This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/jH6Kf-tfYBLVkCwlhSp3lBJ6KCQ.roa File: jH6Kf-tfYBLVkCwlhSp3lBJ6KCQ.roa (raw, json) Hash identifier: m/C4McZFMkjpAqtTsTyqkoINmbz3Lx0YilvVZ7bpG9M= Subject key identifier: 8C:7E:8A:7F:EB:5F:60:12:D5:90:2C:25:85:2A:77:94:12:7A:28:24 Certificate issuer: /CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3 Certificate serial: 019B7C7F5FDE9D3928B61B35CB93D96388D0 Authority key identifier: 04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/jH6Kf-tfYBLVkCwlhSp3lBJ6KCQ.roa Signing time: Fri 02 Jan 2026 02:18:00 +0000 ROA not before: Fri 02 Jan 2026 02:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25184 IP address blocks: 31.14.112.0/20 maxlen: 24 31.47.32.0/19 maxlen: 24 46.102.128.0/20 maxlen: 24 78.109.192.0/20 maxlen: 24 79.175.128.0/18 maxlen: 24 80.75.0.0/20 maxlen: 24 81.90.144.0/20 maxlen: 24 86.104.32.0/20 maxlen: 24 93.113.224.0/20 maxlen: 24 185.3.124.0/22 maxlen: 24 217.11.16.0/20 maxlen: 24 2a03:4680::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:5f:de:9d:39:28:b6:1b:35:cb:93:d9:63:88:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3 Validity Not Before: Jan 2 02:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c7e8a7feb5f6012d5902c25852a7794127a2824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d5:c5:d6:02:30:49:7e:ff:49:d7:00:fd:3d: f6:1e:5e:41:10:48:a1:3d:d8:74:67:db:85:97:a2: aa:fa:57:45:43:79:12:20:55:d3:c9:06:c8:cf:8b: 7c:87:f3:1d:53:8d:e9:68:e3:98:b4:f0:a5:49:83: a6:c1:df:a6:ec:c5:1c:aa:c1:a0:6a:77:2b:59:91: 29:7a:63:2d:5c:ba:38:a1:c4:44:d4:fd:e5:22:d5: 13:f0:c4:98:18:d3:25:0c:7b:6c:f3:95:64:00:a6: c9:44:80:7c:2a:28:3b:9b:bf:e3:61:59:32:88:f0: f4:6c:ea:dc:b1:82:cd:4d:e4:f4:0a:da:5c:f2:4f: 66:7c:c2:9e:3b:e9:d2:4d:51:16:99:27:96:ef:79: 7f:b7:c2:21:22:dd:83:00:55:bb:7e:11:c9:26:98: c4:aa:b3:fe:a9:9c:76:f7:84:32:2d:81:7c:43:20: 4d:61:6e:15:fd:2a:ec:e5:f1:61:84:5f:b9:f8:ff: c3:92:26:1d:5c:20:fc:f6:d0:20:2a:c0:74:5f:22: 0b:81:92:f2:22:51:24:f2:f3:95:20:56:a0:7f:81: d6:25:3f:26:85:69:f2:53:24:12:4b:b8:88:ca:ba: 73:7c:c3:4d:2c:28:dc:60:23:33:57:6c:c1:4b:9b: 0c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7E:8A:7F:EB:5F:60:12:D5:90:2C:25:85:2A:77:94:12:7A:28:24 X509v3 Authority Key Identifier: keyid:04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/jH6Kf-tfYBLVkCwlhSp3lBJ6KCQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.112.0/20 31.47.32.0/19 46.102.128.0/20 78.109.192.0/20 79.175.128.0/18 80.75.0.0/20 81.90.144.0/20 86.104.32.0/20 93.113.224.0/20 185.3.124.0/22 217.11.16.0/20 IPv6: 2a03:4680::/29 Signature Algorithm: sha256WithRSAEncryption 42:8a:8b:c6:ff:c9:1a:b0:b9:8d:8d:93:c2:53:0b:6b:6d:cb: 2c:b6:71:65:33:a9:4d:47:68:78:ce:ef:85:ea:fc:49:35:70: d6:71:6e:24:40:db:a0:42:e9:2b:e3:d4:6c:e2:15:9d:9a:19: 75:cf:59:96:a5:9f:3c:10:fd:d9:bf:0d:3c:41:79:a6:74:df: 8b:e6:73:46:fa:b2:11:c2:8d:12:0e:c6:f4:46:8a:eb:87:a5: 49:9b:ba:ff:f5:b0:45:8e:7a:c4:dc:51:68:b7:99:ff:75:2f: 6f:31:1a:47:36:2c:04:fa:d3:92:b3:40:c8:cd:74:ba:54:51: d4:f7:41:24:53:d4:2f:77:ef:62:1a:65:fa:85:55:1d:36:7e: 49:f1:4a:8b:be:8c:c2:04:b7:14:3c:ae:54:bd:3e:c7:e1:be: 67:61:92:f7:04:b9:b1:6a:12:17:4b:8a:ad:3f:2a:f9:d5:7e: f5:47:53:e4:6b:7d:64:d3:04:a2:f1:c9:1d:d6:3e:54:04:45: 3b:33:85:3a:9c:c5:14:98:e3:9b:1d:a7:90:25:7d:f7:c0:d9: 38:78:98:62:8e:40:d6:62:8b:cb:f2:59:7b:24:5a:a3:c9:9b: eb:e7:ab:2e:4f:64:f8:dd:70:92:9c:a8:ee:99:55:d1:e1:b9: 04:40:24:ea -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgISAZt8f1/enTkoths1y5PZY4jQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NWM1ZjNiYjgxMTkxNzIwYzBkZGY4YjNjZjM0ZDkxZGFi NGUxZDMwHhcNMjYwMTAyMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzdlOGE3ZmViNWY2MDEyZDU5MDJjMjU4NTJhNzc5NDEyN2EyODI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9XF1gIwSX7/SdcA/T32Hl5BEEih Pdh0Z9uFl6Kq+ldFQ3kSIFXTyQbIz4t8h/MdU43paOOYtPClSYOmwd+m7MUcqsGg ancrWZEpemMtXLo4ocRE1P3lItUT8MSYGNMlDHts85VkAKbJRIB8Kig7m7/jYVky iPD0bOrcsYLNTeT0Ctpc8k9mfMKeO+nSTVEWmSeW73l/t8IhIt2DAFW7fhHJJpjE qrP+qZx294QyLYF8QyBNYW4V/Srs5fFhhF+5+P/DkiYdXCD89tAgKsB0XyILgZLy IlEk8vOVIFagf4HWJT8mhWnyUyQSS7iIyrpzfMNNLCjcYCMzV2zBS5sM/wIDAQAB o4ICVDCCAlAwHQYDVR0OBBYEFIx+in/rX2AS1ZAsJYUqd5QSeigkMB8GA1UdIwQY MBaAFARcXzu4EZFyDA3fizzzTZHatOHTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkZ4Zk83Z1JrWElNRGQtTFBQTk5rZHEwNGRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82ZWFiY2QtYThmYy00M2VhLThiN2Mt ZmJiODA4NTNjMWJlLzEvakg2S2YtdGZZQkxWa0N3bGhTcDNsQko2S0NRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy82ZWFiY2QtYThmYy00M2VhLThiN2MtZmJiODA4NTNjMWJl LzEvQkZ4Zk83Z1JrWElNRGQtTFBQTk5rZHEwNGRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQEHw5wAwQF Hy8gAwQELmaAAwQETm3AAwQGT6+AAwQEUEsAAwQEUVqQAwQEVmggAwQEXXHgAwQC uQN8AwQE2QsQMA0EAgACMAcDBQMqA0aAMA0GCSqGSIb3DQEBCwUAA4IBAQBCiovG /8kasLmNjZPCUwtrbcsstnFlM6lNR2h4zu+F6vxJNXDWcW4kQNugQukr49Rs4hWd mhl1z1mWpZ88EP3Zvw08QXmmdN+L5nNG+rIRwo0SDsb0Rorrh6VJm7r/9bBFjnrE 3FFot5n/dS9vMRpHNiwE+tOSs0DIzXS6VFHU90EkU9Qvd+9iGmX6hVUdNn5J8UqL vozCBLcUPK5UvT7H4b5nYZL3BLmxahIXS4qtPyr51X71R1Pka31k0wSi8ckd1j5U BEU7M4U6nMUUmOObHaeQJX33wNk4eJhijkDWYovL8ll7JFqjyZvr56suT2T43XCS nKjumVXR4bkEQCTq -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:10 2026 by rpki-client