This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/6Pc_yuf6U7fifvpMORJRJWUOec0.roa File: 6Pc_yuf6U7fifvpMORJRJWUOec0.roa (raw, json) Hash identifier: YkCtWd8TqjpXFSR0IlaGJlvhxUpQhvA2ISYdw8xN7rc= Subject key identifier: E8:F7:3F:CA:E7:FA:53:B7:E2:7E:FA:4C:39:12:51:25:65:0E:79:CD Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf Certificate serial: 019B7AC90A3A233A62E204E858D72A7E535B Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/6Pc_yuf6U7fifvpMORJRJWUOec0.roa Signing time: Thu 01 Jan 2026 18:19:14 +0000 ROA not before: Thu 01 Jan 2026 18:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 195.88.246.0/24 maxlen: 24 195.88.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:0a:3a:23:3a:62:e2:04:e8:58:d7:2a:7e:53:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf Validity Not Before: Jan 1 18:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8f73fcae7fa53b7e27efa4c39125125650e79cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:73:f1:56:c4:ae:01:de:14:82:ca:6d:8f:ff: 50:5d:5a:02:8c:dd:b9:f0:1b:71:82:65:68:2d:92: 1d:ac:92:64:38:6c:70:6e:55:ea:4f:0b:4a:e5:5e: f1:de:1b:69:f2:98:f5:99:89:67:80:71:03:e8:d5: 6c:5a:25:40:7c:1c:33:7d:7f:85:b4:87:28:6e:32: 49:d2:9f:ab:99:bc:3b:86:d6:d8:53:ae:1a:df:c0: 4e:23:5a:ff:32:a5:c6:b9:9b:0e:46:b7:15:2c:1d: bb:44:cf:d6:a2:6f:ea:55:b4:7d:43:1b:d5:a9:05: 29:4e:2a:72:19:48:b6:eb:5d:69:76:42:ec:5c:fd: 62:34:70:a5:ab:ea:d6:07:9e:e5:6c:47:84:51:1a: ef:16:91:81:31:40:0f:84:97:95:31:65:b1:f3:dc: bb:b1:61:a3:e3:9f:2e:f6:7f:0c:5a:60:42:b5:ed: f1:8c:4f:d5:ad:f3:91:dd:7f:b7:82:c9:02:3f:28: 3d:b7:e1:b5:6e:47:40:d1:30:6c:4c:9c:6f:45:49: 54:40:92:37:99:57:5c:c5:a9:69:c7:b8:99:11:62: 1f:86:ae:bc:22:11:94:cb:26:4a:36:64:15:27:57: 49:2b:35:cb:e8:5e:11:3c:a3:da:7b:9a:92:4f:4b: 4b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F7:3F:CA:E7:FA:53:B7:E2:7E:FA:4C:39:12:51:25:65:0E:79:CD X509v3 Authority Key Identifier: keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/6Pc_yuf6U7fifvpMORJRJWUOec0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.88.246.0/23 Signature Algorithm: sha256WithRSAEncryption 52:33:f3:00:50:f1:74:36:1e:fa:1b:f5:8c:92:7c:26:2b:9f: 12:6a:95:a2:99:bb:d5:d8:02:d7:8b:8c:58:c6:d2:25:94:e1: e0:a5:e4:11:1d:9e:c7:96:4c:cc:7f:92:08:fd:b4:ef:88:ef: 56:78:37:eb:c8:22:d4:c1:14:c5:2f:17:92:8c:85:d4:c4:73: 96:9b:09:cc:8d:60:01:eb:71:02:11:7b:21:05:bb:d3:aa:42: ed:f4:01:49:63:71:ea:f7:9e:64:b9:d9:e9:41:2e:90:1b:c6: 81:df:46:5c:b3:86:02:63:7a:e3:db:96:84:ff:64:74:1b:05: b6:45:c3:5e:3f:74:05:8c:a0:ea:c3:4a:e7:1d:03:6a:21:0b: 4a:dc:fd:6c:74:05:7f:07:10:f0:d2:c6:c5:4e:30:c0:3f:d1: 34:5a:06:f1:2d:82:da:5d:9e:6b:96:2c:23:b7:77:ab:f5:45: 2a:c1:52:6f:6a:90:50:3a:24:22:77:af:2c:8a:cc:b4:5e:f3: 9c:28:73:09:06:df:c3:30:3e:e5:03:3c:6f:7d:9c:0a:62:a4: d6:e2:3d:1a:41:c3:15:f6:91:4a:09:5f:bd:3c:66:82:be:63: 6e:b3:5e:d8:2c:9a:f5:19:78:96:20:05:43:1c:bf:a9:46:38: 7a:33:4d:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yQo6Izpi4gToWNcqflNbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MzhkNzcyNmE1ZjFmMzNkYTE1ZDg3ZTVjOGIwZTQ4ZjUw MjgxYmYwHhcNMjYwMTAxMTgxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGY3M2ZjYWU3ZmE1M2I3ZTI3ZWZhNGMzOTEyNTEyNTY1MGU3OWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nPxVsSuAd4Ugsptj/9QXVoCjN25 8BtxgmVoLZIdrJJkOGxwblXqTwtK5V7x3htp8pj1mYlngHED6NVsWiVAfBwzfX+F tIcobjJJ0p+rmbw7htbYU64a38BOI1r/MqXGuZsORrcVLB27RM/Wom/qVbR9QxvV qQUpTipyGUi2611pdkLsXP1iNHClq+rWB57lbEeEURrvFpGBMUAPhJeVMWWx89y7 sWGj458u9n8MWmBCte3xjE/VrfOR3X+3gskCPyg9t+G1bkdA0TBsTJxvRUlUQJI3 mVdcxalpx7iZEWIfhq68IhGUyyZKNmQVJ1dJKzXL6F4RPKPae5qST0tLSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOj3P8rn+lO34n76TDkSUSVlDnnNMB8GA1UdIwQY MBaAFNU413JqXx8z2hXYflyLDkj1AoG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVRqWGNtcGZIelBhRmRoLVhJc09TUFVDZ2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80M2M0NTEtZTRlOS00ODU5LWI5ODUt MmQ5ZGY0ZWY1ZjUwLzEvNlBjX3l1ZjZVN2ZpZnZwTU9SSlJKV1VPZWMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC80M2M0NTEtZTRlOS00ODU5LWI5ODUtMmQ5ZGY0ZWY1ZjUw LzEvMVRqWGNtcGZIelBhRmRoLVhJc09TUFVDZ2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw1j2MA0G CSqGSIb3DQEBCwUAA4IBAQBSM/MAUPF0Nh76G/WMknwmK58SapWimbvV2ALXi4xY xtIllOHgpeQRHZ7HlkzMf5II/bTviO9WeDfryCLUwRTFLxeSjIXUxHOWmwnMjWAB 63ECEXshBbvTqkLt9AFJY3Hq955kudnpQS6QG8aB30Zcs4YCY3rj25aE/2R0GwW2 RcNeP3QFjKDqw0rnHQNqIQtK3P1sdAV/BxDw0sbFTjDAP9E0WgbxLYLaXZ5rliwj t3er9UUqwVJvapBQOiQid68sisy0XvOcKHMJBt/DMD7lAzxvfZwKYqTW4j0aQcMV 9pFKCV+9PGaCvmNus17YLJr1GXiWIAVDHL+pRjh6M00e -----END CERTIFICATE-----Generated at Fri Jan 9 00:58:33 2026 by rpki-client