This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6Dp8eZX99i2r6Ax6yJJcggIBTwA.roa File: 6Dp8eZX99i2r6Ax6yJJcggIBTwA.roa (raw, json) Hash identifier: cNcaQfWzzdTAKzdLBWZgulZba6jP/8UuNqjLK1XW070= Subject key identifier: E8:3A:7C:79:95:FD:F6:2D:AB:E8:0C:7A:C8:92:5C:82:02:01:4F:00 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019BF3F70489D31DF6ACE29AF3B6EA06FFE6 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6Dp8eZX99i2r6Ax6yJJcggIBTwA.roa Signing time: Sun 25 Jan 2026 07:03:30 +0000 ROA not before: Sun 25 Jan 2026 07:03:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 984 IP address blocks: 14.102.234.0/24 maxlen: 24 89.106.14.0/24 maxlen: 24 194.36.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f7:04:89:d3:1d:f6:ac:e2:9a:f3:b6:ea:06:ff:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 25 07:03:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e83a7c7995fdf62dabe80c7ac8925c8202014f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:87:4f:b3:06:fc:31:b1:ad:b0:86:a3:24:3c: 05:df:bd:6e:79:85:31:9a:b8:5d:6f:7e:0c:71:e2: 75:04:70:ff:63:57:ef:38:c4:61:99:70:1f:71:55: ab:14:98:61:7c:b7:4b:37:fe:f5:31:f9:28:c1:ca: 21:ac:c0:82:0a:36:77:4a:60:70:9a:19:62:0a:56: 49:6f:41:d3:8d:22:ae:94:ac:2e:f5:e8:90:40:1e: c9:5d:95:e6:64:0f:71:f6:64:36:36:36:27:98:42: cd:c5:dc:e3:64:5e:09:41:a6:59:f1:cc:61:46:7d: b0:67:48:c3:69:e5:47:01:43:6e:1b:45:b4:74:a6: f6:44:44:ea:73:c5:d2:59:2e:43:36:6e:24:14:a2: b3:3d:a4:b7:d4:31:51:68:34:73:29:40:59:65:26: 8c:d1:5d:54:8d:10:65:9c:20:7a:79:26:19:08:df: e4:ec:24:7c:9e:dd:e4:f0:ee:94:63:56:f3:f3:44: 24:73:ba:81:12:78:86:44:7a:b4:57:7f:48:17:be: f0:a3:a0:8f:f0:e2:a8:fb:00:6f:26:6f:67:70:7c: 25:d3:9a:6f:c4:99:8a:e3:3d:58:9c:a9:bd:b8:3c: 7a:8b:bd:08:f5:9d:3c:b5:89:05:67:54:a4:89:d6: 43:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3A:7C:79:95:FD:F6:2D:AB:E8:0C:7A:C8:92:5C:82:02:01:4F:00 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6Dp8eZX99i2r6Ax6yJJcggIBTwA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.102.234.0/24 89.106.14.0/24 194.36.33.0/24 Signature Algorithm: sha256WithRSAEncryption de:17:75:a5:1a:f5:78:60:bc:aa:8e:ea:b9:ad:8d:df:a1:e0: 80:71:bd:41:1e:17:15:9d:14:1c:3a:b7:13:b0:a0:f2:1a:44: 1e:7b:34:0f:ad:b5:48:fd:ac:88:7f:97:21:f9:67:c4:89:a3: f0:a8:dc:6a:41:aa:53:71:ac:6f:44:7e:66:f6:d1:eb:3f:38: 75:ab:86:44:02:00:c0:8c:c0:3f:d1:20:90:7c:3e:d2:cb:4a: a2:06:96:9c:dd:77:f2:20:59:77:41:be:cd:60:55:66:50:86: 4d:7d:0f:29:c0:08:b7:81:45:a3:ec:4d:39:10:31:74:07:49: 51:00:09:8f:88:3e:72:c9:35:e1:89:b1:23:c6:68:e3:fa:6c: 15:ac:47:55:4e:d6:fd:f7:e1:dc:70:79:fb:5b:b6:65:25:0f: 54:05:67:48:2f:25:30:70:40:ed:8d:b4:97:ff:d6:95:2a:d9: e3:ef:96:b9:b4:11:8d:ab:7f:98:2b:19:93:0f:cc:88:de:2d: 75:5a:f0:cc:62:0a:08:22:60:53:8d:a3:a7:52:d0:73:b7:0c: f0:01:9f:86:1d:55:7c:84:af:69:b1:2a:3d:79:fd:48:f4:5a: 70:0c:a0:91:37:38:16:b0:c9:4b:57:aa:2b:ee:4c:03:37:e5: f0:44:9d:47 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZvz9wSJ0x32rOKa87bqBv/mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTI1MDcwMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODNhN2M3OTk1ZmRmNjJkYWJlODBjN2FjODkyNWM4MjAyMDE0ZjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzodPswb8MbGtsIajJDwF371ueYUx mrhdb34MceJ1BHD/Y1fvOMRhmXAfcVWrFJhhfLdLN/71MfkowcohrMCCCjZ3SmBw mhliClZJb0HTjSKulKwu9eiQQB7JXZXmZA9x9mQ2NjYnmELNxdzjZF4JQaZZ8cxh Rn2wZ0jDaeVHAUNuG0W0dKb2RETqc8XSWS5DNm4kFKKzPaS31DFRaDRzKUBZZSaM 0V1UjRBlnCB6eSYZCN/k7CR8nt3k8O6UY1bz80Qkc7qBEniGRHq0V39IF77wo6CP 8OKo+wBvJm9ncHwl05pvxJmK4z1YnKm9uDx6i70I9Z08tYkFZ1SkidZDwwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOg6fHmV/fYtq+gMesiSXIICAU8AMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvNkRwOGVaWDk5aTJyNkF4NnlKSmNnZ0lCVHdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQADmbqAwQA WWoOAwQAwiQhMA0GCSqGSIb3DQEBCwUAA4IBAQDeF3WlGvV4YLyqjuq5rY3foeCA cb1BHhcVnRQcOrcTsKDyGkQeezQPrbVI/ayIf5ch+WfEiaPwqNxqQapTcaxvRH5m 9tHrPzh1q4ZEAgDAjMA/0SCQfD7Sy0qiBpac3XfyIFl3Qb7NYFVmUIZNfQ8pwAi3 gUWj7E05EDF0B0lRAAmPiD5yyTXhibEjxmjj+mwVrEdVTtb99+HccHn7W7ZlJQ9U BWdILyUwcEDtjbSX/9aVKtnj75a5tBGNq3+YKxmTD8yI3i11WvDMYgoIImBTjaOn UtBztwzwAZ+GHVV8hK9psSo9ef1I9FpwDKCRNzgWsMlLV6or7kwDN+XwRJ1H -----END CERTIFICATE-----Generated at Sun Jan 25 14:34:08 2026 by rpki-client