This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/6GTkHhvGaHh_ppvgJMPn5q-SDT4.roa File: 6GTkHhvGaHh_ppvgJMPn5q-SDT4.roa (raw, json) Hash identifier: zOLVYqNLZkRsHu25N50zDbPPg1XzLp1BrOsPiOu+9z8= Subject key identifier: E8:64:E4:1E:1B:C6:68:78:7F:A6:9B:E0:24:C3:E7:E6:AF:92:0D:3E Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Certificate serial: 019B7EA6ADD245B29161BF19FB66A3CF6664 Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/6GTkHhvGaHh_ppvgJMPn5q-SDT4.roa Signing time: Fri 02 Jan 2026 12:20:11 +0000 ROA not before: Fri 02 Jan 2026 12:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1273 IP address blocks: 46.108.0.0/16 maxlen: 24 46.190.128.0/17 maxlen: 24 46.190.137.0/24 maxlen: 24 46.190.254.0/24 maxlen: 24 47.73.0.0/16 maxlen: 24 47.73.182.0/24 maxlen: 24 47.73.183.0/24 maxlen: 24 47.73.184.0/24 maxlen: 24 47.73.239.0/24 maxlen: 24 47.73.240.0/22 maxlen: 22 62.213.128.0/23 maxlen: 24 62.213.156.0/22 maxlen: 24 85.205.0.0/16 maxlen: 24 139.47.192.0/18 maxlen: 24 195.233.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ad:d2:45:b2:91:61:bf:19:fb:66:a3:cf:66:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Validity Not Before: Jan 2 12:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e864e41e1bc668787fa69be024c3e7e6af920d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0b:64:42:84:ba:fe:a6:be:16:80:95:4d:e0: da:3d:09:1d:41:e4:83:e8:f4:db:64:e4:1e:ea:5a: 8d:76:fc:37:a6:cc:c6:a1:0b:89:fc:e8:0c:25:9f: ee:80:ab:dc:de:c5:b0:5c:9d:d1:c3:d7:c8:0b:21: 67:aa:e8:41:ed:af:ff:e7:32:6a:95:e6:b0:0e:12: 54:be:46:ab:96:90:72:48:9f:8f:e5:cc:0a:9c:4b: 5e:88:33:86:67:e7:d2:4d:a4:97:e6:82:a9:90:f9: 64:bf:64:72:91:03:e8:16:99:e0:4b:57:db:3a:73: ed:d0:e1:5c:6f:43:36:a3:92:71:4d:40:a8:4e:87: 10:b4:bf:21:a5:fd:ed:2a:85:e4:52:da:c2:83:40: ad:91:fc:06:87:2c:31:bd:b9:87:be:16:07:df:49: 44:74:8d:9c:13:e9:3d:24:df:04:b1:5a:22:65:b8: b9:d5:c4:ef:22:1e:8b:5a:0c:2f:d6:cf:8a:5c:d7: be:36:18:a0:99:87:34:38:1c:af:09:28:69:60:01: 07:5d:52:5f:3c:10:53:d5:e4:7a:ba:69:c6:30:12: 5c:ac:8b:b3:f8:bf:61:83:1f:46:17:0d:57:42:00: b8:90:07:66:67:3b:63:45:82:9b:b1:71:29:9b:53: ab:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:64:E4:1E:1B:C6:68:78:7F:A6:9B:E0:24:C3:E7:E6:AF:92:0D:3E X509v3 Authority Key Identifier: keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/6GTkHhvGaHh_ppvgJMPn5q-SDT4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.108.0.0/16 46.190.128.0/17 47.73.0.0/16 62.213.128.0/23 62.213.156.0/22 85.205.0.0/16 139.47.192.0/18 195.233.0.0/16 Signature Algorithm: sha256WithRSAEncryption b6:a5:43:10:19:be:66:e0:17:92:06:ea:ad:ab:78:66:af:1a: da:e4:76:70:64:7f:2d:79:a5:7c:43:ae:84:3d:0d:77:33:cc: b4:4c:c1:b0:c5:7a:59:bf:1f:e5:70:dc:a5:cc:1a:47:c2:8a: 75:4d:50:88:b7:d6:dc:66:ea:71:50:5f:52:df:0c:9b:b7:ba: b0:18:ce:5b:f8:fd:c8:45:98:09:5c:d8:f8:61:53:f2:c3:64: cd:46:7f:97:5f:25:9c:33:40:d2:92:55:05:15:9c:f3:99:2f: f1:fc:c1:ad:32:a6:b6:a7:87:17:da:11:74:ce:ae:d8:98:41: c9:8d:7f:6a:ac:d6:7e:03:6c:85:61:28:bd:71:a5:b2:07:f7: 95:f3:7a:bf:9d:16:0a:4b:ea:a8:dd:cc:f6:39:f5:6c:65:37: 72:ea:09:29:b0:bd:49:9f:40:46:9b:de:9f:43:3a:d2:1d:1d: 8a:b5:33:60:a3:ba:ed:f8:0a:1d:c4:84:6e:ce:ef:1a:f0:b2: 60:f1:db:ff:b9:a0:e8:02:7a:c1:cb:f6:06:47:ea:cf:7e:14: 8c:1f:d4:88:f0:ff:b0:54:37:c4:7d:4d:e0:59:a1:ce:88:12: 1f:75:50:b7:a3:84:07:ad:c1:42:7a:b1:93:6a:5a:28:3e:d0: 41:b9:1f:e4 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt+pq3SRbKRYb8Z+2ajz2ZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYTVkOTk4NjNkYjJlNDliNDRmNmMzMjRlYjA0Mzg4ZmM3 NTE1ZDIwHhcNMjYwMTAyMTIyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODY0ZTQxZTFiYzY2ODc4N2ZhNjliZTAyNGMzZTdlNmFmOTIwZDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgtkQoS6/qa+FoCVTeDaPQkdQeSD 6PTbZOQe6lqNdvw3pszGoQuJ/OgMJZ/ugKvc3sWwXJ3Rw9fICyFnquhB7a//5zJq leawDhJUvkarlpBySJ+P5cwKnEteiDOGZ+fSTaSX5oKpkPlkv2RykQPoFpngS1fb OnPt0OFcb0M2o5JxTUCoTocQtL8hpf3tKoXkUtrCg0CtkfwGhywxvbmHvhYH30lE dI2cE+k9JN8EsVoiZbi51cTvIh6LWgwv1s+KXNe+NhigmYc0OByvCShpYAEHXVJf PBBT1eR6umnGMBJcrIuz+L9hgx9GFw1XQgC4kAdmZztjRYKbsXEpm1OrQQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFOhk5B4bxmh4f6ab4CTD5+avkg0+MB8GA1UdIwQY MBaAFLOl2Zhj2y5JtE9sMk6wQ4j8dRXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAt ZWVjNWQ1MGVmYTk0LzEvNkdUa0hodkdhSGhfcHB2Z0pNUG41cS1TRFQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAtZWVjNWQ1MGVmYTk0 LzEvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwMALmwDBAcu voADAwAvSQMEAT7VgAMEAj7VnAMDAFXNAwQGiy/AAwMAw+kwDQYJKoZIhvcNAQEL BQADggEBALalQxAZvmbgF5IG6q2reGavGtrkdnBkfy15pXxDroQ9DXczzLRMwbDF elm/H+Vw3KXMGkfCinVNUIi31txm6nFQX1LfDJu3urAYzlv4/chFmAlc2PhhU/LD ZM1Gf5dfJZwzQNKSVQUVnPOZL/H8wa0ypranhxfaEXTOrtiYQcmNf2qs1n4DbIVh KL1xpbIH95Xzer+dFgpL6qjdzPY59WxlN3LqCSmwvUmfQEab3p9DOtIdHYq1M2Cj uu34Ch3EhG7O7xrwsmDx2/+5oOgCesHL9gZH6s9+FIwf1Ijw/7BUN8R9TeBZoc6I Eh91ULejhAetwUJ6sZNqWig+0EG5H+Q= -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:46 2026 by rpki-client