This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/J6Yf-XEMdU1hAP8gTvORqXsiwfg.roa File: J6Yf-XEMdU1hAP8gTvORqXsiwfg.roa (raw, json) Hash identifier: tuKG0Q/K/MazD1Ebb2lHBYiAhITNLHJRfLKALl+W1X8= Subject key identifier: 27:A6:1F:F9:71:0C:75:4D:61:00:FF:20:4E:F3:91:A9:7B:22:C1:F8 Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019B78A2D4E74D6484FCE5AD828B4EB797AE Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/J6Yf-XEMdU1hAP8gTvORqXsiwfg.roa Signing time: Thu 01 Jan 2026 08:18:15 +0000 ROA not before: Thu 01 Jan 2026 08:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401434 IP address blocks: 89.185.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:d4:e7:4d:64:84:fc:e5:ad:82:8b:4e:b7:97:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Jan 1 08:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27a61ff9710c754d6100ff204ef391a97b22c1f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:25:76:d6:52:5c:61:6b:12:4b:01:37:9b:18: 3c:ab:2a:37:b9:56:e6:65:9a:5f:26:02:8b:55:61: 7b:49:d5:68:6d:33:b0:2d:11:a5:bb:1b:29:78:2c: 2e:16:68:31:77:5b:04:a1:c9:82:57:21:c9:c7:29: de:7b:6d:6e:1c:15:45:67:f5:c3:1e:4f:09:10:22: ed:20:7f:7d:d3:05:6a:84:5a:1a:1a:88:ec:33:ab: fb:cc:9a:d3:13:9b:3e:a5:cd:c6:12:26:f7:89:10: 08:25:dc:b1:47:3a:a6:82:ef:0b:9e:15:42:00:13: 8b:a5:1c:13:73:0f:f9:a5:04:26:6f:7d:54:63:ad: 73:4e:c6:5c:fb:ef:f0:ca:cf:15:f0:45:34:e2:4b: ea:0e:45:7d:8d:68:bd:d6:d0:2e:51:4b:5a:60:55: 94:c8:d5:e9:c0:fe:d0:a3:f0:b3:db:71:0e:62:9b: 52:0f:ad:49:d9:1d:0e:6f:23:67:25:8a:63:98:66: 26:64:29:52:cc:19:4f:25:42:a2:82:be:aa:d2:29: 54:68:3e:ea:06:0e:27:fe:fb:1d:ee:a1:1a:03:42: a7:1e:73:0a:82:2d:8e:f1:ca:9b:f6:b1:a4:f5:1c: bf:e8:d1:e7:26:7d:46:0a:f2:66:a3:14:cf:8d:50: 06:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A6:1F:F9:71:0C:75:4D:61:00:FF:20:4E:F3:91:A9:7B:22:C1:F8 X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/J6Yf-XEMdU1hAP8gTvORqXsiwfg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.28.0/22 Signature Algorithm: sha256WithRSAEncryption 36:ca:86:87:ff:12:84:df:9b:82:37:ab:6d:c1:b4:c8:72:b6: de:55:89:02:69:dd:ed:a4:b9:81:2e:ac:93:fb:ca:97:c1:da: 6b:5f:7a:ce:28:d3:c2:6c:a9:5a:4e:a3:54:9f:e2:a5:d7:8f: b8:e2:6c:3b:62:0b:f9:5a:d5:36:87:1a:fe:7b:40:b4:d0:50: e4:ee:af:07:34:2e:c0:0f:e7:4d:bf:4b:ba:94:3c:f8:74:30: 03:2c:04:93:88:c1:60:32:d4:8b:7f:0b:22:5b:46:f7:5e:9a: e8:af:65:ac:e1:f9:3b:6c:61:f3:51:8b:40:46:09:85:7b:1a: 80:50:6a:24:de:da:97:59:8a:84:35:88:38:58:14:e4:30:8f: 24:2b:e1:67:96:e0:2b:2c:97:8e:ab:b1:69:a3:b8:f9:b1:96: 79:11:ac:92:84:a9:3a:bf:16:1a:04:b8:8f:b0:88:5b:39:d7: 3a:6a:e5:9d:30:98:78:e9:b6:bc:45:b0:47:61:73:63:8b:81: bb:5b:dd:17:16:f6:bf:5b:2c:0c:ab:3d:33:36:65:61:24:24: cd:bf:5c:16:2b:f2:cf:95:35:bb:68:88:12:fc:ac:5d:91:78: 98:4e:cc:c2:18:55:64:ff:6c:93:ae:74:f4:0a:6c:51:ea:98: 6d:e8:82:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4otTnTWSE/OWtgotOt5euMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjYwMTAxMDgxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2E2MWZmOTcxMGM3NTRkNjEwMGZmMjA0ZWYzOTFhOTdiMjJjMWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyV21lJcYWsSSwE3mxg8qyo3uVbm ZZpfJgKLVWF7SdVobTOwLRGluxspeCwuFmgxd1sEocmCVyHJxynee21uHBVFZ/XD Hk8JECLtIH990wVqhFoaGojsM6v7zJrTE5s+pc3GEib3iRAIJdyxRzqmgu8LnhVC ABOLpRwTcw/5pQQmb31UY61zTsZc++/wys8V8EU04kvqDkV9jWi91tAuUUtaYFWU yNXpwP7Qo/Cz23EOYptSD61J2R0ObyNnJYpjmGYmZClSzBlPJUKigr6q0ilUaD7q Bg4n/vsd7qEaA0KnHnMKgi2O8cqb9rGk9Ry/6NHnJn1GCvJmoxTPjVAGgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCemH/lxDHVNYQD/IE7zkal7IsH4MB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvSjZZZi1YRU1kVTFoQVA4Z1R2T1JxWHNpd2ZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWbkcMA0G CSqGSIb3DQEBCwUAA4IBAQA2yoaH/xKE35uCN6ttwbTIcrbeVYkCad3tpLmBLqyT +8qXwdprX3rOKNPCbKlaTqNUn+Kl14+44mw7Ygv5WtU2hxr+e0C00FDk7q8HNC7A D+dNv0u6lDz4dDADLASTiMFgMtSLfwsiW0b3Xpror2Ws4fk7bGHzUYtARgmFexqA UGok3tqXWYqENYg4WBTkMI8kK+FnluArLJeOq7Fpo7j5sZZ5EayShKk6vxYaBLiP sIhbOdc6auWdMJh46ba8RbBHYXNji4G7W90XFva/WywMqz0zNmVhJCTNv1wWK/LP lTW7aIgS/KxdkXiYTszCGFVk/2yTrnT0CmxR6pht6IJV -----END CERTIFICATE-----Generated at Sun Jan 25 20:01:17 2026 by rpki-client