This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/6FvTo5bRSodTC6FDiz2fehPBQHE.roa File: 6FvTo5bRSodTC6FDiz2fehPBQHE.roa (raw, json) Hash identifier: apDjsNYn3O+BU+7M5QZsfrZaIB7/OL7UKbfG6C5NerE= Subject key identifier: E8:5B:D3:A3:96:D1:4A:87:53:0B:A1:43:8B:3D:9F:7A:13:C1:40:71 Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Certificate serial: 019B7BA3ED2592B72CCBD7D398CEAA7D9456 Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/6FvTo5bRSodTC6FDiz2fehPBQHE.roa Signing time: Thu 01 Jan 2026 22:18:19 +0000 ROA not before: Thu 01 Jan 2026 22:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213830 IP address blocks: 91.82.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:ed:25:92:b7:2c:cb:d7:d3:98:ce:aa:7d:94:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Validity Not Before: Jan 1 22:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e85bd3a396d14a87530ba1438b3d9f7a13c14071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:22:ff:66:83:70:eb:b8:51:53:42:0e:5f:3c: 28:6a:40:c7:5a:5b:35:52:03:86:60:b2:da:56:8d: 8f:b8:b9:15:4a:37:5f:d8:95:46:97:58:e6:9e:41: c3:96:9f:f8:2e:ba:9e:53:5b:46:db:48:e8:96:4c: 96:00:89:9f:5f:76:e7:72:1c:c2:ff:c3:17:c8:a7: 97:45:a3:85:db:d0:f8:c9:40:77:a9:70:76:3d:3d: b5:42:bc:a5:75:52:6f:6a:c3:ba:31:93:0f:22:29: 26:8a:b1:86:8c:3e:a1:74:78:0b:ba:c7:41:be:ce: 25:41:31:ac:51:38:f8:b3:ee:0b:1e:69:64:b5:0e: c6:c9:45:33:f0:4f:dd:20:a4:00:d8:98:5d:69:f1: 8b:d8:c1:a9:a4:a5:31:d4:9d:d8:81:8a:e6:2b:d6: 17:b8:be:bc:50:b0:01:7d:d6:e3:1b:b5:26:59:79: 2f:58:83:6c:56:0f:06:87:2a:2f:4e:44:f8:6b:f8: 98:dd:42:56:b2:0f:dc:fe:de:a3:a7:2d:80:28:3a: e1:ba:47:b7:e1:ad:a8:99:41:6a:0d:2f:af:5b:61: dc:b9:c2:10:69:44:21:4d:4d:90:a2:c3:20:9f:11: c6:df:2f:c0:cb:1e:84:66:58:fd:80:77:bd:90:49: 41:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5B:D3:A3:96:D1:4A:87:53:0B:A1:43:8B:3D:9F:7A:13:C1:40:71 X509v3 Authority Key Identifier: keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/6FvTo5bRSodTC6FDiz2fehPBQHE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.82.75.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:8d:bf:12:f4:11:5f:08:79:94:79:72:0e:a4:84:d1:80:bd: 1c:e0:92:37:8c:7c:b4:af:82:3a:0a:aa:1b:1f:67:7e:dc:5e: 3d:29:9e:e8:81:3b:81:f2:ce:f2:c2:a1:f7:08:e2:35:43:4e: 1b:71:c0:e0:5e:4e:92:b7:d4:5e:47:e1:37:0b:cc:a6:3e:b3: 02:c4:fe:39:5f:0d:74:1c:43:f3:0b:91:c8:9a:73:f0:c7:a6: 00:a5:d8:5f:bb:f9:9f:b0:2b:07:d5:f6:d2:87:54:3b:34:ed: 35:29:7b:58:d1:f7:b7:1d:e0:2d:61:48:99:97:3b:c8:00:07: e7:6d:1d:88:a2:82:be:23:17:bd:37:09:f3:f6:70:d4:32:09: 48:0f:ea:90:14:2a:f6:0a:f4:57:f0:4e:5a:ed:86:56:17:9c: 67:ed:41:ab:d9:4e:79:39:86:97:c9:90:ab:c6:5a:f6:c1:1b: 8f:32:83:db:bf:9c:91:08:72:69:21:92:dd:59:5a:ea:9f:c0: 07:bd:a2:27:70:b1:ed:4d:76:67:f5:ff:ff:06:17:44:0d:4f: 3a:be:43:95:c4:3c:40:ab:12:12:0a:fb:e3:8b:e4:6c:41:18: b3:fa:e9:c4:80:d3:7e:c0:0b:b5:0a:22:93:2e:e6:cb:79:1d: cc:76:94:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o+0lkrcsy9fTmM6qfZRWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5 ZDQyODgwHhcNMjYwMTAxMjIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODViZDNhMzk2ZDE0YTg3NTMwYmExNDM4YjNkOWY3YTEzYzE0MDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSL/ZoNw67hRU0IOXzwoakDHWls1 UgOGYLLaVo2PuLkVSjdf2JVGl1jmnkHDlp/4LrqeU1tG20jolkyWAImfX3bnchzC /8MXyKeXRaOF29D4yUB3qXB2PT21QryldVJvasO6MZMPIikmirGGjD6hdHgLusdB vs4lQTGsUTj4s+4LHmlktQ7GyUUz8E/dIKQA2JhdafGL2MGppKUx1J3YgYrmK9YX uL68ULABfdbjG7UmWXkvWINsVg8GhyovTkT4a/iY3UJWsg/c/t6jpy2AKDrhuke3 4a2omUFqDS+vW2HcucIQaUQhTU2QosMgnxHG3y/Ayx6EZlj9gHe9kElBzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOhb06OW0UqHUwuhQ4s9n3oTwUBxMB8GA1UdIwQY MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It ZWNjNDliZGMyYWQ4LzEvNkZ2VG81YlJTb2RUQzZGRGl6MmZlaFBCUUhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4 LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW1JLMA0G CSqGSIb3DQEBCwUAA4IBAQBtjb8S9BFfCHmUeXIOpITRgL0c4JI3jHy0r4I6Cqob H2d+3F49KZ7ogTuB8s7ywqH3COI1Q04bccDgXk6St9ReR+E3C8ymPrMCxP45Xw10 HEPzC5HImnPwx6YApdhfu/mfsCsH1fbSh1Q7NO01KXtY0fe3HeAtYUiZlzvIAAfn bR2IooK+Ixe9Nwnz9nDUMglID+qQFCr2CvRX8E5a7YZWF5xn7UGr2U55OYaXyZCr xlr2wRuPMoPbv5yRCHJpIZLdWVrqn8AHvaIncLHtTXZn9f//BhdEDU86vkOVxDxA qxISCvvji+RsQRiz+unEgNN+wAu1CiKTLubLeR3MdpSS -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:29 2026 by rpki-client