This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/6zJUO9RbzLWdWeLPIAC4BRt20y8.roa File: 6zJUO9RbzLWdWeLPIAC4BRt20y8.roa (raw, json) Hash identifier: VqpAVUw0h0qkGOlMqRzOLvCd/yLUIDbbUUoOf2xDNIw= Subject key identifier: EB:32:54:3B:D4:5B:CC:B5:9D:59:E2:CF:20:00:B8:05:1B:76:D3:2F Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81 Certificate serial: 019B7AC79093312F119C067D73E8C97B309B Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/6zJUO9RbzLWdWeLPIAC4BRt20y8.roa Signing time: Thu 01 Jan 2026 18:17:37 +0000 ROA not before: Thu 01 Jan 2026 18:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208324 IP address blocks: 94.231.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:90:93:31:2f:11:9c:06:7d:73:e8:c9:7b:30:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81 Validity Not Before: Jan 1 18:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb32543bd45bccb59d59e2cf2000b8051b76d32f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b4:67:b9:7b:8f:14:fc:9e:89:bc:ef:98:e8: 09:01:24:e2:48:85:fe:c3:f0:72:e9:7f:81:ab:25: 10:0a:98:c6:5c:1c:50:27:e4:bf:57:90:64:0c:11: 5b:bf:e3:19:d6:a3:5e:03:fe:55:ba:8a:2b:f9:5f: 5d:23:ec:52:e6:c0:a1:27:e5:8f:e2:01:ed:a3:cb: aa:4b:ef:26:41:9f:9a:20:ab:a4:2e:a6:7c:c9:e2: 6c:66:6f:7a:f0:b4:11:9b:43:92:c9:c3:86:53:4e: 05:d0:65:aa:13:ca:42:0c:c2:81:ed:59:74:5c:f5: 96:08:51:c8:91:d6:f3:2f:a5:1b:b7:ea:d9:14:42: e8:00:5a:46:2f:ee:2a:9a:50:b1:cb:ad:bd:a2:bc: e7:e5:32:c4:f2:99:23:a7:ca:95:3e:f1:86:54:d7: 06:b0:bc:9d:02:d2:13:7c:12:3b:98:64:b2:19:42: be:7b:92:8e:63:29:8d:79:87:84:89:14:29:88:d7: 8e:79:8b:d7:b8:d6:86:8a:47:c7:ca:fd:bd:e9:a8: a6:e3:9a:31:35:78:25:13:a6:1a:ef:8d:e4:a0:b2: 87:c6:bb:41:68:7f:6e:1c:cc:6d:d1:f1:7b:b0:89: 51:74:da:f5:d0:ad:af:c7:ef:85:65:a5:be:17:b8: cf:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:32:54:3B:D4:5B:CC:B5:9D:59:E2:CF:20:00:B8:05:1B:76:D3:2F X509v3 Authority Key Identifier: keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/6zJUO9RbzLWdWeLPIAC4BRt20y8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.231.199.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:8f:a9:ea:ef:60:b9:10:dd:00:21:88:db:d3:fa:94:a0:61: f2:f3:0f:48:d9:36:f6:c9:17:fe:e1:e5:57:27:ca:d6:ec:5a: 20:e9:e1:e6:a6:72:b8:22:fa:af:b2:ec:1c:d3:c7:d3:4a:64: 52:0b:08:21:8e:0b:cf:05:21:89:a9:52:20:24:23:ba:c5:aa: 35:ce:ee:9f:d3:cf:35:78:20:3b:c8:f7:7c:d3:08:23:4f:71: e7:f7:1f:be:09:72:28:40:bf:cb:fd:9c:70:4f:38:73:8e:d4: ae:62:42:3c:25:60:fb:96:89:54:4c:3c:6e:17:69:71:69:38: a7:1b:d3:d8:c0:60:b3:3c:68:54:c5:0a:8e:45:48:b0:ab:dd: 71:d8:45:7f:e5:fa:88:4d:6b:4d:00:27:4c:1b:69:b3:c4:c6: 41:f9:d4:e6:51:aa:ff:a9:a7:7f:39:8d:68:9c:cb:6c:b7:bd: a7:e9:06:3e:fe:1b:1a:c2:1e:25:79:dd:98:c8:86:be:d5:f5: df:64:20:ed:da:87:bd:74:4c:c9:23:4a:87:13:1e:6f:0e:52: 0f:8e:8a:ec:b5:dd:7e:55:82:91:07:b3:40:e2:41:67:20:6e: 2b:a6:db:c6:fe:82:4a:fd:9a:b3:1a:6f:b3:b2:70:80:66:ee: de:df:48:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x5CTMS8RnAZ9c+jJezCbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkM2Q2MjdjMjk3ZmU1NDJkODM1OWE4NmQ4ZTJmOWViZDk1 NjVhODEwHhcNMjYwMTAxMTgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjMyNTQzYmQ0NWJjY2I1OWQ1OWUyY2YyMDAwYjgwNTFiNzZkMzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbRnuXuPFPyeibzvmOgJASTiSIX+ w/By6X+BqyUQCpjGXBxQJ+S/V5BkDBFbv+MZ1qNeA/5Vuoor+V9dI+xS5sChJ+WP 4gHto8uqS+8mQZ+aIKukLqZ8yeJsZm968LQRm0OSycOGU04F0GWqE8pCDMKB7Vl0 XPWWCFHIkdbzL6Ubt+rZFELoAFpGL+4qmlCxy629orzn5TLE8pkjp8qVPvGGVNcG sLydAtITfBI7mGSyGUK+e5KOYymNeYeEiRQpiNeOeYvXuNaGikfHyv296aim45ox NXglE6Ya743koLKHxrtBaH9uHMxt0fF7sIlRdNr10K2vx++FZaW+F7jPuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOsyVDvUW8y1nVnizyAAuAUbdtMvMB8GA1UdIwQY MBaAFJ09Ynwpf+VC2DWahtji+evZVlqBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kZGMxYWEtNWEzYS00MTYzLWI1ZTgt MTVlYTMzN2E3ODQwLzEvNnpKVU85UmJ6TFdkV2VMUElBQzRCUnQyMHk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9kZGMxYWEtNWEzYS00MTYzLWI1ZTgtMTVlYTMzN2E3ODQw LzEvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXufHMA0G CSqGSIb3DQEBCwUAA4IBAQAPj6nq72C5EN0AIYjb0/qUoGHy8w9I2Tb2yRf+4eVX J8rW7Fog6eHmpnK4Ivqvsuwc08fTSmRSCwghjgvPBSGJqVIgJCO6xao1zu6f0881 eCA7yPd80wgjT3Hn9x++CXIoQL/L/ZxwTzhzjtSuYkI8JWD7lolUTDxuF2lxaTin G9PYwGCzPGhUxQqORUiwq91x2EV/5fqITWtNACdMG2mzxMZB+dTmUar/qad/OY1o nMtst72n6QY+/hsawh4led2YyIa+1fXfZCDt2oe9dEzJI0qHEx5vDlIPjorstd1+ VYKRB7NA4kFnIG4rptvG/oJK/ZqzGm+zsnCAZu7e30jh -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:14 2026 by rpki-client