This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/t__6136takHeUvRHDalHrBzgXQY.roa File: t__6136takHeUvRHDalHrBzgXQY.roa (raw, json) Hash identifier: WD8+WaJGfN5reVo0Qs2GlcEq7iUcR3GPBrBgQRmS4a8= Subject key identifier: B7:FF:FA:D7:7E:AD:6A:41:DE:52:F4:47:0D:A9:47:AC:1C:E0:5D:06 Certificate issuer: /CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606 Certificate serial: 019B7EA6C40CDFAB2D6D5B3BB6195C162B64 Authority key identifier: 7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/t__6136takHeUvRHDalHrBzgXQY.roa Signing time: Fri 02 Jan 2026 12:20:16 +0000 ROA not before: Fri 02 Jan 2026 12:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6848 IP address blocks: 193.149.240.0/22 maxlen: 22 193.149.244.0/23 maxlen: 23 193.149.246.0/24 maxlen: 24 193.149.247.0/24 maxlen: 24 193.149.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c4:0c:df:ab:2d:6d:5b:3b:b6:19:5c:16:2b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606 Validity Not Before: Jan 2 12:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7fffad77ead6a41de52f4470da947ac1ce05d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8f:c2:1c:06:31:ed:9b:64:a2:63:0c:ad:13: cb:fe:ee:54:fa:f6:8f:b1:e7:04:7c:9c:b9:e4:b3: 8f:07:6a:1b:f6:d8:dd:d0:33:2c:b1:94:67:4b:80: b6:00:ca:b7:ca:2e:bb:b4:d6:f5:42:1e:5c:b0:e2: 95:59:d4:a0:98:b7:81:d7:5c:ca:90:d0:3a:1c:cc: 20:3d:1a:db:2a:7e:54:06:8d:94:34:98:c0:c6:4f: b9:08:71:54:2b:4c:6e:73:64:46:7b:a9:25:3d:1b: ac:23:f7:d0:49:8d:31:d7:b1:7c:f4:e5:b6:4c:b2: 2d:3e:48:81:ba:b4:00:ff:26:db:c2:b2:e6:60:13: cb:f5:6b:4f:a3:17:23:be:49:3e:a2:10:26:4e:a4: dd:ef:19:58:15:1d:3d:56:90:81:96:de:8c:02:69: 75:7f:63:cc:48:b1:86:03:e6:a5:65:de:67:2b:52: 95:d8:db:5b:9d:4a:76:9c:7e:ac:f1:64:5c:a7:cf: 83:29:69:4a:df:47:e5:35:75:cb:f8:bf:e0:08:91: 3a:79:83:f9:37:77:ef:0a:04:17:5e:20:2b:4c:3c: 38:83:c7:b1:ac:51:17:ad:09:c9:ff:bb:39:28:49: 86:75:42:e1:69:8f:ae:81:02:45:36:f2:b3:4f:e1: 67:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FF:FA:D7:7E:AD:6A:41:DE:52:F4:47:0D:A9:47:AC:1C:E0:5D:06 X509v3 Authority Key Identifier: keyid:7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/t__6136takHeUvRHDalHrBzgXQY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.149.240.0/20 Signature Algorithm: sha256WithRSAEncryption 94:10:c9:62:0b:89:64:70:5b:20:90:a2:bd:b4:55:5f:23:ad: d4:31:ee:7c:42:ff:b5:6f:26:59:32:ae:1a:6c:68:69:a6:0d: d5:24:b9:30:43:8a:18:36:14:f2:60:86:62:6c:aa:ad:f6:38: 3e:d1:7c:88:4e:d0:2d:05:fa:05:3c:3a:0c:29:b9:3b:8a:75: 3b:de:4d:44:71:61:87:44:ee:3d:8a:c4:94:66:39:67:6d:b9: 54:54:02:82:09:3f:7f:87:4a:dc:c9:9a:2f:a0:6d:ab:e3:25: 24:d4:ab:6b:ac:57:df:c8:fe:fa:9e:3f:c9:ef:2f:a0:55:d5: 11:69:ca:07:f2:90:6e:1a:8d:17:17:db:47:20:f7:ed:02:b1: ca:4c:28:c4:b2:4d:ad:15:a4:eb:93:de:0a:9a:7f:a4:85:91: 4e:60:2d:21:15:63:63:00:48:22:9b:ef:4b:68:ba:9c:cb:e3: 5b:1b:03:09:d1:94:ad:30:55:30:7e:5e:70:15:5b:59:0e:1b: 78:c9:e9:ea:4a:66:76:6e:ae:3c:23:ff:60:03:58:b0:b4:68: b6:a7:2b:bd:c1:20:4a:36:fa:13:59:28:38:8b:4f:52:ff:e6: cb:9f:82:3a:f6:29:42:cd:4c:60:ed:a5:81:b9:19:11:79:8c: db:81:0b:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+psQM36stbVs7thlcFitkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNWFjODFiYmNjZjg1MmYyMmFjOGVkNTJkMmU5MmRiMzFk OGQ2MDYwHhcNMjYwMTAyMTIyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2ZmZmFkNzdlYWQ2YTQxZGU1MmY0NDcwZGE5NDdhYzFjZTA1ZDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Y/CHAYx7ZtkomMMrRPL/u5U+vaP secEfJy55LOPB2ob9tjd0DMssZRnS4C2AMq3yi67tNb1Qh5csOKVWdSgmLeB11zK kNA6HMwgPRrbKn5UBo2UNJjAxk+5CHFUK0xuc2RGe6klPRusI/fQSY0x17F89OW2 TLItPkiBurQA/ybbwrLmYBPL9WtPoxcjvkk+ohAmTqTd7xlYFR09VpCBlt6MAml1 f2PMSLGGA+alZd5nK1KV2NtbnUp2nH6s8WRcp8+DKWlK30flNXXL+L/gCJE6eYP5 N3fvCgQXXiArTDw4g8exrFEXrQnJ/7s5KEmGdULhaY+ugQJFNvKzT+Fn8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLf/+td+rWpB3lL0Rw2pR6wc4F0GMB8GA1UdIwQY MBaAFH5ayBu8z4UvIqyO1S0uktsx2NYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmxySUc3elBoUzhpckk3VkxTNlMyekhZMWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kMTNmODQtMTZjZS00ZDUxLWE2MTgt YzJhNWQ5ZDcwMzEzLzEvdF9fNjEzNnRha0hlVXZSSERhbEhyQnpnWFFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9kMTNmODQtMTZjZS00ZDUxLWE2MTgtYzJhNWQ5ZDcwMzEz LzEvZmxySUc3elBoUzhpckk3VkxTNlMyekhZMWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwZXwMA0G CSqGSIb3DQEBCwUAA4IBAQCUEMliC4lkcFsgkKK9tFVfI63UMe58Qv+1byZZMq4a bGhppg3VJLkwQ4oYNhTyYIZibKqt9jg+0XyITtAtBfoFPDoMKbk7inU73k1EcWGH RO49isSUZjlnbblUVAKCCT9/h0rcyZovoG2r4yUk1KtrrFffyP76nj/J7y+gVdUR acoH8pBuGo0XF9tHIPftArHKTCjEsk2tFaTrk94Kmn+khZFOYC0hFWNjAEgim+9L aLqcy+NbGwMJ0ZStMFUwfl5wFVtZDht4yenqSmZ2bq48I/9gA1iwtGi2pyu9wSBK NvoTWSg4i09S/+bLn4I69ilCzUxg7aWBuRkReYzbgQv7 -----END CERTIFICATE-----Generated at Mon Jan 26 01:42:30 2026 by rpki-client