This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/6YI5rJ7BlGzxSIRA8GPA9weBdeE.roa File: 6YI5rJ7BlGzxSIRA8GPA9weBdeE.roa (raw, json) Hash identifier: Rjqr+vNFn+Ln+ETYNFvgxdo2liKvZUHKE0VAbwfjlW8= Subject key identifier: E9:82:39:AC:9E:C1:94:6C:F1:48:84:40:F0:63:C0:F7:07:81:75:E1 Certificate issuer: /CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa Certificate serial: 019B7B364DF62171BCA06E4EF678C34057C1 Authority key identifier: F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/6YI5rJ7BlGzxSIRA8GPA9weBdeE.roa Signing time: Thu 01 Jan 2026 20:18:34 +0000 ROA not before: Thu 01 Jan 2026 20:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39918 IP address blocks: 91.192.176.0/24 maxlen: 24 91.192.177.0/24 maxlen: 24 91.192.178.0/24 maxlen: 24 91.192.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:4d:f6:21:71:bc:a0:6e:4e:f6:78:c3:40:57:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa Validity Not Before: Jan 1 20:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e98239ac9ec1946cf1488440f063c0f7078175e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1e:dd:ed:c4:cd:7c:27:51:04:3e:af:3a:ae: c6:fd:12:98:4c:da:fb:95:8e:83:b1:12:4c:05:5a: 3b:68:53:e7:1a:88:5f:32:89:a0:18:e0:df:06:ce: 68:75:27:d6:c5:ee:79:2c:45:c1:2f:7f:a1:82:0f: 9a:1b:23:b3:29:11:d2:6b:30:f7:fb:92:b6:22:8e: 32:8c:14:22:35:ee:9d:7c:af:a3:91:af:4b:67:f2: 9e:7c:1f:25:c9:0c:eb:9c:af:0c:15:de:36:79:88: 95:46:71:80:50:9d:a6:0c:18:d1:2b:99:fc:9c:21: 41:a9:fe:3e:bf:0a:b5:ac:2a:99:d2:79:13:95:00: ec:f6:9e:82:0f:a9:35:3c:71:e5:98:32:c4:2c:4f: 60:b8:d1:e5:7b:33:a0:f4:73:f3:2a:ba:6a:b8:7d: 3c:6c:00:7d:31:08:49:3a:bc:f3:57:c5:00:7c:f1: ea:be:cd:5b:a9:37:a1:e9:8d:3f:c0:0a:79:be:27: bb:31:8c:15:a5:be:98:5c:5d:20:5b:da:0f:f9:bb: 6b:3d:2b:e3:64:df:88:05:79:fd:f2:2e:05:13:8e: ab:06:95:aa:64:88:d9:09:11:ed:5c:ba:10:da:0a: 57:14:13:17:35:f5:90:fa:97:12:ee:62:81:b7:67: b7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:82:39:AC:9E:C1:94:6C:F1:48:84:40:F0:63:C0:F7:07:81:75:E1 X509v3 Authority Key Identifier: keyid:F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/6YI5rJ7BlGzxSIRA8GPA9weBdeE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.176.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:f4:81:81:da:e9:76:63:58:3e:b2:50:67:d2:c1:a9:cb:0e: 2e:aa:0a:88:9e:81:bc:32:00:6a:3b:3d:ff:b9:4f:24:c4:66: b8:ef:26:10:32:3a:e8:22:d1:c6:f2:33:4a:36:10:1d:15:92: b1:a9:ef:8c:bf:f7:a8:bc:0c:74:8f:d6:f5:e3:37:78:7a:b5: d7:2b:32:78:65:af:09:cf:93:3d:e5:51:f4:f3:0f:7f:b3:8a: 2e:5d:4f:5b:19:c9:d8:d9:59:7c:41:f7:3d:b0:28:12:78:03: bc:a7:41:18:46:b9:22:fd:e5:7e:b1:8f:ea:4a:35:aa:c7:53: 20:33:e4:b1:97:50:8e:1a:67:08:1a:4b:46:07:b8:e0:0e:c5: 40:a2:c1:a4:b6:37:c9:33:8b:47:19:d4:64:38:8d:eb:13:e7: 49:f6:04:7c:70:88:ec:50:2b:6f:55:46:ca:01:7e:a1:bc:16: dd:9e:6e:6d:cc:31:9e:00:28:0d:32:91:6c:fe:d5:62:9b:0d: 8b:38:c3:fe:a9:b1:ea:17:09:8c:f2:a6:0d:b2:d4:06:1a:10: 42:69:c0:01:0b:b1:be:cf:6b:09:5f:63:17:d6:0b:80:98:bf: b2:b7:4d:f1:35:e3:00:f1:31:b8:cc:d2:62:3c:1e:00:91:14: e8:9c:ae:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nk32IXG8oG5O9njDQFfBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2Y2IwYzhmMjA4NDMzMDIwMzRmNjM2NTZlYTI5ZWJkNmQx MTYzYWEwHhcNMjYwMTAxMjAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTgyMzlhYzllYzE5NDZjZjE0ODg0NDBmMDYzYzBmNzA3ODE3NWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB7d7cTNfCdRBD6vOq7G/RKYTNr7 lY6DsRJMBVo7aFPnGohfMomgGODfBs5odSfWxe55LEXBL3+hgg+aGyOzKRHSazD3 +5K2Io4yjBQiNe6dfK+jka9LZ/KefB8lyQzrnK8MFd42eYiVRnGAUJ2mDBjRK5n8 nCFBqf4+vwq1rCqZ0nkTlQDs9p6CD6k1PHHlmDLELE9guNHlezOg9HPzKrpquH08 bAB9MQhJOrzzV8UAfPHqvs1bqTeh6Y0/wAp5vie7MYwVpb6YXF0gW9oP+btrPSvj ZN+IBXn98i4FE46rBpWqZIjZCRHtXLoQ2gpXFBMXNfWQ+pcS7mKBt2e3dwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOmCOayewZRs8UiEQPBjwPcHgXXhMB8GA1UdIwQY MBaAFPbLDI8ghDMCA09jZW6inr1tEWOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85ODQ4NDQtM2ViNC00MjMyLTkzODUt MmFmM2Q2MmJlN2YyLzEvNllJNXJKN0JsR3p4U0lSQThHUEE5d2VCZGVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS85ODQ4NDQtM2ViNC00MjMyLTkzODUtMmFmM2Q2MmJlN2Yy LzEvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8CwMA0G CSqGSIb3DQEBCwUAA4IBAQB79IGB2ul2Y1g+slBn0sGpyw4uqgqInoG8MgBqOz3/ uU8kxGa47yYQMjroItHG8jNKNhAdFZKxqe+Mv/eovAx0j9b14zd4erXXKzJ4Za8J z5M95VH08w9/s4ouXU9bGcnY2Vl8Qfc9sCgSeAO8p0EYRrki/eV+sY/qSjWqx1Mg M+Sxl1COGmcIGktGB7jgDsVAosGktjfJM4tHGdRkOI3rE+dJ9gR8cIjsUCtvVUbK AX6hvBbdnm5tzDGeACgNMpFs/tVimw2LOMP+qbHqFwmM8qYNstQGGhBCacABC7G+ z2sJX2MX1guAmL+yt03xNeMA8TG4zNJiPB4AkRTonK7f -----END CERTIFICATE-----Generated at Mon Feb 9 22:29:23 2026 by rpki-client