This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/x6M-HnD_Dy6Y50GGO7utXD02Jmk.roa File: x6M-HnD_Dy6Y50GGO7utXD02Jmk.roa (raw, json) Hash identifier: DI7kmxecqKBRg9yOJMuJfmm5rA4os5wGkXmUhGxBPtE= Subject key identifier: C7:A3:3E:1E:70:FF:0F:2E:98:E7:41:86:3B:BB:AD:5C:3D:36:26:69 Certificate issuer: /CN=87034d2b5932dd1491de7fff31c7d83af73206e2 Certificate serial: 019B7C11B0BEB2E45F5BE155CFD4CE2B3A67 Authority key identifier: 87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/x6M-HnD_Dy6Y50GGO7utXD02Jmk.roa Signing time: Fri 02 Jan 2026 00:18:12 +0000 ROA not before: Fri 02 Jan 2026 00:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216471 IP address blocks: 193.36.94.0/24 maxlen: 24 2a13:aa40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:b0:be:b2:e4:5f:5b:e1:55:cf:d4:ce:2b:3a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87034d2b5932dd1491de7fff31c7d83af73206e2 Validity Not Before: Jan 2 00:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7a33e1e70ff0f2e98e741863bbbad5c3d362669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:86:b7:2a:b0:90:1b:88:ba:1b:1f:3b:88:95: 80:c1:e0:17:aa:70:ff:56:ff:a9:15:75:ff:e6:b4: a6:bb:a1:b4:9c:a7:cd:64:b0:64:08:69:0a:b2:be: c8:ef:dc:4e:96:68:f4:63:5d:b5:14:b6:c6:7f:4c: 2e:a0:31:72:e4:81:23:9e:aa:ee:4b:ef:eb:df:1f: c2:9a:75:c8:e5:d2:c5:60:0c:03:1a:82:c2:78:9b: dc:50:c0:c5:fb:2d:df:31:b5:d4:fd:4b:8d:1b:90: 31:1d:0d:85:fc:d3:33:db:38:83:a5:0c:8f:55:d5: fa:82:af:c3:34:f0:00:32:ad:97:34:3a:ac:57:91: b4:d9:10:96:80:0d:15:fb:81:0d:43:40:54:2e:62: 45:2d:fb:97:54:9d:40:44:7b:58:07:6f:46:d4:de: 82:49:74:7c:3c:a6:4d:37:76:14:b0:3c:aa:ea:6f: cf:67:f2:f9:c6:d9:9d:3b:6d:7b:2a:a5:91:c0:36: 9e:7b:82:20:ae:e3:45:9f:4e:bf:1e:14:b5:e4:c5: 48:18:e0:fa:d4:cf:70:1b:76:e1:d5:a0:e8:3b:73: 81:7a:c4:85:f1:32:4f:d1:6f:47:d2:c9:0b:09:c2: 20:df:59:c4:f2:a0:b4:b0:a4:49:f1:4c:c0:ce:4f: df:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A3:3E:1E:70:FF:0F:2E:98:E7:41:86:3B:BB:AD:5C:3D:36:26:69 X509v3 Authority Key Identifier: keyid:87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/x6M-HnD_Dy6Y50GGO7utXD02Jmk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.36.94.0/24 IPv6: 2a13:aa40::/29 Signature Algorithm: sha256WithRSAEncryption 76:12:e7:bc:38:2c:a8:ff:5e:7e:73:77:7a:17:84:dd:ab:77: 02:25:07:40:29:5f:18:f0:c1:51:fe:4f:f8:fc:a2:53:62:4b: cd:a6:f8:16:49:af:ae:50:ae:05:eb:1a:26:03:61:14:ab:ee: 36:4a:1b:fb:fa:41:54:9f:72:6e:65:51:3e:3f:e1:95:20:32: f6:cd:8a:46:81:09:11:e0:23:c5:41:ea:09:a5:bd:d3:00:3d: e6:9f:76:5e:cf:41:3b:3d:ee:ab:93:b3:56:b8:2a:48:a1:58: f4:51:e2:08:c3:0e:42:cd:3a:72:6a:32:2d:60:3c:e0:02:78: fc:0d:e6:06:ee:e4:80:c1:e8:64:1b:ec:1b:bc:65:5c:a5:09: a3:0b:4f:01:18:07:0b:d5:11:0f:dc:0f:7a:8b:16:28:4b:16: 5c:f9:ec:21:e8:a6:21:c9:5e:a9:5f:5e:1b:be:5d:5d:ff:48: 7c:e6:d4:78:1a:7e:25:ed:4f:5b:83:4d:84:fb:5c:1a:68:35: e3:ff:6b:a7:85:90:d8:bd:a1:ba:5c:8b:54:03:25:1a:ad:c4: 84:b7:fb:a4:1a:2b:0f:20:0a:a5:70:d1:20:cd:42:d9:c4:1f: d9:be:a9:c7:4f:0b:f5:94:c7:7d:ef:a1:0a:fb:f0:51:2a:c2: 9b:49:4b:ca -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8EbC+suRfW+FVz9TOKzpnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MDM0ZDJiNTkzMmRkMTQ5MWRlN2ZmZjMxYzdkODNhZjcz MjA2ZTIwHhcNMjYwMTAyMDAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2EzM2UxZTcwZmYwZjJlOThlNzQxODYzYmJiYWQ1YzNkMzYyNjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYa3KrCQG4i6Gx87iJWAweAXqnD/ Vv+pFXX/5rSmu6G0nKfNZLBkCGkKsr7I79xOlmj0Y121FLbGf0wuoDFy5IEjnqru S+/r3x/CmnXI5dLFYAwDGoLCeJvcUMDF+y3fMbXU/UuNG5AxHQ2F/NMz2ziDpQyP VdX6gq/DNPAAMq2XNDqsV5G02RCWgA0V+4ENQ0BULmJFLfuXVJ1ARHtYB29G1N6C SXR8PKZNN3YUsDyq6m/PZ/L5xtmdO217KqWRwDaee4IgruNFn06/HhS15MVIGOD6 1M9wG3bh1aDoO3OBesSF8TJP0W9H0skLCcIg31nE8qC0sKRJ8UzAzk/fiwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMejPh5w/w8umOdBhju7rVw9NiZpMB8GA1UdIwQY MBaAFIcDTStZMt0Ukd5//zHH2Dr3MgbiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHdOTksxa3kzUlNSM25fX01jZllPdmN5QnVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS83MGNjNTQtYTc0OC00NWVkLTk5YWMt MzlmZjI2MTUyYWE0LzEveDZNLUhuRF9EeTZZNTBHR083dXRYRDAySm1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS83MGNjNTQtYTc0OC00NWVkLTk5YWMtMzlmZjI2MTUyYWE0 LzEvaHdOTksxa3kzUlNSM25fX01jZllPdmN5QnVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwSReMA0E AgACMAcDBQMqE6pAMA0GCSqGSIb3DQEBCwUAA4IBAQB2Eue8OCyo/15+c3d6F4Td q3cCJQdAKV8Y8MFR/k/4/KJTYkvNpvgWSa+uUK4F6xomA2EUq+42Shv7+kFUn3Ju ZVE+P+GVIDL2zYpGgQkR4CPFQeoJpb3TAD3mn3Zez0E7Pe6rk7NWuCpIoVj0UeII ww5CzTpyajItYDzgAnj8DeYG7uSAwehkG+wbvGVcpQmjC08BGAcL1REP3A96ixYo SxZc+ewh6KYhyV6pX14bvl1d/0h85tR4Gn4l7U9bg02E+1waaDXj/2unhZDYvaG6 XItUAyUarcSEt/ukGisPIAqlcNEgzULZxB/ZvqnHTwv1lMd976EK+/BRKsKbSUvK -----END CERTIFICATE-----Generated at Sun Jan 25 21:06:50 2026 by rpki-client