This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/6kaURhGxoUlWaOePC0NyfU_mnTo.roa File: 6kaURhGxoUlWaOePC0NyfU_mnTo.roa (raw, json) Hash identifier: MvVnYViOi0T2AU1MS+YLAjvbdEso3zsR9mLbjNrHn1U= Subject key identifier: EA:46:94:46:11:B1:A1:49:56:68:E7:8F:0B:43:72:7D:4F:E6:9D:3A Certificate issuer: /CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1 Certificate serial: 019B79ED49AD31479FD79BC7950ACFE83DC2 Authority key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/6kaURhGxoUlWaOePC0NyfU_mnTo.roa Signing time: Thu 01 Jan 2026 14:19:12 +0000 ROA not before: Thu 01 Jan 2026 14:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25019 IP address blocks: 159.0.0.0/16 maxlen: 16 159.0.0.0/20 maxlen: 20 159.0.16.0/20 maxlen: 20 159.0.32.0/20 maxlen: 20 159.0.48.0/20 maxlen: 20 159.0.64.0/20 maxlen: 20 159.0.80.0/20 maxlen: 20 159.0.96.0/20 maxlen: 20 159.0.112.0/20 maxlen: 20 159.0.160.0/20 maxlen: 20 159.0.192.0/20 maxlen: 20 159.0.208.0/20 maxlen: 20 159.0.224.0/20 maxlen: 20 159.0.240.0/20 maxlen: 20 185.139.8.0/22 maxlen: 22 212.215.128.0/17 maxlen: 17 212.215.128.0/18 maxlen: 18 212.215.137.0/24 maxlen: 24 212.215.160.0/20 maxlen: 20 212.215.240.0/22 maxlen: 22 212.215.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:49:ad:31:47:9f:d7:9b:c7:95:0a:cf:e8:3d:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1 Validity Not Before: Jan 1 14:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea46944611b1a1495668e78f0b43727d4fe69d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f8:9b:93:9a:89:b4:6a:7d:3c:3e:15:d9:5b: 8a:de:21:71:c3:5c:f1:71:9f:a3:26:da:73:0f:a3: cf:9c:da:85:f1:2f:b5:07:2d:5a:e2:21:b3:28:4f: 5c:f4:c4:6d:41:06:72:53:5b:c1:2c:21:2b:4d:01: b4:2b:f7:ba:4c:93:bb:62:e8:8d:d4:71:4a:47:f7: 71:f1:6a:79:82:e3:8b:b3:59:e9:24:cc:b4:7f:1a: fa:b3:bc:33:6c:e4:95:d9:0b:a3:4f:a4:33:bd:d4: 2b:78:34:92:72:87:14:64:08:ec:7b:8e:c5:41:70: 11:aa:a9:0c:7d:5d:a3:de:01:b4:d0:b4:32:6c:53: f5:33:2b:58:45:cd:e1:30:33:ea:4b:29:04:f0:e8: ab:35:e7:40:af:66:b5:eb:d8:2d:59:87:40:cd:07: 11:87:f1:78:76:ed:e6:3d:82:b7:58:27:36:9a:3f: a7:a2:19:6b:47:3c:47:a8:63:8c:0c:b8:12:6f:f7: 21:da:a7:ab:59:8a:8a:f7:03:6a:95:e7:9f:7a:3d: 9f:e0:fd:b0:c5:79:06:fe:e5:d9:3c:eb:48:60:75: 02:d3:4c:31:9a:fe:57:e5:e4:d0:85:8a:ca:02:cb: 96:02:88:95:b7:99:27:ea:18:56:ca:57:3b:88:43: 8c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:46:94:46:11:B1:A1:49:56:68:E7:8F:0B:43:72:7D:4F:E6:9D:3A X509v3 Authority Key Identifier: keyid:3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/6kaURhGxoUlWaOePC0NyfU_mnTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.0.0.0/16 185.139.8.0/22 212.215.128.0/17 Signature Algorithm: sha256WithRSAEncryption 9d:83:6c:c6:0c:e6:ca:f1:1c:f0:ff:73:bf:15:8f:1b:fd:ea: be:21:ec:8e:21:1d:e8:9f:09:ad:cb:99:3f:33:74:f5:5d:15: b7:5e:ed:56:73:fa:d8:ce:e4:b1:d3:ed:c0:c4:a7:4b:45:69: 86:0c:9a:6b:20:2a:02:22:ff:a1:4c:6e:b7:82:2f:43:dd:42: b0:6e:1e:f2:2c:8d:ed:d6:b9:57:ea:da:ca:d6:3d:33:2f:5f: eb:11:af:36:05:52:68:46:d7:c9:02:0f:bc:d5:6f:cc:85:b3: 6b:35:af:6e:51:10:9f:dc:79:ef:21:5e:89:c1:fe:a1:37:56: 91:df:c7:6d:9e:09:ce:52:53:09:46:f6:07:b9:3e:b0:80:6c: 93:e2:57:46:5f:c3:ab:ce:fd:d3:ec:47:24:04:c9:9b:c0:e1: f0:4a:86:f1:b5:82:e1:02:3a:c3:cb:fe:22:bd:73:2f:15:bc: 6f:62:ff:14:23:a3:a4:b1:95:26:4d:85:4e:49:03:9e:a3:e9: 77:13:68:5d:f8:99:78:b6:35:ae:6d:23:2e:d5:0c:cc:4b:0f: 0d:ab:2b:8d:c6:34:89:6c:a3:78:4b:81:6f:cb:50:84:55:42: ab:4f:ff:f9:44:6a:27:19:d5:36:cb:8d:e8:05:f5:4c:8f:3f: 72:6a:69:c5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt57UmtMUef15vHlQrP6D3CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiY2NiYzcwZTE4YjZjNjllNTNlZjUyYTVlOTI1ZTVmNGYw Y2RjYzEwHhcNMjYwMTAxMTQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTQ2OTQ0NjExYjFhMTQ5NTY2OGU3OGYwYjQzNzI3ZDRmZTY5ZDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfibk5qJtGp9PD4V2VuK3iFxw1zx cZ+jJtpzD6PPnNqF8S+1By1a4iGzKE9c9MRtQQZyU1vBLCErTQG0K/e6TJO7YuiN 1HFKR/dx8Wp5guOLs1npJMy0fxr6s7wzbOSV2QujT6QzvdQreDSScocUZAjse47F QXARqqkMfV2j3gG00LQybFP1MytYRc3hMDPqSykE8OirNedAr2a169gtWYdAzQcR h/F4du3mPYK3WCc2mj+nohlrRzxHqGOMDLgSb/ch2qerWYqK9wNqleefej2f4P2w xXkG/uXZPOtIYHUC00wxmv5X5eTQhYrKAsuWAoiVt5kn6hhWylc7iEOM5wIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFOpGlEYRsaFJVmjnjwtDcn1P5p06MB8GA1UdIwQY MBaAFDvMvHDhi2xp5T71Kl6SXl9PDNzBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzh5OGNPR0xiR25sUHZVcVhwSmVYMDhNM01FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84YTQ3NzMtYTJiZC00MGQyLWJmYzgt YmJlNjBlYTIyMmM1LzEvNmthVVJoR3hvVWxXYU9lUEMwTnlmVV9tblRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS84YTQ3NzMtYTJiZC00MGQyLWJmYzgtYmJlNjBlYTIyMmM1 LzEvTzh5OGNPR0xiR25sUHZVcVhwSmVYMDhNM01FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAATARAwMAnwADBAK5 iwgDBAfU14AwDQYJKoZIhvcNAQELBQADggEBAJ2DbMYM5srxHPD/c78Vjxv96r4h 7I4hHeifCa3LmT8zdPVdFbde7VZz+tjO5LHT7cDEp0tFaYYMmmsgKgIi/6FMbreC L0PdQrBuHvIsje3WuVfq2srWPTMvX+sRrzYFUmhG18kCD7zVb8yFs2s1r25REJ/c ee8hXonB/qE3VpHfx22eCc5SUwlG9ge5PrCAbJPiV0Zfw6vO/dPsRyQEyZvA4fBK hvG1guECOsPL/iK9cy8VvG9i/xQjo6SxlSZNhU5JA56j6XcTaF34mXi2Na5tIy7V DMxLDw2rK43GNIlso3hLgW/LUIRVQqtP//lEaicZ1TbLjegF9UyPP3JqacU= -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:54 2026 by rpki-client