This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/c6nKpma73pYWxvMGKppaadDfEFw.roa File: c6nKpma73pYWxvMGKppaadDfEFw.roa (raw, json) Hash identifier: vhO0PPLdQXMMpfgBSaG37tdr8r6MbA4mP7J/LJzhZao= Subject key identifier: 73:A9:CA:A6:66:BB:DE:96:16:C6:F3:06:2A:9A:5A:69:D0:DF:10:5C Certificate issuer: /CN=764928a97be955377013d382c62940e950dd212b Certificate serial: 019B7A5AF6BA99FE13AF09B5DE6ED7EF9194 Authority key identifier: 76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/c6nKpma73pYWxvMGKppaadDfEFw.roa Signing time: Thu 01 Jan 2026 16:19:00 +0000 ROA not before: Thu 01 Jan 2026 16:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50629 IP address blocks: 87.253.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f6:ba:99:fe:13:af:09:b5:de:6e:d7:ef:91:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=764928a97be955377013d382c62940e950dd212b Validity Not Before: Jan 1 16:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73a9caa666bbde9616c6f3062a9a5a69d0df105c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:59:ef:fd:bf:43:31:46:2f:ac:d7:0f:69:5b: e5:b9:34:07:b1:6e:f4:1d:61:9f:6d:21:86:be:8d: 24:8c:c1:37:b6:a0:91:69:c8:f4:a1:df:9c:60:65: 15:55:13:29:c4:0f:55:54:1a:f2:69:50:7d:d5:4d: 4b:01:6b:f4:ef:29:20:23:40:37:16:7f:ca:77:ec: 6e:b3:f2:72:4f:22:a7:f2:c9:f4:92:c7:b1:bd:ce: 6b:0c:63:b5:9d:4f:9f:61:18:a2:f9:9a:a5:20:e1: 86:18:77:a0:84:e3:e1:ad:03:16:22:09:75:f5:78: 52:f7:8d:dd:44:45:24:e5:fb:55:31:95:55:e4:49: 40:5f:ea:62:b3:ef:47:9f:94:7d:71:b4:b5:94:45: 9f:19:6b:60:be:e4:a4:61:73:9c:6a:ca:d9:41:1a: 2a:2d:06:25:12:c0:5a:4b:99:bb:31:02:b1:fe:65: 25:3c:ad:f0:e1:d7:e2:75:b3:ff:68:06:16:5e:3c: fb:f4:02:25:59:bd:bd:e9:de:f4:bb:65:88:50:a9: b8:dd:47:31:b5:c7:29:72:65:78:13:26:4f:4c:23: e0:38:c6:4d:0b:f5:78:ea:d7:f3:66:5e:08:de:a4: a7:5e:70:0e:3b:1b:c5:eb:1a:45:b4:77:d0:f8:0b: f9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A9:CA:A6:66:BB:DE:96:16:C6:F3:06:2A:9A:5A:69:D0:DF:10:5C X509v3 Authority Key Identifier: keyid:76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/c6nKpma73pYWxvMGKppaadDfEFw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.253.189.0/24 Signature Algorithm: sha256WithRSAEncryption 94:27:44:1e:e7:64:55:9d:ce:87:27:36:97:16:ef:7e:c0:72: c0:e4:e4:91:45:a8:5f:d5:b1:a0:ff:f2:9e:3a:45:ae:11:dc: 71:7f:9e:93:79:ea:da:c3:26:d2:e0:20:b6:29:b4:ec:9c:88: e2:a5:e6:af:9a:e4:66:da:57:28:3b:49:0d:25:dc:bc:6b:ed: 8c:96:14:1f:01:e6:e5:64:a3:aa:7d:f7:a6:37:31:41:6c:b6: 80:b7:c4:f0:3f:1e:7c:73:25:76:27:4d:08:96:0e:21:b5:c6: 58:b5:5c:78:19:80:b5:9e:e9:4a:62:c0:ff:f0:8a:6e:c9:95: 8a:41:14:33:d6:61:4a:2c:e4:10:1c:b5:fb:d8:80:38:a2:5e: a5:9d:d8:a4:d7:c6:64:cc:a7:df:a9:5d:a4:f0:21:07:9b:2d: 37:cd:e1:72:10:04:c5:27:7a:3b:f1:35:49:f4:c6:3e:bd:66: 1f:2f:25:9b:d5:a5:20:be:f6:c5:43:02:44:c4:5c:b0:7f:9b: 46:84:fe:3a:1a:33:22:b8:7a:80:9c:1a:00:19:c3:0a:0c:e6: 6a:f6:04:2e:23:fe:4e:be:79:24:b1:35:68:49:4f:3e:f3:fe: 2b:eb:26:a8:20:6d:5c:4d:34:49:ef:b7:7b:80:6d:39:f8:76: c1:11:78:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wva6mf4Trwm13m7X75GUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NDkyOGE5N2JlOTU1Mzc3MDEzZDM4MmM2Mjk0MGU5NTBk ZDIxMmIwHhcNMjYwMTAxMTYxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2E5Y2FhNjY2YmJkZTk2MTZjNmYzMDYyYTlhNWE2OWQwZGYxMDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1nv/b9DMUYvrNcPaVvluTQHsW70 HWGfbSGGvo0kjME3tqCRacj0od+cYGUVVRMpxA9VVBryaVB91U1LAWv07ykgI0A3 Fn/Kd+xus/JyTyKn8sn0ksexvc5rDGO1nU+fYRii+ZqlIOGGGHeghOPhrQMWIgl1 9XhS943dREUk5ftVMZVV5ElAX+pis+9Hn5R9cbS1lEWfGWtgvuSkYXOcasrZQRoq LQYlEsBaS5m7MQKx/mUlPK3w4dfidbP/aAYWXjz79AIlWb296d70u2WIUKm43Ucx tccpcmV4EyZPTCPgOMZNC/V46tfzZl4I3qSnXnAOOxvF6xpFtHfQ+Av5pwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHOpyqZmu96WFsbzBiqaWmnQ3xBcMB8GA1UdIwQY MBaAFHZJKKl76VU3cBPTgsYpQOlQ3SErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85NTM2ZjUtZjU2Ni00YzgwLWE3ZDkt YmMxNTIyNzg5ZDNiLzEvYzZuS3BtYTczcFlXeHZNR0twcGFhZERmRUZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85NTM2ZjUtZjU2Ni00YzgwLWE3ZDktYmMxNTIyNzg5ZDNi LzEvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/29MA0G CSqGSIb3DQEBCwUAA4IBAQCUJ0Qe52RVnc6HJzaXFu9+wHLA5OSRRahf1bGg//Ke OkWuEdxxf56TeerawybS4CC2KbTsnIjipeavmuRm2lcoO0kNJdy8a+2MlhQfAebl ZKOqffemNzFBbLaAt8TwPx58cyV2J00Ilg4htcZYtVx4GYC1nulKYsD/8IpuyZWK QRQz1mFKLOQQHLX72IA4ol6lndik18ZkzKffqV2k8CEHmy03zeFyEATFJ3o78TVJ 9MY+vWYfLyWb1aUgvvbFQwJExFywf5tGhP46GjMiuHqAnBoAGcMKDOZq9gQuI/5O vnkksTVoSU8+8/4r6yaoIG1cTTRJ77d7gG05+HbBEXg+ -----END CERTIFICATE-----Generated at Mon Jan 26 15:01:54 2026 by rpki-client