This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/Te6cIbUUusPhjEpjZLV30Q4irW8.roa File: Te6cIbUUusPhjEpjZLV30Q4irW8.roa (raw, json) Hash identifier: cM0qzNPxtkyPtYXGSyvQf0/VwJhZ/7yblxzGGTP8Rew= Subject key identifier: 4D:EE:9C:21:B5:14:BA:C3:E1:8C:4A:63:64:B5:77:D1:0E:22:AD:6F Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Certificate serial: 019B7C80811E44F604EC5CD0B37CDC88A521 Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/Te6cIbUUusPhjEpjZLV30Q4irW8.roa Signing time: Fri 02 Jan 2026 02:19:14 +0000 ROA not before: Fri 02 Jan 2026 02:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202766 IP address blocks: 77.72.104.0/21 maxlen: 24 84.18.0.0/19 maxlen: 24 92.60.160.0/20 maxlen: 24 176.98.220.0/22 maxlen: 24 185.66.60.0/22 maxlen: 24 185.145.224.0/22 maxlen: 24 185.155.64.0/22 maxlen: 24 185.173.44.0/22 maxlen: 24 185.187.180.0/22 maxlen: 24 185.224.76.0/22 maxlen: 24 193.34.240.0/22 maxlen: 24 195.5.64.0/19 maxlen: 24 195.5.64.0/24 maxlen: 24 195.5.65.0/24 maxlen: 24 195.5.66.0/24 maxlen: 24 195.5.67.0/24 maxlen: 24 212.49.128.0/18 maxlen: 24 212.66.161.0/24 maxlen: 24 212.66.162.0/23 maxlen: 24 212.66.164.0/22 maxlen: 24 212.66.168.0/21 maxlen: 24 212.66.176.0/20 maxlen: 24 212.163.0.0/16 maxlen: 24 213.9.128.0/17 maxlen: 24 213.192.192.0/18 maxlen: 24 213.192.203.0/24 maxlen: 24 2001:ac0::/29 maxlen: 48 2001:ac0::/32 maxlen: 48 2a0d:59c1::/32 maxlen: 32 2a0d:59c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:81:1e:44:f6:04:ec:5c:d0:b3:7c:dc:88:a5:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Validity Not Before: Jan 2 02:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4dee9c21b514bac3e18c4a6364b577d10e22ad6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4c:43:fa:64:b9:4a:bd:45:f7:f6:ad:62:1e: 40:52:3f:01:e4:b2:21:ec:c8:ee:b8:c3:79:8c:be: 44:e9:63:2f:b2:fc:de:25:4c:05:2b:f4:e3:44:c6: 94:54:87:87:f9:a5:21:cb:14:83:06:84:41:d9:43: 9e:f7:a5:f5:f7:83:74:2d:9d:91:0b:ec:9a:87:3b: 43:4c:29:76:39:1a:70:7e:c9:85:b4:4c:6e:c6:fd: 28:fa:90:f1:bb:bc:6d:64:db:23:81:ba:50:74:32: bd:0e:bc:2b:35:48:38:39:7c:be:2b:7c:97:bc:b4: 77:04:ec:a4:f0:c5:9a:f3:97:69:43:05:e0:2f:65: 4c:4e:a9:c2:27:db:3f:7b:a7:6d:1d:3f:d4:26:ae: ef:25:99:2e:61:64:28:ad:b5:26:f3:f0:10:42:f5: 6a:a0:05:bc:ef:8f:b7:40:31:ef:63:09:c8:46:f2: 3a:5d:dd:11:b8:df:ad:74:1f:a0:cb:c3:ae:21:8a: dc:49:05:9e:e3:f2:14:6c:6d:39:0a:dd:9d:62:8c: 21:ba:79:15:28:88:f0:5d:c2:40:f8:9c:75:92:85: 3b:f2:41:8a:9f:fc:ea:51:89:a9:2a:06:ef:99:7a: bf:b5:b7:94:34:b6:cb:38:d0:de:3a:2f:66:7a:d4: c3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:EE:9C:21:B5:14:BA:C3:E1:8C:4A:63:64:B5:77:D1:0E:22:AD:6F X509v3 Authority Key Identifier: keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/Te6cIbUUusPhjEpjZLV30Q4irW8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.72.104.0/21 84.18.0.0/19 92.60.160.0/20 176.98.220.0/22 185.66.60.0/22 185.145.224.0/22 185.155.64.0/22 185.173.44.0/22 185.187.180.0/22 185.224.76.0/22 193.34.240.0/22 195.5.64.0/19 212.49.128.0/18 212.66.161.0-212.66.191.255 212.163.0.0/16 213.9.128.0/17 213.192.192.0/18 IPv6: 2001:ac0::/29 2a0d:59c1::/32 2a0d:59c7::/32 Signature Algorithm: sha256WithRSAEncryption 6f:8b:25:87:86:89:85:fb:b7:09:c8:a4:38:b4:0d:2f:68:7a: d7:2e:b7:67:c4:db:2d:81:d7:c4:78:b7:26:16:32:7a:98:a1: b6:c1:89:91:30:f5:16:0b:e7:37:c3:1b:67:40:99:79:05:bb: 9a:65:23:df:7c:6d:a3:60:37:93:2b:0d:fa:ec:d2:5d:b6:fd: ce:93:d7:08:79:f1:b9:67:4e:7c:c6:3c:36:a0:0c:a2:f6:2d: 49:ce:e6:bf:cc:2d:ba:5b:f9:2a:6c:3f:1c:30:23:a2:51:51: fb:ce:9b:36:a4:b0:00:80:76:95:a6:60:5f:a0:de:10:19:70: d2:0f:75:0e:fb:b9:49:88:11:be:52:e7:15:e6:28:68:80:28: 37:ce:73:06:c2:10:4e:e3:ea:e4:cf:31:6d:ff:d9:49:db:33: 12:9c:c0:c9:04:8e:51:c7:37:aa:ec:6d:f7:d3:17:71:fd:cd: 32:8f:1d:be:e1:8b:2e:3a:af:ca:9c:9a:86:af:cf:6e:2b:0a: 0e:20:88:c7:09:09:01:26:eb:55:2f:92:29:30:d9:f5:d1:49: 03:e7:e0:3f:c7:84:5c:b2:89:60:90:66:10:6a:29:68:77:e0: 7a:f0:ba:f1:3b:02:76:70:85:69:b6:7d:6d:64:0d:1e:37:15: d6:13:32:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt8gIEeRPYE7FzQs3zciKUhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQ5NjFmNjdmMjJjNjFlODRhNjZjOGFkOWMxYThjZTUx ZDA5OWIwHhcNMjYwMTAyMDIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGVlOWMyMWI1MTRiYWMzZTE4YzRhNjM2NGI1NzdkMTBlMjJhZDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0xD+mS5Sr1F9/atYh5AUj8B5LIh 7MjuuMN5jL5E6WMvsvzeJUwFK/TjRMaUVIeH+aUhyxSDBoRB2UOe96X194N0LZ2R C+yahztDTCl2ORpwfsmFtExuxv0o+pDxu7xtZNsjgbpQdDK9DrwrNUg4OXy+K3yX vLR3BOyk8MWa85dpQwXgL2VMTqnCJ9s/e6dtHT/UJq7vJZkuYWQorbUm8/AQQvVq oAW874+3QDHvYwnIRvI6Xd0RuN+tdB+gy8OuIYrcSQWe4/IUbG05Ct2dYowhunkV KIjwXcJA+Jx1koU78kGKn/zqUYmpKgbvmXq/tbeUNLbLONDeOi9metTDKwIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFE3unCG1FLrD4YxKY2S1d9EOIq1vMB8GA1UdIwQY MBaAFLkUlh9n8ixh6EpmyK2cGozlHQmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTIt Mjc0NzNjYTYxMmRlLzEvVGU2Y0liVVV1c1BoakVwalpMVjMwUTRpclc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTItMjc0NzNjYTYxMmRl LzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGlBggrBgEFBQcBBwEB/wSBlTCBkjBzBAIAATBtAwQDTUho AwQFVBIAAwQEXDygAwQCsGLcAwQCuUI8AwQCuZHgAwQCuZtAAwQCua0sAwQCubu0 AwQCueBMAwQCwSLwAwQFwwVAAwQG1DGAMAwDBADUQqEDBAbUQoADAwDUowMEB9UJ gAMEBtXAwDAbBAIAAjAVAwUDIAEKwAMFACoNWcEDBQAqDVnHMA0GCSqGSIb3DQEB CwUAA4IBAQBviyWHhomF+7cJyKQ4tA0vaHrXLrdnxNstgdfEeLcmFjJ6mKG2wYmR MPUWC+c3wxtnQJl5BbuaZSPffG2jYDeTKw367NJdtv3Ok9cIefG5Z058xjw2oAyi 9i1Jzua/zC26W/kqbD8cMCOiUVH7zps2pLAAgHaVpmBfoN4QGXDSD3UO+7lJiBG+ UucV5ihogCg3znMGwhBO4+rkzzFt/9lJ2zMSnMDJBI5Rxzeq7G330xdx/c0yjx2+ 4YsuOq/KnJqGr89uKwoOIIjHCQkBJutVL5IpMNn10UkD5+A/x4RcsolgkGYQailo d+B68LrxOwJ2cIVptn1tZA0eNxXWEzK8 -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:35 2026 by rpki-client