This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/6rNJQsn9nenf7gQdwKGULkmO48g.roa File: 6rNJQsn9nenf7gQdwKGULkmO48g.roa (raw, json) Hash identifier: 07pBJi7Nc/k7+K1BPHdbPiHNkGiQWcczdjGOzLq8Sbk= Subject key identifier: EA:B3:49:42:C9:FD:9D:E9:DF:EE:04:1D:C0:A1:94:2E:49:8E:E3:C8 Certificate issuer: /CN=7d59659636089e32324697629c218da38a2b673d Certificate serial: 019BEA5A1375BC81E64797D6580383FB4821 Authority key identifier: 7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/6rNJQsn9nenf7gQdwKGULkmO48g.roa Signing time: Fri 23 Jan 2026 10:15:30 +0000 ROA not before: Fri 23 Jan 2026 10:15:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36040 IP address blocks: 202.61.208.224/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:5a:13:75:bc:81:e6:47:97:d6:58:03:83:fb:48:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d59659636089e32324697629c218da38a2b673d Validity Not Before: Jan 23 10:15:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eab34942c9fd9de9dfee041dc0a1942e498ee3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7f:13:cd:a9:67:1a:d4:7c:3e:fb:26:7c:27: 08:1c:ac:fa:d0:c5:ab:1e:c4:37:5a:61:cd:8f:e6: d8:23:ab:d3:53:97:a2:85:80:da:e6:7f:7a:c4:60: 62:fa:db:97:54:84:8d:1c:f9:51:1e:14:25:b4:33: c4:b4:19:29:d2:c9:91:0c:28:11:c1:6e:cd:53:29: 30:69:ea:f3:1b:e5:2f:a5:fb:dc:1c:c0:98:a5:a9: 32:a4:30:c5:34:8f:8d:94:af:1d:50:ec:62:e5:1f: aa:df:db:e8:f1:cb:32:aa:47:8e:85:63:bf:78:04: 30:f3:2a:e6:0b:18:d4:f9:80:7d:5e:46:01:c2:61: 4b:aa:b5:44:80:b6:da:06:17:18:42:f7:6c:30:2d: 38:57:ce:0b:ac:ab:bb:9b:9f:56:ce:58:71:87:00: 2c:0e:d3:92:0b:72:29:bc:cd:ce:55:dc:a7:18:66: 54:47:65:42:bd:a3:0d:bd:69:ec:60:15:72:36:2c: e9:2c:d0:f9:a5:4b:9b:0b:00:18:77:75:a3:63:83: fb:bd:db:73:db:ae:40:64:00:29:2a:8d:28:59:44: 66:d7:56:6f:a5:13:ba:19:c6:25:ca:70:27:11:88: dd:54:d5:59:8e:78:fc:09:0a:3f:ac:c7:c8:74:d5: 7a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B3:49:42:C9:FD:9D:E9:DF:EE:04:1D:C0:A1:94:2E:49:8E:E3:C8 X509v3 Authority Key Identifier: keyid:7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/6rNJQsn9nenf7gQdwKGULkmO48g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.61.208.224/28 Signature Algorithm: sha256WithRSAEncryption 7d:f5:7a:89:f2:62:fe:11:07:f0:1d:2b:a7:78:de:df:16:38: 11:c6:17:62:2a:ce:ec:f6:71:99:50:47:1e:ac:b9:23:77:7e: 75:29:06:9f:69:47:c7:4d:56:cb:b8:25:b2:31:2c:f8:54:2f: 8a:68:f5:f6:07:cd:34:9d:d1:ea:e9:74:3c:dc:be:b4:b1:ba: b0:62:7a:a5:21:45:38:0b:c2:41:9b:c7:28:75:09:c6:93:d0: 62:ae:84:31:c7:75:d5:5a:df:33:56:60:48:a4:ef:c8:3b:3a: 93:0b:53:91:6a:c9:b8:d6:f8:d9:d7:09:39:e7:78:93:48:9c: 06:b0:5d:9c:9b:c1:90:8b:53:ac:88:4e:b5:bd:f8:83:9f:8f: 8d:9b:7b:ec:19:b1:38:43:4f:79:2d:c9:dc:45:7d:41:77:bf: ee:00:e5:c0:11:e0:9a:7b:4b:c5:3e:75:bd:31:e9:fb:15:5f: 5d:60:e0:d3:24:81:28:88:85:81:c5:41:dc:00:80:19:49:dd: a9:97:6d:e3:e9:a5:71:d9:41:21:fd:a8:d6:e1:a9:09:30:42: df:7a:6b:18:86:fe:94:d5:c4:23:61:0a:01:2f:ab:87:37:66: 1c:76:84:0d:67:55:5d:fa:d2:9f:81:2a:5f:53:7c:d3:ef:49: f3:61:d7:8b -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZvqWhN1vIHmR5fWWAOD+0ghMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTk2NTk2MzYwODllMzIzMjQ2OTc2MjljMjE4ZGEzOGEy YjY3M2QwHhcNMjYwMTIzMTAxNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWIzNDk0MmM5ZmQ5ZGU5ZGZlZTA0MWRjMGExOTQyZTQ5OGVlM2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH8TzalnGtR8PvsmfCcIHKz60MWr HsQ3WmHNj+bYI6vTU5eihYDa5n96xGBi+tuXVISNHPlRHhQltDPEtBkp0smRDCgR wW7NUykwaerzG+UvpfvcHMCYpakypDDFNI+NlK8dUOxi5R+q39vo8csyqkeOhWO/ eAQw8yrmCxjU+YB9XkYBwmFLqrVEgLbaBhcYQvdsMC04V84LrKu7m59WzlhxhwAs DtOSC3IpvM3OVdynGGZUR2VCvaMNvWnsYBVyNizpLND5pUubCwAYd3WjY4P7vdtz 265AZAApKo0oWURm11ZvpRO6GcYlynAnEYjdVNVZjnj8CQo/rMfIdNV69QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFOqzSULJ/Z3p3+4EHcChlC5JjuPIMB8GA1UdIwQY MBaAFH1ZZZY2CJ4yMkaXYpwhjaOKK2c9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZsbGxqWUluakl5UnBkaW5DR05vNG9yWnowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy82NTJlZjAtYWUzMC00NWJhLTk5NzAt NmMxY2Y3MjVkOGY3LzEvNnJOSlFzbjluZW5mN2dRZHdLR1VMa21PNDhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy82NTJlZjAtYWUzMC00NWJhLTk5NzAtNmMxY2Y3MjVkOGY3 LzEvZlZsbGxqWUluakl5UnBkaW5DR05vNG9yWnowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEyj3Q4DAN BgkqhkiG9w0BAQsFAAOCAQEAffV6ifJi/hEH8B0rp3je3xY4EcYXYirO7PZxmVBH Hqy5I3d+dSkGn2lHx01Wy7glsjEs+FQvimj19gfNNJ3R6ul0PNy+tLG6sGJ6pSFF OAvCQZvHKHUJxpPQYq6EMcd11VrfM1ZgSKTvyDs6kwtTkWrJuNb42dcJOed4k0ic BrBdnJvBkItTrIhOtb34g5+PjZt77BmxOENPeS3J3EV9QXe/7gDlwBHgmntLxT51 vTHp+xVfXWDg0ySBKIiFgcVB3ACAGUndqZdt4+mlcdlBIf2o1uGpCTBC33prGIb+ lNXEI2EKAS+rhzdmHHaEDWdVXfrSn4EqX1N80+9J82HXiw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:40:53 2026 by rpki-client