This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/6E55Dxslc1xUwoydNHNZM4ZExZY.roa File: 6E55Dxslc1xUwoydNHNZM4ZExZY.roa (raw, json) Hash identifier: sNvH8Do1xMuJUTpDkj9TMIXCGe+B5BVTB4O2xk57j68= Subject key identifier: E8:4E:79:0F:1B:25:73:5C:54:C2:8C:9D:34:73:59:33:86:44:C5:96 Certificate issuer: /CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded Certificate serial: 019B7F13A96728484903B272121F9A4DAAAA Authority key identifier: BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/6E55Dxslc1xUwoydNHNZM4ZExZY.roa Signing time: Fri 02 Jan 2026 14:19:13 +0000 ROA not before: Fri 02 Jan 2026 14:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199408 IP address blocks: 91.195.0.0/23 maxlen: 23 91.195.1.0/24 maxlen: 24 185.14.168.0/22 maxlen: 22 2a03:aec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:a9:67:28:48:49:03:b2:72:12:1f:9a:4d:aa:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded Validity Not Before: Jan 2 14:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e84e790f1b25735c54c28c9d347359338644c596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:15:b8:91:c6:6d:ff:62:c0:af:de:c1:77:77: 83:36:11:d5:0b:60:1e:0b:6f:11:a6:b2:75:fc:34: 20:48:49:93:74:f2:d5:a9:e6:ec:27:e1:df:a8:e8: f3:b2:1f:b8:23:18:0e:c0:50:89:2a:81:fc:44:1c: 0d:bd:32:38:5f:56:a4:75:b0:07:ca:0c:23:5f:a4: ac:fe:73:68:03:6d:13:2c:dc:4f:d5:fb:eb:ff:a3: fa:40:d3:29:98:6d:30:5a:bb:cc:8b:f0:2b:a7:6e: 5f:96:12:1d:d2:76:84:48:ac:ba:dc:0b:7f:50:2b: b3:50:bc:9e:8e:94:4c:fa:93:09:cc:75:70:3e:11: 3a:ca:47:e0:09:f4:7e:5a:2a:01:16:76:86:90:07: eb:35:58:2b:85:ea:08:be:53:16:0d:e8:31:12:3b: 52:5b:3f:40:fd:32:ba:66:f9:53:a6:d0:63:a1:51: 42:2c:19:cc:d9:6d:91:8c:ea:0a:d9:18:6b:98:65: 88:c1:89:11:f1:bb:ba:84:19:2e:0e:68:b5:28:65: 2b:c6:76:80:b0:85:95:24:ab:17:4f:fb:84:aa:ac: 6e:9b:c9:e2:67:a2:b1:25:ed:90:ab:12:8d:1b:ab: f5:24:59:03:f9:b1:c8:48:9d:5c:2e:df:5d:80:60: c7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:4E:79:0F:1B:25:73:5C:54:C2:8C:9D:34:73:59:33:86:44:C5:96 X509v3 Authority Key Identifier: keyid:BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/6E55Dxslc1xUwoydNHNZM4ZExZY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.0.0/23 185.14.168.0/22 IPv6: 2a03:aec0::/32 Signature Algorithm: sha256WithRSAEncryption 68:d1:98:c3:ec:68:e7:ea:fd:8f:65:99:52:8e:96:4a:bb:db: 24:e2:3e:56:97:d5:4d:4e:71:f4:0a:e2:9c:97:d4:c1:d7:9f: dc:8a:93:4c:27:40:93:d9:54:df:80:a4:5a:0e:3e:09:3a:2c: 1e:4b:6b:e5:c1:79:a6:47:48:db:d8:b8:12:4a:68:5d:2d:c5: de:11:a1:a2:b1:28:30:f8:d2:cb:1a:ae:64:2a:2e:04:3f:98: f8:78:09:b4:34:96:44:0c:79:03:5f:bb:d8:a5:e6:e3:09:8e: 2b:a6:4e:cd:f4:1a:62:94:da:c9:bb:71:1f:85:a0:0e:80:c7: a0:b5:d6:6e:9f:a4:a9:19:e4:55:92:45:ab:cd:54:a1:7c:2f: 61:9f:18:de:d9:18:17:16:e1:5f:7a:a2:12:34:6b:7e:3a:b0: 06:80:45:fa:3b:be:92:10:d3:d9:11:a8:6f:d5:30:73:57:6a: 3d:b7:cd:4f:07:73:88:98:99:1f:6c:5c:a4:03:52:29:57:b5: 3c:dd:88:ee:18:b9:3e:33:e0:80:5c:5c:9e:f7:75:4e:3a:cb: 44:65:64:c4:31:01:4c:82:dc:6b:d2:1d:37:15:3b:17:d4:3e: 25:dd:8e:f3:be:88:34:d3:b8:fc:77:29:0c:19:d4:c3:08:cb: 2e:eb:73:82 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/E6lnKEhJA7JyEh+aTaqqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNGJiZDMzNDU4MWRkY2RkOTM1YmNlZjQ3ZDlhMDRjYmNl NWZkZWQwHhcNMjYwMTAyMTQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODRlNzkwZjFiMjU3MzVjNTRjMjhjOWQzNDczNTkzMzg2NDRjNTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxW4kcZt/2LAr97Bd3eDNhHVC2Ae C28RprJ1/DQgSEmTdPLVqebsJ+HfqOjzsh+4IxgOwFCJKoH8RBwNvTI4X1akdbAH ygwjX6Ss/nNoA20TLNxP1fvr/6P6QNMpmG0wWrvMi/Arp25flhId0naESKy63At/ UCuzULyejpRM+pMJzHVwPhE6ykfgCfR+WioBFnaGkAfrNVgrheoIvlMWDegxEjtS Wz9A/TK6ZvlTptBjoVFCLBnM2W2RjOoK2RhrmGWIwYkR8bu6hBkuDmi1KGUrxnaA sIWVJKsXT/uEqqxum8niZ6KxJe2QqxKNG6v1JFkD+bHISJ1cLt9dgGDH6QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOhOeQ8bJXNcVMKMnTRzWTOGRMWWMB8GA1UdIwQY MBaAFLtLvTNFgd3N2TW870fZoEy85f3tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTB1OU0wV0IzYzNaTmJ6dlI5bWdUTHpsX2UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83YTdjZTYtMDZhNi00MWQzLWI1ZmEt OTcxNzRhOTZlODE1LzEvNkU1NUR4c2xjMXhVd295ZE5ITlpNNFpFeFpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC83YTdjZTYtMDZhNi00MWQzLWI1ZmEtOTcxNzRhOTZlODE1 LzEvdTB1OU0wV0IzYzNaTmJ6dlI5bWdUTHpsX2UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBW8MAAwQC uQ6oMA0EAgACMAcDBQAqA67AMA0GCSqGSIb3DQEBCwUAA4IBAQBo0ZjD7Gjn6v2P ZZlSjpZKu9sk4j5Wl9VNTnH0CuKcl9TB15/cipNMJ0CT2VTfgKRaDj4JOiweS2vl wXmmR0jb2LgSSmhdLcXeEaGisSgw+NLLGq5kKi4EP5j4eAm0NJZEDHkDX7vYpebj CY4rpk7N9BpilNrJu3EfhaAOgMegtdZun6SpGeRVkkWrzVShfC9hnxje2RgXFuFf eqISNGt+OrAGgEX6O76SENPZEahv1TBzV2o9t81PB3OImJkfbFykA1IpV7U83Yju GLk+M+CAXFye93VOOstEZWTEMQFMgtxr0h03FTsX1D4l3Y7zvog007j8dykMGdTD CMsu63OC -----END CERTIFICATE-----Generated at Mon Jan 26 04:40:20 2026 by rpki-client