This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/6tyXfV2-VjQvcpv87Kt9vE6HFzw.roa File: 6tyXfV2-VjQvcpv87Kt9vE6HFzw.roa (raw, json) Hash identifier: A154uIVBWW18JX5P8xttoUSBJ4YcDPO4IGCdrwKK67Q= Subject key identifier: EA:DC:97:7D:5D:BE:56:34:2F:72:9B:FC:EC:AB:7D:BC:4E:87:17:3C Certificate issuer: /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4 Certificate serial: 019B7AC8662DDE9B70BC9BEE2292B7864584 Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/6tyXfV2-VjQvcpv87Kt9vE6HFzw.roa Signing time: Thu 01 Jan 2026 18:18:32 +0000 ROA not before: Thu 01 Jan 2026 18:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 141.39.0.0/16 maxlen: 16 188.1.0.0/16 maxlen: 16 188.1.101.0/24 maxlen: 24 192.76.176.0/24 maxlen: 24 192.108.67.0/24 maxlen: 24 192.108.69.0/24 maxlen: 24 192.108.70.0/24 maxlen: 24 192.108.71.0/24 maxlen: 24 192.129.26.0/23 maxlen: 23 192.129.28.0/23 maxlen: 23 192.129.31.0/24 maxlen: 24 193.174.0.0/15 maxlen: 15 194.94.0.0/15 maxlen: 15 195.37.0.0/16 maxlen: 16 212.201.0.0/16 maxlen: 16 2001:638::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:66:2d:de:9b:70:bc:9b:ee:22:92:b7:86:45:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4 Validity Not Before: Jan 1 18:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eadc977d5dbe56342f729bfcecab7dbc4e87173c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e1:79:75:d1:e7:bb:c3:e3:dc:97:54:84:45: 0e:ee:00:e1:fa:93:37:03:c9:83:cd:5a:f0:84:d6: 55:bd:39:f9:72:17:77:d4:08:07:c8:b8:98:58:46: 54:05:84:e4:0a:3f:ee:48:1e:fd:fb:dc:8f:f3:a1: 38:ee:56:4c:30:63:3a:00:7b:4e:f3:10:6d:be:72: 87:fd:b6:05:2b:89:43:2f:99:1b:31:3a:f0:a6:35: af:70:63:d2:09:f5:46:05:e2:4c:17:44:1c:59:86: 0b:ab:f1:04:1c:4a:19:dc:ce:df:d3:e3:e9:0a:03: 41:b9:75:ce:ff:a7:97:94:ad:52:d3:fd:93:2f:5c: 81:8e:c4:f0:23:f5:9e:eb:03:96:a1:e1:3f:a0:34: a1:fa:2e:c2:93:10:1f:1a:db:b5:6c:72:bd:7c:a1: 82:1c:11:08:26:d4:2f:6f:51:3d:71:77:72:75:06: 20:bb:bc:37:1a:17:2a:9d:ef:0a:fa:a4:75:ac:87: 03:f7:96:e8:ec:8b:f1:08:dc:77:06:03:68:b7:94: dd:c0:3c:eb:05:3b:b9:f2:55:b5:6c:d4:f1:b5:39: 00:46:e4:f2:e1:1b:18:9b:97:f6:7e:0c:eb:db:0e: d1:0f:99:2b:6b:7f:67:0e:47:c1:b4:28:cd:e1:db: 2f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:DC:97:7D:5D:BE:56:34:2F:72:9B:FC:EC:AB:7D:BC:4E:87:17:3C X509v3 Authority Key Identifier: keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/6tyXfV2-VjQvcpv87Kt9vE6HFzw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.39.0.0/16 188.1.0.0/16 192.76.176.0/24 192.108.67.0/24 192.108.69.0-192.108.71.255 192.129.26.0-192.129.29.255 192.129.31.0/24 193.174.0.0/15 194.94.0.0/15 195.37.0.0/16 212.201.0.0/16 IPv6: 2001:638::/32 Signature Algorithm: sha256WithRSAEncryption 03:18:1f:d5:83:4b:d6:e4:f0:b5:5b:9a:02:98:6c:9f:73:f5: 33:60:fd:09:dd:5e:c7:20:42:5f:13:a6:39:09:71:5f:52:d2: 48:69:7a:04:83:23:df:52:a3:e4:e6:51:64:68:f1:85:e2:6b: 67:39:47:d2:24:6a:47:7c:3f:f4:e6:97:24:ba:d2:00:81:0d: e6:2a:e1:ac:7d:73:7c:bf:73:2f:04:b0:d3:da:9a:cf:cb:78: 89:1b:d1:fa:1c:c0:2e:95:46:34:f4:d0:3e:4d:98:23:f8:0f: 5f:50:e9:14:54:60:ae:48:05:2c:41:c5:65:50:5a:23:51:14: 08:5e:60:a7:47:28:30:df:43:e8:bb:96:d4:b7:32:a6:55:8f: 8c:f2:e8:a1:3c:1d:f0:5a:98:e1:0c:88:ec:7a:89:9f:35:cd: a1:47:cf:99:f6:5c:0e:43:0d:fe:2e:66:2a:e5:fc:e4:c7:c1: d4:39:9d:a2:88:a0:ed:c2:b4:9b:0e:bd:d0:ce:2f:42:8d:35: 3d:ce:bf:9e:44:c8:9e:9e:47:0d:a8:98:80:13:50:29:05:66: ed:f6:50:12:c3:d1:c6:08:c3:8e:da:f5:b1:91:91:1a:b8:f8: da:0b:bb:dd:37:77:ab:e3:c6:8a:7a:33:db:3e:55:9a:f8:81: ac:37:b8:2b -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgISAZt6yGYt3ptwvJvuIpK3hkWEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OTk5MDNkYWI4NWY2YTU5NzcyYjNlZGZkNGJmMGU0OTFh ZjU3YzQwHhcNMjYwMTAxMTgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWRjOTc3ZDVkYmU1NjM0MmY3MjliZmNlY2FiN2RiYzRlODcxNzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueF5ddHnu8Pj3JdUhEUO7gDh+pM3 A8mDzVrwhNZVvTn5chd31AgHyLiYWEZUBYTkCj/uSB79+9yP86E47lZMMGM6AHtO 8xBtvnKH/bYFK4lDL5kbMTrwpjWvcGPSCfVGBeJMF0QcWYYLq/EEHEoZ3M7f0+Pp CgNBuXXO/6eXlK1S0/2TL1yBjsTwI/We6wOWoeE/oDSh+i7CkxAfGtu1bHK9fKGC HBEIJtQvb1E9cXdydQYgu7w3Ghcqne8K+qR1rIcD95bo7IvxCNx3BgNot5TdwDzr BTu58lW1bNTxtTkARuTy4RsYm5f2fgzr2w7RD5kra39nDkfBtCjN4dsvfwIDAQAB o4ICXjCCAlowHQYDVR0OBBYEFOrcl31dvlY0L3Kb/OyrfbxOhxc8MB8GA1UdIwQY MBaAFKSZkD2rhfall3Kz7f1L8OSRr1fEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC84ZWRhOWEtZDEzYy00NDMwLThjZjQt NTdlYzEyZTg2NDFlLzEvNnR5WGZWMi1WalF2Y3B2ODdLdDl2RTZIRnp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC84ZWRhOWEtZDEzYy00NDMwLThjZjQtNTdlYzEyZTg2NDFl LzEvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHQGCCsGAQUFBwEHAQH/BGUwYzBSBAIAATBMAwMAjScDAwC8 AQMEAMBMsAMEAMBsQzAMAwQAwGxFAwQDwGxAMAwDBAHAgRoDBAHAgRwDBADAgR8D AwHBrgMDAcJeAwMAwyUDAwDUyTANBAIAAjAHAwUAIAEGODANBgkqhkiG9w0BAQsF AAOCAQEAAxgf1YNL1uTwtVuaAphsn3P1M2D9Cd1exyBCXxOmOQlxX1LSSGl6BIMj 31Kj5OZRZGjxheJrZzlH0iRqR3w/9OaXJLrSAIEN5irhrH1zfL9zLwSw09qaz8t4 iRvR+hzALpVGNPTQPk2YI/gPX1DpFFRgrkgFLEHFZVBaI1EUCF5gp0coMN9D6LuW 1LcyplWPjPLooTwd8FqY4QyI7HqJnzXNoUfPmfZcDkMN/i5mKuX85MfB1Dmdooig 7cK0mw690M4vQo01Pc6/nkTInp5HDaiYgBNQKQVm7fZQEsPRxgjDjtr1sZGRGrj4 2gu73Td3q+PGinoz2z5VmviBrDe4Kw== -----END CERTIFICATE-----Generated at Mon Jan 26 13:11:05 2026 by rpki-client