This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/06R-BzYdwtpMq0Nzt_E_4RGFplU.roa File: 06R-BzYdwtpMq0Nzt_E_4RGFplU.roa (raw, json) Hash identifier: R4oAnKQW9O2/T9Rogp3UpebjYhFcACXlDxn09CocDOU= Subject key identifier: D3:A4:7E:07:36:1D:C2:DA:4C:AB:43:73:B7:F1:3F:E1:11:85:A6:55 Certificate issuer: /CN=e992a035bffc5a41412c497c1285d1838234ffb0 Certificate serial: 019B7BA3A21363DE5902D51BAF863BFBD955 Authority key identifier: E9:92:A0:35:BF:FC:5A:41:41:2C:49:7C:12:85:D1:83:82:34:FF:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/06R-BzYdwtpMq0Nzt_E_4RGFplU.roa Signing time: Thu 01 Jan 2026 22:17:59 +0000 ROA not before: Thu 01 Jan 2026 22:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47886 IP address blocks: 77.222.64.0/19 maxlen: 24 87.249.96.0/19 maxlen: 24 185.76.16.0/22 maxlen: 24 217.114.96.0/20 maxlen: 24 2001:1540::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.mft rsync://rpki.ripe.net/repository/DEFAULT/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:a2:13:63:de:59:02:d5:1b:af:86:3b:fb:d9:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e992a035bffc5a41412c497c1285d1838234ffb0 Validity Not Before: Jan 1 22:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3a47e07361dc2da4cab4373b7f13fe11185a655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:95:7b:7e:6c:ea:5a:24:d4:b9:aa:f0:ba:35: ef:1a:86:18:6f:d0:6f:e4:e2:e9:01:5d:71:03:b1: d2:e2:ca:e3:16:c9:22:0e:79:f3:e4:f8:3b:87:0c: 38:29:d5:7e:da:8d:a6:a9:48:81:28:46:ef:80:06: ca:0a:e8:09:89:2f:93:93:46:d9:b9:87:91:2d:63: a1:58:a8:b6:00:7b:38:15:a4:b2:24:42:a9:5f:04: 2a:12:f1:02:e9:95:37:bd:8f:91:37:8f:5d:97:47: 77:2a:b1:4e:a5:f1:c8:58:d0:90:18:a1:d6:bf:ee: 2f:91:53:79:39:cc:7f:06:bc:32:37:c9:51:10:da: b2:47:98:d5:e0:fa:db:86:b5:04:2f:cc:c8:0d:94: 74:b9:fd:68:bd:ca:fb:9e:dc:1b:59:1d:04:3d:1a: 47:3f:1e:05:a7:ca:0b:dc:76:3d:82:fe:cf:45:ea: 0a:cc:85:d8:d6:5f:93:6d:ba:eb:12:b4:b8:52:23: 21:20:f2:18:cd:19:da:46:99:94:a0:1e:49:b9:54: a3:08:b9:a6:26:7c:f2:24:15:cf:60:69:05:6d:38: be:eb:8b:3e:a3:87:b2:8c:03:4d:51:ec:3e:80:75: 45:ad:52:1d:4b:ab:5b:87:40:b8:c4:e5:a4:40:e1: 80:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A4:7E:07:36:1D:C2:DA:4C:AB:43:73:B7:F1:3F:E1:11:85:A6:55 X509v3 Authority Key Identifier: keyid:E9:92:A0:35:BF:FC:5A:41:41:2C:49:7C:12:85:D1:83:82:34:FF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/06R-BzYdwtpMq0Nzt_E_4RGFplU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.222.64.0/19 87.249.96.0/19 185.76.16.0/22 217.114.96.0/20 IPv6: 2001:1540::/32 Signature Algorithm: sha256WithRSAEncryption 79:7d:08:14:65:14:7f:b8:86:0a:16:c9:d6:35:41:d6:c3:6d: c4:04:75:4d:05:eb:63:0c:06:2e:66:62:a0:88:85:4f:e0:1b: de:59:0f:cc:27:67:70:20:c8:e3:39:b3:8c:44:61:79:6b:d2: 35:11:76:cc:a7:25:c2:42:85:97:c1:40:01:36:bd:94:bb:b5: b7:52:07:be:fd:5a:9d:0d:ce:54:79:67:fc:f1:84:8d:fe:87: 30:c5:ef:12:4f:20:c3:8a:81:3f:a8:c8:e0:b6:1c:38:5b:a7: bc:1c:18:c2:2d:d8:4d:30:01:74:69:3e:ef:f5:d4:99:7e:d4: 01:8d:45:32:72:2a:9b:96:1d:db:18:80:4b:c2:32:98:5d:6c: 5c:d4:2a:29:2e:25:e5:4f:b1:4b:a8:b3:66:53:d7:d5:42:c7: 06:43:40:b1:3b:9f:df:f3:72:2f:34:22:2a:99:e2:ef:7d:cc: fd:17:15:1b:88:dc:a6:68:48:ea:73:91:24:a5:32:b2:6c:e4: ba:d3:68:d5:9a:50:61:77:5e:9a:6e:ea:e3:a9:94:99:01:9d: b3:41:59:b3:76:35:78:7a:ae:de:1f:82:85:43:9e:a7:9d:d6: d4:c2:3e:71:cc:b2:ac:11:30:f2:6a:67:0d:f3:f2:ba:c6:2c: 1a:37:b2:9e -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt7o6ITY95ZAtUbr4Y7+9lVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5OTJhMDM1YmZmYzVhNDE0MTJjNDk3YzEyODVkMTgzODIz NGZmYjAwHhcNMjYwMTAxMjIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2E0N2UwNzM2MWRjMmRhNGNhYjQzNzNiN2YxM2ZlMTExODVhNjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpV7fmzqWiTUuarwujXvGoYYb9Bv 5OLpAV1xA7HS4srjFskiDnnz5Pg7hww4KdV+2o2mqUiBKEbvgAbKCugJiS+Tk0bZ uYeRLWOhWKi2AHs4FaSyJEKpXwQqEvEC6ZU3vY+RN49dl0d3KrFOpfHIWNCQGKHW v+4vkVN5Ocx/BrwyN8lRENqyR5jV4PrbhrUEL8zIDZR0uf1ovcr7ntwbWR0EPRpH Px4Fp8oL3HY9gv7PReoKzIXY1l+TbbrrErS4UiMhIPIYzRnaRpmUoB5JuVSjCLmm JnzyJBXPYGkFbTi+64s+o4eyjANNUew+gHVFrVIdS6tbh0C4xOWkQOGAJwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFNOkfgc2HcLaTKtDc7fxP+ERhaZVMB8GA1UdIwQY MBaAFOmSoDW//FpBQSxJfBKF0YOCNP+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlpLZ05iXzhXa0ZCTEVsOEVvWFJnNEkwXzdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi81ZjVmNmItMzVlNC00MzkxLTk1MTkt Yjk3ZDMzNmVhMmY1LzEvMDZSLUJ6WWR3dHBNcTBOenRfRV80UkdGcGxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi81ZjVmNmItMzVlNC00MzkxLTk1MTktYjk3ZDMzNmVhMmY1 LzEvNlpLZ05iXzhXa0ZCTEVsOEVvWFJnNEkwXzdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFTd5AAwQF V/lgAwQCuUwQAwQE2XJgMA0EAgACMAcDBQAgARVAMA0GCSqGSIb3DQEBCwUAA4IB AQB5fQgUZRR/uIYKFsnWNUHWw23EBHVNBetjDAYuZmKgiIVP4BveWQ/MJ2dwIMjj ObOMRGF5a9I1EXbMpyXCQoWXwUABNr2Uu7W3Uge+/VqdDc5UeWf88YSN/ocwxe8S TyDDioE/qMjgthw4W6e8HBjCLdhNMAF0aT7v9dSZftQBjUUyciqblh3bGIBLwjKY XWxc1CopLiXlT7FLqLNmU9fVQscGQ0CxO5/f83IvNCIqmeLvfcz9FxUbiNymaEjq c5EkpTKybOS602jVmlBhd16aburjqZSZAZ2zQVmzdjV4eq7eH4KFQ56nndbUwj5x zLKsETDyamcN8/K6xiwaN7Ke -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:56 2026 by rpki-client