This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/6Mja1Kkr9GW9nSjfLktFZvjb8tQ.roa File: 6Mja1Kkr9GW9nSjfLktFZvjb8tQ.roa (raw, json) Hash identifier: 2v6i6DyCwIoGzawIkRiOLOO2gDlNZ1VrxtK0YOdX6VQ= Subject key identifier: E8:C8:DA:D4:A9:2B:F4:65:BD:9D:28:DF:2E:4B:45:66:F8:DB:F2:D4 Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2 Certificate serial: 019B7D5BE9303E0F63DFA2FE5B1A4CE356AE Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/6Mja1Kkr9GW9nSjfLktFZvjb8tQ.roa Signing time: Fri 02 Jan 2026 06:18:54 +0000 ROA not before: Fri 02 Jan 2026 06:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57146 IP address blocks: 91.231.4.0/23 maxlen: 24 91.231.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:e9:30:3e:0f:63:df:a2:fe:5b:1a:4c:e3:56:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2 Validity Not Before: Jan 2 06:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8c8dad4a92bf465bd9d28df2e4b4566f8dbf2d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:45:d3:a4:a0:5f:04:97:ec:05:83:d8:80:a5: b5:dc:10:06:fe:45:aa:f5:38:c1:83:58:06:5d:5b: 36:f4:28:e4:c3:e0:3b:1d:44:a0:06:5c:e1:41:ea: 31:41:bc:04:bb:5e:39:3d:d6:cd:8f:2b:60:c7:93: c3:8e:de:22:b9:69:e9:fd:f2:76:8a:a1:24:30:b1: 76:af:7d:99:4f:be:38:df:37:34:1b:94:0e:cf:4b: 2d:a9:91:65:10:6c:20:24:96:ed:08:73:c8:e9:ac: a5:32:d7:e9:72:4c:4d:f2:f5:0d:5b:f3:bc:2d:83: e6:36:63:7e:ed:53:0f:62:81:d6:5f:a6:cd:7b:88: be:16:5d:51:1b:3d:5b:44:d0:6b:38:cd:ea:23:0b: be:a4:5d:0b:e2:d7:be:6a:74:f0:8b:20:4a:5b:63: 36:2d:1a:e4:d0:8a:02:45:25:d3:b6:0a:f1:3e:96: 46:2d:9d:9a:e9:99:7a:a2:b6:17:51:62:80:27:61: ba:d2:a2:d9:10:e7:fe:d6:6e:40:90:07:f8:28:8a: 3a:40:45:a9:a9:8d:b6:02:ac:c5:3c:ae:90:cb:29: 06:ea:8b:ff:5d:38:cb:d2:65:8c:92:e3:4c:06:62: f1:45:d5:9f:7a:83:ac:79:94:a1:0f:f6:4c:d7:8f: e0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C8:DA:D4:A9:2B:F4:65:BD:9D:28:DF:2E:4B:45:66:F8:DB:F2:D4 X509v3 Authority Key Identifier: keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/6Mja1Kkr9GW9nSjfLktFZvjb8tQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.231.4.0-91.231.6.255 Signature Algorithm: sha256WithRSAEncryption 49:3f:41:1d:0c:87:5a:0a:7c:6b:5b:a9:fe:c9:0d:0f:71:11: 11:fe:b0:4f:77:91:2f:d6:41:44:f3:13:a6:c1:4f:05:24:2f: 6f:11:01:f3:26:17:16:db:5f:db:df:20:5c:40:87:7e:dd:a0: ba:4b:33:7c:e1:b4:14:27:d8:90:de:e1:70:b7:60:71:c8:78: 0e:cb:8e:92:71:99:38:80:c9:ec:3d:fb:50:5c:89:41:d8:69: 68:18:37:03:de:ba:16:50:5e:9d:04:13:ed:f6:7a:60:da:9b: 45:ad:6e:2a:c5:15:fa:18:f4:79:eb:70:e1:ba:09:d5:8e:72: b4:0b:b6:42:35:88:a8:75:ba:cd:cd:eb:69:40:9e:86:d1:bc: 11:9f:4a:15:52:18:0c:22:4c:4b:1b:d8:48:74:e8:84:7b:5c: a5:62:c9:23:e1:d4:03:53:51:a4:82:23:d6:f2:d3:4a:fa:71: 2e:51:5b:8e:00:57:14:65:a6:29:56:a8:79:f8:77:ef:a2:cd: 2d:ef:cc:aa:6b:59:c4:96:bb:ae:57:20:86:7c:6d:4e:84:52: 4b:06:13:5e:89:f6:79:ee:cd:a6:ca:69:7b:cd:8a:3b:0d:01: f5:0d:39:59:45:33:e9:33:2a:e6:e9:a4:07:d5:c6:18:fd:d7: e1:a1:7e:95 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt9W+kwPg9j36L+WxpM41auMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYmIzNjI0YjgyZjBlMWU1MzhiMDA5MTlmNDQyZDIwMGM3 ZTNjZDIwHhcNMjYwMTAyMDYxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGM4ZGFkNGE5MmJmNDY1YmQ5ZDI4ZGYyZTRiNDU2NmY4ZGJmMmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkXTpKBfBJfsBYPYgKW13BAG/kWq 9TjBg1gGXVs29Cjkw+A7HUSgBlzhQeoxQbwEu145PdbNjytgx5PDjt4iuWnp/fJ2 iqEkMLF2r32ZT7443zc0G5QOz0stqZFlEGwgJJbtCHPI6aylMtfpckxN8vUNW/O8 LYPmNmN+7VMPYoHWX6bNe4i+Fl1RGz1bRNBrOM3qIwu+pF0L4te+anTwiyBKW2M2 LRrk0IoCRSXTtgrxPpZGLZ2a6Zl6orYXUWKAJ2G60qLZEOf+1m5AkAf4KIo6QEWp qY22AqzFPK6QyykG6ov/XTjL0mWMkuNMBmLxRdWfeoOseZShD/ZM14/gUQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFOjI2tSpK/RlvZ0o3y5LRWb42/LUMB8GA1UdIwQY MBaAFC67NiS4Lw4eU4sAkZ9ELSAMfjzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80OWJlZjEtNDAxYS00OGQyLTg3NDYt MjY3Mjc1ZTkyNTcwLzEvNk1qYTFLa3I5R1c5blNqZkxrdEZadmpiOHRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC80OWJlZjEtNDAxYS00OGQyLTg3NDYtMjY3Mjc1ZTkyNTcw LzEvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJb5wQD BABb5wYwDQYJKoZIhvcNAQELBQADggEBAEk/QR0Mh1oKfGtbqf7JDQ9xERH+sE93 kS/WQUTzE6bBTwUkL28RAfMmFxbbX9vfIFxAh37doLpLM3zhtBQn2JDe4XC3YHHI eA7LjpJxmTiAyew9+1BciUHYaWgYNwPeuhZQXp0EE+32emDam0WtbirFFfoY9Hnr cOG6CdWOcrQLtkI1iKh1us3N62lAnobRvBGfShVSGAwiTEsb2Eh06IR7XKViySPh 1ANTUaSCI9by00r6cS5RW44AVxRlpilWqHn4d++izS3vzKprWcSWu65XIIZ8bU6E UksGE16J9nnuzabKaXvNijsNAfUNOVlFM+kzKubppAfVxhj91+GhfpU= -----END CERTIFICATE-----Generated at Mon Jan 26 09:30:07 2026 by rpki-client