This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/6hfKommEGXOxbZsoMmyZp1Jipf0.roa File: 6hfKommEGXOxbZsoMmyZp1Jipf0.roa (raw, json) Hash identifier: PBG49W+jrBQkGXpn4QJjssvWvrDP7tqPFzk/gI0/fXg= Subject key identifier: EA:17:CA:A2:69:84:19:73:B1:6D:9B:28:32:6C:99:A7:52:62:A5:FD Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e Certificate serial: 019B77597736016015D5D3C9FEE6676CB80F Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/6hfKommEGXOxbZsoMmyZp1Jipf0.roa Signing time: Thu 01 Jan 2026 02:18:30 +0000 ROA not before: Thu 01 Jan 2026 02:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201934 IP address blocks: 193.38.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:77:36:01:60:15:d5:d3:c9:fe:e6:67:6c:b8:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e Validity Not Before: Jan 1 02:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea17caa269841973b16d9b28326c99a75262a5fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:82:69:34:47:06:f9:e1:61:50:8b:dd:7b:de: 04:14:5e:a5:b3:61:ff:11:63:5d:ea:40:ae:9e:b9: 9e:1a:4c:21:57:be:82:79:85:3e:3c:25:c1:62:9b: c1:ac:e0:b8:ec:2a:9a:6d:9d:48:3d:b7:23:b5:a9: 09:85:5e:06:27:89:21:bd:bc:8c:d3:7b:f5:32:13: 1a:21:49:38:7a:45:5a:88:df:b8:e2:4f:b5:7a:3e: b6:c9:33:6e:ba:39:a1:4d:a9:a4:14:e4:39:eb:50: 63:14:ba:12:97:e8:bb:33:d2:35:43:cf:d4:c4:32: 67:17:b6:d1:4c:ee:c3:e1:5d:0d:5a:d5:a9:c7:29: 80:3a:1f:0d:9a:84:5e:74:eb:01:e7:5b:d0:69:a9: fa:7f:e6:ed:d1:8c:3f:5e:4b:c5:05:dc:58:36:dc: 74:22:f9:43:99:97:b9:89:0f:86:84:a2:79:dd:f3: 76:58:4c:fb:6e:69:aa:7e:64:3c:9b:fd:a4:91:11: 57:7e:d5:d6:7f:87:62:65:71:57:95:08:3d:17:a4: e4:17:f6:fe:e5:0a:7c:ea:b0:a5:fc:08:4f:44:60: 3d:82:df:51:2f:75:bf:f7:dc:bc:7f:7d:49:15:43: 85:55:52:98:cf:1d:c4:36:0d:2b:e3:1c:34:13:34: 3f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:17:CA:A2:69:84:19:73:B1:6D:9B:28:32:6C:99:A7:52:62:A5:FD X509v3 Authority Key Identifier: keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/6hfKommEGXOxbZsoMmyZp1Jipf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.38.252.0/24 Signature Algorithm: sha256WithRSAEncryption 16:fa:99:00:6e:cc:cb:bc:fc:19:37:91:70:49:fc:00:44:7f: c0:4f:b8:1a:6f:3d:91:08:5c:49:37:ce:26:05:e3:7f:23:75: 3c:b0:9a:4d:81:b4:08:3c:2d:60:47:66:d4:0b:28:82:3c:4f: 84:f8:49:54:e3:89:94:33:6d:6f:ed:c0:19:69:3a:ee:25:35: 10:50:2d:63:47:c6:c8:24:49:12:22:60:43:10:5a:4c:ac:62: 67:8f:d3:96:b1:0d:eb:6c:b2:cb:3e:08:bc:d3:b5:cb:c1:61: 39:71:05:e7:41:66:3a:a3:fd:63:65:a1:99:da:7a:be:6c:69: 40:5e:6a:14:aa:28:af:4b:4c:84:e0:f5:22:dd:c2:9a:f0:42: c4:12:05:4a:5c:26:a0:bd:1d:51:4d:0d:71:18:37:ba:0a:df: d6:7d:fb:d4:a1:da:e1:0a:b9:ef:9c:25:2c:c9:83:c3:e5:dc: 15:c9:38:33:54:7e:58:c9:b1:aa:0d:54:c8:29:48:8a:03:3f: c5:43:f1:35:b8:61:04:d9:f1:c6:33:10:63:3c:02:3a:9c:bc: 88:45:3d:41:bb:7c:2c:27:f0:2e:71:b1:a9:c8:06:b6:e4:17: 4f:bf:32:db:4d:c4:e7:87:03:cb:e6:bc:fb:d9:66:89:7a:d0: be:ec:79:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WXc2AWAV1dPJ/uZnbLgPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZjU0M2UyM2UyOWZiMDM3NDhkMDkzOTcyNmYzMGZlOWFm ZmExOWUwHhcNMjYwMTAxMDIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTE3Y2FhMjY5ODQxOTczYjE2ZDliMjgzMjZjOTlhNzUyNjJhNWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYJpNEcG+eFhUIvde94EFF6ls2H/ EWNd6kCunrmeGkwhV76CeYU+PCXBYpvBrOC47CqabZ1IPbcjtakJhV4GJ4khvbyM 03v1MhMaIUk4ekVaiN+44k+1ej62yTNuujmhTamkFOQ561BjFLoSl+i7M9I1Q8/U xDJnF7bRTO7D4V0NWtWpxymAOh8NmoRedOsB51vQaan6f+bt0Yw/XkvFBdxYNtx0 IvlDmZe5iQ+GhKJ53fN2WEz7bmmqfmQ8m/2kkRFXftXWf4diZXFXlQg9F6TkF/b+ 5Qp86rCl/AhPRGA9gt9RL3W/99y8f31JFUOFVVKYzx3ENg0r4xw0EzQ/DwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOoXyqJphBlzsW2bKDJsmadSYqX9MB8GA1UdIwQY MBaAFAv1Q+I+KfsDdI0JOXJvMP6a/6GeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMt YTM1ZmM0MzhkNGNhLzEvNmhmS29tbUVHWE94Ylpzb01teVpwMUppcGYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMtYTM1ZmM0MzhkNGNh LzEvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSb8MA0G CSqGSIb3DQEBCwUAA4IBAQAW+pkAbszLvPwZN5FwSfwARH/AT7gabz2RCFxJN84m BeN/I3U8sJpNgbQIPC1gR2bUCyiCPE+E+ElU44mUM21v7cAZaTruJTUQUC1jR8bI JEkSImBDEFpMrGJnj9OWsQ3rbLLLPgi807XLwWE5cQXnQWY6o/1jZaGZ2nq+bGlA XmoUqiivS0yE4PUi3cKa8ELEEgVKXCagvR1RTQ1xGDe6Ct/WffvUodrhCrnvnCUs yYPD5dwVyTgzVH5YybGqDVTIKUiKAz/FQ/E1uGEE2fHGMxBjPAI6nLyIRT1Bu3ws J/AucbGpyAa25BdPvzLbTcTnhwPL5rz72WaJetC+7Hk3 -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:27 2026 by rpki-client