This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/6UAwXFwNdHuV1iQYxvSZ8tT58fc.roa File: 6UAwXFwNdHuV1iQYxvSZ8tT58fc.roa (raw, json) Hash identifier: dAiX0DScSQAyOd84M+cVyRLFZIlldEdcCXOLorNDi0g= Subject key identifier: E9:40:30:5C:5C:0D:74:7B:95:D6:24:18:C6:F4:99:F2:D4:F9:F1:F7 Certificate issuer: /CN=2f78e0066bb27c5f52e7025d61190daa90b97348 Certificate serial: 019B77590FF7B894AE245BF5EA8877139EA4 Authority key identifier: 2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/6UAwXFwNdHuV1iQYxvSZ8tT58fc.roa Signing time: Thu 01 Jan 2026 02:18:03 +0000 ROA not before: Thu 01 Jan 2026 02:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20724 IP address blocks: 93.95.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:0f:f7:b8:94:ae:24:5b:f5:ea:88:77:13:9e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f78e0066bb27c5f52e7025d61190daa90b97348 Validity Not Before: Jan 1 02:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e940305c5c0d747b95d62418c6f499f2d4f9f1f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:15:b1:91:4a:ab:61:f3:72:b3:b3:cc:b4:10: e7:02:91:0f:16:04:57:4a:2f:53:14:8d:62:8a:57: 96:5f:e9:31:0a:b2:a8:b7:5a:bf:42:96:56:39:c2: 85:8f:b0:1d:e5:1d:fd:70:0c:12:66:58:d3:e8:20: 80:29:5f:26:af:d4:60:85:8b:ba:39:49:9f:ec:2c: bd:10:d1:16:0c:8d:b9:54:34:17:14:f1:78:ea:3e: be:61:a0:31:3b:29:70:a1:02:7e:08:cb:1d:d1:30: c2:b5:6c:ac:83:56:5c:9d:06:e9:82:47:a6:ae:dc: ec:f2:7b:d1:f9:e0:66:26:49:53:ad:37:e5:e0:85: cb:71:0d:66:35:e7:7a:70:4e:12:7b:4c:54:43:3f: e5:2e:29:2d:f3:7d:c9:1a:4d:24:14:b0:f4:7b:d9: ec:60:85:be:bd:ba:b6:ef:19:42:0a:32:b9:48:3d: 97:85:f4:5e:3d:77:b9:d6:0b:6d:24:50:96:59:b9: f0:2c:b9:d3:a3:12:09:77:e3:c3:7d:f9:08:9b:a2: 4e:f2:3b:f6:fa:e7:ea:a3:c7:8a:5b:ff:ef:5c:2f: 37:e8:87:c1:57:e5:6e:d5:93:c6:3f:60:d3:40:68: b0:eb:c2:bb:c3:3b:3c:ba:21:69:99:f0:c4:2c:e2: 87:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:40:30:5C:5C:0D:74:7B:95:D6:24:18:C6:F4:99:F2:D4:F9:F1:F7 X509v3 Authority Key Identifier: keyid:2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/6UAwXFwNdHuV1iQYxvSZ8tT58fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.95.24.0/24 Signature Algorithm: sha256WithRSAEncryption 44:1b:47:21:d7:3e:ba:73:3c:c4:8a:a0:dc:f0:5a:d6:08:52: 00:dd:57:e7:4b:8d:89:f5:b5:2b:ca:8b:1e:94:27:4b:39:2e: 8d:8e:9c:4c:55:3c:53:1f:08:d6:69:5b:3b:78:49:64:6a:0b: 08:6f:6a:e7:de:c8:95:ca:1e:c9:28:6e:e2:50:6f:c7:ad:01: bf:1a:1c:ba:04:c4:b6:9a:d4:82:e4:ed:e5:9b:36:aa:37:d7: d7:10:c9:8b:bb:14:de:ed:25:d5:ca:3d:8d:a2:05:38:78:82: 59:c0:5a:c0:20:2b:70:3e:5d:a8:8c:b2:98:bb:08:29:91:fd: eb:13:2d:f3:6c:ee:a8:ad:fb:4f:6b:83:f3:0a:05:75:7d:c8: 80:8b:9f:e3:c2:d4:4d:e5:b4:c8:9d:62:f8:9b:c8:fa:be:45: e7:da:97:6b:e0:2e:fd:08:01:a6:5c:20:4c:56:23:82:6b:7f: ad:86:4a:1b:3c:0f:59:ae:dd:79:57:7e:f1:f6:ab:00:f7:1a: e9:8b:c8:a6:34:50:c4:4a:bf:a5:2f:45:50:ea:ce:93:d8:6f: c6:29:ca:a3:18:7c:33:a4:7c:06:a7:75:d8:b1:b3:9d:7e:0b: e6:6f:ac:e2:81:9c:bc:6a:f9:a1:78:b0:65:6e:e7:7f:b9:8a: 08:25:26:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQ/3uJSuJFv16oh3E56kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNzhlMDA2NmJiMjdjNWY1MmU3MDI1ZDYxMTkwZGFhOTBi OTczNDgwHhcNMjYwMTAxMDIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTQwMzA1YzVjMGQ3NDdiOTVkNjI0MThjNmY0OTlmMmQ0ZjlmMWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBWxkUqrYfNys7PMtBDnApEPFgRX Si9TFI1iileWX+kxCrKot1q/QpZWOcKFj7Ad5R39cAwSZljT6CCAKV8mr9RghYu6 OUmf7Cy9ENEWDI25VDQXFPF46j6+YaAxOylwoQJ+CMsd0TDCtWysg1ZcnQbpgkem rtzs8nvR+eBmJklTrTfl4IXLcQ1mNed6cE4Se0xUQz/lLikt833JGk0kFLD0e9ns YIW+vbq27xlCCjK5SD2XhfRePXe51gttJFCWWbnwLLnToxIJd+PDffkIm6JO8jv2 +ufqo8eKW//vXC836IfBV+Vu1ZPGP2DTQGiw68K7wzs8uiFpmfDELOKHiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOlAMFxcDXR7ldYkGMb0mfLU+fH3MB8GA1UdIwQY MBaAFC944AZrsnxfUucCXWEZDaqQuXNIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDNqZ0JtdXlmRjlTNXdKZFlSa05xcEM1YzBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMzBhYzctZWMwYy00NGRlLTg1YTgt YjJiNzk2MmMyZDgxLzEvNlVBd1hGd05kSHVWMWlRWXh2U1o4dFQ1OGZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMzBhYzctZWMwYy00NGRlLTg1YTgtYjJiNzk2MmMyZDgx LzEvTDNqZ0JtdXlmRjlTNXdKZFlSa05xcEM1YzBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXV8YMA0G CSqGSIb3DQEBCwUAA4IBAQBEG0ch1z66czzEiqDc8FrWCFIA3VfnS42J9bUryose lCdLOS6NjpxMVTxTHwjWaVs7eElkagsIb2rn3siVyh7JKG7iUG/HrQG/Ghy6BMS2 mtSC5O3lmzaqN9fXEMmLuxTe7SXVyj2NogU4eIJZwFrAICtwPl2ojLKYuwgpkf3r Ey3zbO6orftPa4PzCgV1fciAi5/jwtRN5bTInWL4m8j6vkXn2pdr4C79CAGmXCBM ViOCa3+thkobPA9Zrt15V37x9qsA9xrpi8imNFDESr+lL0VQ6s6T2G/GKcqjGHwz pHwGp3XYsbOdfgvmb6zigZy8avmheLBlbud/uYoIJSYz -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:13 2026 by rpki-client