This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/b9UaPnV67jOsAzGdtv8uKu-bNPQ.roa File: b9UaPnV67jOsAzGdtv8uKu-bNPQ.roa (raw, json) Hash identifier: ahTYgT5//xP68fFq93yMhJHhiYRSn6qSgnwTPWrcJ2A= Subject key identifier: 6F:D5:1A:3E:75:7A:EE:33:AC:03:31:9D:B6:FF:2E:2A:EF:9B:34:F4 Certificate issuer: /CN=6e542cede53a0c57145a6aff2f58196f02d4a12e Certificate serial: 019B7CECCA2E118DD3381E21D000326962F0 Authority key identifier: 6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/b9UaPnV67jOsAzGdtv8uKu-bNPQ.roa Signing time: Fri 02 Jan 2026 04:17:31 +0000 ROA not before: Fri 02 Jan 2026 04:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207327 IP address blocks: 195.226.218.0/24 maxlen: 24 2a10:2d80::/29 maxlen: 56 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:ca:2e:11:8d:d3:38:1e:21:d0:00:32:69:62:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e542cede53a0c57145a6aff2f58196f02d4a12e Validity Not Before: Jan 2 04:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fd51a3e757aee33ac03319db6ff2e2aef9b34f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8f:26:ea:9a:c7:48:1e:d3:da:63:c6:96:4c: 2e:7f:1a:4a:5c:28:96:d8:dd:cf:05:ea:84:38:f4: 8c:a2:5e:22:fd:82:00:0b:5d:7f:52:cb:c8:f6:e2: e9:de:5d:eb:e7:b0:a6:f4:d9:d0:a3:5d:11:64:4b: eb:0b:8c:b5:4d:6e:0b:a7:17:e0:4b:d9:92:06:1b: 6e:dd:3c:a8:db:b0:14:a6:7e:58:9f:6c:6f:2e:78: 36:db:ba:d3:da:50:a5:41:c3:8a:f1:af:e8:11:a5: 6c:27:2a:d2:30:f3:8b:87:25:5d:3b:8b:8e:83:f9: 90:dc:8b:b3:67:e3:cb:c5:00:30:ad:10:c1:b0:54: 7c:54:80:92:13:8e:11:42:28:59:38:cf:2b:ab:af: b9:bf:6f:54:72:14:ab:6a:99:e1:a3:83:b1:c8:5c: 0d:0f:06:60:12:71:1b:df:33:b2:67:db:7a:7b:e3: 89:7e:ae:d6:96:04:01:fe:b4:96:9d:ff:cb:3f:85: 4d:32:63:1a:be:a5:8f:f7:04:52:8f:a6:3f:0f:cf: 78:eb:ba:34:f5:ec:ec:c1:74:5f:e5:f8:a5:62:fa: 93:59:21:28:da:91:0a:b7:2c:ca:9c:4c:f1:87:40: 94:7a:78:52:7d:fe:e3:06:0c:dd:b5:6e:0d:8d:39: 80:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D5:1A:3E:75:7A:EE:33:AC:03:31:9D:B6:FF:2E:2A:EF:9B:34:F4 X509v3 Authority Key Identifier: keyid:6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/b9UaPnV67jOsAzGdtv8uKu-bNPQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.226.218.0/24 IPv6: 2a10:2d80::/29 Signature Algorithm: sha256WithRSAEncryption 44:80:65:d2:e5:31:05:17:99:98:d7:5d:f2:cc:a0:ef:e1:fe: 57:d0:ec:e7:b0:48:f6:ea:68:03:c0:f7:e7:cf:8d:7f:d8:45: 4a:bc:c3:5a:06:d9:94:82:6c:7a:26:cd:de:fd:90:3a:b6:f7: 0c:fc:9e:0a:6d:1c:0d:ca:3b:48:fc:94:6d:12:bd:17:d5:1d: 6d:a9:b5:7b:ed:78:30:d3:62:3e:db:2f:4a:a8:2c:a5:34:ac: 04:f2:2e:71:ee:78:a3:e3:0f:64:16:e4:e3:0f:78:3e:52:20: 0c:f5:cc:16:d9:fd:d0:31:1e:b5:55:25:ac:25:79:7d:b9:8f: 29:5e:c3:e0:ed:1e:ba:1f:93:ff:a0:71:40:67:21:04:fc:af: f5:9a:60:d6:a1:d6:4b:3b:e3:bd:4a:aa:ca:21:74:41:e8:e2: 8c:cd:21:b1:28:e7:ba:69:54:e2:79:3b:9b:df:fe:77:de:ec: 82:24:d7:91:d6:93:3f:50:7d:c7:b1:b0:15:9d:22:20:ea:e4: 3c:04:eb:f1:c6:4b:d1:f8:21:14:64:62:04:10:5f:5f:f6:2c: 3b:30:07:01:e5:80:56:0c:e8:77:18:12:8e:0e:53:b5:98:47: d2:33:81:a5:68:2a:ec:ee:59:3b:fc:fe:be:15:35:71:1d:23: 97:0a:04:81 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87MouEY3TOB4h0AAyaWLwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNTQyY2VkZTUzYTBjNTcxNDVhNmFmZjJmNTgxOTZmMDJk NGExMmUwHhcNMjYwMTAyMDQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmQ1MWEzZTc1N2FlZTMzYWMwMzMxOWRiNmZmMmUyYWVmOWIzNGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA648m6prHSB7T2mPGlkwufxpKXCiW 2N3PBeqEOPSMol4i/YIAC11/UsvI9uLp3l3r57Cm9NnQo10RZEvrC4y1TW4Lpxfg S9mSBhtu3Tyo27AUpn5Yn2xvLng227rT2lClQcOK8a/oEaVsJyrSMPOLhyVdO4uO g/mQ3IuzZ+PLxQAwrRDBsFR8VICSE44RQihZOM8rq6+5v29UchSrapnho4OxyFwN DwZgEnEb3zOyZ9t6e+OJfq7WlgQB/rSWnf/LP4VNMmMavqWP9wRSj6Y/D89467o0 9ezswXRf5filYvqTWSEo2pEKtyzKnEzxh0CUenhSff7jBgzdtW4NjTmAuQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFG/VGj51eu4zrAMxnbb/LirvmzT0MB8GA1UdIwQY MBaAFG5ULO3lOgxXFFpq/y9YGW8C1KEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmxRczdlVTZERmNVV21yX0wxZ1pid0xVb1M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zMjE2OWEtNGE1YS00MTFiLWIwMDYt MzE4YzcxYjExOWY3LzEvYjlVYVBuVjY3ak9zQXpHZHR2OHVLdS1iTlBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8zMjE2OWEtNGE1YS00MTFiLWIwMDYtMzE4YzcxYjExOWY3 LzEvYmxRczdlVTZERmNVV21yX0wxZ1pid0xVb1M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAw+LaMA0E AgACMAcDBQMqEC2AMA0GCSqGSIb3DQEBCwUAA4IBAQBEgGXS5TEFF5mY113yzKDv 4f5X0OznsEj26mgDwPfnz41/2EVKvMNaBtmUgmx6Js3e/ZA6tvcM/J4KbRwNyjtI /JRtEr0X1R1tqbV77Xgw02I+2y9KqCylNKwE8i5x7nij4w9kFuTjD3g+UiAM9cwW 2f3QMR61VSWsJXl9uY8pXsPg7R66H5P/oHFAZyEE/K/1mmDWodZLO+O9SqrKIXRB 6OKMzSGxKOe6aVTieTub3/533uyCJNeR1pM/UH3HsbAVnSIg6uQ8BOvxxkvR+CEU ZGIEEF9f9iw7MAcB5YBWDOh3GBKODlO1mEfSM4GlaCrs7lk7/P6+FTVxHSOXCgSB -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:18 2026 by rpki-client