This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Ch6AbI5E4LLYjQa8yriqxUYmbGw.roa File: Ch6AbI5E4LLYjQa8yriqxUYmbGw.roa (raw, json) Hash identifier: JTlgHXMJ2ZciaCUla5ZW1fg3G7l6yt4D/5SYSI0y8WY= Subject key identifier: 0A:1E:80:6C:8E:44:E0:B2:D8:8D:06:BC:CA:B8:AA:C5:46:26:6C:6C Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B775960CF28141B983CF9C2962C168925 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Ch6AbI5E4LLYjQa8yriqxUYmbGw.roa Signing time: Thu 01 Jan 2026 02:18:24 +0000 ROA not before: Thu 01 Jan 2026 02:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60125 IP address blocks: 89.35.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:60:cf:28:14:1b:98:3c:f9:c2:96:2c:16:89:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a1e806c8e44e0b2d88d06bccab8aac546266c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bc:1f:0c:37:f3:c7:b9:ef:52:84:c3:91:32: 52:ac:e2:9c:67:3f:94:bf:ef:46:7a:01:16:f4:28: 04:d2:f6:41:a5:85:90:43:f5:85:68:c8:72:24:7e: ee:88:95:64:2d:fb:51:4c:54:c6:cb:cd:03:25:0c: 80:84:90:ea:ef:01:48:af:65:f4:37:a5:f5:c4:99: be:7c:6f:8e:81:e6:7a:ed:cf:c0:3f:55:80:ae:6a: 61:c8:b9:7d:a9:85:03:27:f3:fc:84:e7:da:e1:20: 95:78:97:3a:4d:2e:f2:bb:cf:b3:98:b8:5e:11:d7: aa:e6:ce:77:dc:8e:73:6a:e6:93:fe:c4:2a:5b:22: ec:ff:e7:de:d3:86:03:6e:4d:37:08:52:dd:96:99: 95:fe:e2:00:a8:4e:b2:b2:22:b9:2e:1e:85:03:ac: 0d:31:73:d3:db:05:2d:d3:35:89:9b:e7:20:fc:8e: ab:10:db:d6:23:f5:ab:c7:bf:31:a1:49:1e:f5:74: ee:f3:69:be:cf:5e:d7:1b:03:70:f6:67:c9:59:f0: ec:12:c7:4d:9d:40:4a:45:62:97:d1:a5:2b:34:73: a3:41:0d:83:66:a2:7c:29:c1:37:08:40:3e:9f:03: ef:3a:20:ff:9b:89:49:90:71:5d:7d:bf:1d:61:13: b3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:1E:80:6C:8E:44:E0:B2:D8:8D:06:BC:CA:B8:AA:C5:46:26:6C:6C X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Ch6AbI5E4LLYjQa8yriqxUYmbGw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.35.113.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:c1:b1:16:fc:ed:cf:b3:3a:9d:ce:91:85:08:a7:a0:d2:a4: ec:f9:9f:a2:c3:b1:95:91:e0:ff:32:4b:a2:f7:8e:14:b5:0c: 37:17:59:e3:cc:70:dc:63:2b:e6:82:e6:31:67:11:eb:c7:a7: 2d:6d:c2:d1:47:85:a1:87:13:7d:d4:5b:50:bb:f7:58:21:b7: f5:17:dd:97:d3:95:4e:82:70:99:aa:2e:f4:96:b1:bd:b2:fa: 68:0d:31:8c:00:d3:e6:99:a2:a5:4e:c3:30:83:19:af:a4:7c: 9d:13:c6:5e:dd:42:df:99:31:7a:9b:66:4f:b1:06:06:66:3a: ab:8c:f7:c9:97:19:f4:5e:9f:38:2d:66:d0:86:c5:ed:42:34: cf:d4:d5:76:c9:18:6d:0e:d2:0c:54:9a:3f:de:f0:3f:ac:2a: e6:e3:38:e7:22:e5:81:4f:c0:5f:90:b0:46:ab:36:37:a9:d8: 95:1c:c1:5e:ae:44:e2:76:23:e5:38:06:50:c7:5b:67:aa:f4: 45:7a:1d:a2:6a:4e:aa:33:ad:bd:4e:7f:b1:ca:05:59:c8:93: 7a:92:10:7a:a3:9f:c4:93:dc:e6:0d:a4:b7:4b:4f:f4:ab:ae: 56:4d:e1:f4:60:87:14:34:e7:08:0f:44:50:14:5b:9e:8c:b1: 18:0e:3f:90 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WWDPKBQbmDz5wpYsFoklMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTFlODA2YzhlNDRlMGIyZDg4ZDA2YmNjYWI4YWFjNTQ2MjY2YzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrwfDDfzx7nvUoTDkTJSrOKcZz+U v+9GegEW9CgE0vZBpYWQQ/WFaMhyJH7uiJVkLftRTFTGy80DJQyAhJDq7wFIr2X0 N6X1xJm+fG+OgeZ67c/AP1WArmphyLl9qYUDJ/P8hOfa4SCVeJc6TS7yu8+zmLhe Edeq5s533I5zauaT/sQqWyLs/+fe04YDbk03CFLdlpmV/uIAqE6ysiK5Lh6FA6wN MXPT2wUt0zWJm+cg/I6rENvWI/Wrx78xoUke9XTu82m+z17XGwNw9mfJWfDsEsdN nUBKRWKX0aUrNHOjQQ2DZqJ8KcE3CEA+nwPvOiD/m4lJkHFdfb8dYROzoQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFAoegGyOROCy2I0GvMq4qsVGJmxsMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL0NoNkFiSTVFNExMWWpRYTh5cmlxeFVZbWJHdy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZI3Ew DQYJKoZIhvcNAQELBQADggEBAF3BsRb87c+zOp3OkYUIp6DSpOz5n6LDsZWR4P8y S6L3jhS1DDcXWePMcNxjK+aC5jFnEevHpy1twtFHhaGHE33UW1C791ght/UX3ZfT lU6CcJmqLvSWsb2y+mgNMYwA0+aZoqVOwzCDGa+kfJ0Txl7dQt+ZMXqbZk+xBgZm OquM98mXGfRenzgtZtCGxe1CNM/U1XbJGG0O0gxUmj/e8D+sKubjOOci5YFPwF+Q sEarNjep2JUcwV6uROJ2I+U4BlDHW2eq9EV6HaJqTqozrb1Of7HKBVnIk3qSEHqj n8ST3OYNpLdLT/SrrlZN4fRghxQ05wgPRFAUW56MsRgOP5A= -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:33 2026 by rpki-client