This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/p6uW3EYNECiG5usVLCBhTWb5vMQ.roa File: p6uW3EYNECiG5usVLCBhTWb5vMQ.roa (raw, json) Hash identifier: 5W9QlyV+qBGgAT1Js96qS86d17Mmw7XZHZsWojaKliM= Subject key identifier: A7:AB:96:DC:46:0D:10:28:86:E6:EB:15:2C:20:61:4D:66:F9:BC:C4 Certificate issuer: /CN=2f6f07cead06a4f811547600bac02faf0cc084c9 Certificate serial: 019B78A2BFE6387648866E5FB5354F39EDFC Authority key identifier: 2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/p6uW3EYNECiG5usVLCBhTWb5vMQ.roa Signing time: Thu 01 Jan 2026 08:18:10 +0000 ROA not before: Thu 01 Jan 2026 08:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209497 IP address blocks: 149.3.172.0/22 maxlen: 22 149.3.172.0/24 maxlen: 24 149.3.173.0/24 maxlen: 24 149.3.174.0/24 maxlen: 24 149.3.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:bf:e6:38:76:48:86:6e:5f:b5:35:4f:39:ed:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6f07cead06a4f811547600bac02faf0cc084c9 Validity Not Before: Jan 1 08:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7ab96dc460d102886e6eb152c20614d66f9bcc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7d:1d:d0:8d:67:37:de:a3:c4:5b:b2:e2:e5: b5:8b:e5:69:26:5d:10:24:6c:84:94:4d:92:b8:6e: bf:f1:a2:f4:b9:65:0c:d4:7d:45:fa:70:6f:e5:a3: 7c:29:d8:0d:db:cf:fb:27:6e:53:90:ae:37:78:90: 1b:44:da:94:c1:06:c1:cc:e2:96:27:cd:55:a9:2b: 37:f7:99:6e:75:d8:91:a8:b2:e5:27:68:33:45:f6: de:aa:d3:b5:fd:a8:43:d3:ad:ae:da:e4:f6:07:7e: d8:c6:7b:56:a6:53:58:6a:5c:c6:8e:fc:31:4f:d9: 28:43:1a:24:1d:f0:33:a1:33:a0:6b:59:22:15:a8: ca:58:93:fd:1d:14:c0:95:6d:0d:fe:4b:5a:ff:6c: 9f:84:70:72:fe:4a:e7:11:0b:55:f3:6c:c9:8b:07: 2c:5e:36:b6:f9:55:eb:48:d5:da:f0:44:e6:87:e2: 67:db:4a:89:16:f4:ba:4b:09:ce:67:b1:10:fe:86: d8:8d:03:cf:39:32:22:56:5c:70:e1:94:ac:16:29: a8:b9:da:6d:74:bd:31:05:59:7f:36:14:da:c5:db: a2:09:f6:f1:4c:f1:08:56:3b:6e:80:97:ae:f7:9a: cc:6b:21:88:2c:96:65:44:ca:6d:a2:d2:61:b1:57: 32:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:AB:96:DC:46:0D:10:28:86:E6:EB:15:2C:20:61:4D:66:F9:BC:C4 X509v3 Authority Key Identifier: keyid:2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/p6uW3EYNECiG5usVLCBhTWb5vMQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.3.172.0/22 Signature Algorithm: sha256WithRSAEncryption 45:37:07:8e:7a:e3:f5:69:fa:8d:a2:f4:27:fe:9a:a9:bb:08: 9d:97:02:8a:e2:b6:49:87:2b:2d:c9:a2:e5:f9:aa:51:76:73: 69:f3:8c:85:ff:b3:cb:4b:5e:03:42:a8:fe:63:86:04:bb:d2: 9c:e4:71:f0:aa:67:4d:c1:fc:2b:d8:04:3b:6a:58:e8:ed:f2: 95:72:0c:10:d5:d4:c9:fe:cc:6a:63:65:21:20:c5:4e:09:48: b5:71:88:f0:84:d6:25:bd:12:38:3e:e0:0f:e6:e8:50:86:e4: 3e:20:04:a4:84:a9:b7:61:e9:6f:da:b6:b1:2d:b2:62:07:b5: 35:13:22:c6:ec:f6:6d:00:10:e9:1e:d5:86:a6:59:1d:19:56: 2c:13:55:17:fc:31:3a:93:db:f7:0a:97:6e:95:eb:35:b9:38: 49:df:c1:5a:db:5e:46:87:64:18:c9:68:9a:98:b1:8f:3d:2b: ad:2e:72:a8:91:9d:19:e8:7a:45:8e:22:41:7d:a8:43:47:63: 26:60:4e:4f:b4:f8:ef:d7:dc:ce:08:ff:f2:41:4d:24:59:83: da:e3:d4:95:d8:08:9b:a1:3f:8e:9b:7f:e7:3f:74:e0:79:72: 01:55:b2:79:7a:d9:b9:2e:86:c6:cf:5e:78:28:bc:f3:b8:57: ef:5d:7c:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4or/mOHZIhm5ftTVPOe38MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmYwN2NlYWQwNmE0ZjgxMTU0NzYwMGJhYzAyZmFmMGNj MDg0YzkwHhcNMjYwMTAxMDgxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2FiOTZkYzQ2MGQxMDI4ODZlNmViMTUyYzIwNjE0ZDY2ZjliY2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX0d0I1nN96jxFuy4uW1i+VpJl0Q JGyElE2SuG6/8aL0uWUM1H1F+nBv5aN8KdgN28/7J25TkK43eJAbRNqUwQbBzOKW J81VqSs395luddiRqLLlJ2gzRfbeqtO1/ahD062u2uT2B37YxntWplNYalzGjvwx T9koQxokHfAzoTOga1kiFajKWJP9HRTAlW0N/kta/2yfhHBy/krnEQtV82zJiwcs Xja2+VXrSNXa8ETmh+Jn20qJFvS6SwnOZ7EQ/obYjQPPOTIiVlxw4ZSsFimoudpt dL0xBVl/NhTaxduiCfbxTPEIVjtugJeu95rMayGILJZlRMptotJhsVcywwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKerltxGDRAohubrFSwgYU1m+bzEMB8GA1UdIwQY MBaAFC9vB86tBqT4EVR2ALrAL68MwITJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDI4SHpxMEdwUGdSVkhZQXVzQXZyd3pBaE1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9lYWQ2YzQtOWZlMS00ZmVlLTk3NjAt MDQ3Y2JjMzEwY2NiLzEvcDZ1VzNFWU5FQ2lHNXVzVkxDQmhUV2I1dk1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9lYWQ2YzQtOWZlMS00ZmVlLTk3NjAtMDQ3Y2JjMzEwY2Ni LzEvTDI4SHpxMEdwUGdSVkhZQXVzQXZyd3pBaE1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClQOsMA0G CSqGSIb3DQEBCwUAA4IBAQBFNweOeuP1afqNovQn/pqpuwidlwKK4rZJhystyaLl +apRdnNp84yF/7PLS14DQqj+Y4YEu9Kc5HHwqmdNwfwr2AQ7aljo7fKVcgwQ1dTJ /sxqY2UhIMVOCUi1cYjwhNYlvRI4PuAP5uhQhuQ+IASkhKm3Yelv2raxLbJiB7U1 EyLG7PZtABDpHtWGplkdGVYsE1UX/DE6k9v3Cpdules1uThJ38Fa215Gh2QYyWia mLGPPSutLnKokZ0Z6HpFjiJBfahDR2MmYE5PtPjv19zOCP/yQU0kWYPa49SV2Aib oT+Om3/nP3TgeXIBVbJ5etm5LobGz154KLzzuFfvXXwS -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:28 2026 by rpki-client