This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/6Lv0ELrWKZzM2WUhjrrfSxrLv5I.roa File: 6Lv0ELrWKZzM2WUhjrrfSxrLv5I.roa (raw, json) Hash identifier: b+tPMLvT0wTQ8KNZFO7LFZXenP25HBtSk8cAgN48xuk= Subject key identifier: E8:BB:F4:10:BA:D6:29:9C:CC:D9:65:21:8E:BA:DF:4B:1A:CB:BF:92 Certificate issuer: /CN=ba68595997900ded300e9925709da627e93f363a Certificate serial: 019B7B355D8D7EEB05396C3D73C82AE8431A Authority key identifier: BA:68:59:59:97:90:0D:ED:30:0E:99:25:70:9D:A6:27:E9:3F:36:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/6Lv0ELrWKZzM2WUhjrrfSxrLv5I.roa Signing time: Thu 01 Jan 2026 20:17:33 +0000 ROA not before: Thu 01 Jan 2026 20:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3215 IP address blocks: 194.5.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:5d:8d:7e:eb:05:39:6c:3d:73:c8:2a:e8:43:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba68595997900ded300e9925709da627e93f363a Validity Not Before: Jan 1 20:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8bbf410bad6299cccd965218ebadf4b1acbbf92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ed:bf:73:d6:1f:bf:9a:59:f0:59:30:71:16: 86:19:9c:f3:ca:5e:e8:e7:29:32:6b:31:af:60:ef: 17:ae:3b:21:49:1f:50:25:e1:4c:e6:04:7c:e7:f4: 68:99:21:86:fd:22:4b:bb:b8:15:bd:d4:2b:32:dc: 1d:67:1f:71:0c:0f:b8:9a:a1:b1:3b:d3:98:13:29: dd:cd:e1:f5:4d:f5:58:4f:4f:1c:5a:81:d0:7d:22: 0f:e7:dd:4d:9f:b0:ba:86:80:bb:13:1b:4b:6a:b6: 12:6d:1b:24:a3:19:c5:50:a4:eb:3e:35:fa:44:5e: 6a:8e:2c:7e:39:77:25:cb:7b:72:a9:06:04:f3:47: 1c:3a:75:19:67:74:66:2e:f0:0d:8f:8d:ce:81:1e: 10:d8:d6:85:84:f8:be:c9:92:db:d3:c0:8d:3e:d6: da:a8:8a:03:ac:f9:53:c9:6f:35:af:5c:80:3c:85: 45:47:a2:9f:a4:c6:2d:6e:b7:4e:44:1d:5a:4f:b7: db:f6:b5:2c:40:21:8b:6a:55:4a:68:6d:43:54:76: 25:09:b2:c6:72:9b:3f:1a:8c:d5:96:e1:22:2f:d7: 97:08:8a:d4:9a:c5:e2:6e:9c:f3:6e:41:52:8f:ac: f0:f2:8c:e7:21:8d:32:80:b3:fa:cd:d2:16:09:75: 86:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BB:F4:10:BA:D6:29:9C:CC:D9:65:21:8E:BA:DF:4B:1A:CB:BF:92 X509v3 Authority Key Identifier: keyid:BA:68:59:59:97:90:0D:ED:30:0E:99:25:70:9D:A6:27:E9:3F:36:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/6Lv0ELrWKZzM2WUhjrrfSxrLv5I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.5.189.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:41:32:8f:51:8f:a9:18:62:b1:3b:54:bd:c1:da:a8:a5:b7: a4:93:51:80:2b:1a:68:b3:31:aa:3d:85:45:97:25:ac:0c:7e: f8:e6:cc:7d:53:20:a0:41:ee:a1:65:98:19:01:7e:45:b7:e5: 24:33:23:46:11:9c:0e:80:e3:70:11:5b:0c:b5:44:f0:4b:e3: ff:41:a0:46:03:92:f1:38:25:df:74:1b:ae:47:a2:d8:dd:b2: fa:20:9e:6b:87:a5:7d:e2:8e:42:74:82:21:be:0f:f4:e0:1f: 70:91:e5:72:ed:4c:5e:22:46:90:f6:b3:19:c2:63:3f:e6:eb: f1:c1:5a:e7:7a:78:83:73:12:9c:22:42:79:a7:ee:cc:89:9a: f2:60:36:69:22:ec:ef:42:05:1e:2c:df:5e:47:3d:6a:82:17: 75:c7:ff:77:43:db:1b:34:1c:10:4d:cf:12:68:76:fc:70:76: 3c:59:67:e1:55:4e:59:ac:2e:18:92:2d:03:08:50:bd:59:08: 53:ba:57:65:12:76:38:5c:44:bf:55:32:0b:f1:84:db:dc:a4: e2:78:92:e5:54:8b:0d:38:9b:3e:87:fa:b9:df:59:d2:6c:25: b3:99:37:d6:c7:93:a3:d1:f7:c7:19:fe:9b:48:d2:c2:29:4d: 4e:74:ee:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NV2NfusFOWw9c8gq6EMaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNjg1OTU5OTc5MDBkZWQzMDBlOTkyNTcwOWRhNjI3ZTkz ZjM2M2EwHhcNMjYwMTAxMjAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGJiZjQxMGJhZDYyOTljY2NkOTY1MjE4ZWJhZGY0YjFhY2JiZjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+2/c9Yfv5pZ8FkwcRaGGZzzyl7o 5ykyazGvYO8XrjshSR9QJeFM5gR85/RomSGG/SJLu7gVvdQrMtwdZx9xDA+4mqGx O9OYEyndzeH1TfVYT08cWoHQfSIP591Nn7C6hoC7ExtLarYSbRskoxnFUKTrPjX6 RF5qjix+OXcly3tyqQYE80ccOnUZZ3RmLvANj43OgR4Q2NaFhPi+yZLb08CNPtba qIoDrPlTyW81r1yAPIVFR6KfpMYtbrdORB1aT7fb9rUsQCGLalVKaG1DVHYlCbLG cps/GozVluEiL9eXCIrUmsXibpzzbkFSj6zw8oznIY0ygLP6zdIWCXWGZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOi79BC61imczNllIY6630say7+SMB8GA1UdIwQY MBaAFLpoWVmXkA3tMA6ZJXCdpifpPzY6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW1oWldaZVFEZTB3RHBrbGNKMm1KLWtfTmpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80NzJhNGQtZmNhZS00NDU0LTk5Njct MDJkZWQ5YjJlMGM5LzEvNkx2MEVMcldLWnpNMldVaGpycmZTeHJMdjVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS80NzJhNGQtZmNhZS00NDU0LTk5NjctMDJkZWQ5YjJlMGM5 LzEvdW1oWldaZVFEZTB3RHBrbGNKMm1KLWtfTmpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgW9MA0G CSqGSIb3DQEBCwUAA4IBAQAsQTKPUY+pGGKxO1S9wdqopbekk1GAKxposzGqPYVF lyWsDH745sx9UyCgQe6hZZgZAX5Ft+UkMyNGEZwOgONwEVsMtUTwS+P/QaBGA5Lx OCXfdBuuR6LY3bL6IJ5rh6V94o5CdIIhvg/04B9wkeVy7UxeIkaQ9rMZwmM/5uvx wVrneniDcxKcIkJ5p+7MiZryYDZpIuzvQgUeLN9eRz1qghd1x/93Q9sbNBwQTc8S aHb8cHY8WWfhVU5ZrC4Yki0DCFC9WQhTuldlEnY4XES/VTIL8YTb3KTieJLlVIsN OJs+h/q531nSbCWzmTfWx5Oj0ffHGf6bSNLCKU1OdO4J -----END CERTIFICATE-----Generated at Sun Jan 25 16:40:31 2026 by rpki-client