This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/6mmlc-ccYmi9yoOcRcSNlpfwbuE.roa File: 6mmlc-ccYmi9yoOcRcSNlpfwbuE.roa (raw, json) Hash identifier: OK/0G2dwV5raS357TNHtP5wmisQSo6skvz0dcgZKoGw= Subject key identifier: EA:69:A5:73:E7:1C:62:68:BD:CA:83:9C:45:C4:8D:96:97:F0:6E:E1 Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88 Certificate serial: 019B7DCAC322B1B729F7D5D586BC2072B591 Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/6mmlc-ccYmi9yoOcRcSNlpfwbuE.roa Signing time: Fri 02 Jan 2026 08:19:58 +0000 ROA not before: Fri 02 Jan 2026 08:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61209 IP address blocks: 194.225.80.0/22 maxlen: 24 194.225.80.0/23 maxlen: 23 194.225.82.0/23 maxlen: 24 194.225.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:c3:22:b1:b7:29:f7:d5:d5:86:bc:20:72:b5:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88 Validity Not Before: Jan 2 08:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea69a573e71c6268bdca839c45c48d9697f06ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:49:c3:12:ef:7b:10:0f:f6:e8:b4:aa:27:c0: 97:48:c4:1f:68:88:89:c2:bd:96:53:52:15:9b:ba: 54:4c:6d:d1:ba:9a:f7:54:54:3b:a4:f6:1f:94:0b: aa:90:47:63:24:6b:bd:45:7b:0e:82:c6:de:20:1d: 2d:78:6a:2a:a9:ce:75:09:e2:0d:a6:eb:18:99:cb: 6b:94:7d:93:dc:9d:8a:dc:45:64:57:56:98:79:ab: 48:f9:3e:82:68:fb:5a:2c:b6:71:d7:b1:35:c7:ee: b0:e0:85:69:03:d9:35:8c:57:7a:a9:85:e5:ba:5d: 92:b7:23:86:c0:87:fc:34:26:8d:df:99:d8:d0:82: 85:af:c6:eb:21:ba:96:81:62:ad:32:89:ae:27:44: 6e:b5:67:54:53:6f:d3:9b:d7:de:5c:f4:42:58:cd: 5c:36:12:0b:bf:1c:a5:06:26:74:53:94:96:f3:5c: 50:37:82:f0:14:a1:60:42:f2:d7:a1:8a:c6:21:b4: a0:e5:4a:14:ff:47:cd:4c:f6:68:ad:39:c3:9e:d3: c3:68:ec:81:86:80:0b:49:d8:13:42:c3:b5:b0:cb: df:ae:f8:eb:3e:51:53:33:34:42:ad:19:ee:ca:2e: f4:af:1b:69:50:02:cb:3f:d5:9c:cc:b8:75:54:78: d5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:69:A5:73:E7:1C:62:68:BD:CA:83:9C:45:C4:8D:96:97:F0:6E:E1 X509v3 Authority Key Identifier: keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/6mmlc-ccYmi9yoOcRcSNlpfwbuE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.225.80.0-194.225.85.255 Signature Algorithm: sha256WithRSAEncryption 47:fe:94:08:b9:8b:91:01:dc:5e:d3:55:30:05:16:05:7a:0e: 68:1d:4f:30:ed:29:e6:cc:de:dc:34:09:ee:c3:01:a7:90:75: 49:4d:37:ae:62:cf:2a:1d:0a:fe:9b:33:90:f4:2c:32:14:39: 3b:b2:bf:a3:56:28:eb:61:1c:db:ea:d5:ef:b7:d3:c4:f4:62: be:bd:70:3f:c3:e0:ce:01:70:8b:4d:1f:6a:58:3a:0c:e3:99: 7e:2c:3a:8d:ed:77:bf:22:0a:7a:86:36:76:b0:67:12:0b:ad: 7b:2b:1b:28:02:0c:44:da:61:10:09:a1:16:fc:5a:af:d8:8a: 0e:11:a0:a3:bc:9f:7d:10:04:bf:d1:28:d9:de:b3:bf:9d:5e: 17:24:42:53:2b:7b:ec:30:84:70:09:8f:7e:2a:b4:8b:75:91: c0:16:94:96:e8:e1:60:d9:78:59:0c:b6:65:c1:a4:b6:c0:20: ad:22:7d:49:39:3a:c1:60:17:91:6d:07:36:58:ed:e9:77:c3: e6:40:25:81:14:fd:a9:79:1d:3d:4e:d2:c6:4a:7b:b1:ff:ee: 7f:a5:e1:16:9b:68:d3:b2:b9:96:cf:44:f9:60:cf:be:bc:6a: ab:d9:d3:4f:7b:44:28:45:19:b8:d3:aa:c6:ec:60:93:a1:4b: 3d:62:66:17 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt9ysMisbcp99XVhrwgcrWRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3 YjBhODgwHhcNMjYwMTAyMDgxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTY5YTU3M2U3MWM2MjY4YmRjYTgzOWM0NWM0OGQ5Njk3ZjA2ZWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEnDEu97EA/26LSqJ8CXSMQfaIiJ wr2WU1IVm7pUTG3Rupr3VFQ7pPYflAuqkEdjJGu9RXsOgsbeIB0teGoqqc51CeIN pusYmctrlH2T3J2K3EVkV1aYeatI+T6CaPtaLLZx17E1x+6w4IVpA9k1jFd6qYXl ul2StyOGwIf8NCaN35nY0IKFr8brIbqWgWKtMomuJ0RutWdUU2/Tm9feXPRCWM1c NhILvxylBiZ0U5SW81xQN4LwFKFgQvLXoYrGIbSg5UoU/0fNTPZorTnDntPDaOyB hoALSdgTQsO1sMvfrvjrPlFTMzRCrRnuyi70rxtpUALLP9WczLh1VHjVXQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFOpppXPnHGJovcqDnEXEjZaX8G7hMB8GA1UdIwQY MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt ZGE2MTUzODg1ZjNiLzEvNm1tbGMtY2NZbWk5eW9PY1JjU05scGZ3YnVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBATC4VAD BAHC4VQwDQYJKoZIhvcNAQELBQADggEBAEf+lAi5i5EB3F7TVTAFFgV6DmgdTzDt KebM3tw0Ce7DAaeQdUlNN65izyodCv6bM5D0LDIUOTuyv6NWKOthHNvq1e+308T0 Yr69cD/D4M4BcItNH2pYOgzjmX4sOo3td78iCnqGNnawZxILrXsrGygCDETaYRAJ oRb8Wq/Yig4RoKO8n30QBL/RKNnes7+dXhckQlMre+wwhHAJj34qtIt1kcAWlJbo 4WDZeFkMtmXBpLbAIK0ifUk5OsFgF5FtBzZY7el3w+ZAJYEU/al5HT1O0sZKe7H/ 7n+l4RabaNOyuZbPRPlgz768aqvZ0097RChFGbjTqsbsYJOhSz1iZhc= -----END CERTIFICATE-----Generated at Mon Jan 26 03:05:41 2026 by rpki-client