This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/6Eq2K8I-fGAn8TcsmA8SQ1sP8XQ.roa File: 6Eq2K8I-fGAn8TcsmA8SQ1sP8XQ.roa (raw, json) Hash identifier: IMW7BuOpk5K8cLHby0V1FGlX0Kl80xH/PG0dmv5BRa0= Subject key identifier: E8:4A:B6:2B:C2:3E:7C:60:27:F1:37:2C:98:0F:12:43:5B:0F:F1:74 Certificate issuer: /CN=de9461c211bf3551c5507c930b4204c6ec43b322 Certificate serial: 019B98F4CD1F1FB3A7C9E26E438DE96588F6 Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/6Eq2K8I-fGAn8TcsmA8SQ1sP8XQ.roa Signing time: Wed 07 Jan 2026 14:55:38 +0000 ROA not before: Wed 07 Jan 2026 14:55:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401160 IP address blocks: 91.192.106.0/23 maxlen: 23 91.193.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:98:f4:cd:1f:1f:b3:a7:c9:e2:6e:43:8d:e9:65:88:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322 Validity Not Before: Jan 7 14:55:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e84ab62bc23e7c6027f1372c980f12435b0ff174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f7:64:af:a0:d5:94:4f:29:6a:a0:d6:9c:69: d5:60:4b:54:2c:e7:55:22:ed:a7:4a:f6:dc:8c:9d: d2:32:8f:07:48:95:41:79:0c:49:03:35:f8:d9:ff: 34:4e:40:ff:f9:bd:54:81:9f:03:b2:6c:33:41:ea: d0:f5:51:40:98:db:75:9f:d3:0c:09:fe:66:7f:ae: f6:3c:b8:bc:a7:d5:b7:4e:8f:57:0e:63:14:12:72: c1:cb:1b:74:6c:b7:73:d8:fb:1a:4f:2c:de:26:5a: 6b:48:fd:cd:c5:cb:e2:4b:f7:52:0c:5a:98:1b:9a: 59:70:77:d5:9a:9e:71:d1:26:e4:a9:f6:e4:e7:8b: b4:b9:b6:7a:ad:81:e4:45:b9:09:03:03:98:17:8b: dc:22:33:80:4f:f2:f9:75:31:70:5a:19:60:2d:a3: 87:f4:af:5b:b8:2e:b3:b0:c3:31:dd:05:e3:6f:36: 28:29:a9:9b:1c:5f:21:16:05:ff:3b:c5:89:e7:65: da:3a:d7:e6:e1:ca:04:4b:b6:5d:44:db:37:47:01: 3e:78:02:04:d5:27:10:24:1b:18:46:0d:d4:38:84: 09:f1:21:bd:8a:9a:79:5d:2c:04:9b:c4:9a:18:f1: 49:01:ba:c4:7c:a1:a2:d3:cb:8c:5c:05:05:79:9d: 17:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:4A:B6:2B:C2:3E:7C:60:27:F1:37:2C:98:0F:12:43:5B:0F:F1:74 X509v3 Authority Key Identifier: keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/6Eq2K8I-fGAn8TcsmA8SQ1sP8XQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.106.0/23 91.193.58.0/23 Signature Algorithm: sha256WithRSAEncryption 21:0c:7d:5f:5c:43:9f:c1:53:a4:47:eb:87:08:50:66:ad:51: 91:1b:15:2a:73:9c:84:93:ea:8f:ed:1a:5c:7e:46:a9:96:4c: d1:44:a4:2d:03:db:b0:34:7f:2e:ba:a7:d5:d9:4a:53:0c:88: 36:41:95:88:0f:ac:bb:8e:36:22:67:45:d8:58:27:4a:1d:33: 8b:fd:b6:45:c6:73:a3:b3:d2:ae:f3:e5:75:c5:f0:3d:3f:14: 8c:6b:7b:8a:c9:65:e0:67:2a:fa:aa:0a:dc:fd:b3:7f:00:a4: a3:bf:77:a9:17:e0:8d:f4:f9:6d:91:22:38:60:92:98:0b:38: 9f:17:e1:8c:37:db:cd:78:b6:e8:fa:d0:0c:05:60:4c:d8:90: e4:d7:33:25:bc:7d:d1:9d:a1:b1:ce:7b:f5:c8:1a:5b:73:7e: bd:a5:eb:23:b9:e0:dd:24:7f:35:67:bf:f8:a6:70:5c:58:72: 55:d8:0a:a1:65:93:85:1b:e5:2e:21:5d:76:7c:e9:88:25:af: 37:c0:c4:76:db:8a:bd:b8:6c:13:a3:7a:b6:9c:86:6c:6b:fa: 2e:4e:ad:7c:f0:2e:a7:80:f7:29:04:cd:19:bf:7f:81:54:cd: 89:70:57:ff:96:89:52:3f:55:85:b5:c6:15:3a:fe:27:94:fe: f2:99:8d:25 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZuY9M0fH7OnyeJuQ43pZYj2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOTQ2MWMyMTFiZjM1NTFjNTUwN2M5MzBiNDIwNGM2ZWM0 M2IzMjIwHhcNMjYwMTA3MTQ1NTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODRhYjYyYmMyM2U3YzYwMjdmMTM3MmM5ODBmMTI0MzViMGZmMTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvdkr6DVlE8paqDWnGnVYEtULOdV Iu2nSvbcjJ3SMo8HSJVBeQxJAzX42f80TkD/+b1UgZ8DsmwzQerQ9VFAmNt1n9MM Cf5mf672PLi8p9W3To9XDmMUEnLByxt0bLdz2PsaTyzeJlprSP3NxcviS/dSDFqY G5pZcHfVmp5x0Sbkqfbk54u0ubZ6rYHkRbkJAwOYF4vcIjOAT/L5dTFwWhlgLaOH 9K9buC6zsMMx3QXjbzYoKambHF8hFgX/O8WJ52XaOtfm4coES7ZdRNs3RwE+eAIE 1ScQJBsYRg3UOIQJ8SG9ipp5XSwEm8SaGPFJAbrEfKGi08uMXAUFeZ0XyQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOhKtivCPnxgJ/E3LJgPEkNbD/F0MB8GA1UdIwQY MBaAFN6UYcIRvzVRxVB8kwtCBMbsQ7MiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3BSaHdoR19OVkhGVUh5VEMwSUV4dXhEc3lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85MTgzZDQtMDc3OS00OWM0LTk2Zjct ODIwMmE0NjdkNzUzLzEvNkVxMks4SS1mR0FuOFRjc21BOFNRMXNQOFhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy85MTgzZDQtMDc3OS00OWM0LTk2ZjctODIwMmE0NjdkNzUz LzEvM3BSaHdoR19OVkhGVUh5VEMwSUV4dXhEc3lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW8BqAwQB W8E6MA0GCSqGSIb3DQEBCwUAA4IBAQAhDH1fXEOfwVOkR+uHCFBmrVGRGxUqc5yE k+qP7RpcfkaplkzRRKQtA9uwNH8uuqfV2UpTDIg2QZWID6y7jjYiZ0XYWCdKHTOL /bZFxnOjs9Ku8+V1xfA9PxSMa3uKyWXgZyr6qgrc/bN/AKSjv3epF+CN9PltkSI4 YJKYCzifF+GMN9vNeLbo+tAMBWBM2JDk1zMlvH3RnaGxznv1yBpbc369pesjueDd JH81Z7/4pnBcWHJV2AqhZZOFG+UuIV12fOmIJa83wMR224q9uGwTo3q2nIZsa/ou Tq188C6ngPcpBM0Zv3+BVM2JcFf/lolSP1WFtcYVOv4nlP7ymY0l -----END CERTIFICATE-----Generated at Sat Jan 10 08:53:22 2026 by rpki-client