This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/X6yij2F2wCS9SNyg0X2W1evj5UY.roa File: X6yij2F2wCS9SNyg0X2W1evj5UY.roa (raw, json) Hash identifier: NA6kYJC1nLmQ9K7t2tSV4/j0mb+VEM1Maf4SLgSq/gU= Subject key identifier: 5F:AC:A2:8F:61:76:C0:24:BD:48:DC:A0:D1:7D:96:D5:EB:E3:E5:46 Certificate issuer: /CN=fdd2b36206439bbce15b363f09eeff1d738cecc7 Certificate serial: 019B7A5B8FF6974EB066A7C1E47A667EAF5B Authority key identifier: FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/X6yij2F2wCS9SNyg0X2W1evj5UY.roa Signing time: Thu 01 Jan 2026 16:19:39 +0000 ROA not before: Thu 01 Jan 2026 16:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25249 IP address blocks: 81.95.160.0/20 maxlen: 20 81.95.160.0/21 maxlen: 21 81.95.160.0/24 maxlen: 24 94.100.224.0/20 maxlen: 20 94.100.224.0/21 maxlen: 21 94.100.224.0/24 maxlen: 24 94.100.229.0/24 maxlen: 24 94.100.231.0/24 maxlen: 24 94.100.232.0/21 maxlen: 21 94.100.234.0/24 maxlen: 24 94.100.235.0/24 maxlen: 24 94.100.237.0/24 maxlen: 24 94.100.238.0/24 maxlen: 24 185.115.4.0/22 maxlen: 22 185.115.5.0/24 maxlen: 24 185.115.6.0/24 maxlen: 24 185.115.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:8f:f6:97:4e:b0:66:a7:c1:e4:7a:66:7e:af:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd2b36206439bbce15b363f09eeff1d738cecc7 Validity Not Before: Jan 1 16:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5faca28f6176c024bd48dca0d17d96d5ebe3e546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bf:20:86:4a:bc:35:39:02:0a:ef:31:81:e9: 6f:d8:83:71:45:7e:4c:b0:77:fc:5d:1f:79:9f:c1: 0f:72:01:8d:53:08:05:04:85:a0:7d:49:94:0e:b1: 3b:e2:f0:66:e4:cd:dd:34:a8:38:d0:c4:9b:b9:38: 21:3b:3c:d7:0c:ba:54:1d:71:cc:71:09:59:99:b7: c8:7f:9b:0c:8d:c8:e6:04:7b:fa:27:a0:59:00:c8: f7:48:e4:85:cb:cd:61:e9:ac:75:4c:b9:ba:f0:b7: 62:43:cc:7d:a1:2d:99:59:e4:78:c5:ff:7c:fc:0e: cf:0c:8a:cc:91:b0:5c:fd:19:40:07:5e:08:84:c6: ba:71:4e:d2:b6:66:cb:5a:e5:1b:13:64:17:fc:50: 54:74:ad:5b:35:98:cb:c3:9b:85:cb:85:d1:23:f9: 8f:9b:8c:15:79:05:8e:0b:29:e0:50:77:24:34:f0: f6:0a:d6:b5:c5:22:13:d6:a0:60:6a:2d:0e:5b:4e: bb:e3:2c:e1:49:be:8c:e7:c5:2b:58:8a:ae:ac:af: d6:bc:cc:99:b3:c9:8c:0a:0e:df:4c:e1:fb:a2:c3: b4:1d:75:7e:b1:a3:32:79:c3:14:db:7f:23:99:d7: fb:17:ee:f3:92:a7:de:73:5e:ca:81:02:6d:d3:47: 25:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:AC:A2:8F:61:76:C0:24:BD:48:DC:A0:D1:7D:96:D5:EB:E3:E5:46 X509v3 Authority Key Identifier: keyid:FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/X6yij2F2wCS9SNyg0X2W1evj5UY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.95.160.0/20 94.100.224.0/20 185.115.4.0/22 Signature Algorithm: sha256WithRSAEncryption 37:47:ec:a6:1e:51:12:fc:18:a0:51:5a:bc:fa:ed:6d:cd:14: 67:c8:00:0c:e4:be:42:24:cc:86:ce:1b:d9:75:89:fa:e3:f4: 0b:4e:fa:e5:91:53:f8:54:6f:a5:0a:28:43:f7:34:9a:07:78: c6:d8:ef:49:2d:1a:d9:50:cb:38:e3:26:5f:ad:3c:2e:10:22: 83:71:20:f9:d5:c4:68:fd:81:e8:6a:b9:a0:14:bd:bd:cd:81: cf:24:1f:be:a3:ae:80:5b:cd:39:85:fa:d0:46:30:7a:11:d1: 59:56:38:df:7a:b2:8a:8c:3e:a4:2c:1f:ac:7b:46:54:de:6b: 8e:d1:20:6c:42:5f:3c:d0:71:c6:cc:ea:ea:c0:56:86:10:ef: ab:85:6d:c7:fa:9a:13:f4:db:45:43:70:90:8b:aa:f1:2f:ad: 1c:1e:ab:e8:5e:85:ac:33:24:04:7c:09:a6:55:66:25:38:66: 9b:bd:64:25:98:63:c5:fc:58:5c:ae:72:9e:e2:ae:90:80:0e: ba:2d:9f:20:34:a6:54:8a:af:72:1a:f0:24:09:1f:96:d3:d9: ec:a9:55:74:33:e9:cd:70:97:c7:0f:87:02:0d:bb:e1:f3:0e: 65:87:c4:14:d2:23:6e:85:8e:82:99:0b:a8:73:8a:b0:29:18: f7:4b:58:db -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6W4/2l06wZqfB5Hpmfq9bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDJiMzYyMDY0MzliYmNlMTViMzYzZjA5ZWVmZjFkNzM4 Y2VjYzcwHhcNMjYwMTAxMTYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmFjYTI4ZjYxNzZjMDI0YmQ0OGRjYTBkMTdkOTZkNWViZTNlNTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb8ghkq8NTkCCu8xgelv2INxRX5M sHf8XR95n8EPcgGNUwgFBIWgfUmUDrE74vBm5M3dNKg40MSbuTghOzzXDLpUHXHM cQlZmbfIf5sMjcjmBHv6J6BZAMj3SOSFy81h6ax1TLm68LdiQ8x9oS2ZWeR4xf98 /A7PDIrMkbBc/RlAB14IhMa6cU7StmbLWuUbE2QX/FBUdK1bNZjLw5uFy4XRI/mP m4wVeQWOCyngUHckNPD2Cta1xSIT1qBgai0OW0674yzhSb6M58UrWIqurK/WvMyZ s8mMCg7fTOH7osO0HXV+saMyecMU238jmdf7F+7zkqfec17KgQJt00clYwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFF+soo9hdsAkvUjcoNF9ltXr4+VGMB8GA1UdIwQY MBaAFP3Ss2IGQ5u84Vs2Pwnu/x1zjOzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RLellnWkRtN3poV3pZX0NlN19IWE9NN01jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS82MmI5MDktMWUzZS00YTFiLTllMjQt YjAxZTAyOTdiMDcwLzEvWDZ5aWoyRjJ3Q1M5U055ZzBYMlcxZXZqNVVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS82MmI5MDktMWUzZS00YTFiLTllMjQtYjAxZTAyOTdiMDcw LzEvX2RLellnWkRtN3poV3pZX0NlN19IWE9NN01jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEUV+gAwQE XmTgAwQCuXMEMA0GCSqGSIb3DQEBCwUAA4IBAQA3R+ymHlES/BigUVq8+u1tzRRn yAAM5L5CJMyGzhvZdYn64/QLTvrlkVP4VG+lCihD9zSaB3jG2O9JLRrZUMs44yZf rTwuECKDcSD51cRo/YHoarmgFL29zYHPJB++o66AW805hfrQRjB6EdFZVjjferKK jD6kLB+se0ZU3muO0SBsQl880HHGzOrqwFaGEO+rhW3H+poT9NtFQ3CQi6rxL60c HqvoXoWsMyQEfAmmVWYlOGabvWQlmGPF/FhcrnKe4q6QgA66LZ8gNKZUiq9yGvAk CR+W09nsqVV0M+nNcJfHD4cCDbvh8w5lh8QU0iNuhY6CmQuoc4qwKRj3S1jb -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:21 2026 by rpki-client