This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/z6rs4dY-N7KkjIOj9tURYBAS84s.roa File: z6rs4dY-N7KkjIOj9tURYBAS84s.roa (raw, json) Hash identifier: 06YUiwBTSLiYEyJqPFvg89Qc/HS3hLTvF9ddZKCIn6U= Subject key identifier: CF:AA:EC:E1:D6:3E:37:B2:A4:8C:83:A3:F6:D5:11:60:10:12:F3:8B Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019BC24103F7E2D73BEC565FB9D7009B332B Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/z6rs4dY-N7KkjIOj9tURYBAS84s.roa Signing time: Thu 15 Jan 2026 15:23:19 +0000 ROA not before: Thu 15 Jan 2026 15:23:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400110 IP address blocks: 194.2.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c2:41:03:f7:e2:d7:3b:ec:56:5f:b9:d7:00:9b:33:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 15 15:23:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfaaece1d63e37b2a48c83a3f6d511601012f38b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:54:e6:27:0d:6d:6e:5e:24:4e:7d:c1:a9:7d: be:44:38:45:5f:ee:b9:e9:a3:9b:07:30:5f:1a:c5: 82:d8:d4:04:7d:ae:de:79:7d:5a:73:bb:18:30:07: 42:19:4e:6e:43:98:fe:eb:e7:11:8b:f1:c1:98:7e: d3:f6:59:4d:db:f6:a3:ad:81:cf:0f:4b:95:41:de: e9:34:f7:ea:44:41:d5:52:36:ff:cd:ab:b3:bf:f4: 8f:6f:76:c5:44:4d:88:5d:c4:8b:2f:44:d6:9e:1f: d6:bd:f4:d0:44:56:88:a6:ce:6c:43:0f:1b:87:c7: d0:4e:6e:1b:7c:cf:89:5a:28:f8:2d:c6:1d:e9:ae: 3e:70:25:5c:f3:4c:90:c9:8b:bf:46:42:03:08:a9: 65:50:6c:63:bb:3f:45:c8:ad:f0:e5:2b:ee:a0:c7: 5d:55:12:17:b4:c6:3d:60:5c:7c:ee:63:6c:b5:4a: e3:e0:e3:09:78:bd:e4:54:c6:b0:1f:2e:4d:49:ab: 81:ac:75:3b:7c:4e:45:8d:f0:f2:9e:c6:3c:d6:dd: 72:9b:65:65:aa:bc:da:8d:2c:63:25:f8:a7:db:58: 7b:26:72:80:26:0e:c1:fc:4d:9d:5a:65:fc:c9:80: 00:f2:fc:f3:b6:ea:30:0e:8d:a2:bd:28:4b:a2:96: 65:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:AA:EC:E1:D6:3E:37:B2:A4:8C:83:A3:F6:D5:11:60:10:12:F3:8B X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/z6rs4dY-N7KkjIOj9tURYBAS84s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.2.72.0/24 Signature Algorithm: sha256WithRSAEncryption 17:71:68:b2:46:cb:74:ad:55:75:84:74:bc:a1:18:1f:17:29: 93:08:18:6b:11:7c:6c:ac:7a:84:0d:89:54:55:44:07:09:3b: 87:1b:65:96:1f:6c:43:9a:7a:4f:ae:13:fd:94:91:b9:5a:4c: b3:24:4f:1b:b1:4f:4d:b2:3b:2e:77:8f:d5:d1:9b:42:3c:7f: 94:6d:6b:0f:5f:a4:e0:8f:c7:3a:f8:02:1a:5e:41:f2:0a:09: 2b:7b:50:42:ee:ec:c4:3a:53:b8:da:06:1f:0f:2d:27:46:29: 63:22:8f:19:9b:d5:48:b9:a1:63:90:d9:16:f6:49:53:ae:bc: 1e:6c:0f:c0:ff:d3:98:fb:75:8b:b0:5a:09:5a:03:cc:5d:19: 82:ca:a5:52:32:e2:e6:74:53:7d:f0:26:87:e5:f1:bf:a2:03: 5a:54:2b:17:1d:31:43:cc:27:37:65:21:e3:5d:0c:3e:8b:8d: 99:4b:a6:52:34:06:94:05:bf:3d:7e:9c:b4:5f:c7:91:c3:7c: 33:5c:ef:a0:4c:d9:74:14:f0:e5:54:99:ad:84:8e:74:67:0c: 99:fc:9a:d1:81:76:35:db:a1:e3:31:c1:8a:72:9b:35:b9:af: c6:4f:bc:19:6a:5c:a0:be:84:fb:54:85:15:ef:6d:38:0b:19: 15:38:fa:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvCQQP34tc77FZfudcAmzMrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTE1MTUyMzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmFhZWNlMWQ2M2UzN2IyYTQ4YzgzYTNmNmQ1MTE2MDEwMTJmMzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFTmJw1tbl4kTn3BqX2+RDhFX+65 6aObBzBfGsWC2NQEfa7eeX1ac7sYMAdCGU5uQ5j+6+cRi/HBmH7T9llN2/ajrYHP D0uVQd7pNPfqREHVUjb/zauzv/SPb3bFRE2IXcSLL0TWnh/WvfTQRFaIps5sQw8b h8fQTm4bfM+JWij4LcYd6a4+cCVc80yQyYu/RkIDCKllUGxjuz9FyK3w5SvuoMdd VRIXtMY9YFx87mNstUrj4OMJeL3kVMawHy5NSauBrHU7fE5FjfDynsY81t1ym2Vl qrzajSxjJfin21h7JnKAJg7B/E2dWmX8yYAA8vzztuowDo2ivShLopZlNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM+q7OHWPjeypIyDo/bVEWAQEvOLMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvejZyczRkWS1ON0traklPajl0VVJZQkFTODRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgJIMA0G CSqGSIb3DQEBCwUAA4IBAQAXcWiyRst0rVV1hHS8oRgfFymTCBhrEXxsrHqEDYlU VUQHCTuHG2WWH2xDmnpPrhP9lJG5WkyzJE8bsU9Nsjsud4/V0ZtCPH+UbWsPX6Tg j8c6+AIaXkHyCgkre1BC7uzEOlO42gYfDy0nRiljIo8Zm9VIuaFjkNkW9klTrrwe bA/A/9OY+3WLsFoJWgPMXRmCyqVSMuLmdFN98CaH5fG/ogNaVCsXHTFDzCc3ZSHj XQw+i42ZS6ZSNAaUBb89fpy0X8eRw3wzXO+gTNl0FPDlVJmthI50ZwyZ/JrRgXY1 26HjMcGKcps1ua/GT7wZalygvoT7VIUV7204CxkVOPrc -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:46 2026 by rpki-client