This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/VI3zjeHZdDu0ypEH0uILb9Lb4YA.roa File: VI3zjeHZdDu0ypEH0uILb9Lb4YA.roa (raw, json) Hash identifier: i7eNNz6Wv21ngloC0Wp7tGBt5qo7AjOzv44UBAKSHF0= Subject key identifier: 54:8D:F3:8D:E1:D9:74:3B:B4:CA:91:07:D2:E2:0B:6F:D2:DB:E1:80 Certificate issuer: /CN=6a0c867c979871c7adb09f7c6219ba5b0645931c Certificate serial: 019B7BA3637A2DF37322B525288599EE7249 Authority key identifier: 6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/VI3zjeHZdDu0ypEH0uILb9Lb4YA.roa Signing time: Thu 01 Jan 2026 22:17:43 +0000 ROA not before: Thu 01 Jan 2026 22:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62434 IP address blocks: 193.28.130.0/24 maxlen: 24 193.28.131.0/24 maxlen: 24 193.28.132.0/24 maxlen: 24 194.49.134.0/24 maxlen: 24 194.49.171.0/24 maxlen: 24 194.49.177.0/24 maxlen: 24 194.49.178.0/24 maxlen: 24 194.49.205.0/24 maxlen: 24 194.49.207.0/24 maxlen: 24 194.49.218.0/24 maxlen: 24 194.49.220.0/24 maxlen: 24 194.49.221.0/24 maxlen: 24 2001:67c:194c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:63:7a:2d:f3:73:22:b5:25:28:85:99:ee:72:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a0c867c979871c7adb09f7c6219ba5b0645931c Validity Not Before: Jan 1 22:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=548df38de1d9743bb4ca9107d2e20b6fd2dbe180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:89:9c:b3:55:20:c6:89:c1:71:e0:8d:e6:f9: f5:7a:70:d8:0d:32:5f:69:4e:cc:0b:39:cd:df:65: d4:80:02:da:c9:c4:a4:ae:59:9b:98:67:a2:87:52: 65:64:a3:c1:0b:77:98:44:40:70:b8:5d:b8:35:bf: 69:0e:27:65:fa:1d:93:e2:d8:ef:35:37:8c:88:35: 55:dd:f9:a8:3e:21:5e:a8:df:41:f6:f9:c1:90:3a: 25:d7:42:b4:69:9a:17:cc:89:da:29:f4:66:20:b6: 09:24:32:79:ee:66:f6:4b:f1:61:af:45:8e:ee:5c: 45:13:90:d1:a5:d9:e3:2d:f9:c3:b1:3f:fe:a3:1e: ae:04:2f:15:08:53:f9:ed:bd:1f:50:a0:fb:a3:ba: 2c:68:31:5d:a1:cf:e8:f2:5c:76:1a:8b:b2:26:bb: 70:78:29:68:48:d8:2a:92:ec:21:ef:33:09:d8:ef: 87:c0:51:24:59:d5:6e:67:25:f3:81:7f:a1:d0:33: a0:aa:d7:e0:41:9f:58:a8:de:0f:5a:0e:94:69:91: e9:5b:37:8c:74:c5:5b:b5:68:c0:e6:8d:5f:76:2e: 57:9b:9e:dd:24:f4:cb:53:ea:bb:50:95:c2:f5:fe: 5a:21:87:6e:56:36:1f:90:33:1d:73:08:48:59:d2: 67:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:8D:F3:8D:E1:D9:74:3B:B4:CA:91:07:D2:E2:0B:6F:D2:DB:E1:80 X509v3 Authority Key Identifier: keyid:6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/VI3zjeHZdDu0ypEH0uILb9Lb4YA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.28.130.0-193.28.132.255 194.49.134.0/24 194.49.171.0/24 194.49.177.0-194.49.178.255 194.49.205.0/24 194.49.207.0/24 194.49.218.0/24 194.49.220.0/23 IPv6: 2001:67c:194c::/48 Signature Algorithm: sha256WithRSAEncryption 57:cd:ec:1a:d7:9e:28:19:89:00:54:c9:76:57:96:97:8a:9e: a0:d1:86:eb:d1:be:12:1c:9e:f5:c8:b6:ba:f1:fd:60:ab:c4: 90:62:a6:7c:06:a2:dc:97:32:99:91:ef:5a:6c:a8:b3:77:4e: de:3d:00:5c:ef:86:56:96:22:16:57:fb:99:ac:38:dc:30:22: 44:4c:cc:d4:f3:3d:8f:b2:9c:3b:0e:49:1c:10:58:52:a3:bb: 6d:e2:6b:a4:f4:72:8e:67:1f:bf:0d:c9:b1:29:4d:1d:56:46: 14:7c:f1:e9:27:ee:d1:c1:1b:24:46:e1:93:1b:ca:29:d3:ca: 59:7a:9d:d4:97:2c:5a:39:67:37:00:35:f5:cf:e6:03:5c:ad: e5:0f:0b:49:1f:85:ca:db:4b:5f:66:18:47:e3:7b:c1:b5:d0: 1a:e7:6d:3f:88:03:9f:1d:f5:24:03:61:92:8c:59:5c:32:51: e2:be:82:9c:2f:e1:d4:61:f8:6a:5c:ea:42:95:7f:1b:16:06: 01:e7:4b:68:11:52:d2:20:5d:ee:cd:c3:ef:97:3d:a8:7a:5e: 22:b3:6a:22:3c:10:56:93:f1:c9:32:eb:b0:e1:9c:38:3d:40: e6:93:f7:82:97:bc:07:fe:e5:76:74:a5:1a:b1:bd:44:99:86: 15:75:4c:f2 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgISAZt7o2N6LfNzIrUlKIWZ7nJJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMGM4NjdjOTc5ODcxYzdhZGIwOWY3YzYyMTliYTViMDY0 NTkzMWMwHhcNMjYwMTAxMjIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDhkZjM4ZGUxZDk3NDNiYjRjYTkxMDdkMmUyMGI2ZmQyZGJlMTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnImcs1UgxonBceCN5vn1enDYDTJf aU7MCznN32XUgALaycSkrlmbmGeih1JlZKPBC3eYREBwuF24Nb9pDidl+h2T4tjv NTeMiDVV3fmoPiFeqN9B9vnBkDol10K0aZoXzInaKfRmILYJJDJ57mb2S/Fhr0WO 7lxFE5DRpdnjLfnDsT/+ox6uBC8VCFP57b0fUKD7o7osaDFdoc/o8lx2GouyJrtw eCloSNgqkuwh7zMJ2O+HwFEkWdVuZyXzgX+h0DOgqtfgQZ9YqN4PWg6UaZHpWzeM dMVbtWjA5o1fdi5Xm57dJPTLU+q7UJXC9f5aIYduVjYfkDMdcwhIWdJnzQIDAQAB o4ICVDCCAlAwHQYDVR0OBBYEFFSN843h2XQ7tMqRB9LiC2/S2+GAMB8GA1UdIwQY MBaAFGoMhnyXmHHHrbCffGIZulsGRZMcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWd5R2ZKZVljY2V0c0o5OFlobTZXd1pGa3h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8xZTAxZDItMWExZC00ZGMxLWE4ZDUt ZTQ1ODYzZWFjMmI0LzEvVkkzemplSFpkRHUweXBFSDB1SUxiOUxiNFlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8xZTAxZDItMWExZC00ZGMxLWE4ZDUtZTQ1ODYzZWFjMmI0 LzEvYWd5R2ZKZVljY2V0c0o5OFlobTZXd1pGa3h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBGBAIAATBAMAwDBAHBHIID BADBHIQDBADCMYYDBADCMaswDAMEAMIxsQMEAMIxsgMEAMIxzQMEAMIxzwMEAMIx 2gMEAcIx3DAPBAIAAjAJAwcAIAEGfBlMMA0GCSqGSIb3DQEBCwUAA4IBAQBXzewa 154oGYkAVMl2V5aXip6g0Ybr0b4SHJ71yLa68f1gq8SQYqZ8BqLclzKZke9abKiz d07ePQBc74ZWliIWV/uZrDjcMCJETMzU8z2Pspw7DkkcEFhSo7tt4muk9HKOZx+/ DcmxKU0dVkYUfPHpJ+7RwRskRuGTG8op08pZep3UlyxaOWc3ADX1z+YDXK3lDwtJ H4XK20tfZhhH43vBtdAa520/iAOfHfUkA2GSjFlcMlHivoKcL+HUYfhqXOpClX8b FgYB50toEVLSIF3uzcPvlz2oel4is2oiPBBWk/HJMuuw4Zw4PUDmk/eCl7wH/uV2 dKUasb1EmYYVdUzy -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:22 2026 by rpki-client