZjQ5NTk3ZTU1N2E5NDAxZjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kmC19uDQIrOdM+ZcQhtHxRPYBy2 MRoLYMLmKNUwllCT/X3swRN9BMRIRgDEyCJBD8hsZhkhpW+EtBlspfA3olxb72n9 W2X85SjqocitUN22yr7gGRudWFDcsIpIN2i0gPLDT3dyHyasFZKF8N/r+U7TfYNf aL4ooNHfRoBzMM+g+zdIKVDs+ODi0/eUJtrXdXbSjmEKcc5L2yi01Lohg/B6lT14 00PGZb+F83/EJI86r2C71MJebtC7cxFNZgQBRIu+QPxb2xrd3o0OQBX8GjmGfp9A yaoOi5mcEJDITEVxPFwzIu2Hcj4Om1SlAkispjRn5ErCeRDcHZWyHUhBOQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPunswuMLPq3tO+P9JWX5VepQB8fMB8GA1UdIwQY MBaAFJ7cP/FmFV5piL6Alfy0IAAdi+IdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnR3XzhXWVZYbW1Jdm9DVl9MUWdBQjJMNGgwLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy80ZmZjYjAtYmM1Ny00NjAyLWFkM2Qt NTI0ZDE0NDMwMWZmLzEvMS02ZXpDNHdzLXJlMDc0XzBsWmZsVjZsQUh4OC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZjcvNGZmY2IwLWJjNTctNDYwMi1hZDNkLTUyNGQxNDQzMDFm Zi8xL250d184V1lWWG1tSXZvQ1ZfTFFnQUIyTDRoMC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqsWFDAN BgkqhkiG9w0BAQsFAAOCAQEAJzKA6UvMdw5L4xSIHfbiZej+rIhbi+5T6SX5Lwba nGrBIdCi1Js1CfFKUqKuibGdWjG3FEUFaFBryHV9sx8H95X/+TOF//BpIyWZUNqz 6DGlOfRE4zy4wlNluQpmkFY/eC8+yMCo+otAwdqw3Q0cNnN+QmLze6O8R46/aOec jqardbDniM7YzH4IOYH8XGn3LhBsgpadSb7QaY5Q8dAiJky1Py5cZRpkJy9n6H36 lZY6wL+FWhL8XBeiJ3qp5LxlfyERG864L4NPYiiK+K6fgyDTkjzOcvYPw3RwQcaw 80hOUITY9fLXaXfmnFjSxSSNdDuSUAY7Wz204i9gZQwKcw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:52 2026 by rpki-client