This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/6TVF3dArdPB2NJxy7_Pdt8ium4c.roa File: 6TVF3dArdPB2NJxy7_Pdt8ium4c.roa (raw, json) Hash identifier: TnqA7ATOZWUWRWUjYZnrgFVgbRIJUV3+W+Bfc18gIck= Subject key identifier: E9:35:45:DD:D0:2B:74:F0:76:34:9C:72:EF:F3:DD:B7:C8:AE:9B:87 Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 019B7F840CF85117ED032D0EBFAACFC97645 Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/6TVF3dArdPB2NJxy7_Pdt8ium4c.roa Signing time: Fri 02 Jan 2026 16:21:59 +0000 ROA not before: Fri 02 Jan 2026 16:21:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 92.204.128.0/20 maxlen: 24 151.106.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:0c:f8:51:17:ed:03:2d:0e:bf:aa:cf:c9:76:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: Jan 2 16:21:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e93545ddd02b74f076349c72eff3ddb7c8ae9b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0c:2d:e7:f8:fe:f6:de:95:26:06:6e:0c:71: b8:e4:fa:40:53:46:3a:45:cd:f8:52:7f:9e:83:ed: 8c:c9:a6:1c:a9:af:3d:1f:10:37:c8:0b:98:d4:66: 2f:2d:a5:63:89:01:fc:82:9e:d5:f5:b3:4c:4c:36: 4d:b4:69:d6:fd:fd:88:86:55:71:fc:44:d6:9f:d0: 94:08:ce:ac:4f:d5:1e:c7:ef:cd:22:5e:b4:b4:f3: aa:f2:3f:2f:00:37:25:16:8c:ac:ad:dc:b9:09:91: 49:7c:36:d2:5c:96:ac:22:bc:84:47:3c:15:95:1c: 84:01:bb:76:67:04:42:93:94:d9:43:c4:3d:b5:c9: 66:e0:b2:89:d4:e1:3b:3b:fb:6c:e5:99:b5:4f:a5: 32:34:94:ae:61:3b:d9:d5:cb:d9:a4:61:2f:80:44: 4a:be:38:9b:46:d3:d1:9f:81:0a:de:bc:2b:fd:da: b3:59:c2:12:cd:8e:b1:6d:90:e2:7f:dd:52:f4:56: 24:35:0f:3f:07:39:a4:ca:23:91:31:5f:02:8f:28: 7e:a2:a1:27:80:ae:5f:b8:af:02:c4:a4:50:c8:3d: 90:a8:2b:91:f5:26:d5:56:4a:21:5e:32:4b:64:0b: d8:b5:e5:2e:d1:bd:7d:57:93:6a:a8:be:26:cb:2d: 7d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:35:45:DD:D0:2B:74:F0:76:34:9C:72:EF:F3:DD:B7:C8:AE:9B:87 X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/6TVF3dArdPB2NJxy7_Pdt8ium4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.204.128.0/20 151.106.32.0/20 Signature Algorithm: sha256WithRSAEncryption 89:21:f1:61:6a:0d:a6:bc:1d:f1:fd:0c:c2:ea:e8:52:1d:ec: 72:4f:7c:a2:f8:67:cd:66:da:5e:25:06:0d:87:69:78:98:4d: ef:f1:a1:2c:44:1e:17:0e:37:36:60:6a:bb:f9:ff:a2:e9:74: 8f:ee:aa:e1:c3:a3:f0:2c:2d:9a:20:f2:70:4b:f0:d1:10:f5: cb:f2:75:eb:e6:92:be:24:6b:aa:8b:03:83:f8:74:25:7c:6c: 6b:13:cf:ad:33:f8:b6:74:8e:a9:bc:5c:17:6a:35:96:06:80: 15:cd:98:af:ee:f2:56:80:a0:1c:3d:d2:ad:ad:5e:92:35:ca: 21:66:62:5f:00:f9:88:3c:59:a8:17:6a:40:cf:14:12:54:68: f0:72:eb:82:15:09:57:49:3e:0f:86:9f:40:ec:1c:ff:b9:5a: 3a:2c:b3:33:fc:3c:9a:d5:70:33:b8:61:c5:6c:c4:bf:15:51: eb:87:f2:3d:a2:76:a4:cd:ba:a2:86:ed:82:27:38:4c:eb:b7: 61:c1:27:ea:21:75:94:c3:8e:05:e9:aa:d5:5a:bd:a6:2e:3e: f7:3e:e0:7a:ac:bc:5e:c8:9e:d5:06:3a:d7:55:c6:33:84:71: 7f:9b:66:fc:89:f8:81:8d:2a:12:5e:52:c8:8a:13:b6:d3:f6: 2e:78:e6:3c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hAz4URftAy0Ov6rPyXZFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjYwMTAyMTYyMTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTM1NDVkZGQwMmI3NGYwNzYzNDljNzJlZmYzZGRiN2M4YWU5Yjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Qwt5/j+9t6VJgZuDHG45PpAU0Y6 Rc34Un+eg+2MyaYcqa89HxA3yAuY1GYvLaVjiQH8gp7V9bNMTDZNtGnW/f2IhlVx /ETWn9CUCM6sT9Uex+/NIl60tPOq8j8vADclFoysrdy5CZFJfDbSXJasIryERzwV lRyEAbt2ZwRCk5TZQ8Q9tclm4LKJ1OE7O/ts5Zm1T6UyNJSuYTvZ1cvZpGEvgERK vjibRtPRn4EK3rwr/dqzWcISzY6xbZDif91S9FYkNQ8/BzmkyiORMV8Cjyh+oqEn gK5fuK8CxKRQyD2QqCuR9SbVVkohXjJLZAvYteUu0b19V5NqqL4myy19pwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOk1Rd3QK3TwdjSccu/z3bfIrpuHMB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvNlRWRjNkQXJkUEIyTkp4eTdfUGR0OGl1bTRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEXMyAAwQE l2ogMA0GCSqGSIb3DQEBCwUAA4IBAQCJIfFhag2mvB3x/QzC6uhSHexyT3yi+GfN ZtpeJQYNh2l4mE3v8aEsRB4XDjc2YGq7+f+i6XSP7qrhw6PwLC2aIPJwS/DREPXL 8nXr5pK+JGuqiwOD+HQlfGxrE8+tM/i2dI6pvFwXajWWBoAVzZiv7vJWgKAcPdKt rV6SNcohZmJfAPmIPFmoF2pAzxQSVGjwcuuCFQlXST4Php9A7Bz/uVo6LLMz/Dya 1XAzuGHFbMS/FVHrh/I9onakzbqihu2CJzhM67dhwSfqIXWUw44F6arVWr2mLj73 PuB6rLxeyJ7VBjrXVcYzhHF/m2b8ifiBjSoSXlLIihO20/YueOY8 -----END CERTIFICATE-----Generated at Sun Jan 25 08:00:32 2026 by rpki-client