This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/5da8c2-cfd5-4853-9831-fbb1348a8620/1/v06EIuh7avEsSa5N8Da8BGSxW-s.roa File: v06EIuh7avEsSa5N8Da8BGSxW-s.roa (raw, json) Hash identifier: 6zRN8fCEPbobPeMxzAzi2/I2l0dqJQdn6DY6zo5FU1Y= Subject key identifier: BF:4E:84:22:E8:7B:6A:F1:2C:49:AE:4D:F0:36:BC:04:64:B1:5B:EB Certificate issuer: /CN=eadf80048d2032ec224364a773fe81d23fa914e0 Certificate serial: 019B7F8392D2700F1CE74204D23D946ED6AF Authority key identifier: EA:DF:80:04:8D:20:32:EC:22:43:64:A7:73:FE:81:D2:3F:A9:14:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/5da8c2-cfd5-4853-9831-fbb1348a8620/1/v06EIuh7avEsSa5N8Da8BGSxW-s.roa Signing time: Fri 02 Jan 2026 16:21:27 +0000 ROA not before: Fri 02 Jan 2026 16:21:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209825 IP address blocks: 85.209.44.0/22 maxlen: 22 85.209.44.0/24 maxlen: 24 85.209.45.0/24 maxlen: 24 85.209.46.0/24 maxlen: 24 85.209.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/5da8c2-cfd5-4853-9831-fbb1348a8620/1/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.crl rsync://rpki.ripe.net/repository/DEFAULT/01/5da8c2-cfd5-4853-9831-fbb1348a8620/1/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.mft rsync://rpki.ripe.net/repository/DEFAULT/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:92:d2:70:0f:1c:e7:42:04:d2:3d:94:6e:d6:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eadf80048d2032ec224364a773fe81d23fa914e0 Validity Not Before: Jan 2 16:21:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf4e8422e87b6af12c49ae4df036bc0464b15beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:59:cc:ea:47:b1:3c:3a:84:48:64:b0:79:31: 42:6c:c6:87:1f:9a:c0:5e:03:86:7b:fa:af:ee:56: 0b:d6:20:6a:dd:ae:e2:8f:3e:c4:f7:11:3a:45:1f: fa:07:59:5d:a2:fb:73:28:2d:31:0d:88:8d:1c:f3: 74:bb:62:a9:94:fe:95:00:f9:a2:8f:55:83:60:c9: 05:1a:9e:07:1b:57:55:b1:fd:91:37:37:ad:51:87: 3b:0c:27:db:bb:5d:e6:59:41:ba:48:5c:b8:c9:f1: 24:fa:73:99:3e:f4:5b:d0:46:66:f3:74:2f:77:d7: bc:ac:36:09:e4:62:2d:6b:10:5c:3b:4b:32:92:85: ab:75:b0:4e:36:90:b3:f0:1e:b9:32:86:a9:2e:87: 2b:08:79:6d:a1:f1:ba:1f:02:15:67:21:e7:be:87: de:a9:c1:49:2f:98:f4:2a:22:e0:cf:57:82:33:37: 6c:cd:e5:3d:a5:59:59:d1:9f:d7:eb:28:ab:b4:09: e1:b6:6d:71:40:8b:e0:c0:83:8c:1e:f3:ab:d3:ff: c5:c6:7c:39:71:a4:3b:67:03:69:ed:57:1f:7a:18: f5:18:2b:ce:95:8e:b7:91:7d:8b:05:1b:3b:16:3f: d0:1f:28:d6:17:4e:3e:c4:51:8a:59:37:ee:1e:c9: 15:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:4E:84:22:E8:7B:6A:F1:2C:49:AE:4D:F0:36:BC:04:64:B1:5B:EB X509v3 Authority Key Identifier: keyid:EA:DF:80:04:8D:20:32:EC:22:43:64:A7:73:FE:81:D2:3F:A9:14:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/5da8c2-cfd5-4853-9831-fbb1348a8620/1/v06EIuh7avEsSa5N8Da8BGSxW-s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/5da8c2-cfd5-4853-9831-fbb1348a8620/1/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.209.44.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:16:78:fb:93:71:2d:92:97:59:3b:80:44:31:22:3c:07:47: f7:43:ea:ed:13:5b:0e:1c:ee:b1:72:c5:c4:ad:45:1f:e9:63: c4:f8:2b:15:4a:f7:0e:93:89:e3:a9:cc:76:70:f8:60:e3:0b: a9:f4:ee:a8:da:c5:f0:28:45:8a:3e:91:8f:28:14:7b:b7:89: 92:eb:a5:87:0b:3e:4f:f1:f8:b8:7c:80:23:76:c9:d0:12:6e: 0b:59:61:5a:5a:51:0c:85:ef:bd:b3:43:31:48:ec:61:88:e4: 73:34:eb:df:27:54:ef:e6:01:3e:7d:c3:22:41:b0:e3:e7:4e: 54:46:cb:37:b6:7e:3d:11:a5:7b:e3:91:c1:73:a7:6e:69:60: 9d:1c:42:1a:cf:22:9f:c6:dd:1d:6c:78:cd:1c:c3:c9:83:58: 83:37:a0:a0:b1:0e:e9:72:ed:b7:77:44:71:90:7e:cd:a0:3d: 65:90:ef:d6:1c:b1:10:33:ab:52:ce:8a:10:b5:44:8e:32:54: 19:36:85:74:36:ae:18:dc:8a:75:7a:8e:42:be:e4:f4:9a:1b: f0:64:4e:55:7f:88:7f:e4:fd:d5:f6:1a:10:af:29:fa:c5:2c: f4:a2:c3:fb:2c:81:d5:0f:5d:f8:89:5e:ee:32:b8:92:50:c3: 82:8b:ea:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g5LScA8c50IE0j2UbtavMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhZGY4MDA0OGQyMDMyZWMyMjQzNjRhNzczZmU4MWQyM2Zh OTE0ZTAwHhcNMjYwMTAyMTYyMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjRlODQyMmU4N2I2YWYxMmM0OWFlNGRmMDM2YmMwNDY0YjE1YmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFnM6kexPDqESGSweTFCbMaHH5rA XgOGe/qv7lYL1iBq3a7ijz7E9xE6RR/6B1ldovtzKC0xDYiNHPN0u2KplP6VAPmi j1WDYMkFGp4HG1dVsf2RNzetUYc7DCfbu13mWUG6SFy4yfEk+nOZPvRb0EZm83Qv d9e8rDYJ5GItaxBcO0sykoWrdbBONpCz8B65MoapLocrCHltofG6HwIVZyHnvofe qcFJL5j0KiLgz1eCMzdszeU9pVlZ0Z/X6yirtAnhtm1xQIvgwIOMHvOr0//Fxnw5 caQ7ZwNp7Vcfehj1GCvOlY63kX2LBRs7Fj/QHyjWF04+xFGKWTfuHskVCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL9OhCLoe2rxLEmuTfA2vARksVvrMB8GA1UdIwQY MBaAFOrfgASNIDLsIkNkp3P+gdI/qRTgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnQtQUJJMGdNdXdpUTJTbmNfNkIwai1wRk9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS81ZGE4YzItY2ZkNS00ODUzLTk4MzEt ZmJiMTM0OGE4NjIwLzEvdjA2RUl1aDdhdkVzU2E1TjhEYThCR1N4Vy1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS81ZGE4YzItY2ZkNS00ODUzLTk4MzEtZmJiMTM0OGE4NjIw LzEvNnQtQUJJMGdNdXdpUTJTbmNfNkIwai1wRk9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVdEsMA0G CSqGSIb3DQEBCwUAA4IBAQAPFnj7k3EtkpdZO4BEMSI8B0f3Q+rtE1sOHO6xcsXE rUUf6WPE+CsVSvcOk4njqcx2cPhg4wup9O6o2sXwKEWKPpGPKBR7t4mS66WHCz5P 8fi4fIAjdsnQEm4LWWFaWlEMhe+9s0MxSOxhiORzNOvfJ1Tv5gE+fcMiQbDj505U Rss3tn49EaV745HBc6duaWCdHEIazyKfxt0dbHjNHMPJg1iDN6CgsQ7pcu23d0Rx kH7NoD1lkO/WHLEQM6tSzooQtUSOMlQZNoV0Nq4Y3Ip1eo5CvuT0mhvwZE5Vf4h/ 5P3V9hoQryn6xSz0osP7LIHVD134iV7uMriSUMOCi+r6 -----END CERTIFICATE-----Generated at Mon Jan 26 11:40:06 2026 by rpki-client