This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/6y-m_Tv-2HoY3JwEXM2VnrUnxqw.roa File: 6y-m_Tv-2HoY3JwEXM2VnrUnxqw.roa (raw, json) Hash identifier: E8R/wgypDJ4w/RMOeLSWRMfPnr8DkZ+AnD4la/0OefA= Subject key identifier: EB:2F:A6:FD:3B:FE:D8:7A:18:DC:9C:04:5C:CD:95:9E:B5:27:C6:AC Certificate issuer: /CN=3238786e9f70e6db74230d72675a483bd24ef256 Certificate serial: 019B7D5C5DC72F2715CA76EFDF5EBB08E62E Authority key identifier: 32:38:78:6E:9F:70:E6:DB:74:23:0D:72:67:5A:48:3B:D2:4E:F2:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/6y-m_Tv-2HoY3JwEXM2VnrUnxqw.roa Signing time: Fri 02 Jan 2026 06:19:23 +0000 ROA not before: Fri 02 Jan 2026 06:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47535 IP address blocks: 91.204.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:5d:c7:2f:27:15:ca:76:ef:df:5e:bb:08:e6:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3238786e9f70e6db74230d72675a483bd24ef256 Validity Not Before: Jan 2 06:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb2fa6fd3bfed87a18dc9c045ccd959eb527c6ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:54:fd:05:b5:14:83:06:88:78:0a:aa:36:74: 53:c2:95:5b:f5:24:22:6b:22:23:0c:f4:13:d7:c9: f5:71:f2:03:54:98:95:ab:f4:b7:1a:ee:cc:38:96: ec:bc:f4:7e:20:06:1e:08:c6:6c:7b:37:cd:cd:95: 0a:e1:f3:11:64:f3:6e:6e:69:5e:f1:90:11:25:5f: e1:e7:f9:59:84:c1:7e:6a:ca:58:eb:0b:1c:a8:21: 71:8d:f4:a5:f8:f5:41:0e:ca:22:84:d8:49:92:4a: 95:57:5e:2e:c2:91:da:23:9b:6b:8f:d3:fa:31:ed: db:7f:e4:d2:b0:e5:f1:e0:41:cf:3e:9c:cc:62:f3: f3:12:7a:24:2c:6e:ca:62:b4:f9:a1:8d:17:37:12: 18:a4:75:5b:c0:54:0b:69:58:93:f5:97:08:e8:c5: 3f:31:b0:c6:82:b1:91:b7:82:96:85:ef:88:5d:6b: a7:4c:c7:af:33:0e:2b:1c:60:e1:b4:a7:cd:92:e0: 75:1f:b6:97:e1:58:27:91:6a:94:4d:9e:94:b8:1e: 22:3e:14:98:e5:a0:3d:f7:1b:a7:33:9e:d1:d5:0d: b1:9b:56:4b:34:2f:96:d7:ae:57:6b:86:74:f1:1b: c2:a6:c1:ab:7c:ff:72:3f:03:9e:bb:7b:b7:95:1b: 98:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:2F:A6:FD:3B:FE:D8:7A:18:DC:9C:04:5C:CD:95:9E:B5:27:C6:AC X509v3 Authority Key Identifier: keyid:32:38:78:6E:9F:70:E6:DB:74:23:0D:72:67:5A:48:3B:D2:4E:F2:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/6y-m_Tv-2HoY3JwEXM2VnrUnxqw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.204.172.0/22 Signature Algorithm: sha256WithRSAEncryption 75:6d:bd:50:f8:00:47:7a:bb:6b:5e:ef:97:25:6c:5d:99:a3: 60:ef:61:ce:b4:ab:8d:f0:64:a1:66:80:89:bf:35:7f:70:b4: ad:6a:99:a0:b9:47:4f:d7:e6:c5:e1:7b:9a:40:5e:80:fd:f4: dc:22:81:00:5e:68:80:fb:cd:7a:5a:3e:92:d6:47:44:2d:1c: d1:14:e1:6e:c3:f5:5d:87:e1:f9:d0:f9:c1:9e:6b:c4:b1:1b: 7e:4d:7a:8b:6c:d2:83:d1:bc:92:f9:9f:82:97:28:cc:ed:4c: 26:d1:99:46:85:f7:ee:25:30:4b:83:ef:98:4e:7c:b7:8c:68: 97:09:e5:fb:33:e2:20:ca:d3:31:a4:2b:69:29:fd:8c:d6:a0: f8:5b:59:ad:4d:1f:09:b5:d9:59:e2:b3:59:1f:fe:03:af:64: 1f:64:e2:aa:4f:03:e3:13:cc:f0:05:55:eb:50:3b:bd:a0:8c: f6:b9:75:7f:9a:9c:ed:02:6d:6a:d2:5a:63:f5:44:30:b7:2b: 16:aa:dd:a4:d2:8d:20:2b:a3:3b:3d:7e:ba:cf:ed:e4:18:9c: e3:b6:97:72:7f:0b:05:f0:6c:9f:ea:3e:60:da:09:88:53:96: 03:dc:26:1d:58:8b:c8:5b:c9:0b:af:29:a2:d9:4a:cc:1d:d1: d2:93:78:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XF3HLycVynbv3167COYuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMzg3ODZlOWY3MGU2ZGI3NDIzMGQ3MjY3NWE0ODNiZDI0 ZWYyNTYwHhcNMjYwMTAyMDYxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjJmYTZmZDNiZmVkODdhMThkYzljMDQ1Y2NkOTU5ZWI1MjdjNmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8FT9BbUUgwaIeAqqNnRTwpVb9SQi ayIjDPQT18n1cfIDVJiVq/S3Gu7MOJbsvPR+IAYeCMZsezfNzZUK4fMRZPNubmle 8ZARJV/h5/lZhMF+aspY6wscqCFxjfSl+PVBDsoihNhJkkqVV14uwpHaI5trj9P6 Me3bf+TSsOXx4EHPPpzMYvPzEnokLG7KYrT5oY0XNxIYpHVbwFQLaViT9ZcI6MU/ MbDGgrGRt4KWhe+IXWunTMevMw4rHGDhtKfNkuB1H7aX4VgnkWqUTZ6UuB4iPhSY 5aA99xunM57R1Q2xm1ZLNC+W165Xa4Z08RvCpsGrfP9yPwOeu3u3lRuYpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOsvpv07/th6GNycBFzNlZ61J8asMB8GA1UdIwQY MBaAFDI4eG6fcObbdCMNcmdaSDvSTvJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWpoNGJwOXc1dHQwSXcxeVoxcElPOUpPOGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85YTk1MDYtMjBkNC00YWI3LWI1NjMt ZTJkM2Q5NGNjMjM4LzEvNnktbV9Udi0ySG9ZM0p3RVhNMlZuclVueHF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS85YTk1MDYtMjBkNC00YWI3LWI1NjMtZTJkM2Q5NGNjMjM4 LzEvTWpoNGJwOXc1dHQwSXcxeVoxcElPOUpPOGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8ysMA0G CSqGSIb3DQEBCwUAA4IBAQB1bb1Q+ABHertrXu+XJWxdmaNg72HOtKuN8GShZoCJ vzV/cLStapmguUdP1+bF4XuaQF6A/fTcIoEAXmiA+816Wj6S1kdELRzRFOFuw/Vd h+H50PnBnmvEsRt+TXqLbNKD0byS+Z+ClyjM7Uwm0ZlGhffuJTBLg++YTny3jGiX CeX7M+IgytMxpCtpKf2M1qD4W1mtTR8JtdlZ4rNZH/4Dr2QfZOKqTwPjE8zwBVXr UDu9oIz2uXV/mpztAm1q0lpj9UQwtysWqt2k0o0gK6M7PX66z+3kGJzjtpdyfwsF 8Gyf6j5g2gmIU5YD3CYdWIvIW8kLrymi2UrMHdHSk3jg -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:01 2026 by rpki-client