This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/X6IQ-q68Lu6Sm7ozgn09iKo2xDc.roa File: X6IQ-q68Lu6Sm7ozgn09iKo2xDc.roa (raw, json) Hash identifier: 1oM0JFaG4XNcO5zFMn1eRQw1lAJ0Or0fahaPut34poU= Subject key identifier: 5F:A2:10:FA:AE:BC:2E:EE:92:9B:BA:33:82:7D:3D:88:AA:36:C4:37 Certificate issuer: /CN=762c60af4d73725845ceaf0b7b585e7757066965 Certificate serial: 019B76EBA08A531E8B8B23FCC3C39E5A0168 Authority key identifier: 76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/X6IQ-q68Lu6Sm7ozgn09iKo2xDc.roa Signing time: Thu 01 Jan 2026 00:18:32 +0000 ROA not before: Thu 01 Jan 2026 00:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35732 IP address blocks: 91.240.80.0/24 maxlen: 24 91.240.81.0/24 maxlen: 24 91.240.82.0/24 maxlen: 24 91.240.83.0/24 maxlen: 24 194.246.88.0/24 maxlen: 24 194.246.89.0/24 maxlen: 24 194.246.90.0/24 maxlen: 24 194.246.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a0:8a:53:1e:8b:8b:23:fc:c3:c3:9e:5a:01:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=762c60af4d73725845ceaf0b7b585e7757066965 Validity Not Before: Jan 1 00:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fa210faaebc2eee929bba33827d3d88aa36c437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:31:1a:76:8e:48:9e:f6:8b:33:18:c2:2b:37: db:34:b5:b6:51:45:35:8b:86:b1:56:3b:ef:d5:72: 0d:c9:b5:9e:7a:0a:87:ec:68:47:fb:66:d3:cd:cc: 3e:79:3b:bf:d7:fa:d6:c4:8a:f2:ef:1b:1b:fd:b6: 7e:96:12:14:e6:95:c4:f7:f9:43:37:e1:87:c3:46: d7:40:50:8c:be:19:db:4e:bb:b2:44:ca:e4:ca:49: bd:dc:c5:9c:f5:2d:a3:63:e6:a5:3a:7d:9c:a1:6c: 0f:f0:75:a8:1a:fd:5a:b5:e2:fa:ef:08:b6:ec:c1: 45:9e:b9:a9:b3:6a:68:a5:a7:c5:b4:8b:82:9a:81: 17:7b:62:fd:a6:7b:10:13:35:13:e1:76:b1:24:c6: d7:cf:bb:dc:5b:8a:8d:a2:70:2c:14:72:00:76:05: a1:8a:18:5f:94:ea:44:94:e6:ac:4a:56:66:48:1f: 72:fe:ed:45:2f:0c:86:dc:c3:0c:c9:fe:d8:53:41: c2:4c:7c:44:72:ae:d6:53:36:4b:e9:6f:0b:3c:b6: 73:87:35:f4:93:c6:aa:ff:61:18:b7:3a:a5:e5:07: 36:04:16:71:74:82:7c:44:f9:03:67:c6:6b:0f:d9: c4:58:38:94:0b:4f:c6:75:39:70:89:99:3e:4d:f3: 94:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A2:10:FA:AE:BC:2E:EE:92:9B:BA:33:82:7D:3D:88:AA:36:C4:37 X509v3 Authority Key Identifier: keyid:76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/X6IQ-q68Lu6Sm7ozgn09iKo2xDc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.80.0/22 194.246.88.0/22 Signature Algorithm: sha256WithRSAEncryption 15:1e:8c:3c:8c:bb:20:d0:e3:88:7d:94:70:04:8f:72:28:0a: ee:ec:85:11:68:0a:bb:c8:87:01:ae:83:6f:07:dc:de:db:1d: 1d:78:67:b8:75:32:96:bb:ca:6c:d0:25:b0:ca:bc:da:f2:46: 90:48:7b:a0:6c:f9:cf:9a:b6:91:b2:5b:cc:46:18:a9:be:73: 05:ca:38:d9:93:c8:12:be:0a:32:bf:a9:76:54:45:84:34:ef: 34:82:c9:c4:5c:41:bc:04:7b:ed:4d:83:df:fc:95:0b:a3:39: 45:41:26:d6:93:60:b8:32:ec:00:d2:d1:12:8f:c8:c4:15:d2: be:d3:2c:fe:7e:81:7f:0d:96:cc:d9:0e:80:e8:b4:15:00:a4: a0:f0:ce:0a:74:a4:2d:c7:c2:c7:b5:0b:59:9d:8f:e6:c0:bf: dd:c8:17:ef:6b:6a:c9:97:60:9a:81:fe:24:c6:21:d8:fa:22: ee:9a:cb:fd:e0:a1:e0:c1:14:cd:19:81:7f:3b:c1:91:d9:32: fe:1b:16:27:22:11:21:28:99:2e:0f:58:16:71:c9:b3:03:60: 3d:fb:51:09:ca:8a:13:f6:b3:46:ef:66:8b:84:22:a1:92:e5: 67:61:5c:32:d6:36:1c:7d:85:bb:73:2a:ed:a4:e9:18:44:d3: f3:5a:30:46 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt266CKUx6LiyP8w8OeWgFoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MmM2MGFmNGQ3MzcyNTg0NWNlYWYwYjdiNTg1ZTc3NTcw NjY5NjUwHhcNMjYwMTAxMDAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmEyMTBmYWFlYmMyZWVlOTI5YmJhMzM4MjdkM2Q4OGFhMzZjNDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzEado5InvaLMxjCKzfbNLW2UUU1 i4axVjvv1XINybWeegqH7GhH+2bTzcw+eTu/1/rWxIry7xsb/bZ+lhIU5pXE9/lD N+GHw0bXQFCMvhnbTruyRMrkykm93MWc9S2jY+alOn2coWwP8HWoGv1ateL67wi2 7MFFnrmps2popafFtIuCmoEXe2L9pnsQEzUT4XaxJMbXz7vcW4qNonAsFHIAdgWh ihhflOpElOasSlZmSB9y/u1FLwyG3MMMyf7YU0HCTHxEcq7WUzZL6W8LPLZzhzX0 k8aq/2EYtzql5Qc2BBZxdIJ8RPkDZ8ZrD9nEWDiUC0/GdTlwiZk+TfOUMwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFF+iEPquvC7ukpu6M4J9PYiqNsQ3MB8GA1UdIwQY MBaAFHYsYK9Nc3JYRc6vC3tYXndXBmllMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGl4Z3IwMXpjbGhGenE4TGUxaGVkMWNHYVdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lNmEwMmUtMDE0Ni00NGE2LTlkZmMt ZDQyMDlmYzdmM2M5LzEvWDZJUS1xNjhMdTZTbTdvemduMDlpS28yeERjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9lNmEwMmUtMDE0Ni00NGE2LTlkZmMtZDQyMDlmYzdmM2M5 LzEvZGl4Z3IwMXpjbGhGenE4TGUxaGVkMWNHYVdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW/BQAwQC wvZYMA0GCSqGSIb3DQEBCwUAA4IBAQAVHow8jLsg0OOIfZRwBI9yKAru7IURaAq7 yIcBroNvB9ze2x0deGe4dTKWu8ps0CWwyrza8kaQSHugbPnPmraRslvMRhipvnMF yjjZk8gSvgoyv6l2VEWENO80gsnEXEG8BHvtTYPf/JULozlFQSbWk2C4MuwA0tES j8jEFdK+0yz+foF/DZbM2Q6A6LQVAKSg8M4KdKQtx8LHtQtZnY/mwL/dyBfva2rJ l2Cagf4kxiHY+iLumsv94KHgwRTNGYF/O8GR2TL+GxYnIhEhKJkuD1gWccmzA2A9 +1EJyooT9rNG72aLhCKhkuVnYVwy1jYcfYW7cyrtpOkYRNPzWjBG -----END CERTIFICATE-----Generated at Mon Jan 26 06:17:39 2026 by rpki-client