This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/6yXvB2mZ6DFLBKqtlv0jb3RhyEI.roa File: 6yXvB2mZ6DFLBKqtlv0jb3RhyEI.roa (raw, json) Hash identifier: 4T1luSU4DmiSKE8Cb9puNxoiNBazFMCURFxFQNY966Y= Subject key identifier: EB:25:EF:07:69:99:E8:31:4B:04:AA:AD:96:FD:23:6F:74:61:C8:42 Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b Certificate serial: 019B7CED4A427EE31325B5B66B0C307375C3 Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/6yXvB2mZ6DFLBKqtlv0jb3RhyEI.roa Signing time: Fri 02 Jan 2026 04:18:04 +0000 ROA not before: Fri 02 Jan 2026 04:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29119 IP address blocks: 5.252.92.0/24 maxlen: 24 5.253.158.0/24 maxlen: 24 5.253.159.0/24 maxlen: 24 62.122.228.0/22 maxlen: 22 62.122.228.0/24 maxlen: 24 62.122.230.0/24 maxlen: 24 62.122.231.0/24 maxlen: 24 91.210.126.0/24 maxlen: 24 185.210.192.0/24 maxlen: 24 185.218.160.0/24 maxlen: 24 185.218.161.0/24 maxlen: 24 185.218.162.0/24 maxlen: 24 185.218.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:4a:42:7e:e3:13:25:b5:b6:6b:0c:30:73:75:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b Validity Not Before: Jan 2 04:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb25ef076999e8314b04aaad96fd236f7461c842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f5:7b:f5:a0:a7:5e:44:40:c4:89:15:4f:f1: ea:a3:ce:68:ed:17:6a:68:04:85:bf:88:29:ea:8d: 93:21:1b:3b:47:67:8f:a4:1b:a1:37:d1:5b:60:17: 0c:64:32:7d:7e:06:83:84:73:eb:11:0b:92:ca:7c: 1a:1a:6e:d5:79:5b:53:98:e4:cf:a9:e3:aa:e1:55: 92:a8:b8:6b:ec:45:c6:ab:33:a7:c7:ca:b1:8d:e9: 18:a8:4e:fd:01:ac:74:80:52:ee:f7:bd:05:2f:b8: bd:e8:35:0d:cc:e6:71:19:c9:df:cb:ec:dd:62:56: 12:f4:9e:6d:f0:5c:4f:92:ab:f1:f0:e2:23:af:59: 2e:60:50:d4:45:03:a9:c6:3c:22:f1:87:f8:2f:83: 3d:ed:30:3f:6c:60:95:39:f3:bd:e4:92:50:f9:a3: 0f:ac:16:28:f7:31:6a:d2:f1:34:fa:8c:62:f3:d3: f1:4f:08:d4:15:66:6b:2f:8d:85:c1:a6:af:be:1c: f7:0d:44:ab:7b:63:f9:89:82:e6:8c:7f:13:ff:7b: 68:f9:af:0b:54:40:29:81:6e:b2:ee:81:c9:13:49: c4:78:41:53:12:d6:73:68:0b:4d:ac:1c:be:4a:e1: bb:03:e9:87:3f:a7:8b:56:03:35:3a:8f:ca:b5:0f: 71:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:25:EF:07:69:99:E8:31:4B:04:AA:AD:96:FD:23:6F:74:61:C8:42 X509v3 Authority Key Identifier: keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/6yXvB2mZ6DFLBKqtlv0jb3RhyEI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.92.0/24 5.253.158.0/23 62.122.228.0/22 91.210.126.0/24 185.210.192.0/24 185.218.160.0/22 Signature Algorithm: sha256WithRSAEncryption c8:6f:51:85:6a:ec:29:17:be:b7:86:51:91:23:c2:26:ca:8c: 53:66:fe:08:9a:19:00:43:65:53:02:6d:99:d3:50:6c:05:d4: 3f:68:a4:31:3f:68:a2:93:d9:c7:88:98:ec:67:2f:0b:74:69: 90:02:27:32:71:ab:0f:66:e2:56:c8:c0:b4:c4:41:ce:c9:72: ec:1c:ec:a0:f9:5a:6f:36:68:2d:ed:98:b9:c0:e4:b8:e9:b5: d0:8b:c3:1d:2c:9b:69:76:c3:70:1a:f7:00:af:3a:c3:88:c0: e7:85:10:2a:42:f0:f3:57:85:b9:c3:40:38:88:49:2f:06:7a: 8d:25:04:d7:07:d1:df:16:70:41:01:9c:17:26:0d:5f:4d:35: e5:e4:69:1d:5c:2a:7e:1a:55:84:5c:a6:e3:15:cd:02:34:bf: ec:af:b0:66:06:16:0c:18:fe:ac:f5:5d:30:5a:51:0a:55:67: bf:47:94:fd:79:e4:c9:76:39:79:cd:1f:9a:db:62:37:9d:21: 0b:84:20:23:7e:77:49:0a:d7:37:63:b3:22:43:e9:92:03:75: ce:21:7d:b5:fc:cf:75:29:de:f4:9d:30:3c:db:71:b5:e0:89: fa:50:f7:cf:d0:ef:a2:e8:e8:3d:08:e4:5e:9b:1a:2b:1d:c9: 53:f4:8e:31 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt87UpCfuMTJbW2awwwc3XDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NzAyMWRjZGY0NGI2YWZkZDM4MTA1NDdjNTVhNzliZDFh OWZhM2IwHhcNMjYwMTAyMDQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjI1ZWYwNzY5OTllODMxNGIwNGFhYWQ5NmZkMjM2Zjc0NjFjODQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/V79aCnXkRAxIkVT/Hqo85o7Rdq aASFv4gp6o2TIRs7R2ePpBuhN9FbYBcMZDJ9fgaDhHPrEQuSynwaGm7VeVtTmOTP qeOq4VWSqLhr7EXGqzOnx8qxjekYqE79Aax0gFLu970FL7i96DUNzOZxGcnfy+zd YlYS9J5t8FxPkqvx8OIjr1kuYFDURQOpxjwi8Yf4L4M97TA/bGCVOfO95JJQ+aMP rBYo9zFq0vE0+oxi89PxTwjUFWZrL42Fwaavvhz3DUSre2P5iYLmjH8T/3to+a8L VEApgW6y7oHJE0nEeEFTEtZzaAtNrBy+SuG7A+mHP6eLVgM1Oo/KtQ9xwwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFOsl7wdpmegxSwSqrZb9I290YchCMB8GA1UdIwQY MBaAFFdwIdzfRLav3TgQVHxVp5vRqfo7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wYWMyN2EtMjE1OS00OGQ3LThiZmQt YzkwN2FlMWMyMTFlLzEvNnlYdkIybVo2REZMQktxdGx2MGpiM1JoeUVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8wYWMyN2EtMjE1OS00OGQ3LThiZmQtYzkwN2FlMWMyMTFl LzEvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQABfxcAwQB Bf2eAwQCPnrkAwQAW9J+AwQAudLAAwQCudqgMA0GCSqGSIb3DQEBCwUAA4IBAQDI b1GFauwpF763hlGRI8ImyoxTZv4ImhkAQ2VTAm2Z01BsBdQ/aKQxP2iik9nHiJjs Zy8LdGmQAicycasPZuJWyMC0xEHOyXLsHOyg+VpvNmgt7Zi5wOS46bXQi8MdLJtp dsNwGvcArzrDiMDnhRAqQvDzV4W5w0A4iEkvBnqNJQTXB9HfFnBBAZwXJg1fTTXl 5GkdXCp+GlWEXKbjFc0CNL/sr7BmBhYMGP6s9V0wWlEKVWe/R5T9eeTJdjl5zR+a 22I3nSELhCAjfndJCtc3Y7MiQ+mSA3XOIX21/M91Kd70nTA823G14In6UPfP0O+i 6Og9CORemxorHclT9I4x -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:16 2026 by rpki-client