This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/U6_BOZR92hnw_a9L4P6TzqeXhec.roa File: U6_BOZR92hnw_a9L4P6TzqeXhec.roa (raw, json) Hash identifier: g5QjwrMvRa/952IazG0KYw2xw/6dTSo8fap6F5NGQ7c= Subject key identifier: 53:AF:C1:39:94:7D:DA:19:F0:FD:AF:4B:E0:FE:93:CE:A7:97:85:E7 Certificate issuer: /CN=6638515f32944969ae0031bde02d1f4cbd0d2b98 Certificate serial: 019B7BA410A742CA4CEB11F3AED825ECCC59 Authority key identifier: 66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/U6_BOZR92hnw_a9L4P6TzqeXhec.roa Signing time: Thu 01 Jan 2026 22:18:28 +0000 ROA not before: Thu 01 Jan 2026 22:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22351 IP address blocks: 83.170.128.0/19 maxlen: 19 83.170.160.0/21 maxlen: 21 83.170.160.0/24 maxlen: 24 83.170.161.0/24 maxlen: 24 83.170.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:10:a7:42:ca:4c:eb:11:f3:ae:d8:25:ec:cc:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6638515f32944969ae0031bde02d1f4cbd0d2b98 Validity Not Before: Jan 1 22:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53afc139947dda19f0fdaf4be0fe93cea79785e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:27:d4:1b:da:f6:e5:91:88:d8:c0:9a:44:a7: cb:2d:39:b2:a4:ca:56:a3:6f:c0:b6:d2:9e:e0:5b: 5b:63:50:fb:d9:99:00:de:9b:a1:36:99:fd:72:f1: b3:c1:a3:3e:41:fc:48:b7:aa:ee:0a:0b:4d:f9:05: 08:8c:43:1f:20:be:af:8a:36:7b:a4:cc:99:e4:28: c6:c0:a6:61:ac:c8:eb:8c:43:47:62:18:48:f7:6e: 2f:fd:e5:bf:d1:77:08:89:43:e8:c9:b4:20:ad:95: a9:a1:35:91:27:79:40:aa:ed:85:8f:8f:95:27:d6: 2e:6f:8a:bf:51:e0:37:a4:73:eb:a6:56:c6:42:f5: 49:28:c6:6c:c5:5a:f0:6d:a9:4b:3d:38:b6:5d:2b: cf:3a:fc:42:8b:54:e6:78:01:de:a1:44:bf:a2:ec: 7e:0a:ad:a6:e0:06:d0:de:6e:dd:60:72:af:ab:8e: d8:19:4c:82:71:7b:3c:b8:83:92:a9:0c:8e:ab:5c: 11:d4:79:f8:ea:ec:59:24:4c:15:56:24:64:6b:e5: b0:b4:33:07:a7:fc:26:d2:41:ba:db:9b:38:4e:bd: ca:7f:90:0a:85:99:00:6a:eb:34:09:55:a4:40:45: e4:c7:fe:f8:04:58:e8:66:ff:53:58:e5:3e:50:89: 0e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:AF:C1:39:94:7D:DA:19:F0:FD:AF:4B:E0:FE:93:CE:A7:97:85:E7 X509v3 Authority Key Identifier: keyid:66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/U6_BOZR92hnw_a9L4P6TzqeXhec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.170.128.0-83.170.167.255 83.170.176.0/20 Signature Algorithm: sha256WithRSAEncryption 2f:f5:c0:24:a5:12:b5:f1:f8:b3:16:4e:a1:4e:04:70:43:fd: 0e:cd:0d:ce:cc:fe:e7:a6:1e:43:f2:ec:40:e7:93:d2:5e:95: cc:de:1f:7f:01:28:a4:64:b7:5a:00:be:dc:ef:33:85:71:66: 7d:0b:98:10:27:e0:b0:ce:59:d6:8f:c6:1e:a9:3f:a5:41:4a: 13:8a:d4:89:a5:34:7f:5e:7d:7c:ae:19:6d:57:7c:42:85:19: f3:75:e5:6d:4a:6a:03:e5:77:01:62:3e:ea:60:d7:b1:53:5f: fe:3c:cd:4a:ed:fc:2f:16:be:22:12:93:77:8e:7c:ff:9c:41: 71:e9:f1:97:74:b9:3a:95:c5:06:a3:30:be:f2:fb:a2:21:46: dc:f3:0f:a6:55:f2:28:77:ae:af:8d:0f:38:be:ed:f3:7b:c6: 5d:da:31:a8:e5:15:0f:d4:23:14:38:3e:c0:af:f9:db:91:b9: f5:d9:a9:51:55:38:ba:8e:89:82:b4:80:1f:97:c1:ce:6d:f2: 04:18:29:12:cb:9b:55:c5:c0:fd:9b:7a:36:6c:4c:7e:e2:b4: 95:08:4e:c9:34:b9:a9:b9:31:02:91:8b:2a:c4:9b:b9:90:9b: 35:ea:9c:c2:dc:f2:f1:b1:6e:93:4e:30:69:19:3a:1f:00:98: ad:2f:e3:4d -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt7pBCnQspM6xHzrtgl7MxZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2Mzg1MTVmMzI5NDQ5NjlhZTAwMzFiZGUwMmQxZjRjYmQw ZDJiOTgwHhcNMjYwMTAxMjIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2FmYzEzOTk0N2RkYTE5ZjBmZGFmNGJlMGZlOTNjZWE3OTc4NWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyifUG9r25ZGI2MCaRKfLLTmypMpW o2/AttKe4FtbY1D72ZkA3puhNpn9cvGzwaM+QfxIt6ruCgtN+QUIjEMfIL6vijZ7 pMyZ5CjGwKZhrMjrjENHYhhI924v/eW/0XcIiUPoybQgrZWpoTWRJ3lAqu2Fj4+V J9Yub4q/UeA3pHPrplbGQvVJKMZsxVrwbalLPTi2XSvPOvxCi1TmeAHeoUS/oux+ Cq2m4AbQ3m7dYHKvq47YGUyCcXs8uIOSqQyOq1wR1Hn46uxZJEwVViRka+WwtDMH p/wm0kG625s4Tr3Kf5AKhZkAaus0CVWkQEXkx/74BFjoZv9TWOU+UIkOCwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFFOvwTmUfdoZ8P2vS+D+k86nl4XnMB8GA1UdIwQY MBaAFGY4UV8ylElprgAxveAtH0y9DSuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmpoUlh6S1VTV211QURHOTRDMGZUTDBOSzVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jNTA5ZGUtNGEwNi00ZjQ0LWIxMzct Yzk5NGZkMTc0ZTZlLzEvVTZfQk9aUjkyaG53X2E5TDRQNlR6cWVYaGVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9jNTA5ZGUtNGEwNi00ZjQ0LWIxMzctYzk5NGZkMTc0ZTZl LzEvWmpoUlh6S1VTV211QURHOTRDMGZUTDBOSzVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAdTqoAD BANTqqADBARTqrAwDQYJKoZIhvcNAQELBQADggEBAC/1wCSlErXx+LMWTqFOBHBD /Q7NDc7M/uemHkPy7EDnk9JelczeH38BKKRkt1oAvtzvM4VxZn0LmBAn4LDOWdaP xh6pP6VBShOK1ImlNH9efXyuGW1XfEKFGfN15W1KagPldwFiPupg17FTX/48zUrt /C8WviISk3eOfP+cQXHp8Zd0uTqVxQajML7y+6IhRtzzD6ZV8ih3rq+NDzi+7fN7 xl3aMajlFQ/UIxQ4PsCv+duRufXZqVFVOLqOiYK0gB+Xwc5t8gQYKRLLm1XFwP2b ejZsTH7itJUITsk0uam5MQKRiyrEm7mQmzXqnMLc8vGxbpNOMGkZOh8AmK0v400= -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:37 2026 by rpki-client