This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/Mx6UIzbNO3Bm-ZPN13wn4uov6Qg.roa File: Mx6UIzbNO3Bm-ZPN13wn4uov6Qg.roa (raw, json) Hash identifier: KtCxVhRpFwySEkS5UZDhWr1MQTEnHKhuscd/bkCMZDA= Subject key identifier: 33:1E:94:23:36:CD:3B:70:66:F9:93:CD:D7:7C:27:E2:EA:2F:E9:08 Certificate issuer: /CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3 Certificate serial: 019B78343BA6FFA99A5EA6E49EE875E1E4A4 Authority key identifier: 0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/Mx6UIzbNO3Bm-ZPN13wn4uov6Qg.roa Signing time: Thu 01 Jan 2026 06:17:27 +0000 ROA not before: Thu 01 Jan 2026 06:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15456 IP address blocks: 62.116.128.0/18 maxlen: 24 62.116.128.0/19 maxlen: 24 62.116.160.0/19 maxlen: 24 85.236.32.0/19 maxlen: 24 85.236.40.0/24 maxlen: 24 185.91.244.0/22 maxlen: 24 2001:4178::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:3b:a6:ff:a9:9a:5e:a6:e4:9e:e8:75:e1:e4:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3 Validity Not Before: Jan 1 06:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=331e942336cd3b7066f993cdd77c27e2ea2fe908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:11:e2:36:6e:26:6b:14:d0:a2:96:66:cb:21: 29:92:ec:cf:e2:87:61:d4:f6:1f:a5:b0:4d:96:9f: 75:21:b3:48:02:86:ed:13:54:d9:dc:a7:95:e2:08: c3:8d:61:5c:c2:9e:f2:0f:60:19:c7:62:d5:8e:18: 17:da:0d:6d:98:f2:eb:9d:44:80:6d:3f:d7:41:6d: c3:e3:75:03:a1:0b:90:b8:22:d3:ce:50:b4:5a:3f: 8d:52:70:95:ad:86:bf:b3:c5:70:c5:df:0c:c5:ed: b0:45:aa:6f:fd:db:53:ab:a0:b6:5c:d9:83:12:77: 30:32:c2:20:67:1b:c7:ff:81:20:59:10:66:6c:e3: 2c:01:60:06:07:94:33:92:59:8a:91:6e:4c:37:f0: 5e:37:57:76:aa:d6:9c:af:90:a8:56:46:ab:24:63: 47:ba:a2:6d:0f:71:38:7c:34:83:67:70:44:bd:b7: bf:67:a7:d4:5a:3e:78:dc:00:7f:d1:20:22:53:3f: fd:60:72:96:e2:9f:28:3e:8f:7d:f3:cf:48:e3:75: dd:a3:02:df:ca:3d:20:76:a9:73:82:62:71:95:81: 41:4d:88:60:e2:ae:bb:27:59:3c:4b:56:81:a7:75: da:45:e0:2c:c3:f2:cb:37:4b:67:72:08:6b:42:ff: fb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1E:94:23:36:CD:3B:70:66:F9:93:CD:D7:7C:27:E2:EA:2F:E9:08 X509v3 Authority Key Identifier: keyid:0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/Mx6UIzbNO3Bm-ZPN13wn4uov6Qg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.116.128.0/18 85.236.32.0/19 185.91.244.0/22 IPv6: 2001:4178::/29 Signature Algorithm: sha256WithRSAEncryption 24:47:f2:d6:da:32:38:9a:94:37:32:2c:3c:c2:da:5a:a0:92: 93:b0:18:d6:0d:3b:44:c9:09:76:86:cc:0b:51:24:fd:70:9f: fc:5e:83:55:d5:d3:f7:76:4b:ec:ba:e3:56:19:92:e1:0f:d7: 13:fd:38:d8:d3:4f:ac:bf:b7:bc:92:10:d4:45:a4:ac:dc:8c: 42:ff:0e:13:fc:84:09:ed:2d:79:a3:f2:ee:c2:61:26:9b:ae: 6e:fb:e0:52:7c:38:03:b9:a4:69:f6:af:e3:91:d3:60:d0:3f: bd:10:32:b0:a1:46:8b:c5:61:66:9f:0d:47:af:07:67:5a:82: dc:9d:3d:b1:36:96:7b:b0:c4:59:f3:87:e8:94:0c:7a:d3:b2: 60:36:9d:7b:97:71:b4:d3:3d:05:dd:6d:51:1f:0a:d2:16:44: ff:69:e8:86:69:0a:8a:e0:da:df:34:96:32:ee:fc:a9:df:06: bd:eb:9d:bb:86:26:0f:4f:4c:d4:b4:fc:d2:3a:5d:a5:22:22: 7d:b0:04:8b:34:e3:d3:c8:e8:4a:49:64:25:bf:33:8b:90:1f: c9:b5:cd:95:39:cd:52:55:5c:de:07:6f:d1:7c:0c:8e:ac:3b: a4:fd:eb:8f:02:41:8a:19:d5:22:a9:95:8f:3f:ed:36:21:52: 53:f8:fc:1a -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt4NDum/6maXqbknuh14eSkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNWJlNjA1NmViMGMzNjUwYjhmZTIxZTJkNzI2YzFiODNl YzgyYjMwHhcNMjYwMTAxMDYxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzFlOTQyMzM2Y2QzYjcwNjZmOTkzY2RkNzdjMjdlMmVhMmZlOTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xHiNm4maxTQopZmyyEpkuzP4odh 1PYfpbBNlp91IbNIAobtE1TZ3KeV4gjDjWFcwp7yD2AZx2LVjhgX2g1tmPLrnUSA bT/XQW3D43UDoQuQuCLTzlC0Wj+NUnCVrYa/s8Vwxd8Mxe2wRapv/dtTq6C2XNmD EncwMsIgZxvH/4EgWRBmbOMsAWAGB5QzklmKkW5MN/BeN1d2qtacr5CoVkarJGNH uqJtD3E4fDSDZ3BEvbe/Z6fUWj543AB/0SAiUz/9YHKW4p8oPo99889I43XdowLf yj0gdqlzgmJxlYFBTYhg4q67J1k8S1aBp3XaReAsw/LLN0tncghrQv/7vQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFDMelCM2zTtwZvmTzdd8J+LqL+kIMB8GA1UdIwQY MBaAFAxb5gVusMNlC4/iHi1ybBuD7IKzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZ2bUJXNnd3MlVMai1JZUxYSnNHNFBzZ3JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8zMjdhNTQtNmRiMi00MjkxLTk0MzQt ZmZjN2YyYTMxOThjLzEvTXg2VUl6Yk5PM0JtLVpQTjEzd240dW92NlFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8zMjdhNTQtNmRiMi00MjkxLTk0MzQtZmZjN2YyYTMxOThj LzEvREZ2bUJXNnd3MlVMai1JZUxYSnNHNFBzZ3JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQGPnSAAwQF VewgAwQCuVv0MA0EAgACMAcDBQMgAUF4MA0GCSqGSIb3DQEBCwUAA4IBAQAkR/LW 2jI4mpQ3Miw8wtpaoJKTsBjWDTtEyQl2hswLUST9cJ/8XoNV1dP3dkvsuuNWGZLh D9cT/TjY00+sv7e8khDURaSs3IxC/w4T/IQJ7S15o/LuwmEmm65u++BSfDgDuaRp 9q/jkdNg0D+9EDKwoUaLxWFmnw1HrwdnWoLcnT2xNpZ7sMRZ84folAx607JgNp17 l3G00z0F3W1RHwrSFkT/aeiGaQqK4NrfNJYy7vyp3wa96527hiYPT0zUtPzSOl2l IiJ9sASLNOPTyOhKSWQlvzOLkB/Jtc2VOc1SVVzeB2/RfAyOrDuk/euPAkGKGdUi qZWPP+02IVJT+Pwa -----END CERTIFICATE-----Generated at Mon Jan 26 18:16:20 2026 by rpki-client