This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/6zB9mXbeCeyLJLDTvRiz3FUFQMo.roa File: 6zB9mXbeCeyLJLDTvRiz3FUFQMo.roa (raw, json) Hash identifier: sMU20YzSMLsJcr1dShhbvyD3Z82VwF/2ZVMc8i8SKBY= Subject key identifier: EB:30:7D:99:76:DE:09:EC:8B:24:B0:D3:BD:18:B3:DC:55:05:40:CA Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2 Certificate serial: 019B7AC94A174CB2F80F28055CFD1959A135 Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/6zB9mXbeCeyLJLDTvRiz3FUFQMo.roa Signing time: Thu 01 Jan 2026 18:19:30 +0000 ROA not before: Thu 01 Jan 2026 18:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41050 IP address blocks: 5.59.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:4a:17:4c:b2:f8:0f:28:05:5c:fd:19:59:a1:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2 Validity Not Before: Jan 1 18:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb307d9976de09ec8b24b0d3bd18b3dc550540ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8d:43:49:3f:32:88:4b:20:7c:21:c4:56:c0: 11:72:e8:10:b3:92:a5:98:5c:e5:b9:27:5b:c8:d4: 1b:e4:f6:f5:0f:e2:36:76:78:5c:b7:91:ed:48:23: 04:ee:8e:8c:c0:43:f5:dc:32:2b:95:0d:2d:b4:4c: 2b:b7:14:33:71:56:31:b8:fd:18:9b:a6:f0:8e:3d: 66:09:52:88:bd:b8:c6:23:76:9a:0a:b6:57:8b:e3: 80:71:ac:07:99:97:be:15:2f:00:09:47:ac:1b:a3: 81:73:a0:b8:a6:77:32:db:56:70:53:df:16:93:5e: ed:16:52:14:82:34:ba:bd:50:e0:5f:51:72:27:81: 84:72:c9:25:8f:82:eb:a1:46:f5:0f:9f:2a:1a:e1: fe:16:cc:28:89:46:2f:97:02:be:ee:f3:f5:42:10: f7:f3:83:96:43:24:8e:e0:4f:95:c5:c9:37:c3:77: bc:91:11:74:bf:99:3c:03:9a:23:f0:18:a7:9b:24: 9c:36:38:02:39:43:99:b4:8f:9a:9c:bc:b2:ed:c4: 92:3e:b3:8d:79:de:ae:7e:02:88:65:54:17:aa:b6: 51:f2:05:d2:9e:08:2a:a2:88:1e:5f:d6:86:46:9c: cd:87:21:81:70:e0:1b:29:6a:35:61:78:cc:05:ad: f7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:30:7D:99:76:DE:09:EC:8B:24:B0:D3:BD:18:B3:DC:55:05:40:CA X509v3 Authority Key Identifier: keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/6zB9mXbeCeyLJLDTvRiz3FUFQMo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.59.96.0/24 Signature Algorithm: sha256WithRSAEncryption 72:98:91:4d:40:f5:6a:37:58:79:f6:4e:af:3c:6e:88:04:99: 8e:74:13:12:79:2f:91:90:40:fd:67:26:30:2d:c5:6a:2d:ef: 03:69:96:bb:ed:7b:a9:af:eb:6f:c6:81:46:9c:cc:cd:35:43: d0:3f:4a:d1:3f:c2:9b:00:0c:82:fc:40:b5:c0:10:90:ed:d9: 6c:f4:32:6f:6a:43:a8:a5:8d:08:24:b2:66:45:35:aa:7e:d9: c2:6d:44:45:07:72:37:44:cf:a8:1b:0e:f4:e3:ad:49:33:43: 2c:c3:00:56:ee:8c:f6:57:da:97:53:58:33:7d:43:72:fc:d3: 8f:0f:30:8f:6d:73:f8:f0:a4:29:cd:db:c7:36:48:5b:a8:0b: 6a:74:c7:a2:ec:1a:32:0f:04:67:3c:a8:81:ef:0f:ae:89:07: 8f:d0:8b:ec:2c:13:4f:fc:bb:bc:69:e7:d9:aa:37:64:e8:75: a9:df:f2:fd:6b:99:d4:48:93:a2:c1:ab:a8:05:8e:b7:9a:1a: 7a:48:1e:da:96:48:86:d4:67:40:5d:bf:9b:e6:98:18:43:c1: 67:c0:45:ac:40:c6:28:b8:71:8e:49:34:4c:cb:d1:86:74:81: 5a:bf:25:e8:26:63:1b:9f:99:1c:79:38:2e:de:72:04:9f:bd: 18:a8:8d:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yUoXTLL4DygFXP0ZWaE1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NDgxMTE5YWZlMWJmZjIyOWZhY2Q0ZWY5YzhjNjFiMGZh YmVhZjIwHhcNMjYwMTAxMTgxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjMwN2Q5OTc2ZGUwOWVjOGIyNGIwZDNiZDE4YjNkYzU1MDU0MGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3o1DST8yiEsgfCHEVsARcugQs5Kl mFzluSdbyNQb5Pb1D+I2dnhct5HtSCME7o6MwEP13DIrlQ0ttEwrtxQzcVYxuP0Y m6bwjj1mCVKIvbjGI3aaCrZXi+OAcawHmZe+FS8ACUesG6OBc6C4pncy21ZwU98W k17tFlIUgjS6vVDgX1FyJ4GEcsklj4LroUb1D58qGuH+FswoiUYvlwK+7vP1QhD3 84OWQySO4E+Vxck3w3e8kRF0v5k8A5oj8BinmyScNjgCOUOZtI+anLyy7cSSPrON ed6ufgKIZVQXqrZR8gXSnggqoogeX9aGRpzNhyGBcOAbKWo1YXjMBa33KwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOswfZl23gnsiySw070Ys9xVBUDKMB8GA1UdIwQY MBaAFLlIERmv4b/yKfrNTvnIxhsPq+ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAt OWI5YmNlMTVlMGM2LzEvNnpCOW1YYmVDZXlMSkxEVHZSaXozRlVGUU1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAtOWI5YmNlMTVlMGM2 LzEvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABTtgMA0G CSqGSIb3DQEBCwUAA4IBAQBymJFNQPVqN1h59k6vPG6IBJmOdBMSeS+RkED9ZyYw LcVqLe8DaZa77Xupr+tvxoFGnMzNNUPQP0rRP8KbAAyC/EC1wBCQ7dls9DJvakOo pY0IJLJmRTWqftnCbURFB3I3RM+oGw70461JM0MswwBW7oz2V9qXU1gzfUNy/NOP DzCPbXP48KQpzdvHNkhbqAtqdMei7BoyDwRnPKiB7w+uiQeP0IvsLBNP/Lu8aefZ qjdk6HWp3/L9a5nUSJOiwauoBY63mhp6SB7alkiG1GdAXb+b5pgYQ8FnwEWsQMYo uHGOSTRMy9GGdIFavyXoJmMbn5kceTgu3nIEn70YqI1w -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:45 2026 by rpki-client