This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/6h9k6xzi-eiSHNvIfR1iiY1lGdQ.roa File: 6h9k6xzi-eiSHNvIfR1iiY1lGdQ.roa (raw, json) Hash identifier: pfVa1UicKiOy2Facu1pK6Uyiw1IMqVl6D7uB18F/7yw= Subject key identifier: EA:1F:64:EB:1C:E2:F9:E8:92:1C:DB:C8:7D:1D:62:89:8D:65:19:D4 Certificate issuer: /CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e Certificate serial: 019C418EEFAB6CB90F47C07408BD24297283 Authority key identifier: 77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/6h9k6xzi-eiSHNvIfR1iiY1lGdQ.roa Signing time: Mon 09 Feb 2026 08:40:12 +0000 ROA not before: Mon 09 Feb 2026 08:40:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62392 IP address blocks: 185.175.216.0/22 maxlen: 22 2001:67c:1810::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:8e:ef:ab:6c:b9:0f:47:c0:74:08:bd:24:29:72:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e Validity Not Before: Feb 9 08:40:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea1f64eb1ce2f9e8921cdbc87d1d62898d6519d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:74:e8:35:dd:78:00:f1:4b:35:fa:a0:f8:b2: 4c:2a:7f:0a:f5:ae:ae:c2:3b:ae:63:53:f4:be:16: 54:1c:a6:0b:b7:1b:64:1b:be:22:c6:92:5b:47:07: 4f:2d:94:40:1a:59:20:c8:91:6b:d2:da:19:6e:a5: ef:ce:0c:38:d3:c6:80:51:d2:25:d6:dd:e4:45:23: 39:d3:96:f0:45:f1:ad:c5:4a:c0:8c:cc:74:24:7e: 38:ba:4b:89:99:22:d5:9f:90:b2:fa:46:51:62:80: 85:6c:ee:66:2c:78:d6:5d:b3:94:d5:0e:f2:06:78: 53:03:a7:5a:3f:a2:71:c5:16:b9:df:f9:3d:24:9d: d9:b4:3c:13:de:19:1e:b4:7d:d3:bd:b2:b3:58:41: 09:d2:09:ed:10:9d:07:b2:9e:e3:b9:d3:53:66:0d: c8:75:c9:2c:18:7a:2f:1c:38:b6:1a:79:ef:9a:1a: 0d:b6:a2:8c:ed:40:b9:e5:2b:2a:19:f7:c2:e5:ca: 55:cf:42:73:23:60:af:5e:db:f4:85:c7:5d:78:29: 82:a4:d8:72:cb:5e:8b:06:0e:c0:b3:9b:c7:eb:67: fa:19:d5:5d:5c:de:be:e2:be:bb:00:49:ce:dc:1b: 4a:24:1c:dd:31:0b:d3:9e:81:09:14:7f:92:a0:fc: 4d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:1F:64:EB:1C:E2:F9:E8:92:1C:DB:C8:7D:1D:62:89:8D:65:19:D4 X509v3 Authority Key Identifier: keyid:77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/6h9k6xzi-eiSHNvIfR1iiY1lGdQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.175.216.0/22 IPv6: 2001:67c:1810::/48 Signature Algorithm: sha256WithRSAEncryption 48:18:fa:a1:ce:11:a9:3e:a5:18:1a:94:f0:2f:a5:3f:66:46: e9:cf:dd:14:52:d6:e2:52:7e:f1:ad:a4:47:c1:d4:af:78:9c: b9:c6:f2:19:40:16:8d:ed:83:96:d6:a5:50:b9:05:af:13:d8: 3f:cc:46:4a:57:4f:9b:d2:86:9b:72:10:0e:67:e7:17:b5:ff: 68:9e:c3:3f:b1:7c:d5:d1:f8:36:83:6b:0a:8b:95:c5:17:43: b9:03:8b:d7:b7:be:21:0c:5b:43:c8:75:88:00:90:e2:d9:69: 95:96:24:4a:59:17:d9:86:8c:f9:4f:3b:35:75:f1:1f:08:b1: e8:72:02:81:4e:e9:b0:56:23:79:5f:0d:11:bd:55:85:30:4c: 02:f6:5c:13:31:69:5e:ba:1a:1e:1d:d7:2d:05:d2:f7:04:7d: e3:ec:3a:ac:70:fa:c3:2f:ef:74:40:b8:e1:a4:62:af:b7:73: 32:7c:e5:e2:87:3b:99:fe:ff:1f:71:ca:fc:e7:d3:20:74:a7: 3d:89:0f:bc:7b:77:ae:0f:da:b5:f0:ea:8e:82:c2:8e:9f:1a: ff:e6:e3:a5:28:a8:98:b1:5f:fe:7e:a4:0d:18:3a:26:45:2c: 90:41:4e:a0:cd:cd:32:85:71:12:71:d3:66:52:4a:d8:10:e7: eb:c0:ba:11 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZxBju+rbLkPR8B0CL0kKXKDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZDJkOTI4NDIzMTA0ZTVjMzQ4MGUyMWI0YTNlZDE0OThi MmEyN2UwHhcNMjYwMjA5MDg0MDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTFmNjRlYjFjZTJmOWU4OTIxY2RiYzg3ZDFkNjI4OThkNjUxOWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3ToNd14APFLNfqg+LJMKn8K9a6u wjuuY1P0vhZUHKYLtxtkG74ixpJbRwdPLZRAGlkgyJFr0toZbqXvzgw408aAUdIl 1t3kRSM505bwRfGtxUrAjMx0JH44ukuJmSLVn5Cy+kZRYoCFbO5mLHjWXbOU1Q7y BnhTA6daP6JxxRa53/k9JJ3ZtDwT3hketH3TvbKzWEEJ0gntEJ0Hsp7judNTZg3I dcksGHovHDi2GnnvmhoNtqKM7UC55SsqGffC5cpVz0JzI2CvXtv0hcddeCmCpNhy y16LBg7As5vH62f6GdVdXN6+4r67AEnO3BtKJBzdMQvTnoEJFH+SoPxNWQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOofZOsc4vnokhzbyH0dYomNZRnUMB8GA1UdIwQY MBaAFHfS2ShCMQTlw0gOIbSj7RSYsqJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDlMWktFSXhCT1hEU0E0aHRLUHRGSml5b240LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8yYjllMjktZDU2OC00ZDUzLWIxMjgt NDg4NzkyMzg4ZTViLzEvNmg5azZ4emktZWlTSE52SWZSMWlpWTFsR2RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8yYjllMjktZDU2OC00ZDUzLWIxMjgtNDg4NzkyMzg4ZTVi LzEvZDlMWktFSXhCT1hEU0E0aHRLUHRGSml5b240LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCua/YMA8E AgACMAkDBwAgAQZ8GBAwDQYJKoZIhvcNAQELBQADggEBAEgY+qHOEak+pRgalPAv pT9mRunP3RRS1uJSfvGtpEfB1K94nLnG8hlAFo3tg5bWpVC5Ba8T2D/MRkpXT5vS hptyEA5n5xe1/2iewz+xfNXR+DaDawqLlcUXQ7kDi9e3viEMW0PIdYgAkOLZaZWW JEpZF9mGjPlPOzV18R8IsehyAoFO6bBWI3lfDRG9VYUwTAL2XBMxaV66Gh4d1y0F 0vcEfePsOqxw+sMv73RAuOGkYq+3czJ85eKHO5n+/x9xyvzn0yB0pz2JD7x7d64P 2rXw6o6Cwo6fGv/m46UoqJixX/5+pA0YOiZFLJBBTqDNzTKFcRJx02ZSStgQ5+vA uhE= -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:40 2026 by rpki-client