This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/6Zx9YtDEJ49JC-4b71_fvWtzw8s.roa File: 6Zx9YtDEJ49JC-4b71_fvWtzw8s.roa (raw, json) Hash identifier: o/A6dnRcU90/Ns+dOzz+UmVUTf5+OMsC+rgsisi5p8Q= Subject key identifier: E9:9C:7D:62:D0:C4:27:8F:49:0B:EE:1B:EF:5F:DF:BD:6B:73:C3:CB Certificate issuer: /CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b Certificate serial: 019B7CED2BA9D2EC3AF9B415A89ECF4CAD47 Authority key identifier: 4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/6Zx9YtDEJ49JC-4b71_fvWtzw8s.roa Signing time: Fri 02 Jan 2026 04:17:56 +0000 ROA not before: Fri 02 Jan 2026 04:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28857 IP address blocks: 195.78.52.0/23 maxlen: 24 2001:4b60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:2b:a9:d2:ec:3a:f9:b4:15:a8:9e:cf:4c:ad:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b Validity Not Before: Jan 2 04:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e99c7d62d0c4278f490bee1bef5fdfbd6b73c3cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:4f:43:d1:1b:d7:ef:f3:73:87:6b:9b:0a:85: 7b:9e:30:22:0c:04:43:e9:94:e3:ce:f3:0f:e6:fe: 6c:05:1c:4f:a0:0f:89:b7:3d:e6:91:45:3a:3b:cb: 3f:42:b1:a6:be:05:ca:c0:6d:5e:0e:f6:74:ec:98: ee:3f:68:ac:79:1c:4c:94:04:96:65:64:43:0d:a2: 73:9b:7b:ba:e8:77:65:63:85:44:ef:e9:89:47:40: d8:b9:51:c8:98:b5:88:fc:13:8e:30:64:03:37:e4: db:17:4a:53:ac:e7:e4:30:ab:be:9b:23:88:08:e1: a9:f2:b8:18:9c:a1:19:28:77:12:ba:ce:2d:79:4d: 52:ce:a3:1d:24:ae:b4:6c:9b:30:00:77:b9:d6:c6: 98:4d:4f:8a:e2:04:c4:20:8e:f8:c8:4d:1b:b9:0f: 6c:fd:54:40:75:21:ef:18:40:e3:b1:73:77:58:8e: 2a:9d:3e:06:3a:22:f6:9a:47:0b:db:63:50:40:e7: 4a:e7:49:ed:92:10:0b:7b:f9:0c:5d:51:62:17:7f: 58:1b:60:70:c7:45:be:8f:8f:af:f3:8c:51:ba:ca: de:2c:72:85:f1:df:46:30:6f:84:78:86:46:af:4f: 99:f5:35:03:03:ce:d4:81:b9:ab:c0:49:62:de:ba: cf:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9C:7D:62:D0:C4:27:8F:49:0B:EE:1B:EF:5F:DF:BD:6B:73:C3:CB X509v3 Authority Key Identifier: keyid:4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/6Zx9YtDEJ49JC-4b71_fvWtzw8s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.78.52.0/23 IPv6: 2001:4b60::/32 Signature Algorithm: sha256WithRSAEncryption 10:8f:af:73:7b:94:5a:ea:d4:36:f6:9f:f3:ad:d0:83:aa:7d: 76:81:8e:32:b6:7c:90:e7:df:5c:47:58:2d:83:2a:58:25:3e: ed:f1:88:d3:d8:22:27:07:54:55:54:10:ea:4d:e8:81:f8:cc: 61:5b:61:19:81:6b:ee:66:0e:ae:d0:bc:78:3d:8a:61:0b:d1: d6:db:2a:4c:fa:30:4e:c8:94:97:d3:50:b9:6a:7f:fa:15:4e: fe:c5:d1:19:16:df:ad:c3:4b:f7:3b:af:37:7e:7e:63:bd:48: e6:cc:e3:20:ce:dd:cc:18:50:f7:4f:0f:93:00:26:ca:5c:c2: 56:21:5b:97:1c:1d:ed:59:32:21:61:a4:14:0e:1e:04:a5:d0: eb:92:65:8d:a1:d3:43:8f:a1:18:82:47:e5:e7:a7:15:35:bf: 4c:a3:2f:57:c4:32:12:98:37:3c:71:8e:fe:f3:98:44:a2:4b: 9d:5b:cf:26:e8:23:a9:5e:47:2a:7b:9e:36:98:57:a2:25:63: d6:c5:81:a3:f1:39:47:d2:3f:ca:ca:ce:dd:1c:fc:20:5a:f7: ee:d4:66:6d:e1:6a:1e:be:72:62:eb:68:ab:cd:87:24:8c:05: a3:fa:d8:5b:1b:2f:1a:a4:b6:cf:72:2e:4c:74:82:68:cc:9c: 3e:77:db:12 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87Sup0uw6+bQVqJ7PTK1HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNjcyZDM5OTI5NzMxYWVkOWUwMWJjNWE5ZTZkNjgwZjQ2 NTlhMGIwHhcNMjYwMTAyMDQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTljN2Q2MmQwYzQyNzhmNDkwYmVlMWJlZjVmZGZiZDZiNzNjM2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+U9D0RvX7/Nzh2ubCoV7njAiDARD 6ZTjzvMP5v5sBRxPoA+Jtz3mkUU6O8s/QrGmvgXKwG1eDvZ07JjuP2iseRxMlASW ZWRDDaJzm3u66HdlY4VE7+mJR0DYuVHImLWI/BOOMGQDN+TbF0pTrOfkMKu+myOI COGp8rgYnKEZKHcSus4teU1SzqMdJK60bJswAHe51saYTU+K4gTEII74yE0buQ9s /VRAdSHvGEDjsXN3WI4qnT4GOiL2mkcL22NQQOdK50ntkhALe/kMXVFiF39YG2Bw x0W+j4+v84xRusreLHKF8d9GMG+EeIZGr0+Z9TUDA87UgbmrwEli3rrPVwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOmcfWLQxCePSQvuG+9f371rc8PLMB8GA1UdIwQY MBaAFE9nLTmSlzGu2eAbxanm1oD0ZZoLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDJjdE9aS1hNYTdaNEJ2RnFlYldnUFJsbWdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zNWMwYjktMjg1NS00YjIwLThjODAt N2UyODA3NTJkYTIxLzEvNlp4OVl0REVKNDlKQy00YjcxX2Z2V3R6dzhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zNWMwYjktMjg1NS00YjIwLThjODAtN2UyODA3NTJkYTIx LzEvVDJjdE9aS1hNYTdaNEJ2RnFlYldnUFJsbWdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBw040MA0E AgACMAcDBQAgAUtgMA0GCSqGSIb3DQEBCwUAA4IBAQAQj69ze5Ra6tQ29p/zrdCD qn12gY4ytnyQ599cR1gtgypYJT7t8YjT2CInB1RVVBDqTeiB+MxhW2EZgWvuZg6u 0Lx4PYphC9HW2ypM+jBOyJSX01C5an/6FU7+xdEZFt+tw0v3O683fn5jvUjmzOMg zt3MGFD3Tw+TACbKXMJWIVuXHB3tWTIhYaQUDh4EpdDrkmWNodNDj6EYgkfl56cV Nb9Moy9XxDISmDc8cY7+85hEokudW88m6COpXkcqe542mFeiJWPWxYGj8TlH0j/K ys7dHPwgWvfu1GZt4WoevnJi62irzYckjAWj+thbGy8apLbPci5MdIJozJw+d9sS -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:39 2026 by rpki-client