This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/6XbZ2xpI7l6Fwo5nUGJ8LcI12BM.roa File: 6XbZ2xpI7l6Fwo5nUGJ8LcI12BM.roa (raw, json) Hash identifier: oIH5kZRy4QQWIkNsi+TOmhTdqOjqPl4X4VEu5ZY7rrc= Subject key identifier: E9:76:D9:DB:1A:48:EE:5E:85:C2:8E:67:50:62:7C:2D:C2:35:D8:13 Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Certificate serial: 019B7EA6A38C5FC40BC71721FADFD05C3141 Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/6XbZ2xpI7l6Fwo5nUGJ8LcI12BM.roa Signing time: Fri 02 Jan 2026 12:20:08 +0000 ROA not before: Fri 02 Jan 2026 12:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46557 IP address blocks: 157.23.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:a3:8c:5f:c4:0b:c7:17:21:fa:df:d0:5c:31:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Validity Not Before: Jan 2 12:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e976d9db1a48ee5e85c28e6750627c2dc235d813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b6:3d:73:46:d4:83:7d:b0:f9:54:ce:7b:1b: cf:f2:dc:29:e3:ad:68:7a:c8:c3:12:d6:0a:12:22: 28:86:84:be:b6:14:87:56:f7:0b:35:b7:2b:7f:a5: 30:b3:a4:5d:5e:63:89:21:ea:c3:d0:4e:67:39:06: dc:51:f0:59:d3:b3:6f:4b:13:54:7a:c9:00:9a:a9: d1:24:9b:ba:28:f9:28:36:69:80:d6:6b:8f:f9:bb: 19:a3:07:2a:fb:40:f6:af:ea:24:6d:90:b6:1a:b5: fb:28:a5:bd:7a:88:de:4f:36:f0:88:17:49:a9:10: 99:3c:1f:bb:c6:3e:4f:5d:a3:61:29:0f:08:f2:9a: 08:61:d4:30:db:f9:fa:95:f3:77:6e:17:70:ae:c6: 47:41:25:64:f3:2f:ef:54:a4:b9:e8:68:fc:99:4d: cd:6c:95:3a:f9:a5:39:6e:c1:01:6e:42:bf:da:5e: d0:f3:58:44:e3:c4:70:da:4d:ae:3b:f9:82:dd:97: 0f:6e:8e:69:de:d6:17:ce:63:c7:f3:ff:ae:21:57: 3f:69:fe:77:e8:e7:cc:61:68:0b:fe:87:12:63:4d: 86:e0:d1:20:67:f5:a0:1e:11:da:c9:82:46:01:49: 43:03:ce:db:74:6e:0a:7d:82:af:6c:8f:34:95:cb: 5a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:76:D9:DB:1A:48:EE:5E:85:C2:8E:67:50:62:7C:2D:C2:35:D8:13 X509v3 Authority Key Identifier: keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/6XbZ2xpI7l6Fwo5nUGJ8LcI12BM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.23.250.0/24 Signature Algorithm: sha256WithRSAEncryption 32:6a:34:56:e3:b9:54:00:6a:9b:2e:9f:dc:12:5f:7c:90:7a: ef:31:35:14:51:5b:4e:43:59:85:f2:e0:eb:95:d4:17:bb:8a: 62:1e:80:e6:81:7e:61:1b:cd:a2:2e:4e:72:cf:59:aa:d0:bb: e7:f0:66:c2:33:d8:57:9d:91:66:01:2f:c9:5e:e9:5e:91:af: 32:7d:74:dd:ed:69:26:09:b1:f0:0e:ea:97:62:1e:98:27:63: 43:cf:59:48:62:72:b4:13:b4:27:fc:32:69:74:21:76:41:a7: 55:0e:2a:e2:04:97:14:88:76:70:7c:83:79:f4:10:fb:8c:4f: 65:e2:f0:4f:f9:dd:72:a4:3a:18:a0:ea:e6:3d:c0:79:b4:28: 53:8f:47:9a:db:86:6f:ac:c5:44:ba:20:f4:94:ff:f5:e7:79: e8:03:96:df:22:0a:83:d1:55:9f:e2:41:e4:3a:5e:b2:9f:4b: 0d:b6:25:fd:04:ba:fc:2e:d5:39:ae:ca:e4:d0:50:4a:54:ce: 9c:31:e9:d3:df:e3:43:85:9f:ff:cf:77:f3:9a:b5:0f:02:3b: ac:66:bc:87:82:0f:a2:4a:75:1d:60:e3:05:64:c1:bc:df:42: 4f:fa:eb:00:32:d2:42:78:92:6d:b9:b9:d5:6c:9c:9a:d0:0b: b7:d3:12:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pqOMX8QLxxch+t/QXDFBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYTM1Y2Y4YWI2ZjNlYWEyYWViYWRkOWUyMzczZGVjMDg5 MzYyNWUwHhcNMjYwMTAyMTIyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTc2ZDlkYjFhNDhlZTVlODVjMjhlNjc1MDYyN2MyZGMyMzVkODEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrY9c0bUg32w+VTOexvP8twp461o esjDEtYKEiIohoS+thSHVvcLNbcrf6Uws6RdXmOJIerD0E5nOQbcUfBZ07NvSxNU eskAmqnRJJu6KPkoNmmA1muP+bsZowcq+0D2r+okbZC2GrX7KKW9eojeTzbwiBdJ qRCZPB+7xj5PXaNhKQ8I8poIYdQw2/n6lfN3bhdwrsZHQSVk8y/vVKS56Gj8mU3N bJU6+aU5bsEBbkK/2l7Q81hE48Rw2k2uO/mC3ZcPbo5p3tYXzmPH8/+uIVc/af53 6OfMYWgL/ocSY02G4NEgZ/WgHhHayYJGAUlDA87bdG4KfYKvbI80lctaXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOl22dsaSO5ehcKOZ1BifC3CNdgTMB8GA1UdIwQY MBaAFLujXPirbz6qKuut2eI3PewIk2JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMt NTk3YjZlMjQ5MmFiLzEvNlhiWjJ4cEk3bDZGd281blVHSjhMY0kxMkJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMtNTk3YjZlMjQ5MmFi LzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRf6MA0G CSqGSIb3DQEBCwUAA4IBAQAyajRW47lUAGqbLp/cEl98kHrvMTUUUVtOQ1mF8uDr ldQXu4piHoDmgX5hG82iLk5yz1mq0Lvn8GbCM9hXnZFmAS/JXuleka8yfXTd7Wkm CbHwDuqXYh6YJ2NDz1lIYnK0E7Qn/DJpdCF2QadVDiriBJcUiHZwfIN59BD7jE9l 4vBP+d1ypDoYoOrmPcB5tChTj0ea24ZvrMVEuiD0lP/153noA5bfIgqD0VWf4kHk Ol6yn0sNtiX9BLr8LtU5rsrk0FBKVM6cMenT3+NDhZ//z3fzmrUPAjusZryHgg+i SnUdYOMFZMG830JP+usAMtJCeJJtubnVbJya0Au30xKZ -----END CERTIFICATE-----Generated at Sun Jan 25 14:10:31 2026 by rpki-client