This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/6zn_bXq4vLaCBsfKFtI4DMgY8Zc.roa File: 6zn_bXq4vLaCBsfKFtI4DMgY8Zc.roa (raw, json) Hash identifier: OrTMirsJ1aKUm7fiP9lslFXEOscQqByWR2wJ7u3TDEk= Subject key identifier: EB:39:FF:6D:7A:B8:BC:B6:82:06:C7:CA:16:D2:38:0C:C8:18:F1:97 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 019B79101A9059AC25BC9FC4D7CFCBD24ED0 Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/6zn_bXq4vLaCBsfKFtI4DMgY8Zc.roa Signing time: Thu 01 Jan 2026 10:17:37 +0000 ROA not before: Thu 01 Jan 2026 10:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60248 IP address blocks: 130.193.77.0/24 maxlen: 24 194.56.148.0/24 maxlen: 24 195.110.38.0/24 maxlen: 24 195.110.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:1a:90:59:ac:25:bc:9f:c4:d7:cf:cb:d2:4e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: Jan 1 10:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb39ff6d7ab8bcb68206c7ca16d2380cc818f197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8e:7c:45:33:43:63:90:7e:2a:d6:ff:bf:e9: a3:c9:77:c7:a3:68:7b:21:c2:d7:a4:38:d9:e2:2b: f9:ef:be:a6:40:02:e0:fa:ae:cd:42:ac:9f:fc:1a: 41:a2:7f:1d:2c:fe:d2:9e:be:12:00:da:55:24:a7: 7b:de:74:15:e7:f7:c7:5f:95:d9:75:60:2d:dc:7f: 62:da:19:b0:42:1a:ab:86:44:f1:ab:a2:2b:f3:7a: 8d:ee:f6:a5:41:6e:84:45:56:e4:ab:ae:14:4f:df: ea:ee:22:7b:62:00:1f:aa:c3:f6:8c:82:64:bc:0b: c2:33:40:73:ac:8e:d3:47:68:de:1a:c4:5c:14:e5: 06:87:2b:52:32:92:28:48:9b:4e:29:d4:d1:eb:6c: c7:45:e7:e7:4d:98:e7:d6:05:a3:ca:59:84:17:83: e1:fa:03:ed:49:4c:5d:a4:be:44:bd:91:f3:83:d9: 86:af:c8:31:d6:3a:36:42:a1:93:19:3e:47:1d:18: f7:69:4e:41:71:d6:65:d3:fa:b4:76:32:25:27:97: d3:5a:d1:94:04:d7:dc:b2:47:ac:89:77:a8:04:8f: 7c:4c:44:4a:6b:e8:4f:08:a5:14:b8:b0:20:98:aa: 57:96:91:03:39:0e:99:98:8e:27:01:b7:6e:e2:04: c8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:39:FF:6D:7A:B8:BC:B6:82:06:C7:CA:16:D2:38:0C:C8:18:F1:97 X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/6zn_bXq4vLaCBsfKFtI4DMgY8Zc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.193.77.0/24 194.56.148.0/24 195.110.38.0/23 Signature Algorithm: sha256WithRSAEncryption 15:71:65:2c:21:37:a4:34:52:53:93:f0:1a:63:d3:69:b0:02: 1c:b2:63:ca:05:36:dd:32:43:6e:e3:2b:e3:ee:4e:95:54:fc: 3c:5e:47:da:09:20:62:89:7c:5c:f2:99:63:d9:51:b2:99:74: b2:b3:0c:3a:12:4b:b6:c9:e8:27:96:0c:a4:3b:86:3e:27:90: f5:20:1d:65:4f:0f:f8:d2:27:8b:ea:dc:59:9a:4a:5a:f1:80: b3:47:b1:d1:b6:94:43:09:e2:11:48:97:5c:be:d1:18:9f:d5: 10:4a:4c:28:95:ce:f5:3d:2a:94:00:80:40:d1:5a:96:5f:ce: d2:b3:8d:bf:e2:73:e5:8a:52:dc:0a:75:28:c8:7e:6d:22:92: 76:2b:93:73:c6:7b:30:66:13:18:96:70:dd:62:9c:d1:c4:e4: 9d:4e:89:0f:3e:a9:22:36:4c:62:2a:63:3f:fa:3a:51:fa:c2: 97:76:a9:99:6d:09:d5:46:f9:eb:d0:b5:88:d0:f6:56:4d:b7: dc:63:8c:9a:d0:c7:16:65:fb:51:3a:74:52:80:a2:03:d5:5c: aa:86:fd:18:ca:5d:6d:2d:1e:c5:43:3c:f4:16:4d:44:09:04: e4:30:8c:81:0d:d6:fe:b9:39:7e:0c:c4:89:a1:11:cc:09:a2: 38:be:d7:31 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EBqQWawlvJ/E18/L0k7QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjYwMTAxMTAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjM5ZmY2ZDdhYjhiY2I2ODIwNmM3Y2ExNmQyMzgwY2M4MThmMTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx458RTNDY5B+Ktb/v+mjyXfHo2h7 IcLXpDjZ4iv5776mQALg+q7NQqyf/BpBon8dLP7Snr4SANpVJKd73nQV5/fHX5XZ dWAt3H9i2hmwQhqrhkTxq6Ir83qN7valQW6ERVbkq64UT9/q7iJ7YgAfqsP2jIJk vAvCM0BzrI7TR2jeGsRcFOUGhytSMpIoSJtOKdTR62zHRefnTZjn1gWjylmEF4Ph +gPtSUxdpL5EvZHzg9mGr8gx1jo2QqGTGT5HHRj3aU5BcdZl0/q0djIlJ5fTWtGU BNfcskesiXeoBI98TERKa+hPCKUUuLAgmKpXlpEDOQ6ZmI4nAbdu4gTIowIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOs5/216uLy2ggbHyhbSOAzIGPGXMB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvNnpuX2JYcTR2TGFDQnNmS0Z0STRETWdZOFpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAgsFNAwQA wjiUAwQBw24mMA0GCSqGSIb3DQEBCwUAA4IBAQAVcWUsITekNFJTk/AaY9NpsAIc smPKBTbdMkNu4yvj7k6VVPw8XkfaCSBiiXxc8plj2VGymXSysww6Eku2yegnlgyk O4Y+J5D1IB1lTw/40ieL6txZmkpa8YCzR7HRtpRDCeIRSJdcvtEYn9UQSkwolc71 PSqUAIBA0VqWX87Ss42/4nPlilLcCnUoyH5tIpJ2K5NzxnswZhMYlnDdYpzRxOSd TokPPqkiNkxiKmM/+jpR+sKXdqmZbQnVRvnr0LWI0PZWTbfcY4ya0McWZftROnRS gKID1Vyqhv0Yyl1tLR7FQzz0Fk1ECQTkMIyBDdb+uTl+DMSJoRHMCaI4vtcx -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:44 2026 by rpki-client