This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/b6_1YvrxO5H13PgeqX9yvKDmS8Y.roa File: b6_1YvrxO5H13PgeqX9yvKDmS8Y.roa (raw, json) Hash identifier: LmP1grhJtls1Giy8pUC8zHO3rUSGz/0KggmC8aeJ/z0= Subject key identifier: 6F:AF:F5:62:FA:F1:3B:91:F5:DC:F8:1E:A9:7F:72:BC:A0:E6:4B:C6 Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123 Certificate serial: 019B78A334213A235ABFD249E6CCB0C44AA2 Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/b6_1YvrxO5H13PgeqX9yvKDmS8Y.roa Signing time: Thu 01 Jan 2026 08:18:40 +0000 ROA not before: Thu 01 Jan 2026 08:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216235 IP address blocks: 84.47.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:34:21:3a:23:5a:bf:d2:49:e6:cc:b0:c4:4a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123 Validity Not Before: Jan 1 08:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6faff562faf13b91f5dcf81ea97f72bca0e64bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c8:b8:b8:22:33:85:3b:b9:4b:2e:88:79:8e: 25:35:20:5b:49:40:d1:6a:28:6a:2d:86:01:5f:9a: 33:a8:11:e8:0f:50:92:0b:45:70:cf:13:05:90:a4: ee:2f:39:d9:39:53:56:91:a4:95:28:07:1b:c0:5d: 02:93:85:bd:85:f8:99:49:db:4d:dc:88:b2:c0:ec: 1c:14:18:cc:f1:a2:c5:18:ba:30:f8:4d:73:7f:01: 94:e5:6f:03:ae:84:fb:a8:30:71:3e:e3:bf:81:41: f3:7f:73:42:39:12:66:24:45:2b:49:95:48:14:31: d8:a6:0c:f1:92:3b:2e:c0:ea:51:c7:52:43:81:a4: a8:bb:de:28:1d:ca:c4:80:3d:54:df:9e:1c:af:5f: c5:68:09:78:20:db:de:c2:17:4a:3d:8d:c0:9f:0a: 25:69:70:06:68:c0:64:0d:79:66:d1:6a:6b:85:1f: c5:01:2e:d6:24:1d:48:f5:28:2f:6e:e8:1a:0b:64: e6:6f:6c:3b:a5:0c:44:0d:38:6a:6a:a5:e1:09:61: 8f:31:57:5a:45:cc:8e:94:2b:7f:c1:1d:f7:54:49: c0:a6:a5:b2:58:42:83:76:87:26:4a:cc:72:08:95: d8:da:19:02:6b:34:31:b9:5b:ab:52:88:8a:aa:96: 43:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:AF:F5:62:FA:F1:3B:91:F5:DC:F8:1E:A9:7F:72:BC:A0:E6:4B:C6 X509v3 Authority Key Identifier: keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/b6_1YvrxO5H13PgeqX9yvKDmS8Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.47.172.0/24 Signature Algorithm: sha256WithRSAEncryption 33:b5:64:52:8a:1e:3f:a2:e3:12:9f:28:47:13:cd:13:80:1c: 69:da:f2:c8:75:71:4d:e5:6d:72:e6:49:b7:9e:e0:8d:76:cf: 42:f2:b2:e3:b3:33:d8:20:8b:35:9c:28:5e:86:af:f6:8d:34: 73:89:a2:8a:85:0e:88:d4:0a:db:a9:4d:fc:a0:22:a0:ea:07: 4d:dc:e3:44:9c:c4:c8:4b:38:4c:46:9e:01:e3:ce:02:07:aa: 7e:7d:26:11:95:74:2a:c9:8b:65:f7:da:72:ef:77:fc:09:5f: e0:73:1d:38:c4:9c:0c:a2:3e:78:d8:4b:c4:f1:26:e0:0c:09: 44:2d:25:de:b0:99:0e:5e:9d:0a:20:a6:24:5a:56:7d:a3:bd: 43:12:f8:50:21:4e:a7:eb:73:73:06:cd:31:31:67:e4:ae:c0: 9c:2e:7d:94:98:b6:1f:27:67:fb:d7:62:cb:89:46:1e:00:8e: 36:d5:ba:fd:54:fd:56:4f:e7:33:0b:37:94:5a:d5:da:30:d2: 50:1b:6f:3c:36:c6:7b:aa:3f:93:fb:c2:fe:4b:14:f7:c1:ec: 4e:0c:5d:b2:17:ad:d0:a3:21:be:7a:ba:59:ed:63:6c:c2:9c: 80:ac:60:fa:ba:ee:74:83:d9:00:5b:8e:4b:2d:92:79:b5:ef: 1c:1b:25:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ozQhOiNav9JJ5sywxEqiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy NzAxMjMwHhcNMjYwMTAxMDgxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmFmZjU2MmZhZjEzYjkxZjVkY2Y4MWVhOTdmNzJiY2EwZTY0YmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8i4uCIzhTu5Sy6IeY4lNSBbSUDR aihqLYYBX5ozqBHoD1CSC0VwzxMFkKTuLznZOVNWkaSVKAcbwF0Ck4W9hfiZSdtN 3IiywOwcFBjM8aLFGLow+E1zfwGU5W8DroT7qDBxPuO/gUHzf3NCORJmJEUrSZVI FDHYpgzxkjsuwOpRx1JDgaSou94oHcrEgD1U354cr1/FaAl4INvewhdKPY3Anwol aXAGaMBkDXlm0WprhR/FAS7WJB1I9SgvbugaC2Tmb2w7pQxEDThqaqXhCWGPMVda RcyOlCt/wR33VEnApqWyWEKDdocmSsxyCJXY2hkCazQxuVurUoiKqpZDYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG+v9WL68TuR9dz4Hql/cryg5kvGMB8GA1UdIwQY MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt YmZiNGJhMzBlNDVhLzEvYjZfMVl2cnhPNUgxM1BnZXFYOXl2S0RtUzhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVC+sMA0G CSqGSIb3DQEBCwUAA4IBAQAztWRSih4/ouMSnyhHE80TgBxp2vLIdXFN5W1y5km3 nuCNds9C8rLjszPYIIs1nChehq/2jTRziaKKhQ6I1ArbqU38oCKg6gdN3ONEnMTI SzhMRp4B484CB6p+fSYRlXQqyYtl99py73f8CV/gcx04xJwMoj542EvE8SbgDAlE LSXesJkOXp0KIKYkWlZ9o71DEvhQIU6n63NzBs0xMWfkrsCcLn2UmLYfJ2f712LL iUYeAI421br9VP1WT+czCzeUWtXaMNJQG288NsZ7qj+T+8L+SxT3wexODF2yF63Q oyG+erpZ7WNswpyArGD6uu50g9kAW45LLZJ5te8cGyWB -----END CERTIFICATE-----Generated at Sun Jan 25 22:42:21 2026 by rpki-client