This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/_6a-RWXCtiM85tk-pFSkSlcUUfI.roa File: _6a-RWXCtiM85tk-pFSkSlcUUfI.roa (raw, json) Hash identifier: B/tQnvdBFH+M+nv+Nk2B9RYqRSdNR6S1bMjLWiTjAJY= Subject key identifier: FF:A6:BE:45:65:C2:B6:23:3C:E6:D9:3E:A4:54:A4:4A:57:14:51:F2 Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8 Certificate serial: 019B7F84FCCC42F60F8B3AE615AADE49EC5C Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/_6a-RWXCtiM85tk-pFSkSlcUUfI.roa Signing time: Fri 02 Jan 2026 16:23:00 +0000 ROA not before: Fri 02 Jan 2026 16:23:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48708 IP address blocks: 89.111.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:fc:cc:42:f6:0f:8b:3a:e6:15:aa:de:49:ec:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8 Validity Not Before: Jan 2 16:23:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffa6be4565c2b6233ce6d93ea454a44a571451f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4f:63:c2:51:82:a1:b3:03:f5:7b:1b:84:1c: f5:1e:c0:18:d4:c5:29:22:6b:4d:2a:ad:d4:00:ec: a3:dc:64:d8:97:0e:bb:72:a0:51:1e:aa:c4:82:98: 89:a7:0b:ca:f1:cf:a9:aa:4c:cc:70:23:a8:50:3d: 3f:7c:35:be:e8:24:47:87:47:39:e4:d9:f2:01:c4: 46:6e:6d:74:7a:54:59:6e:b3:5d:68:14:e3:92:f2: 12:49:44:0b:f6:82:9e:e6:c3:1b:a3:45:cc:c3:03: c9:d0:f8:f6:55:44:9b:fd:17:b0:04:95:a7:05:8b: 15:b8:77:71:b8:a4:be:45:9c:07:ff:0f:1d:87:19: e0:ed:9d:1c:3d:eb:d3:5b:90:c7:ef:c9:c2:bd:7f: ce:51:1e:71:c0:60:fa:dc:96:07:96:75:df:94:79: 64:7e:76:14:b8:1f:0d:98:d1:04:32:20:92:10:d5: f9:67:48:90:f3:a7:cc:7e:e4:6f:55:84:d9:04:cf: df:ab:e0:6d:8d:d7:45:8a:dd:d0:43:b6:3d:19:2c: 94:32:3d:4d:d9:80:56:01:16:ae:4d:90:b2:08:e4: 6f:25:8b:3e:3f:de:c0:15:e6:08:f6:bb:c5:bc:62: a0:2c:af:43:c7:41:5c:da:fd:e8:51:78:a2:a3:49: 35:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A6:BE:45:65:C2:B6:23:3C:E6:D9:3E:A4:54:A4:4A:57:14:51:F2 X509v3 Authority Key Identifier: keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/_6a-RWXCtiM85tk-pFSkSlcUUfI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.111.240.0/24 Signature Algorithm: sha256WithRSAEncryption c3:e2:3d:00:10:0e:32:2f:e9:dc:bd:a5:4c:b8:59:ab:6f:93: 78:8f:be:06:a9:86:3e:e3:a2:c7:00:5e:8e:7d:94:0a:bd:7d: d9:a6:c7:28:8a:c2:b2:da:88:e8:b7:11:1b:d6:e2:b1:36:a0: 14:f4:e3:fd:97:6f:2d:04:dc:05:e3:0b:ee:4d:a3:21:98:9d: 47:68:53:b8:5c:ef:45:4f:b5:37:b5:22:9a:82:8f:17:e1:78: 61:75:95:77:eb:e6:ce:36:5b:57:11:44:7d:36:ce:1c:96:c8: 12:3c:d8:db:99:6b:18:72:e5:9f:d5:4f:71:7e:b3:dc:28:19: fa:ef:55:82:fe:c3:0e:e9:96:f3:15:28:f0:09:ab:b7:6e:bb: 37:e2:9b:56:9d:be:71:b3:3b:d6:f7:ca:6a:44:b1:ee:5d:ed: 45:67:8d:b4:43:97:3f:fd:3e:6a:d2:df:a2:62:94:6f:12:a8: e0:7a:9c:2a:3b:d2:db:aa:fa:6d:be:39:e9:f2:63:11:a3:80: 3a:66:4d:ed:0d:b0:5d:ed:84:52:95:64:71:cc:e2:be:e3:68: c9:7a:b6:50:7f:52:1f:64:b4:cd:b4:18:84:25:8f:6e:f1:33: b7:da:e8:ae:9e:a6:eb:80:12:4e:00:21:e7:ad:90:12:55:40: 78:33:ed:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hPzMQvYPizrmFareSexcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YTk5NjRlMGNkMzVmYjM2NzU3ZTU2NTNmZmE3NjI2YWM1 ZGVlZTgwHhcNMjYwMTAyMTYyMzAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmE2YmU0NTY1YzJiNjIzM2NlNmQ5M2VhNDU0YTQ0YTU3MTQ1MWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk9jwlGCobMD9XsbhBz1HsAY1MUp ImtNKq3UAOyj3GTYlw67cqBRHqrEgpiJpwvK8c+pqkzMcCOoUD0/fDW+6CRHh0c5 5NnyAcRGbm10elRZbrNdaBTjkvISSUQL9oKe5sMbo0XMwwPJ0Pj2VUSb/RewBJWn BYsVuHdxuKS+RZwH/w8dhxng7Z0cPevTW5DH78nCvX/OUR5xwGD63JYHlnXflHlk fnYUuB8NmNEEMiCSENX5Z0iQ86fMfuRvVYTZBM/fq+BtjddFit3QQ7Y9GSyUMj1N 2YBWARauTZCyCORvJYs+P97AFeYI9rvFvGKgLK9Dx0Fc2v3oUXiio0k1nQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP+mvkVlwrYjPObZPqRUpEpXFFHyMB8GA1UdIwQY MBaAFCmplk4M01+zZ1flZT/6diasXe7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8yMTQwNjMtZjg4Zi00OTU4LWFlNTIt ZDliNTMzZjdmYmMzLzEvXzZhLVJXWEN0aU04NXRrLXBGU2tTbGNVVWZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8yMTQwNjMtZjg4Zi00OTU4LWFlNTItZDliNTMzZjdmYmMz LzEvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWW/wMA0G CSqGSIb3DQEBCwUAA4IBAQDD4j0AEA4yL+ncvaVMuFmrb5N4j74GqYY+46LHAF6O fZQKvX3ZpscoisKy2ojotxEb1uKxNqAU9OP9l28tBNwF4wvuTaMhmJ1HaFO4XO9F T7U3tSKago8X4XhhdZV36+bONltXEUR9Ns4clsgSPNjbmWsYcuWf1U9xfrPcKBn6 71WC/sMO6ZbzFSjwCau3brs34ptWnb5xszvW98pqRLHuXe1FZ420Q5c//T5q0t+i YpRvEqjgepwqO9Lbqvptvjnp8mMRo4A6Zk3tDbBd7YRSlWRxzOK+42jJerZQf1If ZLTNtBiEJY9u8TO32uiunqbrgBJOACHnrZASVUB4M+07 -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:09 2026 by rpki-client