This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/61Tc_pSMqhnofPsV7DrPU_3IvV4.roa File: 61Tc_pSMqhnofPsV7DrPU_3IvV4.roa (raw, json) Hash identifier: b1b/Y82gxJDN9f/iG4TCunLXSlk+6vM16ISqmCSzCXg= Subject key identifier: EB:54:DC:FE:94:8C:AA:19:E8:7C:FB:15:EC:3A:CF:53:FD:C8:BD:5E Certificate issuer: /CN=3ca6fa999e8a674aa5332deb71f1bad0245c8dc1 Certificate serial: 019B7B36F18A9C4219588B61C72B23E16CD0 Authority key identifier: 3C:A6:FA:99:9E:8A:67:4A:A5:33:2D:EB:71:F1:BA:D0:24:5C:8D:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/61Tc_pSMqhnofPsV7DrPU_3IvV4.roa Signing time: Thu 01 Jan 2026 20:19:16 +0000 ROA not before: Thu 01 Jan 2026 20:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35562 IP address blocks: 46.174.240.0/21 maxlen: 21 195.189.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:f1:8a:9c:42:19:58:8b:61:c7:2b:23:e1:6c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ca6fa999e8a674aa5332deb71f1bad0245c8dc1 Validity Not Before: Jan 1 20:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb54dcfe948caa19e87cfb15ec3acf53fdc8bd5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:db:7b:7c:8f:d5:0a:7c:fe:05:14:19:7c:14: 30:a0:56:5c:1b:79:b4:4c:d9:a2:94:57:9a:e8:c6: 1e:3e:7f:aa:e1:54:84:c1:5b:2c:51:40:2b:6b:6a: 05:00:63:04:0b:6c:29:41:17:f5:fd:a2:07:a6:b4: dc:99:41:bc:32:ea:4e:67:02:81:ce:98:5b:f3:c4: d3:cb:44:d4:56:ca:ca:67:72:e3:6b:b9:f6:65:8e: 36:4f:ca:30:37:ff:19:6a:71:6c:7f:95:42:13:ec: 7c:8c:80:86:83:b0:a7:b7:05:1c:b5:6c:da:52:c6: 70:18:89:08:6c:dc:d0:45:59:af:b5:5d:1b:d1:69: fc:2e:d6:7b:91:f2:fd:4d:9d:ce:b7:d0:ce:08:45: 5c:60:28:98:ab:a4:ca:42:29:9f:6f:b2:ef:d9:2d: 3a:0b:4e:14:9d:74:42:08:a0:70:79:0b:03:19:8a: 5f:e4:25:41:ed:aa:8e:2f:a4:73:d0:6f:16:cf:10: 44:ca:11:90:f9:5c:e9:24:38:09:a0:5e:cf:78:fa: 21:ed:23:e9:79:8d:94:b3:91:49:1d:9a:ce:56:65: 45:b2:47:44:92:94:09:51:7e:f1:6b:01:21:65:74: 32:79:b6:a8:4c:62:9e:6c:9c:71:8a:b2:68:2d:3d: af:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:54:DC:FE:94:8C:AA:19:E8:7C:FB:15:EC:3A:CF:53:FD:C8:BD:5E X509v3 Authority Key Identifier: keyid:3C:A6:FA:99:9E:8A:67:4A:A5:33:2D:EB:71:F1:BA:D0:24:5C:8D:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/61Tc_pSMqhnofPsV7DrPU_3IvV4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.174.240.0/21 195.189.248.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:48:c0:2e:65:a1:31:f7:d5:bb:c2:68:26:bd:1a:dd:87:62: ab:b9:5f:1a:e5:16:c1:42:22:8f:03:30:2a:ca:58:e2:58:44: d3:e1:0f:dc:46:7b:60:c1:73:4e:6d:6a:05:69:ee:8b:74:6c: 1f:b5:62:9c:cf:2b:31:15:36:54:da:ed:04:b1:7f:62:3d:72: 2c:41:b1:0b:b5:3e:b8:87:73:86:41:0e:b8:3e:e5:d0:a7:af: bd:43:9d:73:8b:b9:c2:95:65:9a:43:6d:88:b9:b1:ba:19:ca: c6:bf:5c:b1:1a:38:b9:59:c7:63:a8:e3:1e:d7:bf:49:9a:5b: 0f:ac:8a:39:72:44:03:11:51:da:6a:9e:b5:79:46:63:28:da: cd:dd:9b:0e:4d:67:7a:52:ba:cd:ca:29:89:4d:45:e2:5f:5f: 7c:cc:be:3b:ca:00:32:60:cb:39:83:5d:0c:0c:91:65:46:b8: de:9f:bb:f4:b6:80:22:64:b5:5d:ab:9b:cb:f4:83:73:f5:bb: 34:48:ad:2c:c0:63:5a:62:a3:ab:d2:a6:da:f8:00:df:34:a9: d5:a5:c4:19:36:3d:4e:cc:fc:06:0e:2d:a7:1b:00:e1:02:e4: 79:69:fc:7a:7e:44:ed:8b:3b:56:d0:bc:2a:62:ae:cb:d1:2d: ba:68:bf:8b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NvGKnEIZWIthxysj4WzQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYTZmYTk5OWU4YTY3NGFhNTMzMmRlYjcxZjFiYWQwMjQ1 YzhkYzEwHhcNMjYwMTAxMjAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjU0ZGNmZTk0OGNhYTE5ZTg3Y2ZiMTVlYzNhY2Y1M2ZkYzhiZDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidt7fI/VCnz+BRQZfBQwoFZcG3m0 TNmilFea6MYePn+q4VSEwVssUUAra2oFAGMEC2wpQRf1/aIHprTcmUG8MupOZwKB zphb88TTy0TUVsrKZ3Lja7n2ZY42T8owN/8ZanFsf5VCE+x8jICGg7CntwUctWza UsZwGIkIbNzQRVmvtV0b0Wn8LtZ7kfL9TZ3Ot9DOCEVcYCiYq6TKQimfb7Lv2S06 C04UnXRCCKBweQsDGYpf5CVB7aqOL6Rz0G8WzxBEyhGQ+VzpJDgJoF7PePoh7SPp eY2Us5FJHZrOVmVFskdEkpQJUX7xawEhZXQyebaoTGKebJxxirJoLT2v+wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOtU3P6UjKoZ6Hz7Few6z1P9yL1eMB8GA1UdIwQY MBaAFDym+pmeimdKpTMt63HxutAkXI3BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEtiNm1aNktaMHFsTXkzcmNmRzYwQ1JjamNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mOTdkM2QtZWQ2NC00MGI3LThiN2Mt MTUyYjBhYmQ3YzBjLzEvNjFUY19wU01xaG5vZlBzVjdEclBVXzNJdlY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9mOTdkM2QtZWQ2NC00MGI3LThiN2MtMTUyYjBhYmQ3YzBj LzEvUEtiNm1aNktaMHFsTXkzcmNmRzYwQ1JjamNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLq7wAwQB w734MA0GCSqGSIb3DQEBCwUAA4IBAQBsSMAuZaEx99W7wmgmvRrdh2KruV8a5RbB QiKPAzAqyljiWETT4Q/cRntgwXNObWoFae6LdGwftWKczysxFTZU2u0EsX9iPXIs QbELtT64h3OGQQ64PuXQp6+9Q51zi7nClWWaQ22IubG6GcrGv1yxGji5WcdjqOMe 179JmlsPrIo5ckQDEVHaap61eUZjKNrN3ZsOTWd6UrrNyimJTUXiX198zL47ygAy YMs5g10MDJFlRrjen7v0toAiZLVdq5vL9INz9bs0SK0swGNaYqOr0qba+ADfNKnV pcQZNj1OzPwGDi2nGwDhAuR5afx6fkTtiztW0LwqYq7L0S26aL+L -----END CERTIFICATE-----Generated at Sat Jan 3 06:50:59 2026 by rpki-client