This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/6kMdvrwU2pCwvdQx9e2jtc6HHm0.roa File: 6kMdvrwU2pCwvdQx9e2jtc6HHm0.roa (raw, json) Hash identifier: qE4aJsmYODQ0nzOFNhlgM1kvgijeIJ6BoQLe8YycTn8= Subject key identifier: EA:43:1D:BE:BC:14:DA:90:B0:BD:D4:31:F5:ED:A3:B5:CE:87:1E:6D Certificate issuer: /CN=96dd885ff4d389abaabd03a5175d09741acba60d Certificate serial: 019B7C11BB7E16422371059D7D0E013F18EC Authority key identifier: 96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/6kMdvrwU2pCwvdQx9e2jtc6HHm0.roa Signing time: Fri 02 Jan 2026 00:18:15 +0000 ROA not before: Fri 02 Jan 2026 00:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8426 IP address blocks: 193.26.116.0/22 maxlen: 22 2a07:f4c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.mft rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:bb:7e:16:42:23:71:05:9d:7d:0e:01:3f:18:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96dd885ff4d389abaabd03a5175d09741acba60d Validity Not Before: Jan 2 00:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea431dbebc14da90b0bdd431f5eda3b5ce871e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2d:a1:99:00:c9:af:6c:2d:80:22:7c:c1:6a: f2:95:61:d9:cc:33:fb:b0:9a:f8:f0:34:e1:80:f4: 9c:62:fc:56:15:1a:9e:de:38:b5:fc:0f:72:36:3d: e5:ea:02:03:76:9c:5f:07:1a:74:97:6f:24:4d:08: d8:d9:5a:6c:aa:d4:13:ee:7f:03:cb:18:1a:47:5f: 47:8a:d7:29:50:b0:48:8e:16:49:e7:64:46:4c:4c: fc:92:45:ae:bc:81:b2:66:96:43:5c:85:53:d1:94: dd:69:d4:ce:d9:05:da:17:20:ee:3e:6c:2e:74:ee: 91:0d:ce:82:37:26:03:d8:e6:2a:3f:fb:98:5c:32: 23:91:4b:1e:83:b5:92:1a:71:66:de:50:e7:ed:b2: 29:7a:b0:c6:55:9b:09:df:68:59:05:f4:69:68:95: c6:cb:29:d9:80:4d:e1:cd:77:5b:37:ea:cd:30:24: 52:8e:d4:aa:f5:64:3b:1f:12:47:00:4d:6b:30:14: 68:a9:b5:c0:63:d9:07:ac:ed:45:a1:5c:77:4b:b6: e3:90:3c:35:37:10:56:09:3c:5f:1c:a3:76:d0:47: 61:29:53:df:92:40:be:86:26:48:7d:78:bb:18:bb: d9:61:7f:c3:85:78:f0:4b:d9:72:aa:3b:4e:a1:82: 43:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:43:1D:BE:BC:14:DA:90:B0:BD:D4:31:F5:ED:A3:B5:CE:87:1E:6D X509v3 Authority Key Identifier: keyid:96:DD:88:5F:F4:D3:89:AB:AA:BD:03:A5:17:5D:09:74:1A:CB:A6:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lt2IX_TTiauqvQOlF10JdBrLpg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/6kMdvrwU2pCwvdQx9e2jtc6HHm0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0c5265-32af-48f2-906d-b652c85556bb/1/lt2IX_TTiauqvQOlF10JdBrLpg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.26.116.0/22 IPv6: 2a07:f4c0::/29 Signature Algorithm: sha256WithRSAEncryption 52:57:4b:47:2b:c3:a4:19:83:34:2c:b8:a4:36:09:f3:e4:a3: ff:d0:cc:c9:33:12:b5:8c:7b:7e:53:f1:d3:1f:96:0f:8a:2a: e9:ad:d1:76:2c:c3:8e:37:f8:02:eb:eb:18:b5:71:35:3b:2a: c9:4b:f4:0a:2b:5b:22:5b:ff:fc:10:1e:d6:56:e9:54:df:6e: 8d:e1:26:59:2c:18:f0:1f:15:58:13:f9:c5:c1:e1:bf:a6:c2: 86:96:dd:0a:2d:ee:d8:a2:f6:a7:98:ca:88:34:42:a9:94:d3: 8b:56:0b:c5:86:2d:61:83:a2:15:5e:e4:42:3a:c3:02:77:59: 29:14:ef:ae:3d:97:16:86:6a:ab:9b:24:ee:76:d2:9e:b4:39: c0:af:1a:81:50:14:cf:45:a6:c2:4d:cd:f5:7f:eb:33:aa:6e: 62:7b:4a:6d:2f:5e:d1:b0:ba:08:af:c0:9b:e1:7c:db:ad:6a: 40:24:c8:39:51:4d:9f:50:62:f2:0b:d1:f8:bf:3f:5a:8f:13: 48:93:e2:a5:64:77:7e:43:aa:d9:d6:09:8a:6a:c0:e7:ff:50: a6:2a:df:b5:8d:2c:ed:7b:fd:42:8a:a1:63:a4:7e:9e:d3:f2: de:d5:6a:68:8e:b4:b1:14:ef:74:06:99:fc:65:94:98:17:62: 3a:43:bf:19 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8Ebt+FkIjcQWdfQ4BPxjsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZGQ4ODVmZjRkMzg5YWJhYWJkMDNhNTE3NWQwOTc0MWFj YmE2MGQwHhcNMjYwMTAyMDAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTQzMWRiZWJjMTRkYTkwYjBiZGQ0MzFmNWVkYTNiNWNlODcxZTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri2hmQDJr2wtgCJ8wWrylWHZzDP7 sJr48DThgPScYvxWFRqe3ji1/A9yNj3l6gIDdpxfBxp0l28kTQjY2VpsqtQT7n8D yxgaR19HitcpULBIjhZJ52RGTEz8kkWuvIGyZpZDXIVT0ZTdadTO2QXaFyDuPmwu dO6RDc6CNyYD2OYqP/uYXDIjkUseg7WSGnFm3lDn7bIperDGVZsJ32hZBfRpaJXG yynZgE3hzXdbN+rNMCRSjtSq9WQ7HxJHAE1rMBRoqbXAY9kHrO1FoVx3S7bjkDw1 NxBWCTxfHKN20EdhKVPfkkC+hiZIfXi7GLvZYX/DhXjwS9lyqjtOoYJDQwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOpDHb68FNqQsL3UMfXto7XOhx5tMB8GA1UdIwQY MBaAFJbdiF/004mrqr0DpRddCXQay6YNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHQySVhfVFRpYXVxdlFPbEYxMEpkQnJMcGcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8wYzUyNjUtMzJhZi00OGYyLTkwNmQt YjY1MmM4NTU1NmJiLzEvNmtNZHZyd1UycEN3dmRReDllMmp0YzZISG0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8wYzUyNjUtMzJhZi00OGYyLTkwNmQtYjY1MmM4NTU1NmJi LzEvbHQySVhfVFRpYXVxdlFPbEYxMEpkQnJMcGcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwRp0MA0E AgACMAcDBQMqB/TAMA0GCSqGSIb3DQEBCwUAA4IBAQBSV0tHK8OkGYM0LLikNgnz 5KP/0MzJMxK1jHt+U/HTH5YPiirprdF2LMOON/gC6+sYtXE1OyrJS/QKK1siW//8 EB7WVulU326N4SZZLBjwHxVYE/nFweG/psKGlt0KLe7YovanmMqINEKplNOLVgvF hi1hg6IVXuRCOsMCd1kpFO+uPZcWhmqrmyTudtKetDnArxqBUBTPRabCTc31f+sz qm5ie0ptL17RsLoIr8Cb4XzbrWpAJMg5UU2fUGLyC9H4vz9ajxNIk+KlZHd+Q6rZ 1gmKasDn/1CmKt+1jSzte/1CiqFjpH6e0/Le1WpojrSxFO90Bpn8ZZSYF2I6Q78Z -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:41 2026 by rpki-client