This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/x6n822Rpr9x_ujzRReAoyI3uWJE.roa File: x6n822Rpr9x_ujzRReAoyI3uWJE.roa (raw, json) Hash identifier: xHlOIj9K0jyV1cDKqnDaDCInd6n4ZibqQVDDfE1qwao= Subject key identifier: C7:A9:FC:DB:64:69:AF:DC:7F:BA:3C:D1:45:E0:28:C8:8D:EE:58:91 Certificate issuer: /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3 Certificate serial: 019B77C6FBBCC2584E467DA0C0CF674162EF Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/x6n822Rpr9x_ujzRReAoyI3uWJE.roa Signing time: Thu 01 Jan 2026 04:18:07 +0000 ROA not before: Thu 01 Jan 2026 04:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21385 IP address blocks: 81.92.160.0/20 maxlen: 24 86.110.64.0/19 maxlen: 24 185.55.120.0/22 maxlen: 24 193.110.24.0/22 maxlen: 24 212.82.160.0/19 maxlen: 24 217.151.80.0/20 maxlen: 24 2001:1b18::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:fb:bc:c2:58:4e:46:7d:a0:c0:cf:67:41:62:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3 Validity Not Before: Jan 1 04:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7a9fcdb6469afdc7fba3cd145e028c88dee5891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:02:80:fc:48:12:78:4a:89:6b:21:52:f3:a2: 82:e0:de:4e:f2:56:dc:07:7c:49:49:24:14:ec:d6: f9:64:80:fc:54:44:65:8c:29:1c:34:d4:06:c5:c5: f1:f4:2d:c1:b6:63:13:81:84:13:b0:2b:96:7a:f1: cd:a9:6f:db:21:34:cd:95:c5:53:1f:c1:2a:d4:35: 40:14:fa:ad:81:02:6b:1b:9c:3d:f1:d1:ef:85:e7: b9:55:02:91:e7:ea:09:e4:56:5a:bd:7e:d4:65:fa: a9:14:da:3f:04:a2:5b:39:19:ec:cb:38:54:c7:eb: 68:29:df:a4:01:8c:3e:39:f3:bc:bc:12:21:eb:2a: 82:47:ff:6b:29:95:07:1b:b5:64:1c:35:71:e3:87: 17:0b:93:45:06:5f:33:5d:39:b9:05:65:ea:c2:e6: 75:07:34:a2:81:ad:ff:7f:26:eb:48:eb:50:10:22: df:76:2c:cf:c2:be:27:ec:27:a2:ac:1e:57:bd:82: 48:86:bb:3c:96:1d:25:bc:c6:91:e0:f1:ff:b3:45: 07:ee:d2:62:04:a8:0a:c5:a9:07:9c:4e:32:4b:e0: 27:ae:f1:86:f8:37:88:97:1d:0a:98:b1:18:e2:60: 6b:41:97:51:bb:e9:d2:3f:d4:6b:37:43:c7:87:b2: b4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A9:FC:DB:64:69:AF:DC:7F:BA:3C:D1:45:E0:28:C8:8D:EE:58:91 X509v3 Authority Key Identifier: keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/x6n822Rpr9x_ujzRReAoyI3uWJE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.92.160.0/20 86.110.64.0/19 185.55.120.0/22 193.110.24.0/22 212.82.160.0/19 217.151.80.0/20 IPv6: 2001:1b18::/32 Signature Algorithm: sha256WithRSAEncryption 5f:04:31:9c:bd:06:c0:62:60:8c:e6:79:05:d3:de:77:ee:de: 37:2d:91:fd:80:ed:9c:2d:9d:b3:bf:68:12:55:dc:bf:77:8f: a3:35:ea:1d:d7:e8:49:7b:10:97:90:fa:6a:98:fe:6a:78:81: 33:ce:d0:19:c0:48:98:39:a3:c6:68:d6:42:9a:e4:6b:f5:b7: 44:17:41:9a:07:3f:b7:70:ce:ee:9a:79:1b:b1:58:57:9d:a2: f6:31:1a:3f:1e:c2:95:ce:80:00:8d:98:66:38:ec:2d:2e:ac: 32:0c:d5:93:16:37:da:94:15:58:89:32:74:83:71:60:f3:25: 37:74:eb:b1:3b:58:c8:59:28:49:79:eb:cd:2f:e2:70:56:2f: cc:1c:a2:a7:cc:1f:50:90:25:83:75:c5:b1:4f:03:36:b1:b3: f7:b3:e0:b9:dd:9a:75:93:eb:6c:25:ff:85:91:70:1a:a9:4f: b4:12:8f:ca:bb:5f:3b:eb:33:28:c8:d1:fd:6c:d8:fc:d3:d6: 0c:8a:62:d5:bb:17:85:9b:e5:2c:0b:2e:b7:1b:4f:f4:6c:dc: d6:17:41:37:09:41:4b:e9:32:43:57:ee:e5:fb:f2:cf:73:72: 7f:e0:05:59:71:84:9e:eb:33:a6:c9:9f:ab:c4:7e:3a:f4:5f: e0:45:e9:00 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt3xvu8wlhORn2gwM9nQWLvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMDI0ZTQ2YTc0NmJmM2IzYWYzZGVjMDgxY2U3ZWJjNDQx MTAwYTMwHhcNMjYwMTAxMDQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2E5ZmNkYjY0NjlhZmRjN2ZiYTNjZDE0NWUwMjhjODhkZWU1ODkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wKA/EgSeEqJayFS86KC4N5O8lbc B3xJSSQU7Nb5ZID8VERljCkcNNQGxcXx9C3BtmMTgYQTsCuWevHNqW/bITTNlcVT H8Eq1DVAFPqtgQJrG5w98dHvhee5VQKR5+oJ5FZavX7UZfqpFNo/BKJbORnsyzhU x+toKd+kAYw+OfO8vBIh6yqCR/9rKZUHG7VkHDVx44cXC5NFBl8zXTm5BWXqwuZ1 BzSiga3/fybrSOtQECLfdizPwr4n7CeirB5XvYJIhrs8lh0lvMaR4PH/s0UH7tJi BKgKxakHnE4yS+AnrvGG+DeIlx0KmLEY4mBrQZdRu+nSP9RrN0PHh7K0jwIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFMep/Ntkaa/cf7o80UXgKMiN7liRMB8GA1UdIwQY MBaAFO4CTkanRr87OvPewIHOfrxEEQCjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQt MzExMzA0YTlhMjExLzEveDZuODIyUnByOXhfdWp6UlJlQW95STN1V0pFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQtMzExMzA0YTlhMjEx LzEvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQEUVygAwQF Vm5AAwQCuTd4AwQCwW4YAwQF1FKgAwQE2ZdQMA0EAgACMAcDBQAgARsYMA0GCSqG SIb3DQEBCwUAA4IBAQBfBDGcvQbAYmCM5nkF09537t43LZH9gO2cLZ2zv2gSVdy/ d4+jNeod1+hJexCXkPpqmP5qeIEzztAZwEiYOaPGaNZCmuRr9bdEF0GaBz+3cM7u mnkbsVhXnaL2MRo/HsKVzoAAjZhmOOwtLqwyDNWTFjfalBVYiTJ0g3Fg8yU3dOux O1jIWShJeevNL+JwVi/MHKKnzB9QkCWDdcWxTwM2sbP3s+C53Zp1k+tsJf+FkXAa qU+0Eo/Ku1876zMoyNH9bNj809YMimLVuxeFm+UsCy63G0/0bNzWF0E3CUFL6TJD V+7l+/LPc3J/4AVZcYSe6zOmyZ+rxH469F/gRekA -----END CERTIFICATE-----Generated at Tue Feb 10 01:23:49 2026 by rpki-client