This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/6Jow7v8a1hpI3NwpS-4lDGZoaeQ.roa File: 6Jow7v8a1hpI3NwpS-4lDGZoaeQ.roa (raw, json) Hash identifier: MRty88BfOMZk7CPSt+WkF0Jw+KzFd+Cug5OdTNKjyKg= Subject key identifier: E8:9A:30:EE:FF:1A:D6:1A:48:DC:DC:29:4B:EE:25:0C:66:68:69:E4 Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Certificate serial: 019B7D5D24D26F53547AF2B9BCE18E6F74E2 Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/6Jow7v8a1hpI3NwpS-4lDGZoaeQ.roa Signing time: Fri 02 Jan 2026 06:20:14 +0000 ROA not before: Fri 02 Jan 2026 06:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205285 IP address blocks: 31.46.29.0/24 maxlen: 24 78.92.232.0/23 maxlen: 23 84.1.114.0/24 maxlen: 24 84.1.115.0/24 maxlen: 24 84.1.116.0/24 maxlen: 24 84.2.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:24:d2:6f:53:54:7a:f2:b9:bc:e1:8e:6f:74:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Validity Not Before: Jan 2 06:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e89a30eeff1ad61a48dcdc294bee250c666869e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:75:5b:10:49:61:af:aa:85:41:ca:9a:c8:0f: c8:c5:19:4e:9b:c4:e0:59:de:ef:19:14:2d:39:05: 0d:ec:cb:40:46:ff:3d:cf:96:da:21:b8:29:01:8d: 08:9c:07:99:fa:52:b5:ee:26:f8:92:92:5c:68:42: d5:65:61:37:b1:99:b0:42:e6:62:a0:fd:6d:db:08: 79:b5:ea:24:20:fa:1d:d2:ed:b7:8c:b6:48:c2:01: 8e:27:fb:b2:87:01:53:dc:73:cf:3d:5a:45:97:75: 25:d8:31:e5:7b:56:44:a3:34:59:6d:99:ca:60:37: c3:0c:91:a5:53:37:1a:32:98:d2:b3:24:d3:f4:3a: ac:b5:16:17:3c:7a:1a:0c:50:05:1c:e0:c9:dc:2b: 1d:b4:55:2d:18:bb:ba:58:4c:f4:fe:6f:d5:8f:f0: e1:b1:17:1a:f3:74:d5:71:3d:42:8f:4a:72:11:1d: 52:b4:10:cc:a8:00:41:fa:60:a9:72:ed:c5:af:9f: 0b:98:6a:27:fa:bc:4d:10:62:85:89:b5:ad:e1:f3: e0:0f:f6:fd:1c:30:ef:21:b0:dd:5c:65:c4:9a:66: 5d:6b:d9:24:ad:80:d9:af:0a:51:3b:75:36:9e:37: 33:f5:56:f6:e0:cd:07:6b:d4:2d:9b:10:17:d8:40: 9f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:9A:30:EE:FF:1A:D6:1A:48:DC:DC:29:4B:EE:25:0C:66:68:69:E4 X509v3 Authority Key Identifier: keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/6Jow7v8a1hpI3NwpS-4lDGZoaeQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.46.29.0/24 78.92.232.0/23 84.1.114.0-84.1.116.255 84.2.63.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:95:1e:6b:3c:fd:6e:5e:08:7d:e1:38:3e:44:a1:8f:0f:b7: 1e:50:03:bd:de:5e:2b:e2:bd:f7:78:b4:d6:65:2b:f5:a6:02: 92:65:73:5c:12:11:72:d9:8e:8e:cb:fb:be:38:12:f3:01:be: 91:2c:29:45:36:a2:41:c5:d7:d5:fa:bc:72:b7:97:9f:ec:2d: 36:a7:19:c5:b6:26:5a:f1:47:ba:ca:38:fe:d1:1e:08:8b:c5: 1b:84:0d:af:81:05:e1:d2:aa:5c:bc:d0:8c:ec:70:93:0f:c9: 62:97:55:2f:75:f6:34:c6:b8:e1:9d:6b:2c:d0:a7:52:a9:0e: 73:c8:c3:9e:ad:38:01:91:4e:bd:a1:f9:84:1d:d5:c5:a0:06: 3e:f9:34:ec:36:13:17:67:bc:11:41:42:17:90:c3:d1:88:14: e8:b4:64:e4:ab:a1:0e:4e:b6:bb:eb:9b:a7:06:d8:79:1c:e3: d8:2d:fa:21:1a:b4:a0:9d:15:3f:7e:ba:ad:48:88:e7:5b:9c: 2f:ff:df:c2:a9:d2:c4:aa:c5:0d:05:2d:02:1a:4b:7e:20:7f: 40:a9:dd:c6:40:61:e7:91:07:6c:b4:26:fe:b9:21:b5:2e:0d: dd:a7:96:28:01:1e:b5:9b:3d:8b:d6:80:4a:cc:ee:d5:9e:8e: 74:82:2c:83 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt9XSTSb1NUevK5vOGOb3TiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4 YWFlN2IwHhcNMjYwMTAyMDYyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODlhMzBlZWZmMWFkNjFhNDhkY2RjMjk0YmVlMjUwYzY2Njg2OWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXVbEElhr6qFQcqayA/IxRlOm8Tg Wd7vGRQtOQUN7MtARv89z5baIbgpAY0InAeZ+lK17ib4kpJcaELVZWE3sZmwQuZi oP1t2wh5teokIPod0u23jLZIwgGOJ/uyhwFT3HPPPVpFl3Ul2DHle1ZEozRZbZnK YDfDDJGlUzcaMpjSsyTT9DqstRYXPHoaDFAFHODJ3CsdtFUtGLu6WEz0/m/Vj/Dh sRca83TVcT1Cj0pyER1StBDMqABB+mCpcu3Fr58LmGon+rxNEGKFibWt4fPgD/b9 HDDvIbDdXGXEmmZda9kkrYDZrwpRO3U2njcz9Vb24M0Ha9QtmxAX2ECf3QIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFOiaMO7/GtYaSNzcKUvuJQxmaGnkMB8GA1UdIwQY MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt MjkyYWU0NmU2MzAyLzEvNkpvdzd2OGExaHBJM053cFMtNGxER1pvYWVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAHy4dAwQB TlzoMAwDBAFUAXIDBABUAXQDBABUAj8wDQYJKoZIhvcNAQELBQADggEBACqVHms8 /W5eCH3hOD5EoY8Ptx5QA73eXivivfd4tNZlK/WmApJlc1wSEXLZjo7L+744EvMB vpEsKUU2okHF19X6vHK3l5/sLTanGcW2JlrxR7rKOP7RHgiLxRuEDa+BBeHSqly8 0IzscJMPyWKXVS919jTGuOGdayzQp1KpDnPIw56tOAGRTr2h+YQd1cWgBj75NOw2 ExdnvBFBQheQw9GIFOi0ZOSroQ5Otrvrm6cG2Hkc49gt+iEatKCdFT9+uq1IiOdb nC//38Kp0sSqxQ0FLQIaS34gf0Cp3cZAYeeRB2y0Jv65IbUuDd2nligBHrWbPYvW gErM7tWejnSCLIM= -----END CERTIFICATE-----Generated at Sun Jan 25 15:29:09 2026 by rpki-client