This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/G6FeIPbrFYt0Xs4RMbl3hxFSgPI.roa File: G6FeIPbrFYt0Xs4RMbl3hxFSgPI.roa (raw, json) Hash identifier: pCJOng4j62RgLgH4PaC9a8+B4/vINuGKFVNtITN4RoM= Subject key identifier: 1B:A1:5E:20:F6:EB:15:8B:74:5E:CE:11:31:B9:77:87:11:52:80:F2 Certificate issuer: /CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf Certificate serial: 019B791058EC58DA2BB94FF928E46711CE5F Authority key identifier: 4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/G6FeIPbrFYt0Xs4RMbl3hxFSgPI.roa Signing time: Thu 01 Jan 2026 10:17:53 +0000 ROA not before: Thu 01 Jan 2026 10:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33941 IP address blocks: 83.136.120.0/21 maxlen: 21 195.82.96.0/24 maxlen: 24 195.82.107.0/24 maxlen: 24 212.85.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:58:ec:58:da:2b:b9:4f:f9:28:e4:67:11:ce:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf Validity Not Before: Jan 1 10:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ba15e20f6eb158b745ece1131b97787115280f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:49:ba:2e:5c:21:5a:61:2e:49:a3:96:51:8c: d7:34:75:16:41:13:33:9b:79:04:fe:de:a0:f4:d2: ed:86:e1:50:24:96:3d:86:87:27:94:8c:a0:2c:23: 66:5d:76:7d:8d:b2:92:1a:e7:e0:ca:5e:3b:e6:db: 09:7c:41:6b:fa:8b:c3:3e:f3:f7:ff:fb:a4:aa:be: 91:77:b9:18:3c:2a:2b:5b:f7:ef:03:b8:20:46:66: 57:27:d8:3b:69:52:0e:c2:c0:e6:45:a2:17:f3:ca: d8:a1:ee:b8:c7:08:89:24:ec:c4:db:95:67:05:52: 64:7f:22:ec:b3:6c:8c:96:3a:e4:ee:5e:9f:e6:53: 3b:8d:b0:dd:5f:74:5e:83:af:cd:44:41:55:97:f4: 5e:85:aa:b5:ba:c4:e1:b4:55:ce:11:2a:3f:36:4c: cb:5c:ce:ac:49:c5:7f:a4:ea:d8:af:6f:70:02:3c: 3a:a4:19:83:10:62:48:f9:6f:91:ce:12:e2:dd:81: e3:4b:e7:18:e5:88:17:1f:88:00:2d:06:e6:c3:08: 42:52:b5:b6:c3:04:af:fb:cd:ff:c3:4b:17:5e:5e: ba:f3:53:d8:14:82:3d:13:b7:8e:10:20:4c:78:41: 58:d1:57:85:f1:32:c9:39:c7:94:39:20:50:84:cd: e5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A1:5E:20:F6:EB:15:8B:74:5E:CE:11:31:B9:77:87:11:52:80:F2 X509v3 Authority Key Identifier: keyid:4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/G6FeIPbrFYt0Xs4RMbl3hxFSgPI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.136.120.0/21 195.82.96.0/24 195.82.107.0/24 212.85.248.0/22 Signature Algorithm: sha256WithRSAEncryption 11:4c:e5:2b:a5:ae:ce:b5:85:77:72:57:69:19:a3:31:da:6f: 75:e9:7e:89:92:a1:89:e7:55:de:90:9f:8e:d3:f7:31:05:3f: 6e:1a:e7:dc:b9:16:fb:76:85:76:06:0c:fe:07:fe:c9:24:4d: 07:18:cc:3a:f0:0d:e7:5e:4c:83:6a:e9:97:8b:56:05:3a:ce: 14:51:8e:38:ea:be:8d:3a:3f:af:2c:60:9d:23:e0:02:07:c6: f0:b6:bf:5d:8c:ee:49:52:c8:63:c3:6f:6b:2b:0a:06:7c:3b: ef:1a:bd:90:f9:f9:ef:c4:34:ee:9c:db:70:88:db:1d:c5:ec: 16:1c:e3:e1:e0:f8:df:d6:44:4b:9a:2d:eb:75:bf:94:88:7a: 20:e0:fb:8a:7b:37:cd:20:dc:96:15:a4:5d:45:71:42:16:97: a7:6e:48:51:0a:b8:d5:2e:0c:a0:13:d4:08:64:e5:17:1e:44: 4f:b1:cf:2e:a6:e6:47:fa:21:56:56:47:a7:9e:b9:a8:d9:73: 93:6f:58:d9:dd:fa:ad:dd:20:08:ab:85:36:7d:3e:93:78:a3: 21:23:82:bb:a5:46:63:87:29:72:7b:10:37:67:4c:f9:4a:2d: 57:d6:5c:26:86:37:98:03:da:a1:17:0f:bf:42:a2:b9:fe:c2: df:de:44:23 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5EFjsWNoruU/5KORnEc5fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNTRlY2NlNmNiYzljNTQ5MjllYWE0YjIyYjMzN2IwZmQ5 YjM2YmYwHhcNMjYwMTAxMTAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmExNWUyMGY2ZWIxNThiNzQ1ZWNlMTEzMWI5Nzc4NzExNTI4MGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0m6LlwhWmEuSaOWUYzXNHUWQRMz m3kE/t6g9NLthuFQJJY9hocnlIygLCNmXXZ9jbKSGufgyl475tsJfEFr+ovDPvP3 //ukqr6Rd7kYPCorW/fvA7ggRmZXJ9g7aVIOwsDmRaIX88rYoe64xwiJJOzE25Vn BVJkfyLss2yMljrk7l6f5lM7jbDdX3Reg6/NREFVl/Rehaq1usThtFXOESo/NkzL XM6sScV/pOrYr29wAjw6pBmDEGJI+W+RzhLi3YHjS+cY5YgXH4gALQbmwwhCUrW2 wwSv+83/w0sXXl6681PYFII9E7eOECBMeEFY0VeF8TLJOceUOSBQhM3lbwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFBuhXiD26xWLdF7OETG5d4cRUoDyMB8GA1UdIwQY MBaAFExU7M5svJxUkp6qSyKzN7D9mza/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEZUc3pteThuRlNTbnFwTElyTTNzUDJiTnI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wMmM1ZWMtN2M2Zi00YWUyLTk4OTct MzA1OWM4OWI3MmVhLzEvRzZGZUlQYnJGWXQwWHM0Uk1ibDNoeEZTZ1BJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8wMmM1ZWMtN2M2Zi00YWUyLTk4OTctMzA1OWM4OWI3MmVh LzEvVEZUc3pteThuRlNTbnFwTElyTTNzUDJiTnI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDU4h4AwQA w1JgAwQAw1JrAwQC1FX4MA0GCSqGSIb3DQEBCwUAA4IBAQARTOUrpa7OtYV3cldp GaMx2m916X6JkqGJ51XekJ+O0/cxBT9uGufcuRb7doV2Bgz+B/7JJE0HGMw68A3n XkyDaumXi1YFOs4UUY446r6NOj+vLGCdI+ACB8bwtr9djO5JUshjw29rKwoGfDvv Gr2Q+fnvxDTunNtwiNsdxewWHOPh4Pjf1kRLmi3rdb+UiHog4PuKezfNINyWFaRd RXFCFpenbkhRCrjVLgygE9QIZOUXHkRPsc8upuZH+iFWVkennrmo2XOTb1jZ3fqt 3SAIq4U2fT6TeKMhI4K7pUZjhylyexA3Z0z5Si1X1lwmhjeYA9qhFw+/QqK5/sLf 3kQj -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:25 2026 by rpki-client