This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/s6R6PJpd-Myk3vNL1YiMPF0NHiY.roa File: s6R6PJpd-Myk3vNL1YiMPF0NHiY.roa (raw, json) Hash identifier: 82ptaySXeh8vuN3858KZJT3/tNdBNq1pDFzQMH65GpM= Subject key identifier: B3:A4:7A:3C:9A:5D:F8:CC:A4:DE:F3:4B:D5:88:8C:3C:5D:0D:1E:26 Certificate issuer: /CN=24c96d386d7cf59a990d3994f0df8493dfca49b3 Certificate serial: 019B797F2B3FCBDDD8D96788C8DD4C782A99 Authority key identifier: 24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/s6R6PJpd-Myk3vNL1YiMPF0NHiY.roa Signing time: Thu 01 Jan 2026 12:18:55 +0000 ROA not before: Thu 01 Jan 2026 12:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28910 IP address blocks: 195.69.188.0/22 maxlen: 22 195.69.188.0/24 maxlen: 24 195.69.189.0/24 maxlen: 24 195.69.190.0/24 maxlen: 24 195.69.191.0/24 maxlen: 24 2a05:45c7:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:2b:3f:cb:dd:d8:d9:67:88:c8:dd:4c:78:2a:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24c96d386d7cf59a990d3994f0df8493dfca49b3 Validity Not Before: Jan 1 12:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3a47a3c9a5df8cca4def34bd5888c3c5d0d1e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b0:0c:4a:c1:dd:b7:52:2b:87:d9:bc:0e:81: 58:a2:45:60:80:a2:27:6d:fb:a2:dc:4f:9c:22:86: c8:da:42:9b:22:bc:19:b5:03:c0:81:f4:1f:a0:49: cb:eb:38:43:06:e4:47:74:14:d6:0d:b5:d4:80:4d: 0f:31:91:dc:87:9d:20:5f:eb:2c:39:f8:f2:b9:d4: 88:5a:3a:25:64:01:f7:f1:c8:a0:7b:da:f9:23:dc: 54:98:49:73:2d:89:fe:df:d3:95:81:14:76:4e:7f: 76:91:ee:c5:fc:b5:0e:23:53:38:db:b8:92:2a:a4: 49:76:80:34:9f:ef:c1:95:95:c6:90:3c:9b:09:44: 5e:6f:63:ea:9b:b3:61:a3:bd:bd:f7:b2:45:b5:b2: 2b:8d:06:38:32:66:03:e6:6a:2d:1e:a5:49:bc:14: a8:04:e6:a5:22:3a:66:1e:4e:68:67:f3:26:0a:f7: e8:1e:29:c0:86:b1:75:96:17:50:0d:54:45:31:ce: e9:ca:6b:e7:a9:37:09:a3:b5:0f:31:5a:4e:09:5f: 36:f1:63:1d:cc:a2:95:3f:d7:1c:f8:b6:d6:45:56: 5d:7f:01:b7:02:d4:94:30:28:87:64:c6:d3:08:10: 52:8f:aa:0e:08:99:ee:06:38:a3:0f:a6:88:0e:66: 09:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A4:7A:3C:9A:5D:F8:CC:A4:DE:F3:4B:D5:88:8C:3C:5D:0D:1E:26 X509v3 Authority Key Identifier: keyid:24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/s6R6PJpd-Myk3vNL1YiMPF0NHiY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.69.188.0/22 IPv6: 2a05:45c7:f000::/36 Signature Algorithm: sha256WithRSAEncryption 9b:57:1c:0b:5f:0d:89:67:6e:1e:fa:3f:93:c0:0b:08:45:d7: 47:e3:59:93:a1:29:20:17:6d:6f:51:2d:44:b2:e7:58:ec:87: 39:80:46:6c:40:ae:cc:2f:65:f6:30:b7:aa:66:7c:49:6a:7e: bf:4e:66:1c:19:08:ee:19:e1:91:04:9a:de:c9:f9:4f:97:e3: c2:03:f7:d4:1d:e5:19:d7:8c:a5:e7:b8:63:a8:72:6b:93:5f: d3:a6:84:8b:1c:90:eb:0a:28:58:fa:63:62:7c:ce:f9:36:ea: 1b:f2:04:9e:35:c9:58:6f:f3:fa:49:e2:62:ec:b0:75:58:53: ba:fa:d8:b2:0e:1d:85:59:64:99:2a:7e:65:5a:77:03:24:3a: 5b:11:4a:48:dd:9f:bd:17:bc:27:18:a2:cf:3c:df:71:84:cd: 99:77:61:d4:69:64:9e:41:b5:29:16:4a:8b:74:90:5d:c6:13: 5b:41:33:9e:a9:e9:e1:65:e2:cd:f4:f7:25:8c:81:c9:01:92: 15:c5:38:32:c7:ae:fd:ad:57:ff:c9:4f:87:dc:eb:88:c8:21: 6c:ad:b4:83:4a:c5:24:8c:28:02:d6:62:8e:ca:5f:da:db:5a: c7:53:56:fd:5f:46:92:af:0f:47:8a:a5:0f:fb:39:ee:c6:cc: cc:48:95:91 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt5fys/y93Y2WeIyN1MeCqZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0Yzk2ZDM4NmQ3Y2Y1OWE5OTBkMzk5NGYwZGY4NDkzZGZj YTQ5YjMwHhcNMjYwMTAxMTIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2E0N2EzYzlhNWRmOGNjYTRkZWYzNGJkNTg4OGMzYzVkMGQxZTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7AMSsHdt1Irh9m8DoFYokVggKIn bfui3E+cIobI2kKbIrwZtQPAgfQfoEnL6zhDBuRHdBTWDbXUgE0PMZHch50gX+ss OfjyudSIWjolZAH38cige9r5I9xUmElzLYn+39OVgRR2Tn92ke7F/LUOI1M427iS KqRJdoA0n+/BlZXGkDybCUReb2Pqm7Nho72997JFtbIrjQY4MmYD5motHqVJvBSo BOalIjpmHk5oZ/MmCvfoHinAhrF1lhdQDVRFMc7pymvnqTcJo7UPMVpOCV828WMd zKKVP9cc+LbWRVZdfwG3AtSUMCiHZMbTCBBSj6oOCJnuBjijD6aIDmYJowIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFLOkejyaXfjMpN7zS9WIjDxdDR4mMB8GA1UdIwQY MBaAFCTJbThtfPWamQ05lPDfhJPfykmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk1sdE9HMTg5WnFaRFRtVThOLUVrOV9LU2JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83YmVkNjMtNDA2ZS00MDVjLWE3ZjAt N2NkOWMzYmFiYTI1LzEvczZSNlBKcGQtTXlrM3ZOTDFZaU1QRjBOSGlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy83YmVkNjMtNDA2ZS00MDVjLWE3ZjAtN2NkOWMzYmFiYTI1 LzEvSk1sdE9HMTg5WnFaRFRtVThOLUVrOV9LU2JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCw0W8MA4E AgACMAgDBgQqBUXH8DANBgkqhkiG9w0BAQsFAAOCAQEAm1ccC18NiWduHvo/k8AL CEXXR+NZk6EpIBdtb1EtRLLnWOyHOYBGbECuzC9l9jC3qmZ8SWp+v05mHBkI7hnh kQSa3sn5T5fjwgP31B3lGdeMpee4Y6hya5Nf06aEixyQ6wooWPpjYnzO+TbqG/IE njXJWG/z+kniYuywdVhTuvrYsg4dhVlkmSp+ZVp3AyQ6WxFKSN2fvRe8Jxiizzzf cYTNmXdh1GlknkG1KRZKi3SQXcYTW0Eznqnp4WXizfT3JYyByQGSFcU4Mseu/a1X /8lPh9zriMghbK20g0rFJIwoAtZijspf2ttax1NW/V9Gkq8PR4qlD/s57sbMzEiV kQ== -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:03 2026 by rpki-client