This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/6yATERdiX2wk0GFwUGUYwsoJuDI.roa File: 6yATERdiX2wk0GFwUGUYwsoJuDI.roa (raw, json) Hash identifier: KtrtZMXlX/Ho5Lrtg2Wv7jNJ8tmVGjU+3M5mJcyVobY= Subject key identifier: EB:20:13:11:17:62:5F:6C:24:D0:61:70:50:65:18:C2:CA:09:B8:32 Certificate issuer: /CN=430e4026ca964cf3512940b26b11e64871c47944 Certificate serial: 019B7F1590537C91240EAB83513134A22072 Authority key identifier: 43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/6yATERdiX2wk0GFwUGUYwsoJuDI.roa Signing time: Fri 02 Jan 2026 14:21:18 +0000 ROA not before: Fri 02 Jan 2026 14:21:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34235 IP address blocks: 194.8.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 23:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:90:53:7c:91:24:0e:ab:83:51:31:34:a2:20:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=430e4026ca964cf3512940b26b11e64871c47944 Validity Not Before: Jan 2 14:21:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb20131117625f6c24d06170506518c2ca09b832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:5b:c3:b5:92:c5:73:b2:79:93:8f:17:1c:ac: 96:c9:01:d3:06:55:c1:f0:dd:9f:d5:35:f5:6c:64: 2f:0f:da:08:82:82:e7:51:b4:4d:be:f7:6d:53:28: e0:4e:f3:70:6c:d2:fe:53:ae:72:1c:02:c3:83:64: ac:33:36:27:b4:4f:ca:9a:d1:31:a4:4c:d4:4c:e4: be:3b:00:90:b3:aa:cd:67:ce:28:fa:b7:3f:06:50: dd:3f:9c:9f:c8:9f:32:48:a2:03:84:74:34:e0:d9: 54:4f:e6:f0:11:eb:cf:e3:0c:02:16:87:dd:b8:89: 57:5b:2a:c5:08:37:81:c1:a3:32:b1:49:52:66:3c: e2:89:2e:b7:a8:4d:2b:6e:a6:c7:25:02:7c:0c:2b: f3:dc:42:80:7f:0f:88:49:48:a5:ce:20:68:64:58: c3:b8:0a:20:d6:7a:ed:fc:46:f2:6a:1c:44:d8:91: 0f:30:6d:eb:92:da:77:ae:46:b9:2e:7b:57:2f:3c: 59:a4:76:87:92:d3:ba:c7:ab:f8:51:0b:97:b8:6d: 47:3e:d2:ba:2e:2c:f4:56:32:52:17:3d:1c:d3:32: 3a:90:09:b4:87:b4:9c:53:9d:4f:bd:0b:07:57:f6: 65:fb:9f:44:d6:18:40:e3:9d:85:56:18:52:9f:3e: 87:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:20:13:11:17:62:5F:6C:24:D0:61:70:50:65:18:C2:CA:09:B8:32 X509v3 Authority Key Identifier: keyid:43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/6yATERdiX2wk0GFwUGUYwsoJuDI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.8.75.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:6f:37:09:f7:84:ad:d9:14:2f:3f:df:13:7c:97:42:41:0e: 5a:44:35:98:14:05:88:2f:dd:c0:08:86:d1:81:df:3a:2b:9b: f7:71:fd:a5:e6:19:c9:a7:ef:3a:be:4d:d8:96:27:f0:9d:24: 7e:60:af:67:2f:d7:ef:6d:79:a5:04:39:e8:69:85:0a:bc:6a: 65:68:81:6e:ee:85:04:82:42:a0:08:63:a5:76:b0:c5:4c:f1: b8:b9:ad:62:a2:5c:8d:3e:6f:f0:10:0e:d7:c6:32:87:df:57: ec:db:33:b8:d4:54:d4:a0:db:3b:dd:75:35:4c:23:79:47:02: 58:40:72:79:f1:c8:6f:6f:83:a7:63:1b:32:a9:75:bf:44:be: 49:1a:22:31:1e:8b:5e:11:47:82:54:2d:4a:fe:12:34:04:b6: 92:0a:8a:dc:65:4d:bb:46:76:4e:28:1d:01:62:7f:0c:ce:da: a9:7b:fb:24:2a:4e:af:61:0a:2d:8d:62:18:bb:05:1b:ec:a8: 7a:72:ae:3f:47:15:42:f8:df:9a:0e:98:99:c0:57:e8:27:6f: 80:d5:d0:3b:09:05:ba:10:28:1d:41:91:2e:52:96:56:1a:30: 60:9f:3c:9e:14:e6:5e:79:58:c3:42:a2:8c:6c:dd:bd:45:f6: a4:5a:6f:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FZBTfJEkDquDUTE0oiByMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMGU0MDI2Y2E5NjRjZjM1MTI5NDBiMjZiMTFlNjQ4NzFj NDc5NDQwHhcNMjYwMTAyMTQyMTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjIwMTMxMTE3NjI1ZjZjMjRkMDYxNzA1MDY1MThjMmNhMDliODMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FvDtZLFc7J5k48XHKyWyQHTBlXB 8N2f1TX1bGQvD9oIgoLnUbRNvvdtUyjgTvNwbNL+U65yHALDg2SsMzYntE/KmtEx pEzUTOS+OwCQs6rNZ84o+rc/BlDdP5yfyJ8ySKIDhHQ04NlUT+bwEevP4wwCFofd uIlXWyrFCDeBwaMysUlSZjziiS63qE0rbqbHJQJ8DCvz3EKAfw+ISUilziBoZFjD uAog1nrt/EbyahxE2JEPMG3rktp3rka5LntXLzxZpHaHktO6x6v4UQuXuG1HPtK6 Liz0VjJSFz0c0zI6kAm0h7ScU51PvQsHV/Zl+59E1hhA452FVhhSnz6HmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOsgExEXYl9sJNBhcFBlGMLKCbgyMB8GA1UdIwQY MBaAFEMOQCbKlkzzUSlAsmsR5khxxHlEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXc1QUpzcVdUUE5SS1VDeWF4SG1TSEhFZVVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xMzI0MTAtNDgzOS00MTc0LThkZTIt MTExM2FlNTYzMzY5LzEvNnlBVEVSZGlYMndrMEdGd1VHVVl3c29KdURJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8xMzI0MTAtNDgzOS00MTc0LThkZTItMTExM2FlNTYzMzY5 LzEvUXc1QUpzcVdUUE5SS1VDeWF4SG1TSEhFZVVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwghLMA0G CSqGSIb3DQEBCwUAA4IBAQCKbzcJ94St2RQvP98TfJdCQQ5aRDWYFAWIL93ACIbR gd86K5v3cf2l5hnJp+86vk3YlifwnSR+YK9nL9fvbXmlBDnoaYUKvGplaIFu7oUE gkKgCGOldrDFTPG4ua1iolyNPm/wEA7XxjKH31fs2zO41FTUoNs73XU1TCN5RwJY QHJ58chvb4OnYxsyqXW/RL5JGiIxHoteEUeCVC1K/hI0BLaSCorcZU27RnZOKB0B Yn8Mztqpe/skKk6vYQotjWIYuwUb7Kh6cq4/RxVC+N+aDpiZwFfoJ2+A1dA7CQW6 ECgdQZEuUpZWGjBgnzyeFOZeeVjDQqKMbN29RfakWm/B -----END CERTIFICATE-----Generated at Mon Jan 12 07:01:37 2026 by rpki-client