This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/6WDkbHlgSXxNJbB0drss0reruS8.roa File: 6WDkbHlgSXxNJbB0drss0reruS8.roa (raw, json) Hash identifier: oFDNB9590aZJb3RqzjukoKFlQp5/LXVYXoZGCKhDyHQ= Subject key identifier: E9:60:E4:6C:79:60:49:7C:4D:25:B0:74:76:BB:2C:D2:B7:AB:B9:2F Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Certificate serial: 019B77C6ADD3A6CA48012D80EC6C16E29986 Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/6WDkbHlgSXxNJbB0drss0reruS8.roa Signing time: Thu 01 Jan 2026 04:17:47 +0000 ROA not before: Thu 01 Jan 2026 04:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8342 IP address blocks: 91.226.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ad:d3:a6:ca:48:01:2d:80:ec:6c:16:e2:99:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Validity Not Before: Jan 1 04:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e960e46c7960497c4d25b07476bb2cd2b7abb92f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:69:73:2d:c4:4f:63:84:3c:a9:11:44:95:11: ea:50:ee:db:7e:4c:6f:0c:dc:38:d1:b3:13:dd:70: 83:54:39:ae:4a:24:12:49:91:bb:46:ae:90:a6:54: 29:af:f0:98:f3:53:d4:99:89:0f:f0:03:da:9c:6b: 62:60:5d:73:d2:a7:62:34:ff:4f:d9:cd:a5:a2:81: f2:9a:36:50:5c:af:d2:9a:cd:e3:40:70:5b:a6:7d: 6a:1f:df:05:82:47:15:90:bf:89:0c:ac:2a:c4:80: b0:8c:eb:d9:1f:27:97:55:e6:57:ff:d7:13:aa:22: 1b:f0:8b:38:cd:7f:a0:e0:4d:63:65:42:b5:29:2d: b2:c6:e0:8f:4c:bd:c6:ce:c0:b8:33:c2:59:85:58: 55:d9:ff:37:4c:92:c0:e6:e4:b8:d6:ab:73:a9:e0: 29:a4:9a:6f:aa:de:08:91:fa:2c:9e:a0:79:90:9e: 6b:04:41:cc:11:de:38:fa:42:3c:b8:ee:bb:b7:53: ef:92:4c:0f:2b:4b:95:f7:26:20:b3:8b:d6:6d:eb: 43:ae:b2:21:97:69:9f:43:8b:38:5b:08:22:94:f3: 8e:97:59:81:ea:45:ef:63:96:ec:7f:a4:f6:a7:21: 3f:27:71:25:7c:b3:a8:30:01:3f:ee:97:66:f1:a0: 79:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:60:E4:6C:79:60:49:7C:4D:25:B0:74:76:BB:2C:D2:B7:AB:B9:2F X509v3 Authority Key Identifier: keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/6WDkbHlgSXxNJbB0drss0reruS8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.30.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:57:84:09:44:a5:49:57:7c:cb:00:64:a6:bd:b0:a9:54:c8: 1e:5b:e9:3a:c2:a4:f0:de:fe:e5:55:20:ca:25:46:57:e9:ae: ce:ef:20:3d:e3:6c:46:d9:03:84:ab:a6:08:02:bd:0e:75:f3: 3a:d4:7f:35:60:37:a0:75:58:2a:fc:99:51:1a:66:57:06:23: 51:14:87:a3:b6:7f:49:66:b8:98:69:23:88:15:de:fd:a6:de: 17:c2:db:dc:01:d7:01:5d:b7:e0:6f:a6:52:ad:8d:c3:1e:ed: 0a:d3:32:a9:56:47:c4:64:d1:10:7c:e1:a1:c4:31:17:24:d1: 72:81:1a:00:e0:ca:5f:5f:fe:b4:8a:f3:e6:6b:f4:8a:ca:32: 21:47:57:eb:16:61:f9:3b:59:88:5d:2f:f5:dc:a9:67:e3:5e: bf:04:c2:fe:7e:3e:ea:e5:cc:00:1f:25:44:6e:fa:cd:06:14: fd:b4:7e:4d:b1:c0:dd:77:d6:70:f3:7b:e0:a7:8c:03:ca:c1: bd:7b:4f:36:73:2d:cb:df:5a:ed:65:62:fb:9f:51:2b:92:35: f6:d1:db:07:67:af:62:32:33:60:99:49:7b:be:ba:13:60:d0: 0e:57:2e:54:fb:17:90:fd:40:be:a5:d0:43:39:58:10:3e:d8: c7:19:57:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xq3TpspIAS2A7GwW4pmGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYTBmMjU4ZWVmNGIyYmY0YmJhYTg0MzBjMWU1OGNhOGMx ODhlYTcwHhcNMjYwMTAxMDQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTYwZTQ2Yzc5NjA0OTdjNGQyNWIwNzQ3NmJiMmNkMmI3YWJiOTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22lzLcRPY4Q8qRFElRHqUO7bfkxv DNw40bMT3XCDVDmuSiQSSZG7Rq6QplQpr/CY81PUmYkP8APanGtiYF1z0qdiNP9P 2c2looHymjZQXK/Sms3jQHBbpn1qH98FgkcVkL+JDKwqxICwjOvZHyeXVeZX/9cT qiIb8Is4zX+g4E1jZUK1KS2yxuCPTL3GzsC4M8JZhVhV2f83TJLA5uS41qtzqeAp pJpvqt4IkfosnqB5kJ5rBEHMEd44+kI8uO67t1PvkkwPK0uV9yYgs4vWbetDrrIh l2mfQ4s4WwgilPOOl1mB6kXvY5bsf6T2pyE/J3ElfLOoMAE/7pdm8aB5gQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOlg5Gx5YEl8TSWwdHa7LNK3q7kvMB8GA1UdIwQY MBaAFLqg8lju9LK/S7qoQwweWMqMGI6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEt ZTU3NjhkNmIxODJjLzEvNldEa2JIbGdTWHhOSmJCMGRyc3MwcmVydVM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEtZTU3NjhkNmIxODJj LzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+IeMA0G CSqGSIb3DQEBCwUAA4IBAQBuV4QJRKVJV3zLAGSmvbCpVMgeW+k6wqTw3v7lVSDK JUZX6a7O7yA942xG2QOEq6YIAr0OdfM61H81YDegdVgq/JlRGmZXBiNRFIejtn9J ZriYaSOIFd79pt4XwtvcAdcBXbfgb6ZSrY3DHu0K0zKpVkfEZNEQfOGhxDEXJNFy gRoA4MpfX/60ivPma/SKyjIhR1frFmH5O1mIXS/13Kln416/BML+fj7q5cwAHyVE bvrNBhT9tH5NscDdd9Zw83vgp4wDysG9e082cy3L31rtZWL7n1ErkjX20dsHZ69i MjNgmUl7vroTYNAOVy5U+xeQ/UC+pdBDOVgQPtjHGVei -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:03 2026 by rpki-client