This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/nO7tTpvdnuv_RiW2D0qie4z-wLk.roa File: nO7tTpvdnuv_RiW2D0qie4z-wLk.roa (raw, json) Hash identifier: vFl54J4nFHINYVebftYlSvYVnatB6wruXNKfs9nR74M= Subject key identifier: 9C:EE:ED:4E:9B:DD:9E:EB:FF:46:25:B6:0F:4A:A2:7B:8C:FE:C0:B9 Certificate issuer: /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a Certificate serial: 019B7A5B4BA56FCA8D9B04FB2F317791B770 Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/nO7tTpvdnuv_RiW2D0qie4z-wLk.roa Signing time: Thu 01 Jan 2026 16:19:21 +0000 ROA not before: Thu 01 Jan 2026 16:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47902 IP address blocks: 84.247.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:4b:a5:6f:ca:8d:9b:04:fb:2f:31:77:91:b7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a Validity Not Before: Jan 1 16:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ceeed4e9bdd9eebff4625b60f4aa27b8cfec0b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b8:2e:e6:4d:92:a6:e4:b0:93:1a:d3:5c:c8: 14:8b:45:db:2c:2e:9b:be:1e:53:81:dd:3a:a3:c4: a3:86:6f:36:b8:b4:4c:ec:df:40:76:aa:7b:47:f8: 09:59:63:e6:ec:1a:38:14:ea:f1:c7:d9:df:e4:a5: 67:16:d2:e5:8c:da:1c:17:74:18:51:46:3a:81:b2: 30:1d:d4:0e:72:c9:75:2e:56:e4:97:93:c7:2c:68: cf:d1:de:2f:e4:21:a8:18:8a:79:ae:9d:b6:09:98: b5:f4:19:1b:d6:3b:66:dc:e8:8c:0f:54:67:50:63: 11:9e:3e:bf:f8:a9:8e:1e:1b:f0:d3:83:44:6f:51: 7b:8c:fb:fd:ef:78:5b:e9:14:2c:4b:9a:7b:3e:3d: 2e:60:ef:be:f2:35:2b:e8:88:ee:44:f2:23:41:0b: 20:c8:4b:28:20:9e:77:64:cd:8e:87:02:17:8f:dd: ab:9b:e7:96:e5:2d:ec:43:f8:af:cc:61:1a:a0:e7: ab:c0:97:31:31:90:de:aa:48:31:a7:76:57:26:d4: 36:32:bb:23:35:39:d4:d6:5d:c9:df:97:74:e2:6c: c9:8a:71:38:2e:33:cb:f2:22:dd:dd:4f:37:07:59: ea:d8:c8:e4:c2:03:0f:8d:89:20:64:7c:93:16:2f: a9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:EE:ED:4E:9B:DD:9E:EB:FF:46:25:B6:0F:4A:A2:7B:8C:FE:C0:B9 X509v3 Authority Key Identifier: keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/nO7tTpvdnuv_RiW2D0qie4z-wLk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.247.192.0/20 Signature Algorithm: sha256WithRSAEncryption 64:96:22:36:b1:82:50:be:6f:b2:a5:d7:4e:f6:04:4f:fb:cb: 65:12:98:86:45:63:1d:87:a1:b5:f3:f6:d4:34:be:52:34:16: c8:ac:29:d3:2c:4b:58:a3:ce:5d:a0:d7:45:e5:2e:4d:e0:0c: cf:e8:ae:bf:89:c5:0c:9b:17:30:89:f3:69:b8:dc:74:eb:54: c7:e1:fd:e8:8c:f5:67:73:8e:29:05:73:d1:2c:93:d2:b7:42: 3a:9d:ac:8c:61:2b:ad:a7:29:af:d5:c0:90:d3:c7:5e:12:6e: 21:69:00:fb:5e:f0:63:e8:67:6c:ad:da:8f:72:e3:cb:94:f7: f4:5d:ad:a5:45:f8:e4:96:02:d8:db:c0:73:fe:13:1e:28:75: 57:63:e3:19:37:3e:f5:7e:00:5a:6f:31:08:49:37:91:e0:97: 4e:e5:c4:9c:a4:95:9e:ad:a6:35:ca:07:b7:68:84:a4:dd:bd: 47:de:55:92:77:38:54:0a:d6:0d:a6:3c:c8:b5:83:7d:85:95: bf:72:13:df:4c:53:6e:73:81:17:4f:7c:bd:93:33:a4:ac:23: 5a:76:96:ed:c3:51:0f:c3:10:cc:41:df:93:59:b8:d0:45:30: 6b:48:eb:9f:8e:d1:69:6b:00:81:2c:ed:e2:a5:2d:20:46:e6: 24:bf:53:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W0ulb8qNmwT7LzF3kbdwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ZWVhMTBhZmFjZjNhOWMyNmVhMWIxZWM0ODhlOTU1ZTRk ZmEwNmEwHhcNMjYwMTAxMTYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2VlZWQ0ZTliZGQ5ZWViZmY0NjI1YjYwZjRhYTI3YjhjZmVjMGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbgu5k2SpuSwkxrTXMgUi0XbLC6b vh5Tgd06o8Sjhm82uLRM7N9Adqp7R/gJWWPm7Bo4FOrxx9nf5KVnFtLljNocF3QY UUY6gbIwHdQOcsl1Llbkl5PHLGjP0d4v5CGoGIp5rp22CZi19Bkb1jtm3OiMD1Rn UGMRnj6/+KmOHhvw04NEb1F7jPv973hb6RQsS5p7Pj0uYO++8jUr6IjuRPIjQQsg yEsoIJ53ZM2OhwIXj92rm+eW5S3sQ/ivzGEaoOerwJcxMZDeqkgxp3ZXJtQ2Mrsj NTnU1l3J35d04mzJinE4LjPL8iLd3U83B1nq2MjkwgMPjYkgZHyTFi+pSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJzu7U6b3Z7r/0Yltg9KonuM/sC5MB8GA1UdIwQY MBaAFPbuoQr6zzqcJuobHsSI6VXk36BqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXU2aEN2clBPcHdtNmhzZXhJanBWZVRmb0dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS82ZjU3NDYtYjQwNi00YzA1LTk3NDEt NTRkOGY2YjA2YjgzLzEvbk83dFRwdmRudXZfUmlXMkQwcWllNHotd0xrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS82ZjU3NDYtYjQwNi00YzA1LTk3NDEtNTRkOGY2YjA2Yjgz LzEvOXU2aEN2clBPcHdtNmhzZXhJanBWZVRmb0dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEVPfAMA0G CSqGSIb3DQEBCwUAA4IBAQBkliI2sYJQvm+ypddO9gRP+8tlEpiGRWMdh6G18/bU NL5SNBbIrCnTLEtYo85doNdF5S5N4AzP6K6/icUMmxcwifNpuNx061TH4f3ojPVn c44pBXPRLJPSt0I6nayMYSutpymv1cCQ08deEm4haQD7XvBj6GdsrdqPcuPLlPf0 Xa2lRfjklgLY28Bz/hMeKHVXY+MZNz71fgBabzEISTeR4JdO5cScpJWeraY1yge3 aISk3b1H3lWSdzhUCtYNpjzItYN9hZW/chPfTFNuc4EXT3y9kzOkrCNadpbtw1EP wxDMQd+TWbjQRTBrSOufjtFpawCBLO3ipS0gRuYkv1Ml -----END CERTIFICATE-----Generated at Mon Jan 26 15:19:31 2026 by rpki-client