This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/b4Ahv2Rp9bxG7wcFPklnJREK0b0.roa File: b4Ahv2Rp9bxG7wcFPklnJREK0b0.roa (raw, json) Hash identifier: KQEo13dywO1eXsbu0WPKOMTBSK6OIgfZ6KB0hgpviHU= Subject key identifier: 6F:80:21:BF:64:69:F5:BC:46:EF:07:05:3E:49:67:25:11:0A:D1:BD Certificate issuer: /CN=e994e74064158e97904990947510eb9941986ca1 Certificate serial: 019B7DCA011F986DFD541641AFA531B54625 Authority key identifier: E9:94:E7:40:64:15:8E:97:90:49:90:94:75:10:EB:99:41:98:6C:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/b4Ahv2Rp9bxG7wcFPklnJREK0b0.roa Signing time: Fri 02 Jan 2026 08:19:09 +0000 ROA not before: Fri 02 Jan 2026 08:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210728 IP address blocks: 77.246.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:01:1f:98:6d:fd:54:16:41:af:a5:31:b5:46:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e994e74064158e97904990947510eb9941986ca1 Validity Not Before: Jan 2 08:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f8021bf6469f5bc46ef07053e496725110ad1bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c6:4c:07:dd:c1:ac:86:2a:ed:b1:ac:25:19: ea:a6:da:c5:07:8f:78:bc:c3:d0:df:ff:70:e8:33: f9:c1:5f:d8:f4:e4:cf:d6:63:c9:31:1e:08:5d:41: 3c:d0:94:f3:44:bf:f9:78:89:60:ac:e2:04:c4:66: 06:49:95:d0:6a:7d:aa:01:46:45:4c:49:3c:37:86: 7b:d0:89:b0:af:06:e5:ab:50:27:ba:85:fd:01:a8: f9:da:13:df:61:3b:0d:f4:0d:42:6b:a6:8e:be:ca: 86:9e:7f:05:35:38:be:d0:61:e3:16:c9:80:98:c0: da:cf:42:b2:58:9c:15:6a:5f:1f:97:69:5a:75:18: 51:9b:0a:21:53:59:64:31:85:df:5a:ab:44:8b:35: 58:34:bd:b1:ce:61:ee:f5:7e:3a:7a:7d:fc:15:d2: 7d:0b:a5:89:f7:b5:69:c7:89:17:cf:08:51:7d:77: f8:49:78:86:cc:0e:8e:6e:f1:19:52:ac:30:54:49: d6:76:33:ef:a5:d3:87:e4:10:76:e2:bf:80:0d:8b: 94:4c:62:ee:86:66:5f:b8:e3:61:1b:d4:f7:03:c9: 5e:75:83:5b:57:49:25:15:e9:e9:9d:2f:ef:dc:ea: 41:40:b8:f8:b2:c2:02:34:0c:05:a4:dd:ed:45:30: 9e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:80:21:BF:64:69:F5:BC:46:EF:07:05:3E:49:67:25:11:0A:D1:BD X509v3 Authority Key Identifier: keyid:E9:94:E7:40:64:15:8E:97:90:49:90:94:75:10:EB:99:41:98:6C:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/b4Ahv2Rp9bxG7wcFPklnJREK0b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.246.243.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:95:50:dd:99:09:f8:97:dc:ef:4b:33:79:d0:63:78:82:b5: 5d:55:89:2b:12:5d:3a:76:bf:1d:57:df:6a:5f:38:70:28:d4: 4d:f0:82:f6:13:32:a2:57:c7:25:77:1e:6f:08:70:47:59:59: 4e:5b:13:8c:d0:e8:74:47:3a:bd:22:10:e7:8e:5c:12:91:b4: ff:af:47:37:cb:23:ce:c8:21:1f:00:cf:59:50:83:76:0c:1f: a3:ee:5e:05:f0:92:f1:a8:99:2a:85:a1:af:b5:da:e1:fd:1f: 2e:60:53:de:b4:f4:77:70:ba:a8:5f:24:96:5c:1c:e7:ac:a8: 79:b2:cb:06:03:e7:df:35:66:e8:ea:e6:00:dd:7c:73:c5:51: eb:0e:5e:5f:5f:b6:d3:4f:c3:bc:aa:3f:b4:19:83:67:e1:4e: 9b:ee:3d:6b:96:02:16:cc:89:c6:b7:71:34:06:c5:a7:9e:3b: a6:08:29:7c:b3:f9:8a:49:31:69:9c:ba:05:8b:c6:a1:d4:98: 4b:9b:77:96:14:56:e1:c8:53:b8:9f:ad:a0:5c:2a:7e:38:45: 19:f7:88:17:95:82:09:ca:2b:ee:4b:a4:f7:30:a7:17:05:15: 7e:d8:40:c1:40:65:43:3c:34:12:70:60:73:4b:d1:88:61:68: 4a:8b:cb:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ygEfmG39VBZBr6UxtUYlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5OTRlNzQwNjQxNThlOTc5MDQ5OTA5NDc1MTBlYjk5NDE5 ODZjYTEwHhcNMjYwMTAyMDgxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjgwMjFiZjY0NjlmNWJjNDZlZjA3MDUzZTQ5NjcyNTExMGFkMWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8ZMB93BrIYq7bGsJRnqptrFB494 vMPQ3/9w6DP5wV/Y9OTP1mPJMR4IXUE80JTzRL/5eIlgrOIExGYGSZXQan2qAUZF TEk8N4Z70Imwrwblq1AnuoX9Aaj52hPfYTsN9A1Ca6aOvsqGnn8FNTi+0GHjFsmA mMDaz0KyWJwVal8fl2ladRhRmwohU1lkMYXfWqtEizVYNL2xzmHu9X46en38FdJ9 C6WJ97Vpx4kXzwhRfXf4SXiGzA6ObvEZUqwwVEnWdjPvpdOH5BB24r+ADYuUTGLu hmZfuONhG9T3A8ledYNbV0klFenpnS/v3OpBQLj4ssICNAwFpN3tRTCeFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG+AIb9kafW8Ru8HBT5JZyURCtG9MB8GA1UdIwQY MBaAFOmU50BkFY6XkEmQlHUQ65lBmGyhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlpUblFHUVZqcGVRU1pDVWRSRHJtVUdZYktFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xYzEyZTUtYzgwZC00NzMzLWJjNGEt MzYyMGNlZmNjNzI0LzEvYjRBaHYyUnA5YnhHN3djRlBrbG5KUkVLMGIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8xYzEyZTUtYzgwZC00NzMzLWJjNGEtMzYyMGNlZmNjNzI0 LzEvNlpUblFHUVZqcGVRU1pDVWRSRHJtVUdZYktFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATfbzMA0G CSqGSIb3DQEBCwUAA4IBAQAblVDdmQn4l9zvSzN50GN4grVdVYkrEl06dr8dV99q XzhwKNRN8IL2EzKiV8cldx5vCHBHWVlOWxOM0Oh0Rzq9IhDnjlwSkbT/r0c3yyPO yCEfAM9ZUIN2DB+j7l4F8JLxqJkqhaGvtdrh/R8uYFPetPR3cLqoXySWXBznrKh5 sssGA+ffNWbo6uYA3XxzxVHrDl5fX7bTT8O8qj+0GYNn4U6b7j1rlgIWzInGt3E0 BsWnnjumCCl8s/mKSTFpnLoFi8ah1JhLm3eWFFbhyFO4n62gXCp+OEUZ94gXlYIJ yivuS6T3MKcXBRV+2EDBQGVDPDQScGBzS9GIYWhKi8sC -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:25 2026 by rpki-client