This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/6VGmX6NAAFOzudHyly-8IFYoviU.roa File: 6VGmX6NAAFOzudHyly-8IFYoviU.roa (raw, json) Hash identifier: 5ULIL6QIhSxpM5aYkY52QRwqFOkWYUStaLXhPQEiLb4= Subject key identifier: E9:51:A6:5F:A3:40:00:53:B3:B9:D1:F2:97:2F:BC:20:56:28:BE:25 Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c Certificate serial: 019B797EB1FF632942D8515FF22DE1793673 Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/6VGmX6NAAFOzudHyly-8IFYoviU.roa Signing time: Thu 01 Jan 2026 12:18:24 +0000 ROA not before: Thu 01 Jan 2026 12:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2259 IP address blocks: 77.72.40.0/21 maxlen: 24 130.79.0.0/16 maxlen: 16 185.155.92.0/22 maxlen: 22 2a07:2e40::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b1:ff:63:29:42:d8:51:5f:f2:2d:e1:79:36:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c Validity Not Before: Jan 1 12:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e951a65fa3400053b3b9d1f2972fbc205628be25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:68:f4:7f:15:1e:2b:bc:77:26:a8:7b:57:bc: 51:be:c1:c8:80:a8:1f:4d:d9:77:b7:0d:02:26:91: ab:a6:e5:ce:87:e6:82:a4:18:0a:e6:12:0b:8e:d9: 33:df:18:f5:fe:c5:be:0d:84:b3:3e:80:4e:38:8c: ee:23:e1:85:7a:6c:df:b2:56:46:84:86:09:fd:03: 66:29:34:64:e4:cd:6c:ee:99:8b:b1:2d:99:66:02: a0:3a:c9:7d:01:b6:29:d5:c3:7b:ed:57:50:fa:d0: 8f:ef:84:b5:b4:80:5e:2f:09:75:69:f5:6d:40:81: f1:cb:33:0e:33:4c:5d:1d:ec:6b:64:83:39:bf:7c: 1b:b1:42:a6:c4:60:71:b6:2b:9e:88:77:6b:29:1f: 4b:1c:f8:ae:c5:12:1d:43:00:df:67:b7:f8:09:58: b2:b2:b4:be:7a:7f:2b:88:8b:4b:17:b3:e4:45:87: 65:3c:58:0b:ac:1a:3d:db:7d:2e:68:42:45:a1:23: ae:e9:82:14:a3:25:9b:25:e6:93:1a:49:9a:46:80: cc:09:e1:10:a4:b4:b0:e9:0d:6f:e2:e8:04:52:95: 75:c2:76:94:bc:88:b9:ef:91:2d:44:25:e1:24:6d: f4:b5:66:f2:77:22:e0:1e:19:20:bc:72:87:a7:05: 0a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:51:A6:5F:A3:40:00:53:B3:B9:D1:F2:97:2F:BC:20:56:28:BE:25 X509v3 Authority Key Identifier: keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/6VGmX6NAAFOzudHyly-8IFYoviU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.72.40.0/21 130.79.0.0/16 185.155.92.0/22 IPv6: 2a07:2e40::/29 Signature Algorithm: sha256WithRSAEncryption 44:a4:31:7c:58:f0:d5:88:8f:4f:7d:ca:a6:c4:25:db:3c:64: a3:87:03:cd:ea:57:b3:e1:49:73:de:43:23:8d:9b:75:f7:d9: 2a:33:b7:19:be:13:46:2f:1f:47:7f:1f:4f:a9:e6:57:fa:7f: 99:17:3d:3c:ac:fd:67:7d:57:3c:88:93:8e:e6:66:21:c8:20: f1:45:a5:7f:22:98:e7:5c:2e:b2:ce:0a:94:50:3f:15:a7:99: 3f:9a:8d:f6:95:6d:49:00:81:ff:3a:eb:93:ff:65:82:38:45: 1a:ca:a4:51:86:cd:4d:59:aa:fb:08:6a:37:79:a5:63:ba:22: a9:57:94:c0:d3:52:c3:9c:1d:7a:18:73:9b:d6:21:74:9a:fe: 63:65:d7:4a:e8:50:7f:e1:fd:5a:c1:71:45:10:d8:51:36:6a: 85:c6:5a:4a:c6:f4:73:94:f3:63:3b:4d:41:6c:04:07:0e:a6: fe:22:e4:e2:ca:f7:16:41:ce:57:78:3e:46:eb:b5:78:89:1c: 37:38:04:20:ff:72:b4:b5:ea:18:c9:ff:bd:fc:d9:ac:28:f2: a3:d8:94:f1:dc:b9:11:04:d5:a8:0f:e3:54:86:a8:12:6b:b5: 17:cd:45:eb:2e:ba:49:16:f8:65:fe:40:71:9c:0d:9e:45:9d: 1e:cf:98:e7 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt5frH/YylC2FFf8i3heTZzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NGFhY2FiOWE0OWUxNDNkZTY4OTc5YWQxNTZiNDJkYWJk ZGRlOGMwHhcNMjYwMTAxMTIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTUxYTY1ZmEzNDAwMDUzYjNiOWQxZjI5NzJmYmMyMDU2MjhiZTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2j0fxUeK7x3Jqh7V7xRvsHIgKgf Tdl3tw0CJpGrpuXOh+aCpBgK5hILjtkz3xj1/sW+DYSzPoBOOIzuI+GFemzfslZG hIYJ/QNmKTRk5M1s7pmLsS2ZZgKgOsl9AbYp1cN77VdQ+tCP74S1tIBeLwl1afVt QIHxyzMOM0xdHexrZIM5v3wbsUKmxGBxtiueiHdrKR9LHPiuxRIdQwDfZ7f4CViy srS+en8riItLF7PkRYdlPFgLrBo9230uaEJFoSOu6YIUoyWbJeaTGkmaRoDMCeEQ pLSw6Q1v4ugEUpV1wnaUvIi575EtRCXhJG30tWbydyLgHhkgvHKHpwUKCQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFOlRpl+jQABTs7nR8pcvvCBWKL4lMB8GA1UdIwQY MBaAFARKrKuaSeFD3miXmtFWtC2r3d6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDIt M2JiOTI2ODc2MDJjLzEvNlZHbVg2TkFBRk96dWRIeWx5LThJRllvdmlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDItM2JiOTI2ODc2MDJj LzEvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAXBAIAATARAwQDTUgoAwMA gk8DBAK5m1wwDQQCAAIwBwMFAyoHLkAwDQYJKoZIhvcNAQELBQADggEBAESkMXxY 8NWIj099yqbEJds8ZKOHA83qV7PhSXPeQyONm3X32Soztxm+E0YvH0d/H0+p5lf6 f5kXPTys/Wd9VzyIk47mZiHIIPFFpX8imOdcLrLOCpRQPxWnmT+ajfaVbUkAgf86 65P/ZYI4RRrKpFGGzU1ZqvsIajd5pWO6IqlXlMDTUsOcHXoYc5vWIXSa/mNl10ro UH/h/VrBcUUQ2FE2aoXGWkrG9HOU82M7TUFsBAcOpv4i5OLK9xZBzld4PkbrtXiJ HDc4BCD/crS16hjJ/7382awo8qPYlPHcuREE1agP41SGqBJrtRfNResuukkW+GX+ QHGcDZ5FnR7PmOc= -----END CERTIFICATE-----Generated at Mon Jan 26 06:33:23 2026 by rpki-client