This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/6uf8Q-mzBwP0CYJoLzaP07zO8js.roa File: 6uf8Q-mzBwP0CYJoLzaP07zO8js.roa (raw, json) Hash identifier: g3FMpnEG+wQrG52cwJFoXy3Of4b2Onpej3iV0SnQGLM= Subject key identifier: EA:E7:FC:43:E9:B3:07:03:F4:09:82:68:2F:36:8F:D3:BC:CE:F2:3B Certificate issuer: /CN=002434c73a0eea22c6e441072e93db77c7e8a2f1 Certificate serial: 019B775902EE1706912AF494D36F8079E455 Authority key identifier: 00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/6uf8Q-mzBwP0CYJoLzaP07zO8js.roa Signing time: Thu 01 Jan 2026 02:18:00 +0000 ROA not before: Thu 01 Jan 2026 02:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43366 IP address blocks: 91.194.224.0/23 maxlen: 24 185.12.144.0/22 maxlen: 24 185.37.124.0/22 maxlen: 24 217.21.192.0/20 maxlen: 24 2a00:8080::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:02:ee:17:06:91:2a:f4:94:d3:6f:80:79:e4:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002434c73a0eea22c6e441072e93db77c7e8a2f1 Validity Not Before: Jan 1 02:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eae7fc43e9b30703f40982682f368fd3bccef23b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6a:d4:0c:60:42:65:d7:e0:f9:c9:5e:ee:f5: 4f:a5:42:ec:ba:a7:68:63:ba:fc:7c:99:db:16:bf: 0c:30:3c:ec:7d:f2:4d:fe:c5:13:98:f8:0e:b5:80: c0:7a:2c:86:7b:63:3b:1b:b7:19:22:89:42:67:90: a8:fc:20:54:fc:0d:01:25:82:4a:68:da:60:1f:c2: c1:b7:b0:1e:c6:c4:c9:4c:8d:d3:8e:4b:e8:0e:05: 02:b3:ef:2a:c7:ad:81:67:c7:c5:6c:7c:43:24:68: a4:3b:8c:b4:31:74:05:78:10:5d:6a:08:f2:bb:b3: 2e:5b:b7:d0:ae:ed:15:3a:23:b2:b6:c2:64:bf:3b: e1:78:12:53:90:e6:e0:c2:1e:a3:fd:e7:eb:58:09: dd:8e:d6:87:d7:e9:70:d0:7d:b7:62:6a:e7:e2:f9: f0:78:09:91:f5:54:34:e5:18:ad:da:40:d9:d3:b3: 2f:14:63:bb:ed:f2:c4:a2:ec:18:87:0d:07:c5:4f: a9:2d:f1:09:fe:31:29:00:10:ed:6e:a0:fb:a6:7a: c9:d1:f6:61:bb:aa:0b:4e:83:3a:d0:56:10:5c:6b: aa:56:cf:a6:73:25:e4:a6:10:fa:d7:89:3a:90:00: cb:60:f1:44:a7:ff:0d:d3:8a:4b:57:72:5f:2e:53: e0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E7:FC:43:E9:B3:07:03:F4:09:82:68:2F:36:8F:D3:BC:CE:F2:3B X509v3 Authority Key Identifier: keyid:00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/6uf8Q-mzBwP0CYJoLzaP07zO8js.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.224.0/23 185.12.144.0/22 185.37.124.0/22 217.21.192.0/20 IPv6: 2a00:8080::/32 Signature Algorithm: sha256WithRSAEncryption 2b:25:57:cc:ce:11:10:3d:26:99:5b:fc:c3:bd:88:11:34:b8: bb:fd:47:35:6b:5e:63:1d:32:cb:c8:78:8a:42:47:79:4e:04: d1:a1:b8:a8:85:f0:fb:5e:b8:85:ea:07:0d:d6:34:09:0c:36: 50:c5:eb:72:0d:fd:74:73:d0:8f:8f:d5:02:94:70:57:cb:59: de:30:4f:17:53:19:c0:fe:de:ec:a6:66:df:6c:2e:69:15:60: 56:06:53:c9:81:83:b7:8a:a2:31:9e:89:70:98:9c:da:d8:14: 3f:b0:15:c9:61:b4:65:be:e8:90:f7:42:58:ff:e4:47:92:32: b3:6b:b0:12:c6:c9:93:55:cc:ba:f9:d8:98:63:33:d2:12:62: fa:c4:69:09:c9:75:41:79:d3:f2:c5:b1:0a:8a:9f:f4:53:65: fe:e6:97:ef:a7:8e:d2:d9:60:bd:0b:66:0e:47:a7:f5:ef:31: df:2f:01:37:29:e2:ec:d3:0a:30:c4:24:07:16:ca:76:44:5c: f3:d7:58:3c:f0:3f:54:d1:3e:f2:8b:83:60:57:83:80:25:20: c8:f3:60:33:84:49:b0:a5:71:4e:2b:44:b2:1d:10:4c:dc:4b: 4f:f3:f4:3e:71:1b:7f:c8:86:c5:b4:53:80:1f:58:8d:5b:73: 07:42:94:60 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt3WQLuFwaRKvSU02+AeeRVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjQzNGM3M2EwZWVhMjJjNmU0NDEwNzJlOTNkYjc3Yzdl OGEyZjEwHhcNMjYwMTAxMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWU3ZmM0M2U5YjMwNzAzZjQwOTgyNjgyZjM2OGZkM2JjY2VmMjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWrUDGBCZdfg+cle7vVPpULsuqdo Y7r8fJnbFr8MMDzsffJN/sUTmPgOtYDAeiyGe2M7G7cZIolCZ5Co/CBU/A0BJYJK aNpgH8LBt7AexsTJTI3TjkvoDgUCs+8qx62BZ8fFbHxDJGikO4y0MXQFeBBdagjy u7MuW7fQru0VOiOytsJkvzvheBJTkObgwh6j/efrWAndjtaH1+lw0H23Ymrn4vnw eAmR9VQ05Rit2kDZ07MvFGO77fLEouwYhw0HxU+pLfEJ/jEpABDtbqD7pnrJ0fZh u6oLToM60FYQXGuqVs+mcyXkphD614k6kADLYPFEp/8N04pLV3JfLlPgWwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFOrn/EPpswcD9AmCaC82j9O8zvI7MB8GA1UdIwQY MBaAFAAkNMc6DuoixuRBBy6T23fH6KLxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNRMHh6b082aUxHNUVFSExwUGJkOGZvb3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi80MDNkZGQtYzJkNS00YjU0LTk3M2Et MmI3YTc5NGQ1Nzk1LzEvNnVmOFEtbXpCd1AwQ1lKb0x6YVAwN3pPOGpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi80MDNkZGQtYzJkNS00YjU0LTk3M2EtMmI3YTc5NGQ1Nzk1 LzEvQUNRMHh6b082aUxHNUVFSExwUGJkOGZvb3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBW8LgAwQC uQyQAwQCuSV8AwQE2RXAMA0EAgACMAcDBQAqAICAMA0GCSqGSIb3DQEBCwUAA4IB AQArJVfMzhEQPSaZW/zDvYgRNLi7/Uc1a15jHTLLyHiKQkd5TgTRobiohfD7XriF 6gcN1jQJDDZQxetyDf10c9CPj9UClHBXy1neME8XUxnA/t7spmbfbC5pFWBWBlPJ gYO3iqIxnolwmJza2BQ/sBXJYbRlvuiQ90JY/+RHkjKza7ASxsmTVcy6+diYYzPS EmL6xGkJyXVBedPyxbEKip/0U2X+5pfvp47S2WC9C2YOR6f17zHfLwE3KeLs0wow xCQHFsp2RFzz11g88D9U0T7yi4NgV4OAJSDI82AzhEmwpXFOK0SyHRBM3EtP8/Q+ cRt/yIbFtFOAH1iNW3MHQpRg -----END CERTIFICATE-----Generated at Mon Jan 26 04:19:59 2026 by rpki-client