This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/M6OR43d1Ef_mnsOS7U5WlfEyNNM.roa File: M6OR43d1Ef_mnsOS7U5WlfEyNNM.roa (raw, json) Hash identifier: Ss1HOYPpURHLsSwrNssTEoPmVf7qgHUxrwfwGMzevDc= Subject key identifier: 33:A3:91:E3:77:75:11:FF:E6:9E:C3:92:ED:4E:56:95:F1:32:34:D3 Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84 Certificate serial: 019B7E3722C80F30564E4B1367CBF7BCE129 Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/M6OR43d1Ef_mnsOS7U5WlfEyNNM.roa Signing time: Fri 02 Jan 2026 10:18:21 +0000 ROA not before: Fri 02 Jan 2026 10:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208604 IP address blocks: 188.68.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:22:c8:0f:30:56:4e:4b:13:67:cb:f7:bc:e1:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84 Validity Not Before: Jan 2 10:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33a391e3777511ffe69ec392ed4e5695f13234d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:74:22:77:bb:cb:68:21:86:1d:5d:07:9b:b3: 35:1c:44:14:2a:eb:a8:c2:d1:3a:80:72:72:e5:ed: 2e:93:c6:db:88:db:58:7a:0c:b2:37:fe:a1:2f:05: b6:34:0e:12:69:c5:8b:17:64:b0:1a:a8:41:09:d8: d4:7d:03:da:82:bf:da:d8:70:06:94:1e:53:ca:f6: 50:c4:8c:c6:e0:ce:a0:7a:5f:f3:ca:40:52:5d:8b: 8a:7d:ea:af:86:c5:14:18:0d:47:69:3d:e8:71:b2: 21:e9:45:18:29:58:d0:4e:5c:a3:dd:29:3f:03:de: 5f:e9:3d:b8:ff:75:ab:d3:95:ac:14:24:c5:75:d2: a2:f5:cf:56:5f:a2:b4:9c:6f:df:e0:5d:67:cd:40: 57:4e:9d:b5:c6:38:15:d1:ff:3a:8a:fe:16:42:dd: 8b:ee:d9:0f:e4:32:4a:0e:1f:01:17:5a:94:5e:60: 96:31:91:d2:15:22:a2:df:66:a7:9d:39:9d:f1:af: a1:05:f4:8e:39:cf:8a:5f:73:96:4d:4f:01:dc:a6: f4:13:ea:dd:a9:39:49:75:a6:9b:e0:d6:e2:52:d7: f0:5f:6c:62:3a:07:b3:34:12:37:dd:3d:59:5f:b4: 6d:92:be:3e:3e:56:c2:4a:78:70:c9:36:20:26:8c: 7b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A3:91:E3:77:75:11:FF:E6:9E:C3:92:ED:4E:56:95:F1:32:34:D3 X509v3 Authority Key Identifier: keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/M6OR43d1Ef_mnsOS7U5WlfEyNNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.68.6.0/24 Signature Algorithm: sha256WithRSAEncryption 36:7f:2d:07:bb:5e:13:97:8f:3a:6a:f1:e6:d2:9e:72:7c:8e: 26:29:8d:07:40:d6:7e:96:14:4b:e1:40:f3:ce:61:68:7b:59: 77:e5:26:44:0e:e0:28:7d:db:de:91:02:01:65:97:0b:c6:cd: 86:54:10:fd:90:fe:42:1c:c1:af:01:9c:f0:79:71:95:d2:b6: d0:d5:68:5c:8c:e9:75:99:fe:5c:18:ca:a9:ff:b6:40:6d:3b: 0f:38:1c:8f:d1:a6:29:7d:6f:2f:43:bf:61:74:94:5b:de:23: 1e:48:90:83:30:a9:3c:19:76:03:ed:be:30:c4:0f:c9:a5:d5: 48:2b:6d:29:d1:f9:ca:36:35:e1:74:cc:b5:ca:1e:62:75:46: d8:83:21:d1:a7:f1:a5:98:99:79:74:84:ae:85:51:5a:5b:32: 61:20:26:1d:f2:b1:cd:97:d7:6f:f0:f6:72:67:8c:86:60:93: a7:33:c4:51:d3:27:1d:81:c5:85:b5:7c:44:79:21:7b:21:97: 53:65:72:7f:fa:37:ca:79:7a:e0:e7:2a:b5:e7:b2:ea:af:e0: ce:22:a0:09:78:41:05:93:13:9a:83:02:74:46:f4:d0:8a:da: f9:1f:75:bf:a0:80:1e:9f:7b:4f:f9:23:58:de:2a:90:9d:5a: f3:da:8e:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+NyLIDzBWTksTZ8v3vOEpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMzhlZjQxYjJjMDEwNWE5MWNjYmI5Yzg5MzM3ZmFlYjEy OWZmODQwHhcNMjYwMTAyMTAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2EzOTFlMzc3NzUxMWZmZTY5ZWMzOTJlZDRlNTY5NWYxMzIzNGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXQid7vLaCGGHV0Hm7M1HEQUKuuo wtE6gHJy5e0uk8bbiNtYegyyN/6hLwW2NA4SacWLF2SwGqhBCdjUfQPagr/a2HAG lB5TyvZQxIzG4M6gel/zykBSXYuKfeqvhsUUGA1HaT3ocbIh6UUYKVjQTlyj3Sk/ A95f6T24/3Wr05WsFCTFddKi9c9WX6K0nG/f4F1nzUBXTp21xjgV0f86iv4WQt2L 7tkP5DJKDh8BF1qUXmCWMZHSFSKi32annTmd8a+hBfSOOc+KX3OWTU8B3Kb0E+rd qTlJdaab4NbiUtfwX2xiOgezNBI33T1ZX7Rtkr4+PlbCSnhwyTYgJox7kQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDOjkeN3dRH/5p7Dku1OVpXxMjTTMB8GA1UdIwQY MBaAFIM470GywBBakcy7nIkzf66xKf+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3Mzgt MjhmYzc3OTY3NzYzLzEvTTZPUjQzZDFFZl9tbnNPUzdVNVdsZkV5Tk5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3MzgtMjhmYzc3OTY3NzYz LzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvEQGMA0G CSqGSIb3DQEBCwUAA4IBAQA2fy0Hu14Tl486avHm0p5yfI4mKY0HQNZ+lhRL4UDz zmFoe1l35SZEDuAofdvekQIBZZcLxs2GVBD9kP5CHMGvAZzweXGV0rbQ1WhcjOl1 mf5cGMqp/7ZAbTsPOByP0aYpfW8vQ79hdJRb3iMeSJCDMKk8GXYD7b4wxA/JpdVI K20p0fnKNjXhdMy1yh5idUbYgyHRp/GlmJl5dISuhVFaWzJhICYd8rHNl9dv8PZy Z4yGYJOnM8RR0ycdgcWFtXxEeSF7IZdTZXJ/+jfKeXrg5yq157Lqr+DOIqAJeEEF kxOagwJ0RvTQitr5H3W/oIAen3tP+SNY3iqQnVrz2o5u -----END CERTIFICATE-----Generated at Mon Jan 26 01:00:34 2026 by rpki-client