This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/9mOrUxGFlBpFUlP48rOHE607Iuo.roa File: 9mOrUxGFlBpFUlP48rOHE607Iuo.roa (raw, json) Hash identifier: ti5a7ip3wlFm83mF2sprT3SXw8daN820QDTET4fAkAk= Subject key identifier: F6:63:AB:53:11:85:94:1A:45:52:53:F8:F2:B3:87:13:AD:3B:22:EA Certificate issuer: /CN=24295ce712473d0e3e6daa777db8906f8001df70 Certificate serial: 019B783431079721B1D7150DBB06EEAC71C3 Authority key identifier: 24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/9mOrUxGFlBpFUlP48rOHE607Iuo.roa Signing time: Thu 01 Jan 2026 06:17:24 +0000 ROA not before: Thu 01 Jan 2026 06:17:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42422 IP address blocks: 176.102.64.0/22 maxlen: 24 176.102.64.0/24 maxlen: 24 176.102.65.0/24 maxlen: 24 176.102.66.0/24 maxlen: 24 176.102.67.0/24 maxlen: 24 2a07:dbc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:31:07:97:21:b1:d7:15:0d:bb:06:ee:ac:71:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24295ce712473d0e3e6daa777db8906f8001df70 Validity Not Before: Jan 1 06:17:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f663ab531185941a455253f8f2b38713ad3b22ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6e:64:4b:11:90:d4:0b:82:54:14:ec:1a:b1: e7:52:5a:e8:d7:d9:7c:bd:17:2c:fc:fc:69:b4:49: 1b:66:94:9f:50:4a:c7:c5:3f:bc:b1:6d:53:9e:96: d1:e9:7a:37:80:14:68:d4:ce:07:fe:b8:27:78:fa: 3d:a6:cc:a2:09:f8:d6:53:09:93:59:83:13:18:47: c2:3c:b7:74:2d:c4:01:c5:77:d5:2c:0b:28:92:a7: 26:b8:16:9d:3a:cc:4c:fc:19:4c:9e:30:9a:30:dd: bb:bd:3f:61:79:a8:1d:a1:cf:e9:1f:76:94:cc:24: 95:a6:6b:0a:87:12:0a:19:5a:50:fa:96:f3:95:d3: 60:44:f4:22:0d:75:4a:af:de:a9:5b:19:a7:36:78: 3a:2d:07:57:06:b1:84:fd:b3:ec:37:4e:f2:fb:d0: d2:91:81:99:4c:ff:a3:9b:8e:46:ec:d8:d8:a3:c2: f7:74:44:b7:76:67:2c:fd:08:15:99:b1:00:a1:31: dd:42:75:e3:49:1e:65:e2:cb:4f:4e:27:64:62:e2: 7f:02:91:1b:aa:76:69:eb:04:38:15:e0:0b:b7:ba: 9a:6f:79:6b:24:62:98:b4:98:59:ce:0e:20:d5:c5: 0a:e4:cb:61:a6:30:89:e2:b8:99:0d:c4:ec:12:e7: 09:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:63:AB:53:11:85:94:1A:45:52:53:F8:F2:B3:87:13:AD:3B:22:EA X509v3 Authority Key Identifier: keyid:24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/9mOrUxGFlBpFUlP48rOHE607Iuo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.102.64.0/22 IPv6: 2a07:dbc0::/32 Signature Algorithm: sha256WithRSAEncryption 88:fa:54:2a:72:13:21:2d:ff:dd:cd:8f:ac:d3:62:24:2b:f0: 61:66:58:d8:b7:2c:02:92:01:b4:9e:14:04:75:d5:2b:90:19: 21:e0:4f:71:e3:62:3c:46:bc:f4:b9:80:9f:0a:6d:68:8e:e4: 27:be:66:77:52:89:63:f6:10:99:94:b0:5b:94:1a:9c:74:68: 8e:18:8a:a8:51:6b:a3:95:f1:aa:57:2b:62:84:11:c2:71:3c: 78:9d:db:1f:58:1b:cd:3d:c6:8b:97:b1:e1:07:b5:01:05:35: 28:c9:31:90:3f:27:0a:20:87:ab:3c:09:95:d6:11:4c:ce:6b: 6a:76:50:9a:35:13:81:eb:f9:f5:24:70:b0:c4:2f:08:c4:a0: de:6e:e6:cb:31:4a:ab:10:90:fb:a6:b8:48:81:fd:25:aa:1d: 06:a5:4e:52:09:b0:9e:c4:71:6a:3f:a3:e4:eb:ab:f7:57:7f: f4:87:fc:07:5e:77:f3:1c:8d:ca:3d:dd:d6:7c:87:c0:7f:a2: 37:2a:1f:59:ce:c6:c2:78:b1:cd:2d:1f:41:f3:1b:f7:3b:e7: 65:53:0a:8d:4c:ab:df:61:bb:91:9e:3b:d8:02:0b:00:07:a0: 22:4a:53:e4:e2:fb:60:0c:9d:49:7b:19:c8:fc:37:04:28:6b: 2b:20:af:d8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NDEHlyGx1xUNuwburHHDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0Mjk1Y2U3MTI0NzNkMGUzZTZkYWE3NzdkYjg5MDZmODAw MWRmNzAwHhcNMjYwMTAxMDYxNzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjYzYWI1MzExODU5NDFhNDU1MjUzZjhmMmIzODcxM2FkM2IyMmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6W5kSxGQ1AuCVBTsGrHnUlro19l8 vRcs/PxptEkbZpSfUErHxT+8sW1TnpbR6Xo3gBRo1M4H/rgnePo9psyiCfjWUwmT WYMTGEfCPLd0LcQBxXfVLAsokqcmuBadOsxM/BlMnjCaMN27vT9heagdoc/pH3aU zCSVpmsKhxIKGVpQ+pbzldNgRPQiDXVKr96pWxmnNng6LQdXBrGE/bPsN07y+9DS kYGZTP+jm45G7NjYo8L3dES3dmcs/QgVmbEAoTHdQnXjSR5l4stPTidkYuJ/ApEb qnZp6wQ4FeALt7qab3lrJGKYtJhZzg4g1cUK5MthpjCJ4riZDcTsEucJOwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPZjq1MRhZQaRVJT+PKzhxOtOyLqMB8GA1UdIwQY MBaAFCQpXOcSRz0OPm2qd324kG+AAd9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkNsYzV4SkhQUTQtYmFwM2ZiaVFiNEFCMzNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8xYTBjNmEtMWE1ZS00MjRiLTlhNjkt OTk1NTMxODYyNDE5LzEvOW1PclV4R0ZsQnBGVWxQNDhyT0hFNjA3SXVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8xYTBjNmEtMWE1ZS00MjRiLTlhNjktOTk1NTMxODYyNDE5 LzEvSkNsYzV4SkhQUTQtYmFwM2ZiaVFiNEFCMzNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCsGZAMA0E AgACMAcDBQAqB9vAMA0GCSqGSIb3DQEBCwUAA4IBAQCI+lQqchMhLf/dzY+s02Ik K/BhZljYtywCkgG0nhQEddUrkBkh4E9x42I8Rrz0uYCfCm1ojuQnvmZ3Uolj9hCZ lLBblBqcdGiOGIqoUWujlfGqVytihBHCcTx4ndsfWBvNPcaLl7HhB7UBBTUoyTGQ PycKIIerPAmV1hFMzmtqdlCaNROB6/n1JHCwxC8IxKDebubLMUqrEJD7prhIgf0l qh0GpU5SCbCexHFqP6Pk66v3V3/0h/wHXnfzHI3KPd3WfIfAf6I3Kh9ZzsbCeLHN LR9B8xv3O+dlUwqNTKvfYbuRnjvYAgsAB6AiSlPk4vtgDJ1JexnI/DcEKGsrIK/Y -----END CERTIFICATE-----Generated at Mon Jan 26 17:01:24 2026 by rpki-client