This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/6bYZPUas4xwB9Y6BjMPLAXgWx2M.roa File: 6bYZPUas4xwB9Y6BjMPLAXgWx2M.roa (raw, json) Hash identifier: CYq2BxPFY1v/w5meJf2+C9lRko10NcD5PFb4gnLtAOs= Subject key identifier: E9:B6:19:3D:46:AC:E3:1C:01:F5:8E:81:8C:C3:CB:01:78:16:C7:63 Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E3906D38FA3032C609EFBAE29113444 Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/6bYZPUas4xwB9Y6BjMPLAXgWx2M.roa Signing time: Fri 02 Jan 2026 10:20:25 +0000 ROA not before: Fri 02 Jan 2026 10:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34707 IP address blocks: 82.179.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:06:d3:8f:a3:03:2c:60:9e:fb:ae:29:11:34:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9b6193d46ace31c01f58e818cc3cb017816c763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b3:5a:66:b0:c1:7a:44:f1:94:a4:bc:e8:96: 16:d5:c1:16:40:24:d1:75:61:61:0b:e2:82:ee:81: f0:c1:be:e7:b1:f8:43:b0:cc:1f:36:71:c0:28:48: 97:81:d5:2a:50:1f:d0:3c:3a:33:a5:cc:06:b5:04: bc:0a:40:0d:c1:60:35:51:e4:a8:c1:8e:5b:b6:bf: 3a:ca:7a:be:6d:6c:61:fb:79:1d:fd:f4:fe:5c:36: 81:f8:4c:9a:7f:0f:58:51:98:57:b2:14:cd:b6:c1: 37:d4:aa:bb:e3:d8:df:b0:ea:91:8c:85:a1:81:82: d5:31:af:8e:a4:94:e8:06:25:01:12:f3:ad:fe:67: 2a:8b:b3:7a:80:d7:97:6c:14:7b:78:8f:3d:60:1c: 81:37:5b:7e:bc:ae:3a:0e:37:73:86:00:cc:bd:3d: 79:cb:a3:d5:36:dc:06:af:1d:93:ca:9f:16:12:2e: 99:2e:bc:a5:fd:28:f0:0e:60:51:8c:95:dd:f3:fd: f8:d5:0a:45:53:05:3d:ba:53:22:30:8f:7c:1a:a2: 48:92:25:7f:6f:73:82:53:48:d4:24:5a:6d:db:b2: 04:14:47:fc:ba:d4:88:22:17:a5:d0:22:19:4f:11: 15:f2:b8:3e:b3:18:ca:d1:b7:4b:d7:61:ef:35:6f: b9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B6:19:3D:46:AC:E3:1C:01:F5:8E:81:8C:C3:CB:01:78:16:C7:63 X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/6bYZPUas4xwB9Y6BjMPLAXgWx2M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.179.0.0/20 Signature Algorithm: sha256WithRSAEncryption 19:4f:9b:e6:7c:a5:d6:46:2d:9b:3c:42:0e:e9:69:c2:7a:84: 18:90:92:bb:a7:9b:67:61:13:b5:ba:96:4b:79:e8:69:29:30: 31:68:b3:0b:a1:15:37:0a:eb:7b:d4:78:f6:26:66:45:cb:ef: 3d:4c:d8:17:5d:64:35:ec:63:f7:3d:d1:6c:46:de:c7:1e:be: 0e:1c:19:a1:72:a3:4c:20:f5:e2:73:49:1d:1c:5f:e0:f9:ca: 92:d7:57:60:fb:aa:f4:54:0e:5f:d1:9c:d2:28:5e:68:9b:80: 3f:3e:56:2e:a0:02:71:49:13:9f:b3:c5:62:65:25:9f:a3:45: 8c:24:ab:42:47:95:11:bb:6e:c2:01:ef:d7:23:c7:f8:91:9f: 97:cc:a2:12:5a:be:97:28:78:49:88:49:14:df:a9:2e:3a:a1: 14:32:92:36:67:01:31:38:ef:ac:bb:73:a7:7e:1d:ed:61:da: 4a:bf:16:b5:5f:36:0c:a2:11:1b:1a:d1:4c:f6:51:12:ee:c5: 9f:8c:ac:e5:73:5e:eb:37:2b:a2:a3:94:a4:f0:d8:65:e1:96: 92:a9:45:d1:53:f1:1f:49:82:c6:35:d5:06:cb:a5:3c:73:63: e5:a1:fd:48:ee:17:a8:d1:e4:c9:1d:78:74:7e:42:e0:9b:33: 36:ab:14:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OQbTj6MDLGCe+64pETREMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWI2MTkzZDQ2YWNlMzFjMDFmNThlODE4Y2MzY2IwMTc4MTZjNzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbNaZrDBekTxlKS86JYW1cEWQCTR dWFhC+KC7oHwwb7nsfhDsMwfNnHAKEiXgdUqUB/QPDozpcwGtQS8CkANwWA1UeSo wY5btr86ynq+bWxh+3kd/fT+XDaB+Eyafw9YUZhXshTNtsE31Kq749jfsOqRjIWh gYLVMa+OpJToBiUBEvOt/mcqi7N6gNeXbBR7eI89YByBN1t+vK46DjdzhgDMvT15 y6PVNtwGrx2Typ8WEi6ZLryl/SjwDmBRjJXd8/341QpFUwU9ulMiMI98GqJIkiV/ b3OCU0jUJFpt27IEFEf8utSIIhel0CIZTxEV8rg+sxjK0bdL12HvNW+5PQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOm2GT1GrOMcAfWOgYzDywF4FsdjMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvNmJZWlBVYXM0eHdCOVk2QmpNUExBWGdXeDJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUrMAMA0G CSqGSIb3DQEBCwUAA4IBAQAZT5vmfKXWRi2bPEIO6WnCeoQYkJK7p5tnYRO1upZL eehpKTAxaLMLoRU3Cut71Hj2JmZFy+89TNgXXWQ17GP3PdFsRt7HHr4OHBmhcqNM IPXic0kdHF/g+cqS11dg+6r0VA5f0ZzSKF5om4A/PlYuoAJxSROfs8ViZSWfo0WM JKtCR5URu27CAe/XI8f4kZ+XzKISWr6XKHhJiEkU36kuOqEUMpI2ZwExOO+su3On fh3tYdpKvxa1XzYMohEbGtFM9lES7sWfjKzlc17rNyuio5Sk8Nhl4ZaSqUXRU/Ef SYLGNdUGy6U8c2Plof1I7heo0eTJHXh0fkLgmzM2qxRa -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:20 2026 by rpki-client