This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/6bYFArU-m22v_2LMnKGfPfQ5d_U.roa File: 6bYFArU-m22v_2LMnKGfPfQ5d_U.roa (raw, json) Hash identifier: T50wLh+t9t04GFvV8DA2eC2Fd5ixjDyLVmolPRcQuvk= Subject key identifier: E9:B6:05:02:B5:3E:9B:6D:AF:FF:62:CC:9C:A1:9F:3D:F4:39:77:F5 Certificate issuer: /CN=997a6477dd970c94b2a17b52502982d4fc75b244 Certificate serial: 019B7D5AE63BAF262BC3AAC5A95AD37881FD Authority key identifier: 99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/6bYFArU-m22v_2LMnKGfPfQ5d_U.roa Signing time: Fri 02 Jan 2026 06:17:47 +0000 ROA not before: Fri 02 Jan 2026 06:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215444 IP address blocks: 193.242.185.0/24 maxlen: 24 2001:67c:ee0::/48 maxlen: 48 2001:67c:ee4::/48 maxlen: 48 2001:67c:ee8::/48 maxlen: 48 2001:67c:2c30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:e6:3b:af:26:2b:c3:aa:c5:a9:5a:d3:78:81:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=997a6477dd970c94b2a17b52502982d4fc75b244 Validity Not Before: Jan 2 06:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9b60502b53e9b6dafff62cc9ca19f3df43977f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:80:30:13:ea:35:ca:25:81:5d:c5:5a:03:e8: 80:62:1f:16:13:75:bb:46:16:aa:dc:56:47:9a:d1: 94:c6:7b:f9:c2:38:22:3e:9b:35:50:7a:2d:8c:b1: df:c6:68:8f:23:d3:86:64:aa:cd:c9:a2:a3:74:dd: ad:52:33:9e:40:65:2d:b9:2f:30:3e:5a:27:74:15: e6:03:c7:70:4d:54:ff:8d:e3:1d:5d:31:ff:9a:68: 7c:23:53:da:ac:8c:f5:e4:7e:51:81:90:aa:45:29: ea:d5:00:b0:63:bd:2e:cd:32:19:6d:f6:c4:d7:25: 62:7f:05:61:4c:91:6b:14:dc:bc:34:fe:ac:20:07: 60:7b:39:1f:b3:80:4c:ff:21:a5:05:1d:33:90:5b: fd:8f:1f:45:84:43:e9:08:9c:6c:95:8b:0f:47:0a: 07:8d:05:78:a3:89:59:e5:43:87:07:48:ee:40:24: 97:5a:cc:16:76:ee:a0:b0:85:5e:6a:b4:2f:bb:ba: 45:13:30:4e:8b:03:fe:f7:e1:5c:31:9c:d2:3f:17: e2:d5:48:a8:77:a5:8f:7b:44:18:78:0e:67:41:ea: 40:e8:01:af:d4:a9:27:0d:04:99:b2:88:2e:73:28: 0d:8c:74:31:78:96:4e:9f:01:1a:f9:d8:d3:66:78: 99:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B6:05:02:B5:3E:9B:6D:AF:FF:62:CC:9C:A1:9F:3D:F4:39:77:F5 X509v3 Authority Key Identifier: keyid:99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/6bYFArU-m22v_2LMnKGfPfQ5d_U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.242.185.0/24 IPv6: 2001:67c:ee0::/48 2001:67c:ee4::/48 2001:67c:ee8::/48 2001:67c:2c30::/48 Signature Algorithm: sha256WithRSAEncryption 55:ed:35:e8:cf:fa:35:48:cc:eb:7b:2c:2c:8d:3f:b5:b7:7a: 04:a7:27:59:e8:51:71:09:c3:06:98:c8:12:d1:c7:9c:60:85: 14:91:10:2b:70:58:90:9d:53:f7:f2:d2:a5:f6:05:4c:b9:5d: 54:5a:e2:60:7a:c1:45:61:de:26:73:06:bf:f3:36:7b:aa:55: 6c:97:8f:d6:d6:b8:35:5f:13:03:57:ed:50:23:c5:f7:5e:c5: 54:6d:25:ef:f2:a8:87:8b:51:f1:10:66:5f:f8:06:16:b5:0e: 11:8c:dd:92:46:8e:55:9c:5c:f3:94:b5:29:95:03:33:9e:8f: a5:b1:65:18:89:bd:7a:d6:d5:dd:a1:c0:8d:17:f4:9a:b4:b4: e7:55:f1:3f:92:9e:19:d1:af:60:11:f6:9c:ac:9b:3e:4c:5b: 15:04:00:1d:23:17:b1:fa:eb:9b:fb:a4:59:72:fd:ca:2c:b6: 45:a8:5e:73:94:f8:66:52:a0:18:13:2b:7b:e3:ac:91:47:25: da:09:70:b5:e9:a3:d7:9e:45:54:c9:b4:2a:44:5a:b5:03:72: e1:ed:ef:35:5b:a1:69:a4:c5:c8:c7:a7:2f:c6:d9:c9:0a:d6: 49:e6:c9:3b:31:9c:4e:be:83:65:f8:57:18:27:e2:b8:92:49: 04:03:0b:52 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt9WuY7ryYrw6rFqVrTeIH9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5N2E2NDc3ZGQ5NzBjOTRiMmExN2I1MjUwMjk4MmQ0ZmM3 NWIyNDQwHhcNMjYwMTAyMDYxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWI2MDUwMmI1M2U5YjZkYWZmZjYyY2M5Y2ExOWYzZGY0Mzk3N2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYAwE+o1yiWBXcVaA+iAYh8WE3W7 Rhaq3FZHmtGUxnv5wjgiPps1UHotjLHfxmiPI9OGZKrNyaKjdN2tUjOeQGUtuS8w PlondBXmA8dwTVT/jeMdXTH/mmh8I1ParIz15H5RgZCqRSnq1QCwY70uzTIZbfbE 1yVifwVhTJFrFNy8NP6sIAdgezkfs4BM/yGlBR0zkFv9jx9FhEPpCJxslYsPRwoH jQV4o4lZ5UOHB0juQCSXWswWdu6gsIVearQvu7pFEzBOiwP+9+FcMZzSPxfi1Uio d6WPe0QYeA5nQepA6AGv1KknDQSZsogucygNjHQxeJZOnwEa+djTZniZSwIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFOm2BQK1Ppttr/9izJyhnz30OXf1MB8GA1UdIwQY MBaAFJl6ZHfdlwyUsqF7UlApgtT8dbJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVhwa2Q5MlhESlN5b1h0U1VDbUMxUHgxc2tRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS80ODE0NjYtMGUzOC00ZTNiLTliZjMt Mjg1NzQ1NjQ3ZjVmLzEvNmJZRkFyVS1tMjJ2XzJMTW5LR2ZQZlE1ZF9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS80ODE0NjYtMGUzOC00ZTNiLTliZjMtMjg1NzQ1NjQ3ZjVm LzEvbVhwa2Q5MlhESlN5b1h0U1VDbUMxUHgxc2tRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAMBAIAATAGAwQAwfK5MCoE AgACMCQDBwAgAQZ8DuADBwAgAQZ8DuQDBwAgAQZ8DugDBwAgAQZ8LDAwDQYJKoZI hvcNAQELBQADggEBAFXtNejP+jVIzOt7LCyNP7W3egSnJ1noUXEJwwaYyBLRx5xg hRSRECtwWJCdU/fy0qX2BUy5XVRa4mB6wUVh3iZzBr/zNnuqVWyXj9bWuDVfEwNX 7VAjxfdexVRtJe/yqIeLUfEQZl/4Bha1DhGM3ZJGjlWcXPOUtSmVAzOej6WxZRiJ vXrW1d2hwI0X9Jq0tOdV8T+SnhnRr2AR9pysmz5MWxUEAB0jF7H665v7pFly/cos tkWoXnOU+GZSoBgTK3vjrJFHJdoJcLXpo9eeRVTJtCpEWrUDcuHt7zVboWmkxcjH py/G2ckK1knmyTsxnE6+g2X4Vxgn4riSSQQDC1I= -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:57 2026 by rpki-client