This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/6pvytomNqHsLLYD7OQMEu9doj2E.roa File: 6pvytomNqHsLLYD7OQMEu9doj2E.roa (raw, json) Hash identifier: ZKKcLTfaN+1DtzpnC+rjNcITG695f+yTTLjsxMWlMy0= Subject key identifier: EA:9B:F2:B6:89:8D:A8:7B:0B:2D:80:FB:39:03:04:BB:D7:68:8F:61 Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F845E58DB8A7E3994EB118BAAFB198C Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/6pvytomNqHsLLYD7OQMEu9doj2E.roa Signing time: Fri 02 Jan 2026 16:22:19 +0000 ROA not before: Fri 02 Jan 2026 16:22:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33830 IP address blocks: 85.153.158.0/24 maxlen: 24 85.153.213.0/24 maxlen: 24 213.14.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:5e:58:db:8a:7e:39:94:eb:11:8b:aa:fb:19:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea9bf2b6898da87b0b2d80fb390304bbd7688f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:96:f6:89:97:b0:1c:d6:fc:cd:62:d4:05:f3: b3:be:c8:a0:ba:83:a2:d0:15:c7:24:c1:56:9b:74: a5:e6:cf:14:9e:83:49:77:df:53:f0:2e:34:59:62: 62:55:a3:39:63:5a:09:2e:52:65:52:f9:88:2d:02: e4:9d:8a:bf:26:76:37:ee:33:7e:ac:80:b5:a1:a2: 86:d3:4d:95:b1:6c:d7:84:db:bd:1f:33:cc:25:b1: 02:51:30:92:b6:89:6a:1e:9c:49:2d:11:64:d7:56: 50:21:07:ff:ac:4e:6c:b7:b0:49:4f:da:a0:01:24: 72:db:e9:fa:ae:b7:9c:cd:f9:dc:a0:30:fe:a3:be: 7c:9f:c4:d0:8c:7e:23:00:51:7b:aa:89:89:fa:f7: 50:bb:df:52:55:da:e6:19:66:09:e1:e6:ef:26:54: c9:95:9c:a8:aa:9f:9f:ae:fd:eb:49:f8:28:1a:98: 1e:5e:ce:4f:ac:4a:25:52:af:9f:df:59:65:0c:09: 32:a3:ff:bf:57:3c:bd:f2:23:89:05:9a:50:03:c3: 3b:f2:2f:b7:d0:30:d3:96:81:66:5f:74:b4:66:bd: 4c:91:b1:fd:68:63:8d:70:76:12:f3:fb:c3:d1:ca: a4:84:6c:8f:ef:04:fb:e3:ae:7c:4f:95:0d:73:6c: 42:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9B:F2:B6:89:8D:A8:7B:0B:2D:80:FB:39:03:04:BB:D7:68:8F:61 X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/6pvytomNqHsLLYD7OQMEu9doj2E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.153.158.0/24 85.153.213.0/24 213.14.215.0/24 Signature Algorithm: sha256WithRSAEncryption 35:fd:bf:9f:19:5a:2f:ff:9d:a3:d2:3e:46:fd:99:44:29:9a: 42:a9:2b:43:f0:e5:d7:1c:62:b2:60:fd:e6:84:6c:0e:91:49: ca:cd:27:ad:f7:0d:f9:54:70:59:58:9d:dd:e9:d9:6b:25:8c: ee:49:10:1a:13:ce:22:0e:53:f3:b3:d8:d1:c3:96:6c:ec:2b: 66:68:e0:92:86:bd:30:9e:6f:29:f7:6c:05:00:82:c3:0f:2d: fe:1e:30:2e:d3:c6:b9:58:b3:50:7f:7b:f6:46:83:e3:81:49: 22:c5:81:0c:c2:5a:9a:02:63:21:6c:3c:0c:68:87:eb:ab:ea: 14:c9:63:2f:d1:29:52:e2:9f:6e:29:52:2b:61:79:64:18:3b: 4d:24:2a:fb:1d:d1:80:bd:8e:58:98:7f:0b:c8:2f:9f:6a:d5: 9b:92:48:0b:34:3e:f2:77:18:18:7f:4b:42:74:5d:8d:fb:91: 1a:e7:80:34:6c:00:7b:e6:90:be:70:89:b7:a7:e7:60:5d:0f: 03:bf:a1:43:dd:59:5b:b0:67:13:03:fa:91:f2:8e:2b:31:f2: d9:d4:9c:aa:19:3f:d5:c4:bc:68:66:20:3d:38:2c:47:65:04: 3e:a5:5d:cd:79:23:05:43:88:82:fe:0c:e8:ac:a6:a7:aa:67: 9a:f7:c3:45 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hF5Y24p+OZTrEYuq+xmMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTliZjJiNjg5OGRhODdiMGIyZDgwZmIzOTAzMDRiYmQ3Njg4ZjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45b2iZewHNb8zWLUBfOzvsiguoOi 0BXHJMFWm3Sl5s8UnoNJd99T8C40WWJiVaM5Y1oJLlJlUvmILQLknYq/JnY37jN+ rIC1oaKG002VsWzXhNu9HzPMJbECUTCStolqHpxJLRFk11ZQIQf/rE5st7BJT9qg ASRy2+n6rreczfncoDD+o758n8TQjH4jAFF7qomJ+vdQu99SVdrmGWYJ4ebvJlTJ lZyoqp+frv3rSfgoGpgeXs5PrEolUq+f31llDAkyo/+/Vzy98iOJBZpQA8M78i+3 0DDTloFmX3S0Zr1MkbH9aGONcHYS8/vD0cqkhGyP7wT74658T5UNc2xCsQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOqb8raJjah7Cy2A+zkDBLvXaI9hMB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvNnB2eXRvbU5xSHNMTFlEN09RTUV1OWRvajJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVZmeAwQA VZnVAwQA1Q7XMA0GCSqGSIb3DQEBCwUAA4IBAQA1/b+fGVov/52j0j5G/ZlEKZpC qStD8OXXHGKyYP3mhGwOkUnKzSet9w35VHBZWJ3d6dlrJYzuSRAaE84iDlPzs9jR w5Zs7CtmaOCShr0wnm8p92wFAILDDy3+HjAu08a5WLNQf3v2RoPjgUkixYEMwlqa AmMhbDwMaIfrq+oUyWMv0SlS4p9uKVIrYXlkGDtNJCr7HdGAvY5YmH8LyC+fatWb kkgLND7ydxgYf0tCdF2N+5Ea54A0bAB75pC+cIm3p+dgXQ8Dv6FD3VlbsGcTA/qR 8o4rMfLZ1JyqGT/VxLxoZiA9OCxHZQQ+pV3NeSMFQ4iC/gzorKanqmea98NF -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:39 2026 by rpki-client