This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/DE6qzK8ZbTdn2sj6nzXv59atG6c.roa File: DE6qzK8ZbTdn2sj6nzXv59atG6c.roa (raw, json) Hash identifier: 9YeaePMUl74JdFaiRSC0VTGbzx1hAN55igQj80uecEQ= Subject key identifier: 0C:4E:AA:CC:AF:19:6D:37:67:DA:C8:FA:9F:35:EF:E7:D6:AD:1B:A7 Certificate issuer: /CN=97bf5be73f1823274498df52a37535d13da5be62 Certificate serial: 019B7BA4E69A0AA174DF5886078F49F6E184 Authority key identifier: 97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/DE6qzK8ZbTdn2sj6nzXv59atG6c.roa Signing time: Thu 01 Jan 2026 22:19:23 +0000 ROA not before: Thu 01 Jan 2026 22:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20897 IP address blocks: 193.93.100.0/24 maxlen: 24 193.93.101.0/24 maxlen: 24 193.93.102.0/23 maxlen: 23 193.93.102.0/24 maxlen: 24 193.93.103.0/24 maxlen: 24 193.108.162.0/23 maxlen: 23 2001:67c:2380::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:e6:9a:0a:a1:74:df:58:86:07:8f:49:f6:e1:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97bf5be73f1823274498df52a37535d13da5be62 Validity Not Before: Jan 1 22:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c4eaaccaf196d3767dac8fa9f35efe7d6ad1ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0a:48:0f:c2:f7:2f:e9:37:fc:21:7d:00:1a: ec:43:d4:d1:1b:4f:88:a8:31:b8:3e:f8:5a:17:e0: 28:3c:6b:cf:06:39:2d:27:4a:27:cf:6c:52:c6:01: 5f:80:ea:66:3e:f7:6e:11:22:fb:1a:21:31:62:5c: 5a:d2:19:e3:69:0a:a9:94:97:55:2b:8a:1a:3d:61: f2:61:4d:a9:22:5a:77:f6:80:58:3a:1c:ea:4a:a0: 08:68:3c:26:cc:44:ed:5c:79:66:10:e3:c0:ba:d1: d2:1a:a7:72:d8:61:2b:f0:e6:e9:8d:36:23:5a:4b: 26:c2:c0:5b:85:7d:3b:bd:e3:e0:61:9e:5c:88:95: 22:37:de:1a:a6:92:3a:51:3c:77:ec:61:1e:a1:7b: 52:c7:ce:3e:5f:26:45:6e:bc:7f:b2:e9:6c:a9:01: 0e:41:87:48:65:ac:9a:b6:9b:3c:7b:6c:eb:e4:a8: a0:60:76:ff:d7:18:15:34:28:49:79:f8:07:bb:b9: 3b:c3:ed:bd:2b:8f:cc:24:be:d4:0e:9a:4d:f1:e6: 97:9e:a6:c8:f6:77:48:2f:4b:c8:0a:e7:36:d0:21: ba:8e:32:e0:c2:de:bd:20:87:63:17:27:d7:a7:f7: df:95:46:b8:5b:e0:1e:7e:9a:0e:02:a0:6e:c1:00: 0a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4E:AA:CC:AF:19:6D:37:67:DA:C8:FA:9F:35:EF:E7:D6:AD:1B:A7 X509v3 Authority Key Identifier: keyid:97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/DE6qzK8ZbTdn2sj6nzXv59atG6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.93.100.0/22 193.108.162.0/23 IPv6: 2001:67c:2380::/48 Signature Algorithm: sha256WithRSAEncryption 46:0d:b2:63:98:3b:4b:9e:46:1e:8c:1d:08:90:54:e6:5d:1d: ea:9f:4f:1e:81:3d:b6:2f:49:4f:d4:f9:0d:09:2a:da:7f:70: ce:d1:1f:c0:d2:66:25:b8:6e:e1:a0:d3:e4:bb:45:1d:72:31: 8b:4e:e9:12:e4:a9:0b:4b:cb:34:a2:85:92:90:a1:07:dd:8f: 5f:20:6d:e1:02:38:ac:ec:32:a9:1d:cf:fe:1f:57:49:98:90: 60:15:d7:de:fb:7a:82:29:d3:81:e3:8c:28:3f:38:e2:b2:f0: c0:ce:60:cd:59:ae:3d:09:83:d2:41:0d:33:48:87:5a:53:79: 5f:69:3e:eb:3b:41:66:66:62:3c:4f:43:bd:c8:21:a3:21:e6: a2:b2:12:8b:a1:62:bc:87:ae:04:0b:51:3b:05:83:a2:5f:f9: d0:29:fa:76:77:2e:e7:ea:9e:51:0e:6a:b2:80:0f:ac:08:84: e0:c4:90:2a:17:23:28:de:86:14:9f:a5:6a:96:73:d9:d2:e9: fe:d4:3c:4b:2c:3d:38:02:45:2c:d9:b5:86:2f:88:f5:7a:26: f4:73:1d:83:37:6f:97:b8:1b:db:ad:b2:19:e7:74:33:9e:af: 8a:0b:88:6b:c4:64:09:ea:f2:0b:c0:11:89:9a:10:59:72:ff: 29:eb:ea:7f -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt7pOaaCqF031iGB49J9uGEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3YmY1YmU3M2YxODIzMjc0NDk4ZGY1MmEzNzUzNWQxM2Rh NWJlNjIwHhcNMjYwMTAxMjIxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzRlYWFjY2FmMTk2ZDM3NjdkYWM4ZmE5ZjM1ZWZlN2Q2YWQxYmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQpID8L3L+k3/CF9ABrsQ9TRG0+I qDG4PvhaF+AoPGvPBjktJ0onz2xSxgFfgOpmPvduESL7GiExYlxa0hnjaQqplJdV K4oaPWHyYU2pIlp39oBYOhzqSqAIaDwmzETtXHlmEOPAutHSGqdy2GEr8ObpjTYj WksmwsBbhX07vePgYZ5ciJUiN94appI6UTx37GEeoXtSx84+XyZFbrx/sulsqQEO QYdIZayatps8e2zr5KigYHb/1xgVNChJefgHu7k7w+29K4/MJL7UDppN8eaXnqbI 9ndIL0vICuc20CG6jjLgwt69IIdjFyfXp/fflUa4W+AefpoOAqBuwQAKvwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFAxOqsyvGW03Z9rI+p817+fWrRunMB8GA1UdIwQY MBaAFJe/W+c/GCMnRJjfUqN1NdE9pb5iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDc5YjV6OFlJeWRFbU45U28zVTEwVDJsdm1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82MDkwYWItYjhmYS00M2Q5LThkMTUt M2Y0NDUxOTY2NWFjLzEvREU2cXpLOFpiVGRuMnNqNm56WHY1OWF0RzZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC82MDkwYWItYjhmYS00M2Q5LThkMTUtM2Y0NDUxOTY2NWFj LzEvbDc5YjV6OFlJeWRFbU45U28zVTEwVDJsdm1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCwV1kAwQB wWyiMA8EAgACMAkDBwAgAQZ8I4AwDQYJKoZIhvcNAQELBQADggEBAEYNsmOYO0ue Rh6MHQiQVOZdHeqfTx6BPbYvSU/U+Q0JKtp/cM7RH8DSZiW4buGg0+S7RR1yMYtO 6RLkqQtLyzSihZKQoQfdj18gbeECOKzsMqkdz/4fV0mYkGAV1977eoIp04HjjCg/ OOKy8MDOYM1Zrj0Jg9JBDTNIh1pTeV9pPus7QWZmYjxPQ73IIaMh5qKyEouhYryH rgQLUTsFg6Jf+dAp+nZ3LufqnlEOarKAD6wIhODEkCoXIyjehhSfpWqWc9nS6f7U PEssPTgCRSzZtYYviPV6JvRzHYM3b5e4G9utshnndDOer4oLiGvEZAnq8gvAEYma EFly/ynr6n8= -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:20 2026 by rpki-client