This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/6PvsgVwbpjjge_V2egl4nj0Eov4.roa File: 6PvsgVwbpjjge_V2egl4nj0Eov4.roa (raw, json) Hash identifier: U1ac2CnvIyxkgh4LffLq2pt3hg9vUAszqogwRbgBBLY= Subject key identifier: E8:FB:EC:81:5C:1B:A6:38:E0:7B:F5:76:7A:09:78:9E:3D:04:A2:FE Certificate issuer: /CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa Certificate serial: 019B7D5C04651DD093461CFD2061BE14B1AD Authority key identifier: AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/6PvsgVwbpjjge_V2egl4nj0Eov4.roa Signing time: Fri 02 Jan 2026 06:19:01 +0000 ROA not before: Fri 02 Jan 2026 06:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39790 IP address blocks: 81.91.80.0/20 maxlen: 21 185.14.224.0/22 maxlen: 23 2001:1568::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:04:65:1d:d0:93:46:1c:fd:20:61:be:14:b1:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa Validity Not Before: Jan 2 06:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8fbec815c1ba638e07bf5767a09789e3d04a2fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:dd:dc:0f:06:53:88:29:36:a3:fb:94:db:87: af:85:cf:82:53:12:e1:2e:6d:c2:02:a1:7e:8f:ef: 44:60:ec:9d:17:44:98:e6:91:22:ef:f0:4d:31:99: 29:70:a0:75:bc:a7:92:2a:ac:c7:71:ba:6e:7c:0a: e5:ff:ea:56:c9:44:3c:b8:91:44:d7:8b:d3:5d:78: 56:c4:8c:d6:f9:5e:dd:b1:af:b7:69:e9:b8:e4:c2: 6b:cd:5e:43:ea:93:8b:5d:d8:38:cf:ed:d8:71:2d: 20:cd:06:c7:b1:14:3e:bd:cb:e1:b7:2e:35:bb:23: e1:a6:e2:ee:9c:f4:22:7a:bd:2d:b4:ac:6f:04:9e: bd:07:94:27:de:69:b2:94:ec:62:dd:3e:26:0e:4c: 38:f0:c0:91:63:8c:e2:49:7c:9b:88:6f:34:4e:c1: cb:68:1a:b5:e7:e6:a2:e6:48:a4:c4:2e:cc:f7:8a: 40:e0:95:fd:4c:83:b8:b0:53:ad:2a:31:09:51:d7: 27:31:b6:b9:4f:aa:ed:37:1d:16:03:cb:ce:bc:1e: ad:c9:aa:d7:95:f8:ee:7e:2e:bc:d4:ff:d6:4e:73: c0:a8:f4:0c:cd:9c:42:43:3f:44:d3:0b:26:64:99: 0a:42:9a:65:c6:15:06:94:37:91:9f:a6:1c:43:b1: d1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FB:EC:81:5C:1B:A6:38:E0:7B:F5:76:7A:09:78:9E:3D:04:A2:FE X509v3 Authority Key Identifier: keyid:AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/6PvsgVwbpjjge_V2egl4nj0Eov4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.91.80.0/20 185.14.224.0/22 IPv6: 2001:1568::/32 Signature Algorithm: sha256WithRSAEncryption 5f:c8:e1:c7:3e:70:0f:64:e6:d5:8b:6f:46:c1:58:bc:18:45: f6:42:6a:2f:6c:dd:f4:01:c4:ea:06:2a:7e:29:12:14:65:14: a7:5d:74:b9:79:17:f9:5a:91:c3:0a:60:7d:0b:8c:7c:25:10: ea:90:23:7e:9c:f4:e2:26:11:6c:ed:d5:3a:d5:47:86:38:7b: d3:8b:7e:26:93:b4:f1:00:b9:cc:d3:a6:cd:c5:9d:d7:53:5b: 5a:e8:33:2e:3a:b6:8b:89:f8:9e:53:67:b0:75:10:12:97:fe: 98:3f:01:c7:1d:04:56:a5:1f:b9:42:c9:1a:f7:3f:96:4e:69: f1:51:46:95:a0:44:d3:92:93:b8:c6:ad:6c:13:f7:8a:20:4a: 9d:d3:f8:40:d9:6b:02:c0:7a:69:87:7e:9e:48:6b:cb:5f:54: dc:d0:24:b0:0c:65:6b:1f:5b:2c:3e:89:a7:97:4f:7b:16:e8: 02:ba:b0:32:30:94:79:89:3e:34:f5:8d:dd:3d:ea:24:df:5f: 36:bc:0e:a8:76:8d:9d:8f:9f:22:60:9e:de:c1:1d:74:5f:31: 09:99:26:f3:eb:6b:cf:02:6a:1f:5b:74:c6:f4:0e:54:fe:8c: d6:aa:8a:6f:ad:31:66:d1:dc:be:03:fd:8e:f1:ec:b6:58:32: dc:89:64:d9 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9XARlHdCTRhz9IGG+FLGtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMjExOTE3OGJmZDkyM2E0YjVlYzQwNmQ5ZmUxNDUyYjI3 NzZlZmEwHhcNMjYwMTAyMDYxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGZiZWM4MTVjMWJhNjM4ZTA3YmY1NzY3YTA5Nzg5ZTNkMDRhMmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt3cDwZTiCk2o/uU24evhc+CUxLh Lm3CAqF+j+9EYOydF0SY5pEi7/BNMZkpcKB1vKeSKqzHcbpufArl/+pWyUQ8uJFE 14vTXXhWxIzW+V7dsa+3aem45MJrzV5D6pOLXdg4z+3YcS0gzQbHsRQ+vcvhty41 uyPhpuLunPQier0ttKxvBJ69B5Qn3mmylOxi3T4mDkw48MCRY4ziSXybiG80TsHL aBq15+ai5kikxC7M94pA4JX9TIO4sFOtKjEJUdcnMba5T6rtNx0WA8vOvB6tyarX lfjufi681P/WTnPAqPQMzZxCQz9E0wsmZJkKQpplxhUGlDeRn6YcQ7HRrQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOj77IFcG6Y44Hv1dnoJeJ49BKL+MB8GA1UdIwQY MBaAFKwhGReL/ZI6S17EBtn+FFKyd276MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckNFWkY0djlranBMWHNRRzJmNFVVckozYnZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yYThmN2UtZTYwNS00MTE0LTkwZTgt ZjYwMGQwZmQwM2NlLzEvNlB2c2dWd2JwampnZV9WMmVnbDRuajBFb3Y0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yYThmN2UtZTYwNS00MTE0LTkwZTgtZjYwMGQwZmQwM2Nl LzEvckNFWkY0djlranBMWHNRRzJmNFVVckozYnZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUVtQAwQC uQ7gMA0EAgACMAcDBQAgARVoMA0GCSqGSIb3DQEBCwUAA4IBAQBfyOHHPnAPZObV i29GwVi8GEX2QmovbN30AcTqBip+KRIUZRSnXXS5eRf5WpHDCmB9C4x8JRDqkCN+ nPTiJhFs7dU61UeGOHvTi34mk7TxALnM06bNxZ3XU1ta6DMuOraLifieU2ewdRAS l/6YPwHHHQRWpR+5Qska9z+WTmnxUUaVoETTkpO4xq1sE/eKIEqd0/hA2WsCwHpp h36eSGvLX1Tc0CSwDGVrH1ssPomnl097FugCurAyMJR5iT409Y3dPeok3182vA6o do2dj58iYJ7ewR10XzEJmSbz62vPAmofW3TG9A5U/ozWqopvrTFm0dy+A/2O8ey2 WDLciWTZ -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:10 2026 by rpki-client