This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/6K4jtyB3n1dTIno4GBJ6uOlA2H4.roa File: 6K4jtyB3n1dTIno4GBJ6uOlA2H4.roa (raw, json) Hash identifier: s//DyxiKkxSxvwwq0U0tirxt/hDGoM9Ut2Dc50YCwqM= Subject key identifier: E8:AE:23:B7:20:77:9F:57:53:22:7A:38:18:12:7A:B8:E9:40:D8:7E Certificate issuer: /CN=808c3a6c5cbff0739e438d05744405b16197b15b Certificate serial: 019B7C1365894B3A9163ABBF3A455386FB8A Authority key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/6K4jtyB3n1dTIno4GBJ6uOlA2H4.roa Signing time: Fri 02 Jan 2026 00:20:04 +0000 ROA not before: Fri 02 Jan 2026 00:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41820 IP address blocks: 213.109.80.0/24 maxlen: 24 213.109.82.0/24 maxlen: 24 213.109.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:65:89:4b:3a:91:63:ab:bf:3a:45:53:86:fb:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=808c3a6c5cbff0739e438d05744405b16197b15b Validity Not Before: Jan 2 00:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8ae23b720779f5753227a3818127ab8e940d87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8a:44:4b:9d:8e:e5:4f:a6:fd:3c:6d:d8:2a: 5a:ab:b1:14:41:a5:1c:e2:11:cd:a4:8f:f3:eb:33: 5a:96:ea:20:44:a1:26:ae:b0:8f:06:49:b1:67:9c: 5e:40:2d:b9:9a:19:d2:92:d3:dc:99:79:d3:2e:a6: ab:b6:9e:a8:bd:d5:93:d8:97:a3:13:1b:08:88:53: 68:ec:6a:7b:d3:b5:c0:c2:2c:e1:29:82:f3:c2:3c: 0e:de:d8:b0:22:3c:02:1d:d8:0e:56:5b:c1:7e:5c: f7:05:c2:b0:d4:33:63:4c:d2:2b:0c:e2:8f:d8:94: ff:82:83:85:90:46:a1:3d:53:63:cb:07:bc:a5:15: 69:a6:35:03:77:30:75:4e:b4:bc:b6:0b:f1:aa:1e: 57:c9:8d:97:89:a0:6b:fc:75:30:ce:e1:9c:73:9d: 58:32:d6:87:83:4e:c1:42:3d:bb:98:2e:e8:8b:03: 15:1b:46:80:74:b4:c9:f8:bf:24:16:91:71:96:e9: 03:23:57:19:5c:8c:66:3a:86:a6:8b:1a:2e:21:c1: 02:aa:9a:74:54:11:c6:4f:67:61:e9:1d:9b:18:3b: 49:27:bb:1f:65:15:39:d0:04:78:1e:a2:29:d4:84: 9b:8f:01:e9:0c:bc:3b:d2:a3:cd:f3:37:9b:45:2c: d0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AE:23:B7:20:77:9F:57:53:22:7A:38:18:12:7A:B8:E9:40:D8:7E X509v3 Authority Key Identifier: keyid:80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/6K4jtyB3n1dTIno4GBJ6uOlA2H4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.109.80.0/24 213.109.82.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:df:d1:ef:23:a8:b5:69:88:0f:51:bf:e3:21:01:3a:1b:c5: c9:b8:b1:da:32:8e:d2:da:dc:5b:7c:ca:c0:87:c4:4b:e8:c2: 84:e0:cc:15:77:53:e8:23:7a:86:fd:d5:86:06:36:e0:71:bf: 1f:5f:9e:6a:b0:50:69:b2:31:42:ce:43:64:10:55:df:4d:28: 4a:50:f2:00:a3:61:24:dc:10:86:7c:74:3b:68:d7:ed:cb:ae: df:fe:c4:70:bf:08:e7:1d:9e:4e:7b:7a:cc:f1:0e:20:91:b6: f8:b1:d9:13:6c:8c:f3:4b:9a:f1:32:5f:3c:25:32:33:5a:ba: a5:1b:0b:fd:33:1c:03:99:fc:96:6b:a5:5b:b6:ae:96:f6:58: 9b:89:74:49:fd:5a:9b:58:11:fe:f7:20:3e:a9:63:68:f2:e7: 67:82:66:52:d7:39:a2:48:04:f2:c1:ec:36:85:7c:e9:9f:c5: 87:80:86:bd:cf:97:c5:a6:b2:c0:0b:ef:97:f9:af:3f:8d:1e: d6:5b:03:d1:04:3d:a6:3a:fa:05:30:44:6a:83:2a:d9:45:23: bd:0e:a3:30:dd:ab:b3:d2:72:9f:1a:da:44:ea:54:9d:d4:6c: 03:38:4b:42:57:13:70:04:d7:ed:c6:c8:37:1b:04:03:cd:72: 7e:5b:59:bc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8E2WJSzqRY6u/OkVThvuKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwOGMzYTZjNWNiZmYwNzM5ZTQzOGQwNTc0NDQwNWIxNjE5 N2IxNWIwHhcNMjYwMTAyMDAyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGFlMjNiNzIwNzc5ZjU3NTMyMjdhMzgxODEyN2FiOGU5NDBkODdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYpES52O5U+m/Txt2Cpaq7EUQaUc 4hHNpI/z6zNaluogRKEmrrCPBkmxZ5xeQC25mhnSktPcmXnTLqartp6ovdWT2Jej ExsIiFNo7Gp707XAwizhKYLzwjwO3tiwIjwCHdgOVlvBflz3BcKw1DNjTNIrDOKP 2JT/goOFkEahPVNjywe8pRVppjUDdzB1TrS8tgvxqh5XyY2XiaBr/HUwzuGcc51Y MtaHg07BQj27mC7oiwMVG0aAdLTJ+L8kFpFxlukDI1cZXIxmOoamixouIcECqpp0 VBHGT2dh6R2bGDtJJ7sfZRU50AR4HqIp1ISbjwHpDLw70qPN8zebRSzQrQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOiuI7cgd59XUyJ6OBgSerjpQNh+MB8GA1UdIwQY MBaAFICMOmxcv/BznkONBXREBbFhl7FbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0l3NmJGeV84SE9lUTQwRmRFUUZzV0dYc1ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82OThlNGUtMGEzOS00MTZiLWFmZmUt NjE4MTljNDgwY2JlLzEvNks0anR5QjNuMWRUSW5vNEdCSjZ1T2xBMkg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC82OThlNGUtMGEzOS00MTZiLWFmZmUtNjE4MTljNDgwY2Jl LzEvZ0l3NmJGeV84SE9lUTQwRmRFUUZzV0dYc1ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1W1QAwQB 1W1SMA0GCSqGSIb3DQEBCwUAA4IBAQBb39HvI6i1aYgPUb/jIQE6G8XJuLHaMo7S 2txbfMrAh8RL6MKE4MwVd1PoI3qG/dWGBjbgcb8fX55qsFBpsjFCzkNkEFXfTShK UPIAo2Ek3BCGfHQ7aNfty67f/sRwvwjnHZ5Oe3rM8Q4gkbb4sdkTbIzzS5rxMl88 JTIzWrqlGwv9MxwDmfyWa6Vbtq6W9libiXRJ/VqbWBH+9yA+qWNo8udngmZS1zmi SATywew2hXzpn8WHgIa9z5fFprLAC++X+a8/jR7WWwPRBD2mOvoFMERqgyrZRSO9 DqMw3auz0nKfGtpE6lSd1GwDOEtCVxNwBNftxsg3GwQDzXJ+W1m8 -----END CERTIFICATE-----Generated at Mon Jan 26 03:15:01 2026 by rpki-client