This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/6YTG6eezyNHkFsNrG1WMf7EKg-I.roa File: 6YTG6eezyNHkFsNrG1WMf7EKg-I.roa (raw, json) Hash identifier: g3SOqWV+zM8+l75i9LJ9wS9OjTi9pC24Q+IgYU6CRL0= Subject key identifier: E9:84:C6:E9:E7:B3:C8:D1:E4:16:C3:6B:1B:55:8C:7F:B1:0A:83:E2 Certificate issuer: /CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Certificate serial: 019B454F6577C0C1937DCA55EE7222EF60FC Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/6YTG6eezyNHkFsNrG1WMf7EKg-I.roa Signing time: Mon 22 Dec 2025 09:06:29 +0000 ROA not before: Mon 22 Dec 2025 09:06:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207105 IP address blocks: 194.92.53.0/24 maxlen: 24 2a0a:3a40:1005::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4f:65:77:c0:c1:93:7d:ca:55:ee:72:22:ef:60:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Validity Not Before: Dec 22 09:06:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e984c6e9e7b3c8d1e416c36b1b558c7fb10a83e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8e:2d:68:87:7e:9b:85:ce:b3:42:19:26:40: 6d:fe:b0:3f:6b:c2:15:ee:b1:67:db:5d:f6:3a:8b: 7b:71:21:7d:a4:f8:5d:30:2d:ee:97:5a:49:01:d2: 93:0f:68:e5:9b:87:23:69:d7:ed:90:ba:7e:cf:66: cd:59:96:21:c1:03:c9:a4:a0:f3:f4:eb:bd:37:bc: 23:74:2d:47:1b:2a:ce:58:47:f0:a5:16:4e:88:6c: 9d:67:77:3c:d2:1a:25:6d:37:54:08:91:69:75:55: 14:6b:cc:51:ef:52:68:7e:90:5d:1c:f5:c0:f5:d7: d4:88:a8:8f:a5:00:48:ee:74:58:c3:13:36:ea:5c: 1a:3b:4d:ff:8a:e6:9b:64:6e:96:21:08:4c:3c:2f: 21:32:df:54:5b:4c:6e:02:f7:30:41:eb:b1:7e:61: 3f:99:1b:2b:5c:47:16:ab:2b:b8:57:04:d2:00:35: f4:ab:db:b1:a9:be:a2:49:19:be:af:64:d7:e8:94: f4:0b:03:0f:e7:de:67:f4:d3:92:57:8b:59:92:81: 60:1a:04:bb:6f:f1:a6:73:f9:93:fd:a8:1f:4c:21: b7:01:f7:6c:cf:15:21:e5:3e:09:70:99:76:cd:70: 07:b9:ac:16:10:9c:ed:df:69:b2:ee:d8:5d:d0:eb: 39:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:84:C6:E9:E7:B3:C8:D1:E4:16:C3:6B:1B:55:8C:7F:B1:0A:83:E2 X509v3 Authority Key Identifier: keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/6YTG6eezyNHkFsNrG1WMf7EKg-I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.92.53.0/24 IPv6: 2a0a:3a40:1005::/48 Signature Algorithm: sha256WithRSAEncryption 03:db:b5:a4:27:a0:a0:ef:8e:8c:7c:0d:52:3d:37:5e:58:b0: f8:c2:c7:3b:9b:ce:2b:8b:93:48:da:37:1b:21:b9:b7:60:e5: 3b:7d:51:92:5d:5b:28:ed:f7:6a:a3:94:4a:71:a4:86:17:bd: 4c:72:40:b8:f9:80:e2:7a:7a:68:cc:90:83:a1:5c:6f:c4:4d: 3d:3c:17:a2:89:72:47:44:a8:7f:45:56:a6:47:de:df:bc:4b: 1b:e5:1c:15:b1:40:fa:3c:e9:a1:ac:74:8f:b3:d7:6c:69:5c: 32:0a:3d:3e:a9:27:42:6c:c9:d9:d4:59:eb:4e:8e:bc:b0:30: af:07:20:f5:3a:b1:ef:7c:7a:b8:1a:e1:9a:38:1f:97:c0:00: 65:22:20:b5:d6:36:81:98:d3:86:fc:b3:28:b3:cb:9b:d5:30: a9:37:9a:ca:ac:11:1b:a4:28:25:ed:f0:14:72:7d:f4:0a:f9: 88:68:df:0f:23:c3:3f:f5:79:cc:1c:b6:ae:30:34:f6:70:e3: 8b:16:32:97:49:d2:84:9b:5e:46:6f:26:f6:95:0a:a3:ba:d7: 99:55:78:ef:b5:18:e6:c0:44:84:28:f6:82:82:c1:09:a0:6e: cb:00:8f:2e:0c:e0:11:32:7b:20:f2:be:b0:f0:6e:f3:4f:76: a4:94:ff:56 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZtFT2V3wMGTfcpV7nIi72D8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmOWU5Njk2ZGNjZjZjMWE0MzIwOTA0MDg1MTRhZWNkYzNm NjA3MzkwHhcNMjUxMjIyMDkwNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTg0YzZlOWU3YjNjOGQxZTQxNmMzNmIxYjU1OGM3ZmIxMGE4M2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmo4taId+m4XOs0IZJkBt/rA/a8IV 7rFn2132Oot7cSF9pPhdMC3ul1pJAdKTD2jlm4cjadftkLp+z2bNWZYhwQPJpKDz 9Ou9N7wjdC1HGyrOWEfwpRZOiGydZ3c80holbTdUCJFpdVUUa8xR71JofpBdHPXA 9dfUiKiPpQBI7nRYwxM26lwaO03/iuabZG6WIQhMPC8hMt9UW0xuAvcwQeuxfmE/ mRsrXEcWqyu4VwTSADX0q9uxqb6iSRm+r2TX6JT0CwMP595n9NOSV4tZkoFgGgS7 b/Gmc/mT/agfTCG3AfdszxUh5T4JcJl2zXAHuawWEJzt32my7thd0Os5EwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOmExunns8jR5BbDaxtVjH+xCoPiMB8GA1UdIwQY MBaAFG+elpbcz2waQyCQQIUUrs3D9gc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjIt YmFmNGUwYjRhNjllLzEvNllURzZlZXp5TkhrRnNOckcxV01mN0VLZy1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjItYmFmNGUwYjRhNjll LzEvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwlw1MA8E AgACMAkDBwAqCjpAEAUwDQYJKoZIhvcNAQELBQADggEBAAPbtaQnoKDvjox8DVI9 N15YsPjCxzubziuLk0jaNxshubdg5Tt9UZJdWyjt92qjlEpxpIYXvUxyQLj5gOJ6 emjMkIOhXG/ETT08F6KJckdEqH9FVqZH3t+8SxvlHBWxQPo86aGsdI+z12xpXDIK PT6pJ0JsydnUWetOjrywMK8HIPU6se98erga4Zo4H5fAAGUiILXWNoGY04b8syiz y5vVMKk3msqsERukKCXt8BRyffQK+Yho3w8jwz/1ecwctq4wNPZw44sWMpdJ0oSb XkZvJvaVCqO615lVeO+1GObARIQo9oKCwQmgbssAjy4M4BEyeyDyvrDwbvNPdqSU /1Y= -----END CERTIFICATE-----Generated at Sat Dec 27 08:42:08 2025 by rpki-client