This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2aeb79-3582-4ebf-b19a-79348e8366bc/1/6aoHpGpaWGGkl83xUFlNJm53NDk.roa File: 6aoHpGpaWGGkl83xUFlNJm53NDk.roa (raw, json) Hash identifier: /4TBotBrPhIQMbRC6QsWTde66kPhdMjvMCRoCWnf4ms= Subject key identifier: E9:AA:07:A4:6A:5A:58:61:A4:97:CD:F1:50:59:4D:26:6E:77:34:39 Certificate issuer: /CN=5d59f490d3b69b22e1e27c326baf72311056ddb8 Certificate serial: 019B7B36EF62AF0D4634A045D2B1B4601A2C Authority key identifier: 5D:59:F4:90:D3:B6:9B:22:E1:E2:7C:32:6B:AF:72:31:10:56:DD:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XVn0kNO2myLh4nwya69yMRBW3bg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2aeb79-3582-4ebf-b19a-79348e8366bc/1/6aoHpGpaWGGkl83xUFlNJm53NDk.roa Signing time: Thu 01 Jan 2026 20:19:16 +0000 ROA not before: Thu 01 Jan 2026 20:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39242 IP address blocks: 81.19.112.0/20 maxlen: 20 109.70.160.0/21 maxlen: 21 2a02:ef0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2aeb79-3582-4ebf-b19a-79348e8366bc/1/XVn0kNO2myLh4nwya69yMRBW3bg.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/2aeb79-3582-4ebf-b19a-79348e8366bc/1/XVn0kNO2myLh4nwya69yMRBW3bg.mft rsync://rpki.ripe.net/repository/DEFAULT/XVn0kNO2myLh4nwya69yMRBW3bg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ef:62:af:0d:46:34:a0:45:d2:b1:b4:60:1a:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d59f490d3b69b22e1e27c326baf72311056ddb8 Validity Not Before: Jan 1 20:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9aa07a46a5a5861a497cdf150594d266e773439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:88:66:37:5f:80:18:5e:db:df:65:5f:92:1a: 2f:13:55:0b:9c:ea:37:1e:43:6b:2d:18:a2:23:37: 2d:35:49:e0:b0:fb:18:f0:c8:e1:46:40:de:16:68: ad:7f:44:c2:e0:f5:06:42:15:30:e3:90:e1:c4:26: f5:ea:88:95:1d:77:b4:2b:5e:94:5c:40:14:0f:40: 6e:ec:ce:8e:e3:29:df:e9:e3:35:4f:f1:01:86:35: f9:21:66:81:54:de:b3:49:ac:0b:a1:51:5b:c8:55: c5:3b:95:f2:24:b5:bd:7e:1f:f2:a7:b2:e6:19:6c: 58:a7:bd:f0:47:8b:6e:82:0b:94:0b:c7:d4:62:35: ec:2b:63:75:0a:ac:29:f7:f2:f6:fd:84:9d:d3:00: d7:f8:4c:23:cb:d6:d1:ee:cd:94:22:df:76:4e:d7: 7f:86:50:99:2c:ee:e6:70:b8:f1:c1:dc:cf:3f:1b: aa:01:78:c8:f6:57:c4:9a:fb:8e:0c:44:b5:00:40: 30:d8:08:5a:f4:e2:02:c5:a3:8f:a1:ff:0a:69:93: be:cf:a3:5f:8c:32:2a:db:ec:ca:b3:3b:44:e8:da: ca:06:d1:f7:24:4d:5b:5b:36:a6:43:05:33:7d:ab: 0b:01:29:ea:e5:e3:d3:84:8a:8c:1d:38:f9:8e:43: e5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:AA:07:A4:6A:5A:58:61:A4:97:CD:F1:50:59:4D:26:6E:77:34:39 X509v3 Authority Key Identifier: keyid:5D:59:F4:90:D3:B6:9B:22:E1:E2:7C:32:6B:AF:72:31:10:56:DD:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XVn0kNO2myLh4nwya69yMRBW3bg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2aeb79-3582-4ebf-b19a-79348e8366bc/1/6aoHpGpaWGGkl83xUFlNJm53NDk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2aeb79-3582-4ebf-b19a-79348e8366bc/1/XVn0kNO2myLh4nwya69yMRBW3bg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.112.0/20 109.70.160.0/21 IPv6: 2a02:ef0::/32 Signature Algorithm: sha256WithRSAEncryption 81:96:73:91:9a:b3:30:b9:34:5b:4e:fb:e3:db:ef:a6:cb:38: e0:e7:11:c9:24:eb:19:ae:f4:98:5f:1c:ac:6c:7e:e1:0b:d8: 2f:eb:e3:08:81:01:90:4e:42:8d:c3:2d:b3:9c:61:b2:c4:ff: a8:35:f2:d7:13:d9:9f:43:0d:a5:6a:21:0b:63:c8:69:37:86: 78:b0:b9:3c:02:77:3e:55:ba:b8:a5:e1:83:9a:77:33:52:a0: 35:bb:e9:9b:78:21:c0:46:db:74:8d:16:69:b2:f0:d9:43:52: e9:d1:44:20:f7:c6:6c:e2:8c:42:79:f0:94:12:ee:b6:17:e9: 43:11:f4:5d:ad:be:be:39:b1:b6:ee:c7:37:1d:23:b3:50:ac: a4:5e:7e:94:00:32:2a:cc:51:10:14:b7:30:92:96:38:bc:fb: ae:3b:4b:02:60:9c:53:30:03:13:8e:35:63:c4:22:e9:fe:21: 48:36:2a:a0:80:d7:6b:e5:98:d6:98:d3:0b:f0:2a:61:dd:6e: 9f:6d:5b:39:af:58:9d:5e:ba:ff:cb:0e:f7:fc:c0:10:c0:ff: 4a:83:8b:80:8e:e7:2d:6e:91:97:7a:a2:cd:f7:f0:e3:31:b7: 23:5f:00:b7:59:a7:5c:cf:85:e4:a1:2f:f9:37:20:b2:a1:1c: 24:2b:64:8f -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7Nu9irw1GNKBF0rG0YBosMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNTlmNDkwZDNiNjliMjJlMWUyN2MzMjZiYWY3MjMxMTA1 NmRkYjgwHhcNMjYwMTAxMjAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWFhMDdhNDZhNWE1ODYxYTQ5N2NkZjE1MDU5NGQyNjZlNzczNDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIhmN1+AGF7b32VfkhovE1ULnOo3 HkNrLRiiIzctNUngsPsY8MjhRkDeFmitf0TC4PUGQhUw45DhxCb16oiVHXe0K16U XEAUD0Bu7M6O4ynf6eM1T/EBhjX5IWaBVN6zSawLoVFbyFXFO5XyJLW9fh/yp7Lm GWxYp73wR4tugguUC8fUYjXsK2N1Cqwp9/L2/YSd0wDX+Ewjy9bR7s2UIt92Ttd/ hlCZLO7mcLjxwdzPPxuqAXjI9lfEmvuODES1AEAw2Aha9OICxaOPof8KaZO+z6Nf jDIq2+zKsztE6NrKBtH3JE1bWzamQwUzfasLASnq5ePThIqMHTj5jkPl4QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOmqB6RqWlhhpJfN8VBZTSZudzQ5MB8GA1UdIwQY MBaAFF1Z9JDTtpsi4eJ8MmuvcjEQVt24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFZuMGtOTzJteUxoNG53eWE2OXlNUkJXM2JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yYWViNzktMzU4Mi00ZWJmLWIxOWEt NzkzNDhlODM2NmJjLzEvNmFvSHBHcGFXR0drbDgzeFVGbE5KbTUzTkRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8yYWViNzktMzU4Mi00ZWJmLWIxOWEtNzkzNDhlODM2NmJj LzEvWFZuMGtOTzJteUxoNG53eWE2OXlNUkJXM2JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEURNwAwQD bUagMA0EAgACMAcDBQAqAg7wMA0GCSqGSIb3DQEBCwUAA4IBAQCBlnORmrMwuTRb Tvvj2++myzjg5xHJJOsZrvSYXxysbH7hC9gv6+MIgQGQTkKNwy2znGGyxP+oNfLX E9mfQw2laiELY8hpN4Z4sLk8Anc+Vbq4peGDmnczUqA1u+mbeCHARtt0jRZpsvDZ Q1Lp0UQg98Zs4oxCefCUEu62F+lDEfRdrb6+ObG27sc3HSOzUKykXn6UADIqzFEQ FLcwkpY4vPuuO0sCYJxTMAMTjjVjxCLp/iFINiqggNdr5ZjWmNML8Cph3W6fbVs5 r1idXrr/yw73/MAQwP9Kg4uAjuctbpGXeqLN9/DjMbcjXwC3Wadcz4XkoS/5NyCy oRwkK2SP -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:54 2026 by rpki-client