This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/S6SOSCQLRmr-qZ6vn3TJj2OLEzg.roa File: S6SOSCQLRmr-qZ6vn3TJj2OLEzg.roa (raw, json) Hash identifier: 9CFjRLNrHapbl26OgK5x7+dL137RR14LAsVSn7soIuI= Subject key identifier: 4B:A4:8E:48:24:0B:46:6A:FE:A9:9E:AF:9F:74:C9:8F:63:8B:13:38 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA7857589030C54E34B096977A9478A Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/S6SOSCQLRmr-qZ6vn3TJj2OLEzg.roa Signing time: Fri 02 Jan 2026 12:21:06 +0000 ROA not before: Fri 02 Jan 2026 12:21:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203492 IP address blocks: 217.14.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:85:75:89:03:0c:54:e3:4b:09:69:77:a9:47:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ba48e48240b466afea99eaf9f74c98f638b1338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cc:40:30:4f:23:48:bd:ef:2e:ff:77:d2:e9: 0e:f2:28:a6:06:8f:f0:1c:e3:0f:35:3c:10:37:9b: cf:ca:9b:24:7a:38:9e:79:10:a1:46:4d:92:af:3b: 1b:3f:94:63:b5:c8:d1:05:68:75:61:0e:66:f3:03: 5c:d8:a5:45:0d:68:d4:32:8d:fe:e5:3d:d3:f1:f5: 72:2a:4b:2a:87:90:4d:cd:36:96:98:95:59:08:ab: d9:bc:df:a0:3f:16:ea:df:72:fc:0c:3d:94:a3:a0: e3:38:d6:09:aa:9e:4f:24:2b:4a:bd:af:55:67:6c: 5c:4c:c0:b2:af:0b:7c:9f:3d:46:ff:fd:f8:85:5c: 53:30:1f:10:fe:7e:5e:8a:e6:f3:2f:8e:a3:a4:d6: 45:c7:49:94:04:d1:44:c2:12:e5:57:fc:c8:26:40: 85:bc:a3:61:f1:4b:2c:3c:bb:2b:98:61:57:f9:61: 09:63:67:c4:97:69:4d:29:0c:45:ed:2f:99:95:aa: 10:63:b8:3c:ae:78:b8:b5:87:4c:36:80:c0:87:50: 0e:a4:72:31:35:db:fd:de:c7:e6:01:1f:6e:9d:39: 99:12:78:d9:f9:f5:8c:bd:12:bb:7b:a4:e6:2f:69: 9a:e6:ca:46:ab:99:e0:45:e8:aa:da:17:01:fd:23: 2f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A4:8E:48:24:0B:46:6A:FE:A9:9E:AF:9F:74:C9:8F:63:8B:13:38 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/S6SOSCQLRmr-qZ6vn3TJj2OLEzg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.14.254.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:91:51:d4:03:4f:3f:11:49:1a:90:f2:6b:37:91:29:1d:bd: 94:e7:71:6c:c3:62:03:41:ce:16:cb:25:82:3a:5f:f4:0a:9d: 1f:b0:56:b3:0e:22:cd:65:8f:59:4a:7b:14:ba:21:33:32:a1: 55:22:fb:16:ec:04:78:0d:c0:dc:df:71:d3:9c:70:71:d0:73: f9:8d:e8:9b:83:f1:89:9b:f9:71:08:32:d7:2a:f6:00:0a:fc: c5:86:54:1c:a0:df:4e:ba:d0:b9:af:e0:bf:f6:2f:9b:0f:61: b6:fc:6e:40:12:76:5e:2f:1f:c9:5a:c6:66:64:5e:de:d2:92: 4b:1e:a5:28:c4:bb:25:c7:15:43:af:03:40:6f:d9:8c:cd:db: a4:b0:ef:f1:28:9e:a5:f8:58:b2:ea:bf:c3:b0:a3:a0:86:99: 81:66:22:a6:02:b8:07:0c:b6:93:7b:81:64:a1:85:b3:6d:66: 3f:2b:53:96:fc:33:7f:7b:ba:2e:55:c7:8b:e7:bb:36:d1:12: 3c:7f:96:a2:50:ce:9c:13:71:ca:4d:8d:85:4d:30:57:38:e9: de:c0:51:dc:e2:c5:e0:3c:a0:e6:02:21:d2:84:3d:98:df:e7: fe:77:ad:37:04:5f:ae:9d:10:ae:2c:bc:54:a1:c4:84:71:0f: 12:b8:b7:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p4V1iQMMVONLCWl3qUeKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmE0OGU0ODI0MGI0NjZhZmVhOTllYWY5Zjc0Yzk4ZjYzOGIxMzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssxAME8jSL3vLv930ukO8iimBo/w HOMPNTwQN5vPypskejieeRChRk2SrzsbP5RjtcjRBWh1YQ5m8wNc2KVFDWjUMo3+ 5T3T8fVyKksqh5BNzTaWmJVZCKvZvN+gPxbq33L8DD2Uo6DjONYJqp5PJCtKva9V Z2xcTMCyrwt8nz1G//34hVxTMB8Q/n5eiubzL46jpNZFx0mUBNFEwhLlV/zIJkCF vKNh8UssPLsrmGFX+WEJY2fEl2lNKQxF7S+ZlaoQY7g8rni4tYdMNoDAh1AOpHIx Ndv93sfmAR9unTmZEnjZ+fWMvRK7e6TmL2ma5spGq5ngReiq2hcB/SMv1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEukjkgkC0Zq/qmer590yY9jixM4MB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvUzZTT1NDUUxSbXItcVo2dm4zVEpqMk9MRXpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Q7+MA0G CSqGSIb3DQEBCwUAA4IBAQA/kVHUA08/EUkakPJrN5EpHb2U53Fsw2IDQc4WyyWC Ol/0Cp0fsFazDiLNZY9ZSnsUuiEzMqFVIvsW7AR4DcDc33HTnHBx0HP5jeibg/GJ m/lxCDLXKvYACvzFhlQcoN9OutC5r+C/9i+bD2G2/G5AEnZeLx/JWsZmZF7e0pJL HqUoxLslxxVDrwNAb9mMzduksO/xKJ6l+Fiy6r/DsKOghpmBZiKmArgHDLaTe4Fk oYWzbWY/K1OW/DN/e7ouVceL57s20RI8f5aiUM6cE3HKTY2FTTBXOOnewFHc4sXg PKDmAiHShD2Y3+f+d603BF+unRCuLLxUocSEcQ8SuLeP -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:43 2026 by rpki-client