This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/6V9ylZM4ScnVCgD7KK6ET2PRqIU.roa File: 6V9ylZM4ScnVCgD7KK6ET2PRqIU.roa (raw, json) Hash identifier: 28gc2ZI73zeIbD15Qm/WZMAQ+uvvtF2FWZ9P2SGE4vo= Subject key identifier: E9:5F:72:95:93:38:49:C9:D5:0A:00:FB:28:AE:84:4F:63:D1:A8:85 Certificate issuer: /CN=beab1ee7c4dad29d127d565d1b9379465c288937 Certificate serial: 019B77C72C6932CA1B65672D6A4A5F358C60 Authority key identifier: BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/6V9ylZM4ScnVCgD7KK6ET2PRqIU.roa Signing time: Thu 01 Jan 2026 04:18:20 +0000 ROA not before: Thu 01 Jan 2026 04:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3226 IP address blocks: 87.250.0.0/19 maxlen: 19 91.146.0.0/18 maxlen: 18 92.55.0.0/18 maxlen: 18 92.241.224.0/19 maxlen: 19 217.14.192.0/20 maxlen: 20 217.29.176.0/20 maxlen: 20 217.114.144.0/20 maxlen: 20 2a00:4580::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 16:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:2c:69:32:ca:1b:65:67:2d:6a:4a:5f:35:8c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=beab1ee7c4dad29d127d565d1b9379465c288937 Validity Not Before: Jan 1 04:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e95f7295933849c9d50a00fb28ae844f63d1a885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0d:d9:5f:3d:3f:8f:d2:01:81:d8:e0:68:bd: fe:84:c7:54:b3:9c:44:e2:10:07:9a:2a:2e:83:89: 40:37:e5:94:5c:27:8c:76:fd:20:7a:84:38:5d:29: c7:4b:c5:8e:e9:e6:93:83:16:64:56:18:28:15:67: 39:01:31:c6:4b:10:ca:f3:e5:03:bd:d7:03:3d:f3: eb:d5:82:7f:44:ce:e6:5b:78:00:e8:ab:41:2c:46: e8:c7:49:0b:16:5b:4e:f5:ca:e6:10:b7:c9:49:4c: 3a:a9:82:53:ad:71:ec:fa:34:2c:94:8a:8f:21:97: 93:2b:ac:c9:d0:6b:17:c5:44:8b:48:b3:7e:8f:4f: 37:6d:d2:59:b2:2a:2b:8b:06:2c:d0:c6:19:94:82: b0:44:1d:2d:a5:60:e2:8f:fb:45:49:ff:b8:04:53: 1b:ef:87:44:27:50:53:2c:19:ca:01:a4:3f:85:d3: a4:e9:95:91:74:7a:64:d9:68:f1:72:eb:8e:7a:91: ed:d5:55:6e:3a:db:b8:b4:ac:3a:ff:c2:97:b7:50: 27:62:69:7b:38:21:43:41:92:7e:40:18:4d:75:46: b8:c0:5c:81:ce:bc:9c:33:c1:be:f1:69:00:8f:15: e1:9d:53:89:3b:83:d9:93:01:00:3f:14:76:0a:f1: 7c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5F:72:95:93:38:49:C9:D5:0A:00:FB:28:AE:84:4F:63:D1:A8:85 X509v3 Authority Key Identifier: keyid:BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/6V9ylZM4ScnVCgD7KK6ET2PRqIU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.250.0.0/19 91.146.0.0/18 92.55.0.0/18 92.241.224.0/19 217.14.192.0/20 217.29.176.0/20 217.114.144.0/20 IPv6: 2a00:4580::/30 Signature Algorithm: sha256WithRSAEncryption 38:37:c3:cf:13:3a:1e:b9:5f:50:05:43:18:5f:c2:d5:0f:d3: b1:a7:e1:f7:b2:38:bb:89:cf:a3:c5:67:29:b1:29:25:db:14: 91:59:a6:de:2a:15:2b:a2:b2:43:c8:25:ec:59:57:6d:7e:85: 6a:2e:da:a6:c6:fa:d3:2a:ac:c7:3e:c6:ba:d7:d0:56:d3:ca: 94:2e:94:fe:c2:94:92:90:a9:a1:e3:3a:17:85:91:87:08:48: a5:20:c0:36:f1:96:fc:60:09:ce:04:71:53:06:3e:e3:b5:5f: fc:25:42:2a:f9:ba:30:c1:d4:c1:be:ee:97:b7:63:e3:74:ff: 55:54:4c:9b:22:14:1c:96:d5:c4:32:ae:1d:5e:c1:62:74:3a: c0:1e:6c:26:4f:e4:04:32:f8:8c:60:85:83:c6:4e:87:fd:70: 6e:86:ea:39:ef:e3:17:33:a1:5e:71:f4:64:8f:9e:04:1f:ac: 24:99:88:ad:29:82:2b:e7:26:09:c4:b0:a1:01:d2:a5:b2:4b: 6d:36:0b:10:f6:26:44:dc:7e:aa:81:ab:47:ec:9b:97:a7:50: 99:b0:77:17:f9:65:68:e2:92:a3:bb:aa:ec:5a:e5:62:d3:0e: 8e:ea:57:71:bb:a5:9d:ad:1e:1f:f5:a8:a3:45:97:47:5f:52: ac:3c:72:91 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt3xyxpMsobZWctakpfNYxgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYWIxZWU3YzRkYWQyOWQxMjdkNTY1ZDFiOTM3OTQ2NWMy ODg5MzcwHhcNMjYwMTAxMDQxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTVmNzI5NTkzMzg0OWM5ZDUwYTAwZmIyOGFlODQ0ZjYzZDFhODg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw3ZXz0/j9IBgdjgaL3+hMdUs5xE 4hAHmioug4lAN+WUXCeMdv0geoQ4XSnHS8WO6eaTgxZkVhgoFWc5ATHGSxDK8+UD vdcDPfPr1YJ/RM7mW3gA6KtBLEbox0kLFltO9crmELfJSUw6qYJTrXHs+jQslIqP IZeTK6zJ0GsXxUSLSLN+j083bdJZsioriwYs0MYZlIKwRB0tpWDij/tFSf+4BFMb 74dEJ1BTLBnKAaQ/hdOk6ZWRdHpk2WjxcuuOepHt1VVuOtu4tKw6/8KXt1AnYml7 OCFDQZJ+QBhNdUa4wFyBzrycM8G+8WkAjxXhnVOJO4PZkwEAPxR2CvF8sQIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFOlfcpWTOEnJ1QoA+yiuhE9j0aiFMB8GA1UdIwQY MBaAFL6rHufE2tKdEn1WXRuTeUZcKIk3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnFzZTU4VGEwcDBTZlZaZEc1TjVSbHdvaVRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82MWE2OTMtODM2YS00MTIyLWI5Mjkt ZTJhOTIwNWE5ZDJhLzEvNlY5eWxaTTRTY25WQ2dEN0tLNkVUMlBScUlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82MWE2OTMtODM2YS00MTIyLWI5MjktZTJhOTIwNWE5ZDJh LzEvdnFzZTU4VGEwcDBTZlZaZEc1TjVSbHdvaVRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQFV/oAAwQG W5IAAwQGXDcAAwQFXPHgAwQE2Q7AAwQE2R2wAwQE2XKQMA0EAgACMAcDBQIqAEWA MA0GCSqGSIb3DQEBCwUAA4IBAQA4N8PPEzoeuV9QBUMYX8LVD9Oxp+H3sji7ic+j xWcpsSkl2xSRWabeKhUrorJDyCXsWVdtfoVqLtqmxvrTKqzHPsa619BW08qULpT+ wpSSkKmh4zoXhZGHCEilIMA28Zb8YAnOBHFTBj7jtV/8JUIq+bowwdTBvu6Xt2Pj dP9VVEybIhQcltXEMq4dXsFidDrAHmwmT+QEMviMYIWDxk6H/XBuhuo57+MXM6Fe cfRkj54EH6wkmYitKYIr5yYJxLChAdKlskttNgsQ9iZE3H6qgatH7JuXp1CZsHcX +WVo4pKju6rsWuVi0w6O6ldxu6WdrR4f9aijRZdHX1KsPHKR -----END CERTIFICATE-----Generated at Mon Jan 12 03:18:01 2026 by rpki-client