This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/x07d8_VNSnI0evnxPpkn3SJAFY4.roa File: x07d8_VNSnI0evnxPpkn3SJAFY4.roa (raw, json) Hash identifier: gSJPBpsS4DxCFyTg3NHyQead7Z1IOT6crgOT0rvN994= Subject key identifier: C7:4E:DD:F3:F5:4D:4A:72:34:7A:F9:F1:3E:99:27:DD:22:40:15:8E Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528 Certificate serial: 019B78343D44A1CA0F609F8CC5137C67732F Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/x07d8_VNSnI0evnxPpkn3SJAFY4.roa Signing time: Thu 01 Jan 2026 06:17:28 +0000 ROA not before: Thu 01 Jan 2026 06:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8412 IP address blocks: 86.62.32.0/22 maxlen: 24 94.16.18.0/23 maxlen: 24 94.16.28.0/23 maxlen: 24 185.81.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:3d:44:a1:ca:0f:60:9f:8c:c5:13:7c:67:73:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528 Validity Not Before: Jan 1 06:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c74eddf3f54d4a72347af9f13e9927dd2240158e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f5:60:97:21:bd:a5:2a:14:d5:4b:de:00:7b: c4:1e:35:a8:6e:fe:91:09:d9:c7:cb:32:29:51:1c: 10:f4:2a:9b:2f:70:52:80:1e:9a:cf:3b:a1:e3:f5: df:3a:1a:53:b1:42:3e:8f:ec:67:30:96:ab:b3:a5: e7:b8:1b:8c:a2:63:ad:5d:ca:d8:b6:4d:93:cc:5a: 24:8f:20:16:74:c8:97:9c:6e:e8:d3:64:dc:0c:a1: 9e:a2:cd:f4:b9:89:de:9c:af:d5:f9:f0:60:30:db: 8b:6f:6f:74:6f:0d:d6:e1:cf:fe:73:52:81:89:dc: 43:70:7e:05:5c:31:8f:0d:d8:01:ef:8b:95:a6:eb: ec:51:b3:66:11:38:40:a1:9e:3c:0f:00:bd:fb:e7: 4a:68:d8:02:49:76:6c:71:d9:c8:bc:df:63:48:a6: 4e:79:ee:04:2e:e6:b3:2e:68:76:bc:64:d3:9c:0b: a8:f9:1b:a9:57:bb:a9:df:fb:f5:69:8d:f1:d2:d7: 8c:f4:1c:f3:98:8f:c1:5f:37:20:94:a0:2b:92:e3: 12:76:53:50:a0:79:ad:46:9f:1e:ec:07:13:80:1e: 6c:06:a1:31:e3:57:ed:c4:94:6a:16:88:22:61:77: 0a:3c:7a:45:9e:0a:f0:9f:22:99:b8:af:bb:57:4a: b1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4E:DD:F3:F5:4D:4A:72:34:7A:F9:F1:3E:99:27:DD:22:40:15:8E X509v3 Authority Key Identifier: keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/x07d8_VNSnI0evnxPpkn3SJAFY4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.62.32.0/22 94.16.18.0/23 94.16.28.0/23 185.81.210.0/23 Signature Algorithm: sha256WithRSAEncryption d6:46:5e:19:85:5a:c0:fc:f7:13:7a:bd:ff:07:82:c7:7a:74: 93:95:e0:7a:8d:fd:bc:05:dd:8f:83:76:fb:dd:61:a3:26:1e: c1:76:56:ed:80:5a:e2:d6:12:8c:40:cb:1f:44:91:84:c3:81: 61:93:3f:25:a3:8b:0d:29:ff:e8:53:c3:0a:e4:ea:64:b1:05: e1:a4:eb:8d:25:26:4c:fe:7e:e3:46:e0:d0:76:ca:8a:26:a0: fa:7d:f4:ba:d8:30:e2:26:4e:b6:26:6b:6c:8d:38:57:1b:f6: b0:35:17:41:50:c2:0e:f1:ee:50:d1:69:9d:3d:c5:6c:95:55: 23:e7:d8:b5:cd:05:a9:16:dc:ac:35:2c:42:a1:3e:a5:b8:cb: 35:72:32:a2:2c:0c:07:c5:fa:ac:2b:cf:7d:a7:87:73:b2:c6: 2b:0f:de:20:3a:e5:a9:bd:5a:76:e5:af:29:0a:b1:b8:46:b3: 67:08:4d:a1:08:19:7a:56:d9:99:0a:60:40:d1:5f:d8:8c:99: 39:ef:f0:fe:9c:7a:ea:e5:25:10:89:ac:9c:9f:43:54:bb:13: bf:3a:74:fd:2f:c9:f2:bf:62:9f:77:f2:38:bc:c0:50:12:30: 2c:65:66:1d:f0:2d:c0:79:09:a7:10:2b:6d:38:f0:53:9d:bd: 68:e6:62:d5 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4ND1EocoPYJ+MxRN8Z3MvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MzlhZmViYWNlODk5YThlZTBiYjRmOGJiNDQ3NWZlMjQ3 YTE1MjgwHhcNMjYwMTAxMDYxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzRlZGRmM2Y1NGQ0YTcyMzQ3YWY5ZjEzZTk5MjdkZDIyNDAxNThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPVglyG9pSoU1UveAHvEHjWobv6R CdnHyzIpURwQ9CqbL3BSgB6azzuh4/XfOhpTsUI+j+xnMJars6XnuBuMomOtXcrY tk2TzFokjyAWdMiXnG7o02TcDKGeos30uYnenK/V+fBgMNuLb290bw3W4c/+c1KB idxDcH4FXDGPDdgB74uVpuvsUbNmEThAoZ48DwC9++dKaNgCSXZscdnIvN9jSKZO ee4ELuazLmh2vGTTnAuo+RupV7up3/v1aY3x0teM9BzzmI/BXzcglKArkuMSdlNQ oHmtRp8e7AcTgB5sBqEx41ftxJRqFogiYXcKPHpFngrwnyKZuK+7V0qxJwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFMdO3fP1TUpyNHr58T6ZJ90iQBWOMB8GA1UdIwQY MBaAFKU5r+us6Jmo7gu0+LtEdf4kehUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYt NzQxMzk1OTEzMTJlLzEveDA3ZDhfVk5TbkkwZXZueFBwa24zU0pBRlk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYtNzQxMzk1OTEzMTJl LzEvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCVj4gAwQB XhASAwQBXhAcAwQBuVHSMA0GCSqGSIb3DQEBCwUAA4IBAQDWRl4ZhVrA/PcTer3/ B4LHenSTleB6jf28Bd2Pg3b73WGjJh7BdlbtgFri1hKMQMsfRJGEw4Fhkz8lo4sN Kf/oU8MK5OpksQXhpOuNJSZM/n7jRuDQdsqKJqD6ffS62DDiJk62JmtsjThXG/aw NRdBUMIO8e5Q0WmdPcVslVUj59i1zQWpFtysNSxCoT6luMs1cjKiLAwHxfqsK899 p4dzssYrD94gOuWpvVp25a8pCrG4RrNnCE2hCBl6VtmZCmBA0V/YjJk57/D+nHrq 5SUQiaycn0NUuxO/OnT9L8nyv2Kfd/I4vMBQEjAsZWYd8C3AeQmnECttOPBTnb1o 5mLV -----END CERTIFICATE-----Generated at Mon Jan 26 07:42:44 2026 by rpki-client