This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/lG6FMWT2cKO27fqSgyD7NwJGZic.roa File: lG6FMWT2cKO27fqSgyD7NwJGZic.roa (raw, json) Hash identifier: 8vr9/y84LRaPCw3bPTcjeu/NXDEsRUvrX9EcTdM7j5g= Subject key identifier: 94:6E:85:31:64:F6:70:A3:B6:ED:FA:92:83:20:FB:37:02:46:66:27 Certificate issuer: /CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e Certificate serial: 019B7AC8808153E7E5FA6FBD259B47457BF8 Authority key identifier: C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/lG6FMWT2cKO27fqSgyD7NwJGZic.roa Signing time: Thu 01 Jan 2026 18:18:38 +0000 ROA not before: Thu 01 Jan 2026 18:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3292 IP address blocks: 147.29.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:80:81:53:e7:e5:fa:6f:bd:25:9b:47:45:7b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e Validity Not Before: Jan 1 18:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=946e853164f670a3b6edfa928320fb3702466627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1a:63:ac:7b:0e:fa:42:a4:87:31:35:3d:d7: eb:55:0a:91:24:c3:b7:92:b5:46:d6:10:87:e9:9f: 95:c1:68:bc:ae:f5:b3:6c:5e:c8:45:04:59:ce:94: 1f:77:2f:57:1c:68:64:ed:5d:25:01:30:2c:f9:4e: f3:d5:a7:c7:a6:f6:11:ef:de:c0:b1:61:3f:e1:e7: 2e:31:07:f2:16:8c:05:aa:83:12:2c:75:16:e0:5a: de:8d:25:fc:3d:2f:8a:53:13:74:6a:9f:70:19:fb: 52:11:f8:5d:5f:8a:61:b5:29:89:da:ad:27:4b:a1: 33:b8:07:b2:7d:37:a7:b5:a2:a8:a0:7a:d5:1a:f8: b5:a7:26:07:9f:a3:a7:86:9b:0e:86:9d:32:2c:46: 55:06:f0:83:d5:35:46:14:a0:e3:03:fc:a2:08:74: 07:59:26:f3:bd:76:fe:3d:94:82:ab:f9:6d:cd:fa: e5:5d:15:79:85:99:67:96:03:e6:a4:18:13:75:94: 53:f1:f2:d1:5f:56:70:49:fc:ae:32:19:1e:e3:ff: bc:ff:04:7a:53:8e:02:12:13:99:fb:4f:bf:0a:1e: 18:02:71:bb:ff:c6:0b:e6:04:26:ac:e6:f0:30:81: aa:da:12:ce:e5:a6:ea:03:5c:8e:e9:8e:25:0b:9d: f3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:6E:85:31:64:F6:70:A3:B6:ED:FA:92:83:20:FB:37:02:46:66:27 X509v3 Authority Key Identifier: keyid:C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/lG6FMWT2cKO27fqSgyD7NwJGZic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.29.150.0/23 Signature Algorithm: sha256WithRSAEncryption 43:76:bf:15:bd:7f:fb:7c:b4:a6:a1:4a:ed:d8:38:fd:c0:ee: f8:d0:29:64:9f:98:e0:c3:e6:03:ed:0f:86:97:b2:bd:b4:b2: be:51:35:92:34:34:42:c9:31:c0:a9:73:b3:9b:a0:fd:30:92: 5a:79:4b:ec:2d:7f:b0:7e:1a:41:05:ac:6a:a0:fb:9d:15:59: b9:83:91:d8:1e:78:ec:de:59:34:32:e3:f0:03:3e:96:19:0d: 7e:4d:08:8b:20:45:b3:88:b2:4d:10:ce:56:95:06:64:5e:b7: 7e:7a:c7:2e:36:ca:6a:d0:8e:26:0a:27:86:1d:9c:57:cd:d7: 14:f4:20:4e:7d:30:a8:cd:0d:5c:03:b7:90:bf:36:f7:d5:02: 8e:c9:99:cd:c7:8a:1f:fb:a6:41:35:dc:b5:fe:3e:79:ec:56: 5a:ac:3d:ff:68:2c:d6:d2:e4:28:85:50:c8:06:0d:04:a9:98: b4:2c:59:fe:d3:ea:8e:af:95:f0:ab:5f:d9:0d:ec:a6:52:c9: 94:0f:83:e8:28:11:41:d4:a0:2f:bf:4e:77:88:65:83:b7:cd: ab:95:8f:33:7d:03:6e:03:dc:d6:30:43:ad:96:82:94:3e:8b: 03:1d:61:53:af:89:bc:cf:de:eb:69:e0:80:26:9d:3c:c6:98: e4:9b:a0:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yICBU+fl+m+9JZtHRXv4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MmQ3Y2FjMWZmYjJjM2ZiZGUyODQ2MjViZjFhZjRjNmJh ZTZiMGUwHhcNMjYwMTAxMTgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDZlODUzMTY0ZjY3MGEzYjZlZGZhOTI4MzIwZmIzNzAyNDY2NjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BpjrHsO+kKkhzE1PdfrVQqRJMO3 krVG1hCH6Z+VwWi8rvWzbF7IRQRZzpQfdy9XHGhk7V0lATAs+U7z1afHpvYR797A sWE/4ecuMQfyFowFqoMSLHUW4FrejSX8PS+KUxN0ap9wGftSEfhdX4phtSmJ2q0n S6EzuAeyfTentaKooHrVGvi1pyYHn6OnhpsOhp0yLEZVBvCD1TVGFKDjA/yiCHQH WSbzvXb+PZSCq/ltzfrlXRV5hZlnlgPmpBgTdZRT8fLRX1ZwSfyuMhke4/+8/wR6 U44CEhOZ+0+/Ch4YAnG7/8YL5gQmrObwMIGq2hLO5abqA1yO6Y4lC53z/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJRuhTFk9nCjtu36koMg+zcCRmYnMB8GA1UdIwQY MBaAFMYtfKwf+yw/veKEYlvxr0xrrmsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGkxOHJCXzdMRC05NG9SaVdfR3ZUR3V1YXc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82Y2Q1ZmMtNjBjYy00NWRlLWJkOGEt MTU0NGI0NGQ1OWNhLzEvbEc2Rk1XVDJjS08yN2ZxU2d5RDdOd0pHWmljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82Y2Q1ZmMtNjBjYy00NWRlLWJkOGEtMTU0NGI0NGQ1OWNh LzEveGkxOHJCXzdMRC05NG9SaVdfR3ZUR3V1YXc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkx2WMA0G CSqGSIb3DQEBCwUAA4IBAQBDdr8VvX/7fLSmoUrt2Dj9wO740Clkn5jgw+YD7Q+G l7K9tLK+UTWSNDRCyTHAqXOzm6D9MJJaeUvsLX+wfhpBBaxqoPudFVm5g5HYHnjs 3lk0MuPwAz6WGQ1+TQiLIEWziLJNEM5WlQZkXrd+escuNspq0I4mCieGHZxXzdcU 9CBOfTCozQ1cA7eQvzb31QKOyZnNx4of+6ZBNdy1/j557FZarD3/aCzW0uQohVDI Bg0EqZi0LFn+0+qOr5Xwq1/ZDeymUsmUD4PoKBFB1KAvv053iGWDt82rlY8zfQNu A9zWMEOtloKUPosDHWFTr4m8z97raeCAJp08xpjkm6Ar -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:10 2026 by rpki-client