This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/6k3vYeEPu-J7Mw4dXTyiMZ7Ekr0.roa File: 6k3vYeEPu-J7Mw4dXTyiMZ7Ekr0.roa (raw, json) Hash identifier: r1DQwd1lCwiCMr4uiPyUZ5NdhPXNQWe9B7dtgVTDAek= Subject key identifier: EA:4D:EF:61:E1:0F:BB:E2:7B:33:0E:1D:5D:3C:A2:31:9E:C4:92:BD Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Certificate serial: 019B7A5B681D951F771B27CA6F198F6EB70F Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/6k3vYeEPu-J7Mw4dXTyiMZ7Ekr0.roa Signing time: Thu 01 Jan 2026 16:19:29 +0000 ROA not before: Thu 01 Jan 2026 16:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8737 IP address blocks: 194.120.224.0/23 maxlen: 23 194.120.226.0/23 maxlen: 23 194.120.228.0/23 maxlen: 23 194.120.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:68:1d:95:1f:77:1b:27:ca:6f:19:8f:6e:b7:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Validity Not Before: Jan 1 16:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea4def61e10fbbe27b330e1d5d3ca2319ec492bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:58:a2:14:07:e9:6f:94:4d:fe:b9:02:d6:53: 54:20:cf:30:0d:2c:bc:57:c4:d3:d1:d2:de:e0:53: cb:d0:2a:76:35:8a:15:3c:3f:7e:5a:b4:f8:21:8a: 94:3c:ac:ba:d8:b4:6a:c2:34:f2:f4:7b:80:49:bd: 5f:cc:10:18:9b:d2:fb:66:50:51:7b:fc:27:eb:4d: aa:9d:a1:b6:d7:fc:53:66:18:ae:10:37:0e:2f:f5: 0e:5a:a7:7c:4d:56:97:dd:c8:69:d2:d6:4a:19:7c: e2:74:1e:ae:bb:df:f0:a6:18:45:04:94:34:ed:79: de:d2:6d:20:42:5e:91:dc:1c:a1:46:98:94:56:7e: 64:22:6f:e3:cf:66:11:c4:72:27:e2:82:ba:ac:87: 8e:34:26:52:e8:4e:b4:74:6d:bc:2b:6a:aa:be:27: 61:f2:a8:9e:9c:fa:30:73:11:b3:10:bc:f7:f6:0a: d5:e6:ac:b8:11:40:74:c9:80:6c:2c:2e:f4:90:a5: 6e:c2:19:8f:47:68:8c:e6:9d:8b:fd:3a:08:e2:50: 47:22:95:3b:e1:5e:c1:ca:20:6b:e2:f9:7c:10:6a: bc:ab:b5:8e:cd:e8:6f:c3:89:92:5d:23:d4:29:39: 15:e7:6b:64:6e:f3:53:24:2a:5f:2a:56:db:46:8e: 44:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4D:EF:61:E1:0F:BB:E2:7B:33:0E:1D:5D:3C:A2:31:9E:C4:92:BD X509v3 Authority Key Identifier: keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/6k3vYeEPu-J7Mw4dXTyiMZ7Ekr0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.120.224.0-194.120.229.255 194.120.250.0/23 Signature Algorithm: sha256WithRSAEncryption 07:ee:1f:a4:9d:e5:c7:6e:42:70:58:e7:2c:26:e3:50:a9:d4: 5d:90:6a:cc:75:4a:65:cf:c6:fb:ca:0d:dd:6e:70:b1:d6:47: fc:95:4b:01:5c:23:83:3e:e2:d5:e4:75:8e:c6:4d:fe:7d:02: 6d:80:70:fb:fe:a2:e3:f6:7d:aa:54:34:df:fe:7b:6e:1e:69: c6:e3:78:26:9d:4d:fe:e8:fc:33:c8:58:c4:20:b6:66:f4:5b: cf:ab:0c:74:02:0a:3f:1c:8f:63:ec:4a:69:06:85:21:cb:82: f8:87:1b:18:c0:87:4f:30:fa:b5:5b:25:2b:79:f3:fc:7b:a5: 46:a8:f4:c7:fa:45:a6:ca:20:a6:1f:d4:3c:a1:e8:e5:e4:79: 10:3d:b2:e6:75:35:ad:80:63:60:80:6e:ec:4f:e8:c8:cc:39: 3a:8f:ad:f4:37:ee:8b:f7:0b:92:ce:7c:5f:c6:cb:c5:b5:f5: 64:df:83:4c:4b:f3:76:9f:bd:20:fe:47:0a:60:fd:89:25:8d: d0:15:d7:c1:5e:fa:08:33:16:38:25:7d:72:23:36:f9:b1:2b: 74:00:2c:4c:ce:bd:e3:c1:36:01:be:67:ed:b9:02:7a:a0:7a: 2f:67:cf:77:4d:ef:9b:ee:82:e1:f9:10:69:a1:87:39:a1:81: 2a:75:18:ab -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt6W2gdlR93GyfKbxmPbrcPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzOTgwNjBmMWJmMjJmMDk5OWNiMDcxYjFiNDI2OTZkYmM0 M2UxMGMwHhcNMjYwMTAxMTYxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTRkZWY2MWUxMGZiYmUyN2IzMzBlMWQ1ZDNjYTIzMTllYzQ5MmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApViiFAfpb5RN/rkC1lNUIM8wDSy8 V8TT0dLe4FPL0Cp2NYoVPD9+WrT4IYqUPKy62LRqwjTy9HuASb1fzBAYm9L7ZlBR e/wn602qnaG21/xTZhiuEDcOL/UOWqd8TVaX3chp0tZKGXzidB6uu9/wphhFBJQ0 7Xne0m0gQl6R3ByhRpiUVn5kIm/jz2YRxHIn4oK6rIeONCZS6E60dG28K2qqvidh 8qienPowcxGzELz39grV5qy4EUB0yYBsLC70kKVuwhmPR2iM5p2L/ToI4lBHIpU7 4V7ByiBr4vl8EGq8q7WOzehvw4mSXSPUKTkV52tkbvNTJCpfKlbbRo5ESQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFOpN72HhD7viezMOHV08ojGexJK9MB8GA1UdIwQY MBaAFMOYBg8b8i8JmcsHGxtCaW28Q+EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAt YzkyN2I4YzJjN2M0LzEvNmszdlllRVB1LUo3TXc0ZFhUeWlNWjdFa3IwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAtYzkyN2I4YzJjN2M0 LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAXCeOAD BAHCeOQDBAHCePowDQYJKoZIhvcNAQELBQADggEBAAfuH6Sd5cduQnBY5ywm41Cp 1F2Qasx1SmXPxvvKDd1ucLHWR/yVSwFcI4M+4tXkdY7GTf59Am2AcPv+ouP2fapU NN/+e24eacbjeCadTf7o/DPIWMQgtmb0W8+rDHQCCj8cj2PsSmkGhSHLgviHGxjA h08w+rVbJSt58/x7pUao9Mf6RabKIKYf1Dyh6OXkeRA9suZ1Na2AY2CAbuxP6MjM OTqPrfQ37ov3C5LOfF/Gy8W19WTfg0xL83afvSD+Rwpg/YkljdAV18Fe+ggzFjgl fXIjNvmxK3QALEzOvePBNgG+Z+25Anqgei9nz3dN75vuguH5EGmhhzmhgSp1GKs= -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:26 2026 by rpki-client