This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/kCCp6dqliCZNJheiiof3oIrr384.roa File: kCCp6dqliCZNJheiiof3oIrr384.roa (raw, json) Hash identifier: OW9qdUy6Epxe6HIETz0BdHheI0YEHmM3uARiGGAsUHs= Subject key identifier: 90:20:A9:E9:DA:A5:88:26:4D:26:17:A2:8A:87:F7:A0:8A:EB:DF:CE Certificate issuer: /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137 Certificate serial: 019B7758A415B8C893B8E644B2D80D431BB9 Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/kCCp6dqliCZNJheiiof3oIrr384.roa Signing time: Thu 01 Jan 2026 02:17:36 +0000 ROA not before: Thu 01 Jan 2026 02:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212996 IP address blocks: 176.10.89.0/24 maxlen: 24 2a13:d8c1::/32 maxlen: 32 2a13:d8c2::/32 maxlen: 32 2a13:d8c3::/32 maxlen: 32 2a13:d8c5::/32 maxlen: 32 2a13:d8c6::/32 maxlen: 32 2a13:d8c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a4:15:b8:c8:93:b8:e6:44:b2:d8:0d:43:1b:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137 Validity Not Before: Jan 1 02:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9020a9e9daa588264d2617a28a87f7a08aebdfce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fb:59:ca:cd:af:20:9f:1c:ff:b2:5d:f4:c7: ec:dd:86:7f:63:b7:a0:d9:4d:06:da:f6:49:54:83: 63:a1:81:52:e1:d8:4d:11:ee:49:25:e4:e1:da:45: e4:e0:23:c6:f2:80:6e:4d:29:09:5b:f3:8a:f2:5c: 3b:dd:a6:15:a3:eb:ae:0b:6d:1e:10:30:91:c6:94: 91:14:67:40:6d:6c:ea:4c:4d:2b:1d:88:17:cd:d2: 60:55:fe:b6:5e:a7:7b:a9:b9:fd:55:c9:cf:c2:b9: b2:21:9d:eb:a3:e4:fb:0c:ad:39:bc:57:94:c7:87: e3:fa:99:2b:69:da:ff:20:6f:a5:0a:ba:9a:f8:04: 3a:f0:6a:ab:ee:79:c8:27:29:f1:62:a5:0d:17:42: e3:c9:ee:a0:ce:4a:18:bf:6b:1e:4a:0c:80:f0:61: a1:49:b6:f0:84:7a:bf:d5:68:8d:07:6c:1a:fe:3f: d1:47:ff:c7:f4:ad:04:b4:8a:02:ca:20:9f:d7:b2: 7a:03:20:33:55:bb:c9:94:94:5f:56:64:56:fe:6b: 97:bb:e6:99:25:a1:f4:07:15:17:ec:b4:40:62:18: d4:ba:70:cc:df:84:dd:b4:c2:b8:00:05:fb:8b:a0: 17:9f:52:cb:94:b2:13:aa:26:35:4e:aa:27:f6:91: d7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:20:A9:E9:DA:A5:88:26:4D:26:17:A2:8A:87:F7:A0:8A:EB:DF:CE X509v3 Authority Key Identifier: keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/kCCp6dqliCZNJheiiof3oIrr384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.10.89.0/24 IPv6: 2a13:d8c1::-2a13:d8c3:ffff:ffff:ffff:ffff:ffff:ffff 2a13:d8c5::-2a13:d8c7:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 39:35:1e:b5:32:f7:0d:a0:99:74:63:c2:6b:2f:f0:a0:5e:0a: 6e:e4:60:a2:27:00:70:74:43:49:3f:87:80:a2:0a:1e:77:c4: c3:f1:4f:41:ca:5c:cc:66:37:97:e2:8e:0f:c6:8c:31:75:1f: 39:4f:3a:cd:70:34:54:15:51:74:aa:b7:03:2c:86:fb:2e:2b: f0:dd:59:26:ad:b4:7a:4f:bf:96:73:79:a0:61:e4:42:9b:5c: 5d:fa:3f:00:54:80:18:1e:82:83:3a:9a:91:08:00:cb:14:37: 0a:6b:36:42:11:80:f3:3d:a9:8f:f1:49:86:f3:01:ac:30:90: a1:82:07:d3:7b:f7:a1:c3:00:64:8d:22:b3:2d:55:87:59:c1: d0:5e:37:d3:f9:bc:4a:0d:26:e0:7c:53:8d:18:e4:e5:06:54: 26:b0:cd:bf:f0:03:de:07:50:e1:2a:62:88:cd:68:52:79:2a: f6:25:d9:58:b4:0e:ac:fa:80:ee:cf:76:56:41:00:13:22:b8: c5:17:a1:9b:bd:a8:fb:d1:f7:88:89:66:8f:24:06:38:0b:a8: 6f:74:50:de:f4:b5:e0:7d:88:55:d0:15:29:3a:28:d4:3c:2d: 62:78:ca:cb:2e:e1:9b:9a:ad:6f:f7:0e:ab:ea:2b:5a:d0:f0: ef:41:63:69 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt3WKQVuMiTuOZEstgNQxu5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZjUzYzAzZDJmNGU3ZjA3YTgxZWE5MDNlY2VmMDFkNjhj NjgxMzcwHhcNMjYwMTAxMDIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDIwYTllOWRhYTU4ODI2NGQyNjE3YTI4YTg3ZjdhMDhhZWJkZmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPtZys2vIJ8c/7Jd9Mfs3YZ/Y7eg 2U0G2vZJVINjoYFS4dhNEe5JJeTh2kXk4CPG8oBuTSkJW/OK8lw73aYVo+uuC20e EDCRxpSRFGdAbWzqTE0rHYgXzdJgVf62Xqd7qbn9VcnPwrmyIZ3ro+T7DK05vFeU x4fj+pkradr/IG+lCrqa+AQ68Gqr7nnIJynxYqUNF0Ljye6gzkoYv2seSgyA8GGh SbbwhHq/1WiNB2wa/j/RR//H9K0EtIoCyiCf17J6AyAzVbvJlJRfVmRW/muXu+aZ JaH0BxUX7LRAYhjUunDM34TdtMK4AAX7i6AXn1LLlLITqiY1Tqon9pHX5QIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFJAgqenapYgmTSYXooqH96CK69/OMB8GA1UdIwQY MBaAFMb1PAPS9OfweoHqkD7O8B1oxoE3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHZVOEE5TDA1X0I2Z2VxUVBzN3dIV2pHZ1RjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zYzIyN2MtNDcwNi00Nzg3LTlhMDct OTBlYTM3MjljNTc0LzEva0NDcDZkcWxpQ1pOSmhlaWlvZjNvSXJyMzg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8zYzIyN2MtNDcwNi00Nzg3LTlhMDctOTBlYTM3MjljNTc0 LzEveHZVOEE5TDA1X0I2Z2VxUVBzN3dIV2pHZ1RjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAMBAIAATAGAwQAsApZMCYE AgACMCAwDgMFACoT2MEDBQIqE9jAMA4DBQAqE9jFAwUDKhPYwDANBgkqhkiG9w0B AQsFAAOCAQEAOTUetTL3DaCZdGPCay/woF4KbuRgoicAcHRDST+HgKIKHnfEw/FP QcpczGY3l+KOD8aMMXUfOU86zXA0VBVRdKq3AyyG+y4r8N1ZJq20ek+/lnN5oGHk QptcXfo/AFSAGB6CgzqakQgAyxQ3Cms2QhGA8z2pj/FJhvMBrDCQoYIH03v3ocMA ZI0isy1Vh1nB0F430/m8Sg0m4HxTjRjk5QZUJrDNv/AD3gdQ4SpiiM1oUnkq9iXZ WLQOrPqA7s92VkEAEyK4xRehm72o+9H3iIlmjyQGOAuob3RQ3vS14H2IVdAVKToo 1DwtYnjKyy7hm5qtb/cOq+orWtDw70FjaQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:12 2026 by rpki-client