This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/c6e2woPNB04ZsyBinFv698qVT4o.roa File: c6e2woPNB04ZsyBinFv698qVT4o.roa (raw, json) Hash identifier: +z15BNM7prrFn2O9ay18qeSx+nY/lsQt2tceRY1CHk4= Subject key identifier: 73:A7:B6:C2:83:CD:07:4E:19:B3:20:62:9C:5B:FA:F7:CA:95:4F:8A Certificate issuer: /CN=3db342062577169a63597e9e3a6425fcde6c1661 Certificate serial: 019B7F85448B58C7352F20FB661EDB468CF7 Authority key identifier: 3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/c6e2woPNB04ZsyBinFv698qVT4o.roa Signing time: Fri 02 Jan 2026 16:23:18 +0000 ROA not before: Fri 02 Jan 2026 16:23:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56500 IP address blocks: 91.225.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:44:8b:58:c7:35:2f:20:fb:66:1e:db:46:8c:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3db342062577169a63597e9e3a6425fcde6c1661 Validity Not Before: Jan 2 16:23:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73a7b6c283cd074e19b320629c5bfaf7ca954f8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:52:fd:20:b3:e0:1d:d8:c2:38:a5:28:c8:a9: 50:43:60:85:c4:0d:e7:ee:02:cd:63:ef:b1:2d:23: cd:29:bc:3f:69:03:f1:7a:8e:c5:24:04:b4:06:76: 72:9b:e1:1a:47:d6:d2:e7:7d:a7:b5:8c:8a:f5:1a: d9:e1:85:7c:22:86:c0:f9:2a:70:88:7a:33:64:6e: 61:b6:25:c8:d5:02:7f:2d:a6:fa:3f:c8:fb:45:44: 63:f2:7e:32:6b:bd:13:e6:8b:dd:df:87:3b:07:6e: 2f:a4:11:98:43:b5:dc:2a:c9:5b:2a:2e:df:50:bb: ba:48:cd:b5:39:a7:f9:91:f4:4a:10:83:69:12:b9: 18:02:df:a8:3b:35:fc:19:af:bd:69:24:9b:59:70: 41:a9:44:c7:87:da:97:b3:ef:5f:81:cd:03:00:9f: 0e:0b:9a:d9:7a:f7:d3:6b:80:4c:91:80:c4:00:b4: 2c:a6:91:67:55:f5:be:77:3b:02:bf:ba:ac:af:15: a8:dd:9a:1d:a3:e4:95:55:0c:3d:55:08:8a:00:23: 49:b2:a0:9c:85:7a:56:30:c4:41:24:0e:45:94:11: 16:ec:7c:9d:0f:2e:c6:61:1f:5e:7f:c7:09:33:0d: da:02:80:75:47:fc:01:14:fb:36:3f:de:b6:4d:0e: c7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A7:B6:C2:83:CD:07:4E:19:B3:20:62:9C:5B:FA:F7:CA:95:4F:8A X509v3 Authority Key Identifier: keyid:3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/c6e2woPNB04ZsyBinFv698qVT4o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.225.161.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:76:8e:ba:3c:b3:66:4d:22:0a:fe:9e:1d:95:20:76:91:d3: a2:ca:bd:65:f2:8f:c1:f9:fe:92:ea:9b:bd:59:5a:04:fd:88: 01:53:a7:f4:22:72:1f:8f:d5:69:cc:5a:ad:12:52:1c:2a:a9: cd:73:1a:85:07:32:4d:62:43:fc:e4:58:58:b1:3b:04:fc:e9: 14:24:23:3f:20:13:f5:85:f2:df:c5:f1:6c:5e:d0:15:b8:4d: 3f:6a:14:3d:35:69:30:18:78:29:b6:ac:f1:52:2f:82:9c:5a: 94:8a:94:22:9e:83:d3:9b:5c:29:a8:13:91:44:a3:6f:ba:48: 78:e2:99:17:aa:b3:d0:1a:34:0b:40:23:d4:cc:98:51:06:d2: 48:69:00:32:f5:85:83:49:f4:b9:ee:1e:28:d5:fb:15:cf:3a: a8:f6:34:3d:fe:df:25:6a:96:3c:7c:fd:e5:a3:ad:9f:5d:eb: d2:2e:eb:98:03:69:61:0b:11:ea:d8:1c:18:0e:1b:08:99:e6: d8:55:bf:88:8f:ef:53:5c:df:83:d4:30:0c:92:18:ca:21:29: fd:83:af:27:1d:4b:b4:da:81:07:1a:4e:95:cc:3d:6e:c2:47: cf:ac:d8:2a:c3:77:18:8b:96:1f:d0:20:73:dc:f1:58:c7:a2: d9:3b:e4:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hUSLWMc1LyD7Zh7bRoz3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkYjM0MjA2MjU3NzE2OWE2MzU5N2U5ZTNhNjQyNWZjZGU2 YzE2NjEwHhcNMjYwMTAyMTYyMzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2E3YjZjMjgzY2QwNzRlMTliMzIwNjI5YzViZmFmN2NhOTU0ZjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlL9ILPgHdjCOKUoyKlQQ2CFxA3n 7gLNY++xLSPNKbw/aQPxeo7FJAS0BnZym+EaR9bS532ntYyK9RrZ4YV8IobA+Spw iHozZG5htiXI1QJ/Lab6P8j7RURj8n4ya70T5ovd34c7B24vpBGYQ7XcKslbKi7f ULu6SM21Oaf5kfRKEINpErkYAt+oOzX8Ga+9aSSbWXBBqUTHh9qXs+9fgc0DAJ8O C5rZevfTa4BMkYDEALQsppFnVfW+dzsCv7qsrxWo3Zodo+SVVQw9VQiKACNJsqCc hXpWMMRBJA5FlBEW7HydDy7GYR9ef8cJMw3aAoB1R/wBFPs2P962TQ7HzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHOntsKDzQdOGbMgYpxb+vfKlU+KMB8GA1UdIwQY MBaAFD2zQgYldxaaY1l+njpkJfzebBZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGJOQ0JpVjNGcHBqV1g2ZU9tUWxfTjVzRm1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC81MTAwNjYtNDcxZS00NzJhLTg5Nzgt NDk3Mjc3YWZiYWE1LzEvYzZlMndvUE5CMDRac3lCaW5GdjY5OHFWVDRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC81MTAwNjYtNDcxZS00NzJhLTg5NzgtNDk3Mjc3YWZiYWE1 LzEvUGJOQ0JpVjNGcHBqV1g2ZU9tUWxfTjVzRm1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+GhMA0G CSqGSIb3DQEBCwUAA4IBAQA7do66PLNmTSIK/p4dlSB2kdOiyr1l8o/B+f6S6pu9 WVoE/YgBU6f0InIfj9VpzFqtElIcKqnNcxqFBzJNYkP85FhYsTsE/OkUJCM/IBP1 hfLfxfFsXtAVuE0/ahQ9NWkwGHgptqzxUi+CnFqUipQinoPTm1wpqBORRKNvukh4 4pkXqrPQGjQLQCPUzJhRBtJIaQAy9YWDSfS57h4o1fsVzzqo9jQ9/t8lapY8fP3l o62fXevSLuuYA2lhCxHq2BwYDhsImebYVb+Ij+9TXN+D1DAMkhjKISn9g68nHUu0 2oEHGk6VzD1uwkfPrNgqw3cYi5Yf0CBz3PFYx6LZO+T6 -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:35 2026 by rpki-client