This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/6p89_xCOKbaLA_nTNaPhKFJdz_c.roa File: 6p89_xCOKbaLA_nTNaPhKFJdz_c.roa (raw, json) Hash identifier: 8QYHiVGLqfMhZfw5m6z2kE4Wp9ZlKeYZXiQifht1XBw= Subject key identifier: EA:9F:3D:FF:10:8E:29:B6:8B:03:F9:D3:35:A3:E1:28:52:5D:CF:F7 Certificate issuer: /CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8 Certificate serial: 019B7F13B198A2F8B8204FAA6334659D1945 Authority key identifier: 95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/6p89_xCOKbaLA_nTNaPhKFJdz_c.roa Signing time: Fri 02 Jan 2026 14:19:15 +0000 ROA not before: Fri 02 Jan 2026 14:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201241 IP address blocks: 185.51.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:b1:98:a2:f8:b8:20:4f:aa:63:34:65:9d:19:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8 Validity Not Before: Jan 2 14:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea9f3dff108e29b68b03f9d335a3e128525dcff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e6:05:d9:e4:b4:ef:39:0c:52:b3:20:82:c6: 68:33:34:12:54:be:fd:d0:80:c7:1d:91:8d:8f:56: 4a:4f:54:4b:92:ce:0b:24:4f:ae:f2:56:46:cb:62: 9b:a4:c9:38:57:b5:39:d5:11:d7:cd:11:7d:17:75: 1e:8f:4c:88:5a:61:30:ec:4e:cd:a1:ff:cb:19:96: e8:ee:56:ed:92:cc:7a:3a:14:c5:13:50:b1:ac:aa: 9f:ba:f1:66:d1:24:d9:8b:6a:94:57:d1:b4:10:f6: 3f:82:bd:35:a2:f8:44:b3:5c:2f:17:9e:c7:cb:0e: 1c:60:a6:71:d3:c1:6b:31:8f:b2:79:e4:ff:15:c7: 1c:cd:51:13:84:84:f4:31:4b:38:d1:15:c7:67:c0: 36:a5:de:dd:af:67:77:21:e6:23:62:a6:93:f9:a5: e6:8b:8a:ce:b9:2c:7b:49:33:55:be:21:30:55:1b: d6:a6:eb:f9:fc:c2:5c:8b:95:b8:b6:66:c5:51:40: 9e:0a:c9:00:e6:ff:d1:98:f5:7e:88:88:b1:eb:b3: 24:58:e7:87:d5:7a:12:c5:24:d7:c9:b1:3d:2f:e4: 34:7d:b4:06:a5:be:1b:dd:cd:80:e9:d9:e1:80:57: 85:33:34:e5:6d:20:dd:3a:b2:ae:e3:a6:25:48:c4: bc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9F:3D:FF:10:8E:29:B6:8B:03:F9:D3:35:A3:E1:28:52:5D:CF:F7 X509v3 Authority Key Identifier: keyid:95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/6p89_xCOKbaLA_nTNaPhKFJdz_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.51.24.0/22 Signature Algorithm: sha256WithRSAEncryption b8:16:1a:de:b2:2f:e2:b4:80:15:de:2a:8b:87:85:9f:49:f7: 13:b7:4b:b0:2e:fe:9d:9f:d5:23:ca:3a:6d:bf:52:6d:8b:f3: fb:a5:fc:f2:e2:ad:02:fc:06:57:5e:29:3d:4a:32:45:dd:8b: 69:ea:c3:80:7f:df:94:89:b2:6f:07:8a:a8:d1:55:72:24:f5: b3:f2:da:ce:03:e5:52:55:aa:e4:d4:56:26:5c:79:ed:be:ae: 1a:f7:66:38:9d:d7:9c:49:57:d2:6e:a1:73:2e:93:9d:d0:64: 09:a8:f7:5a:9c:b4:59:27:4f:27:9d:b8:c6:d6:2e:4b:23:d4: ba:a3:49:7f:8d:81:0a:95:6b:a8:01:8a:a9:86:b2:24:8f:d2: 0f:3a:a1:4b:f5:9b:33:18:cc:7e:b3:ae:92:10:9a:d9:d3:fd: 03:33:c9:bc:cd:aa:2d:37:c7:5d:85:20:65:16:e1:a5:03:07: 89:58:51:c9:a6:78:32:37:e0:a4:db:77:b1:1c:20:7d:b3:78: 98:f4:52:96:89:23:84:95:86:35:ee:3d:59:7e:14:87:e5:bc: 8d:ce:ea:0b:35:38:83:98:60:b9:f0:1d:e1:82:cc:ab:f7:a6: 18:b4:0f:8a:0a:f7:f4:04:de:45:8f:14:38:8c:b7:c6:7f:4f: 72:e9:ca:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E7GYovi4IE+qYzRlnRlFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZWJkODA2NmYxMDkwYzMxMTljZGI2OWU5ZDRkYzQwZDkw MzA0ZjgwHhcNMjYwMTAyMTQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTlmM2RmZjEwOGUyOWI2OGIwM2Y5ZDMzNWEzZTEyODUyNWRjZmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuYF2eS07zkMUrMggsZoMzQSVL79 0IDHHZGNj1ZKT1RLks4LJE+u8lZGy2KbpMk4V7U51RHXzRF9F3Uej0yIWmEw7E7N of/LGZbo7lbtksx6OhTFE1CxrKqfuvFm0STZi2qUV9G0EPY/gr01ovhEs1wvF57H yw4cYKZx08FrMY+yeeT/FccczVEThIT0MUs40RXHZ8A2pd7dr2d3IeYjYqaT+aXm i4rOuSx7STNVviEwVRvWpuv5/MJci5W4tmbFUUCeCskA5v/RmPV+iIix67MkWOeH 1XoSxSTXybE9L+Q0fbQGpb4b3c2A6dnhgFeFMzTlbSDdOrKu46YlSMS85wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOqfPf8Qjim2iwP50zWj4ShSXc/3MB8GA1UdIwQY MBaAFJXr2AZvEJDDEZzbaenU3EDZAwT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGV2WUJtOFFrTU1Sbk50cDZkVGNRTmtEQlBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wZGZmMTItNGU3Mi00MzBlLTlkZjYt YmRhYTZmYmQ0MzQ3LzEvNnA4OV94Q09LYmFMQV9uVE5hUGhLRkpkel9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8wZGZmMTItNGU3Mi00MzBlLTlkZjYtYmRhYTZmYmQ0MzQ3 LzEvbGV2WUJtOFFrTU1Sbk50cDZkVGNRTmtEQlBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTMYMA0G CSqGSIb3DQEBCwUAA4IBAQC4Fhresi/itIAV3iqLh4WfSfcTt0uwLv6dn9Ujyjpt v1Jti/P7pfzy4q0C/AZXXik9SjJF3Ytp6sOAf9+UibJvB4qo0VVyJPWz8trOA+VS Vark1FYmXHntvq4a92Y4ndecSVfSbqFzLpOd0GQJqPdanLRZJ08nnbjG1i5LI9S6 o0l/jYEKlWuoAYqphrIkj9IPOqFL9ZszGMx+s66SEJrZ0/0DM8m8zaotN8ddhSBl FuGlAweJWFHJpngyN+Ck23exHCB9s3iY9FKWiSOElYY17j1ZfhSH5byNzuoLNTiD mGC58B3hgsyr96YYtA+KCvf0BN5FjxQ4jLfGf09y6cqT -----END CERTIFICATE-----Generated at Mon Feb 9 23:42:05 2026 by rpki-client