This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/6RiDdnednlszc5nfc-ANOJUv2-o.roa File: 6RiDdnednlszc5nfc-ANOJUv2-o.roa (raw, json) Hash identifier: jp3uEswNG4RA6H4G2MDNF+CFUPavRhXT4rfyfKyq6LE= Subject key identifier: E9:18:83:76:77:9D:9E:5B:33:73:99:DF:73:E0:0D:38:95:2F:DB:EA Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Certificate serial: 019B7E391A852504791E74542F6C0E5E0FFD Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/6RiDdnednlszc5nfc-ANOJUv2-o.roa Signing time: Fri 02 Jan 2026 10:20:30 +0000 ROA not before: Fri 02 Jan 2026 10:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206259 IP address blocks: 94.154.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:1a:85:25:04:79:1e:74:54:2f:6c:0e:5e:0f:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Validity Not Before: Jan 2 10:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9188376779d9e5b337399df73e00d38952fdbea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c8:fc:bc:56:d0:87:9e:0a:d0:e7:5f:22:77: c7:5e:d3:20:aa:93:b3:9c:6b:65:e4:fc:28:a2:b7: 9e:ad:f5:a1:43:26:ca:36:34:f9:62:8f:f0:a4:89: f3:d9:b3:f5:12:58:b4:78:ff:ce:ba:39:88:00:1c: 98:57:8b:90:f3:03:9a:ce:45:5f:26:89:08:b3:a8: a9:b5:55:f8:60:3e:a0:f5:37:c7:65:45:f0:53:6b: 68:9e:a4:ab:30:90:0d:51:a8:a3:53:51:66:70:e3: a6:92:ae:c6:52:a1:2c:2f:8b:aa:28:b5:23:e8:68: 4b:da:95:73:9b:ae:31:03:97:93:e0:5b:aa:fe:46: 08:e1:32:e1:00:fd:bb:49:1d:ac:4a:82:d4:12:13: cf:14:91:d6:87:d3:2d:d1:d5:8d:42:01:64:ea:23: 18:e7:b1:03:40:72:dd:dd:e9:39:ff:8c:d6:7b:66: 13:2f:fd:f3:b2:6d:a4:ab:73:3b:ae:b9:f2:66:0f: 9f:3d:98:1a:c2:9d:78:fd:93:f7:30:73:80:6d:56: d6:df:08:2c:cc:b0:86:33:99:6d:69:37:92:78:7c: de:55:75:cd:11:bb:5b:62:71:98:0d:e8:13:f6:e1: 72:39:94:65:39:38:60:f3:e5:10:23:cb:2e:0c:3e: 5a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:18:83:76:77:9D:9E:5B:33:73:99:DF:73:E0:0D:38:95:2F:DB:EA X509v3 Authority Key Identifier: keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/6RiDdnednlszc5nfc-ANOJUv2-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.154.33.0/24 Signature Algorithm: sha256WithRSAEncryption a8:2e:c5:f8:a3:00:94:80:db:a3:47:5e:60:ed:2f:2e:d3:1b: fb:f2:2d:47:66:08:87:f3:c6:f5:59:7a:cb:b5:f3:4a:cc:6f: 15:15:67:ff:09:e7:26:51:42:f5:6c:c9:74:c6:fa:8c:6b:22: 7b:34:ef:7c:e6:e2:13:63:ee:76:a7:4e:43:6b:6d:1d:1e:00: 63:32:91:d8:10:d0:e1:21:a1:6d:a2:d9:ff:08:b7:c4:57:94: 86:73:fb:21:dd:cb:70:25:06:48:3a:1b:61:20:ad:79:e9:5f: 5c:80:a9:43:20:8b:87:8d:55:70:16:26:26:5f:b2:1e:f8:d1: 99:d8:88:ea:13:10:20:11:cf:51:4b:c2:1c:f8:ca:99:92:84: 14:58:69:11:75:81:f9:80:31:74:c1:86:b9:db:fd:be:03:6e: c0:01:20:57:14:20:2d:73:a9:fb:46:f9:97:b6:f6:ff:68:19: 86:3f:da:bd:4f:db:54:34:ff:82:07:5d:9b:e5:e5:6d:d2:29: b6:93:5d:14:48:c1:82:0f:b9:8a:b7:b8:b5:38:aa:89:37:d5: 7d:41:2b:bc:2a:d2:af:1d:b2:92:c5:36:2b:fa:d0:d1:63:60: a0:c3:7f:59:28:c3:c8:28:48:c5:74:10:93:c9:7b:42:67:7d: d9:26:08:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ORqFJQR5HnRUL2wOXg/9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5 MjFmODgwHhcNMjYwMTAyMTAyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTE4ODM3Njc3OWQ5ZTViMzM3Mzk5ZGY3M2UwMGQzODk1MmZkYmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMj8vFbQh54K0OdfInfHXtMgqpOz nGtl5PwooreerfWhQybKNjT5Yo/wpInz2bP1Eli0eP/OujmIAByYV4uQ8wOazkVf JokIs6iptVX4YD6g9TfHZUXwU2tonqSrMJANUaijU1FmcOOmkq7GUqEsL4uqKLUj 6GhL2pVzm64xA5eT4Fuq/kYI4TLhAP27SR2sSoLUEhPPFJHWh9Mt0dWNQgFk6iMY 57EDQHLd3ek5/4zWe2YTL/3zsm2kq3M7rrnyZg+fPZgawp14/ZP3MHOAbVbW3wgs zLCGM5ltaTeSeHzeVXXNEbtbYnGYDegT9uFyOZRlOThg8+UQI8suDD5aAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOkYg3Z3nZ5bM3OZ33PgDTiVL9vqMB8GA1UdIwQY MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt YTE4NGYzNTU2ZTQzLzEvNlJpRGRuZWRubHN6YzVuZmMtQU5PSlV2Mi1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpohMA0G CSqGSIb3DQEBCwUAA4IBAQCoLsX4owCUgNujR15g7S8u0xv78i1HZgiH88b1WXrL tfNKzG8VFWf/CecmUUL1bMl0xvqMayJ7NO985uITY+52p05Da20dHgBjMpHYENDh IaFtotn/CLfEV5SGc/sh3ctwJQZIOhthIK156V9cgKlDIIuHjVVwFiYmX7Ie+NGZ 2IjqExAgEc9RS8Ic+MqZkoQUWGkRdYH5gDF0wYa52/2+A27AASBXFCAtc6n7RvmX tvb/aBmGP9q9T9tUNP+CB12b5eVt0im2k10USMGCD7mKt7i1OKqJN9V9QSu8KtKv HbKSxTYr+tDRY2Cgw39ZKMPIKEjFdBCTyXtCZ33ZJgi1 -----END CERTIFICATE-----Generated at Sun Jan 25 13:01:41 2026 by rpki-client