This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/6ABbzKC7xD3f15f1nL7ehPPdv8g.roa File: 6ABbzKC7xD3f15f1nL7ehPPdv8g.roa (raw, json) Hash identifier: vm92m0MvDsKxhJur0/wyRBU4n09f3ypTfzNsc2DUitY= Subject key identifier: E8:00:5B:CC:A0:BB:C4:3D:DF:D7:97:F5:9C:BE:DE:84:F3:DD:BF:C8 Certificate issuer: /CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20 Certificate serial: 019B7B367EFF6CB74579129A96FCCC1DBC32 Authority key identifier: 0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/6ABbzKC7xD3f15f1nL7ehPPdv8g.roa Signing time: Thu 01 Jan 2026 20:18:47 +0000 ROA not before: Thu 01 Jan 2026 20:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210116 IP address blocks: 217.147.2.0/24 maxlen: 24 217.147.2.0/25 maxlen: 25 217.147.2.128/25 maxlen: 25 217.147.3.0/24 maxlen: 24 2a0e:dcc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:7e:ff:6c:b7:45:79:12:9a:96:fc:cc:1d:bc:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20 Validity Not Before: Jan 1 20:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8005bcca0bbc43ddfd797f59cbede84f3ddbfc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:63:99:0f:db:8a:71:b0:78:29:c8:b7:a5:02: 22:50:ef:cc:53:f5:85:8f:a3:3e:a1:86:84:39:68: bb:61:ca:da:13:33:66:66:ca:63:98:08:e7:e0:29: 23:dc:46:a0:84:bd:5d:f8:30:e0:63:76:1f:9e:d7: 9d:e8:f4:c3:b4:ce:70:ef:98:e9:87:04:f0:10:34: 2e:8e:a0:eb:11:50:07:31:11:a1:64:4e:c3:34:32: 2b:f6:ba:97:47:78:95:74:89:70:a6:c1:12:20:92: 1e:9a:28:35:15:a0:23:b7:6a:99:a4:58:73:8d:eb: c5:28:76:a6:a7:4b:b0:40:95:e9:2d:cb:96:48:77: 98:f9:d0:4b:cf:9a:f4:19:0c:46:b3:b8:80:9b:1b: c3:3c:15:48:4c:61:bd:b3:84:67:a9:d1:c4:83:ef: 14:fd:ad:61:36:12:cb:98:b2:ed:f0:60:72:91:68: 95:ff:74:db:6a:9f:0e:a8:47:3f:4d:10:f5:ec:d6: ad:2a:9d:bf:d7:39:67:a0:28:7c:44:e9:88:52:22: e5:8d:28:ae:05:29:6a:07:24:89:7a:d3:a2:33:df: 64:ee:29:2b:03:4f:0e:ae:f2:d7:c6:03:62:ff:cd: 0d:d5:52:67:1b:a1:a0:9f:ac:d1:31:14:ee:8d:b0: a8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:00:5B:CC:A0:BB:C4:3D:DF:D7:97:F5:9C:BE:DE:84:F3:DD:BF:C8 X509v3 Authority Key Identifier: keyid:0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/6ABbzKC7xD3f15f1nL7ehPPdv8g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.147.2.0/23 IPv6: 2a0e:dcc0::/29 Signature Algorithm: sha256WithRSAEncryption 92:5c:fb:6c:de:b8:da:3a:71:9b:9f:4d:f0:40:3d:cf:e7:57: b7:20:19:f2:77:11:49:3a:ba:a1:e1:99:ff:8f:e3:d0:2e:b8: 52:d0:7b:c9:9c:e7:77:14:c6:87:1f:5a:6e:61:4b:38:a8:3e: 25:93:21:1b:75:ce:65:6b:fc:81:65:30:4f:f8:3e:d8:94:f2: 22:c5:19:c9:7d:f8:0f:44:47:37:43:0e:ea:86:2e:bc:95:cb: cd:b7:9d:d3:1d:ff:26:11:4e:5a:4b:02:08:78:73:e9:c2:94: e6:87:6a:b2:8e:99:8b:69:78:4e:60:82:9b:19:a0:c3:c9:47: f9:46:22:41:6a:1b:2b:73:9c:9c:f8:6c:4f:61:3b:e8:ae:56: f5:3c:86:2f:b4:a7:bd:74:8b:99:13:19:1f:05:e4:b3:f7:85: f8:1b:2d:a9:33:d2:40:11:f0:6f:15:bb:7a:f6:b3:00:7d:e4: 1a:c6:25:51:5d:a1:f3:a1:7d:51:ce:ca:60:6d:4b:1c:a1:f7: fa:e9:8e:46:e7:a4:eb:46:42:99:7a:b5:f0:b0:a9:b6:05:21: c0:d5:ac:32:39:3a:ad:30:80:85:8d:81:ad:39:93:ab:d7:b1: 1c:b2:5b:82:aa:5f:51:c7:41:d8:d4:e8:69:0c:fe:85:c7:68: c6:63:88:08 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7Nn7/bLdFeRKalvzMHbwyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZmUyYjI3MzgzN2RiNDE2NjZkNjhhOTdiYzdhYzM3ZGNj OTZmMjAwHhcNMjYwMTAxMjAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODAwNWJjY2EwYmJjNDNkZGZkNzk3ZjU5Y2JlZGU4NGYzZGRiZmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GOZD9uKcbB4Kci3pQIiUO/MU/WF j6M+oYaEOWi7YcraEzNmZspjmAjn4Ckj3EaghL1d+DDgY3Yfnted6PTDtM5w75jp hwTwEDQujqDrEVAHMRGhZE7DNDIr9rqXR3iVdIlwpsESIJIemig1FaAjt2qZpFhz jevFKHamp0uwQJXpLcuWSHeY+dBLz5r0GQxGs7iAmxvDPBVITGG9s4RnqdHEg+8U /a1hNhLLmLLt8GBykWiV/3Tbap8OqEc/TRD17NatKp2/1zlnoCh8ROmIUiLljSiu BSlqBySJetOiM99k7ikrA08OrvLXxgNi/80N1VJnG6Ggn6zRMRTujbCowQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOgAW8ygu8Q939eX9Zy+3oTz3b/IMB8GA1UdIwQY MBaAFAv+Kyc4N9tBZm1oqXvHrDfcyW8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ180ckp6ZzMyMEZtYldpcGU4ZXNOOXpKYnlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9mZWI5MjctN2E4My00MDNhLWExYzEt ZWIxZTkxNjQ0ZjJkLzEvNkFCYnpLQzd4RDNmMTVmMW5MN2VoUFBkdjhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9mZWI5MjctN2E4My00MDNhLWExYzEtZWIxZTkxNjQ0ZjJk LzEvQ180ckp6ZzMyMEZtYldpcGU4ZXNOOXpKYnlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQB2ZMCMA0E AgACMAcDBQMqDtzAMA0GCSqGSIb3DQEBCwUAA4IBAQCSXPts3rjaOnGbn03wQD3P 51e3IBnydxFJOrqh4Zn/j+PQLrhS0HvJnOd3FMaHH1puYUs4qD4lkyEbdc5la/yB ZTBP+D7YlPIixRnJffgPREc3Qw7qhi68lcvNt53THf8mEU5aSwIIeHPpwpTmh2qy jpmLaXhOYIKbGaDDyUf5RiJBahsrc5yc+GxPYTvorlb1PIYvtKe9dIuZExkfBeSz 94X4Gy2pM9JAEfBvFbt69rMAfeQaxiVRXaHzoX1RzspgbUscoff66Y5G56TrRkKZ erXwsKm2BSHA1awyOTqtMICFjYGtOZOr17EcsluCql9Rx0HY1OhpDP6Fx2jGY4gI -----END CERTIFICATE-----Generated at Mon Jan 26 10:28:22 2026 by rpki-client