This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/6Xsm7GtWPf6sxisdeJuLCo-3tLo.roa File: 6Xsm7GtWPf6sxisdeJuLCo-3tLo.roa (raw, json) Hash identifier: xdyBNDU6Kuc/zF3hUM0jBGfeZpAD6Qr+9Bqu74wdbek= Subject key identifier: E9:7B:26:EC:6B:56:3D:FE:AC:C6:2B:1D:78:9B:8B:0A:8F:B7:B4:BA Certificate issuer: /CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c Certificate serial: 019B7A5A7582FA45EBC6CC45BAD5753A1D02 Authority key identifier: A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/6Xsm7GtWPf6sxisdeJuLCo-3tLo.roa Signing time: Thu 01 Jan 2026 16:18:27 +0000 ROA not before: Thu 01 Jan 2026 16:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57844 IP address blocks: 37.123.96.0/24 maxlen: 24 37.123.97.0/24 maxlen: 24 37.123.98.0/24 maxlen: 24 37.123.99.0/24 maxlen: 24 37.123.100.0/24 maxlen: 24 37.123.101.0/24 maxlen: 24 37.123.102.0/24 maxlen: 24 37.123.103.0/24 maxlen: 24 178.20.224.0/24 maxlen: 24 178.20.225.0/24 maxlen: 24 178.20.226.0/24 maxlen: 24 178.20.227.0/24 maxlen: 24 178.20.228.0/24 maxlen: 24 178.20.229.0/24 maxlen: 24 178.20.230.0/24 maxlen: 24 178.20.231.0/24 maxlen: 24 185.9.156.0/24 maxlen: 24 185.9.157.0/24 maxlen: 24 185.9.158.0/24 maxlen: 24 185.9.159.0/24 maxlen: 24 185.118.140.0/24 maxlen: 24 185.118.142.0/24 maxlen: 24 185.118.143.0/24 maxlen: 24 2a00:9bc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:75:82:fa:45:eb:c6:cc:45:ba:d5:75:3a:1d:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c Validity Not Before: Jan 1 16:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e97b26ec6b563dfeacc62b1d789b8b0a8fb7b4ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f0:59:ea:74:e7:07:64:cb:fd:62:89:c9:e7: 7c:53:14:24:1a:62:69:d5:e9:1e:61:c7:21:a5:36: 49:a1:08:8a:26:a4:92:db:df:2c:3f:94:65:b5:bb: 76:f4:4b:60:1f:12:11:d3:16:73:eb:8d:12:19:1b: 78:fd:69:d7:f3:7d:93:e9:18:d3:49:68:a9:f1:1e: aa:be:e2:e3:36:6e:7c:69:aa:0e:92:e8:2f:ed:7a: e4:05:42:a5:16:7a:34:b0:11:91:b9:df:de:21:f2: 45:f0:64:16:5d:27:bc:2a:50:f2:91:e5:cf:b8:36: c1:a8:ac:30:bc:49:67:77:43:83:57:02:34:05:a1: 6f:81:7c:f9:e6:17:40:72:1f:9a:64:4e:f2:15:3e: ba:07:a0:98:b9:b7:e7:45:fc:c9:98:d9:66:2d:0b: 9f:2d:2f:12:c0:9a:55:af:d6:e2:81:27:ed:4e:ef: 81:4e:f4:1d:2f:de:50:e3:90:22:e4:5b:db:aa:4d: 36:3a:47:1a:49:68:8f:75:0d:9c:45:d7:f3:c4:fa: 76:47:96:91:cd:9a:01:d8:ca:1e:8f:a7:f1:cc:15: e4:06:41:7e:84:6c:75:cf:46:d3:20:6b:ae:f7:37: 0d:e3:de:b0:27:c4:30:75:7d:75:f5:68:1f:1f:19: d7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7B:26:EC:6B:56:3D:FE:AC:C6:2B:1D:78:9B:8B:0A:8F:B7:B4:BA X509v3 Authority Key Identifier: keyid:A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/6Xsm7GtWPf6sxisdeJuLCo-3tLo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.123.96.0/21 178.20.224.0/21 185.9.156.0/22 185.118.140.0/24 185.118.142.0/23 IPv6: 2a00:9bc0::/32 Signature Algorithm: sha256WithRSAEncryption 47:fc:2e:06:32:3a:47:be:a8:42:4b:9f:4c:11:57:9b:38:16: bf:1a:2f:12:05:0f:45:05:10:51:c7:87:6b:23:39:f6:37:ea: 0b:55:10:60:21:b2:6d:03:d0:87:66:2b:d0:01:f7:04:29:99: 09:90:04:5a:3a:4c:a9:c4:6a:b3:d3:23:d7:12:59:49:9d:a8: f9:e5:9c:7f:66:9f:70:64:10:83:f1:48:99:a2:c4:1b:ff:c2: cd:d7:c3:8a:03:dd:b1:3a:2f:57:d1:39:a1:93:4b:f8:ae:46: 44:17:93:a6:b8:69:c0:97:86:13:3f:eb:38:c3:5b:91:74:75: 0b:71:21:0a:ca:40:73:9c:5a:26:d5:15:7b:1e:39:ce:90:4f: 1c:b2:6b:17:10:9b:c9:f3:59:63:c5:e4:a9:a7:4f:ae:e3:b2: 6c:42:87:1a:d8:8e:e7:9e:58:19:41:b4:04:70:46:b1:e3:0d: 50:fa:c2:0f:20:11:c3:f8:98:99:f8:39:ab:c2:a9:bb:11:36: da:d5:35:db:5c:e7:80:16:f0:89:45:d2:1b:3a:28:7a:e6:84: dc:c0:8d:5f:52:ac:84:23:5a:ba:9a:39:02:83:27:c9:83:5f: 59:d8:97:1b:86:0f:af:e6:64:78:ab:6d:b1:69:ab:3d:da:6d: 48:71:2b:b6 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt6WnWC+kXrxsxFutV1Oh0CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YmRiMmM3YjMzNGI5NGJjZDQzMzg4ZjIxZjgyMDkyZGI2 Y2ZkNGMwHhcNMjYwMTAxMTYxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTdiMjZlYzZiNTYzZGZlYWNjNjJiMWQ3ODliOGIwYThmYjdiNGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/BZ6nTnB2TL/WKJyed8UxQkGmJp 1ekeYcchpTZJoQiKJqSS298sP5Rltbt29EtgHxIR0xZz640SGRt4/WnX832T6RjT SWip8R6qvuLjNm58aaoOkugv7XrkBUKlFno0sBGRud/eIfJF8GQWXSe8KlDykeXP uDbBqKwwvElnd0ODVwI0BaFvgXz55hdAch+aZE7yFT66B6CYubfnRfzJmNlmLQuf LS8SwJpVr9bigSftTu+BTvQdL95Q45Ai5Fvbqk02OkcaSWiPdQ2cRdfzxPp2R5aR zZoB2Moej6fxzBXkBkF+hGx1z0bTIGuu9zcN496wJ8QwdX119WgfHxnXCwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFOl7JuxrVj3+rMYrHXibiwqPt7S6MB8GA1UdIwQY MBaAFKe9ssezNLlLzUM4jyH4IJLbbP1MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDcyeXg3TTB1VXZOUXppUElmZ2drdHRzX1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hMWVlOTYtMmVlZC00NTMzLThhZmQt YTk1OGJmNWFjYmVhLzEvNlhzbTdHdFdQZjZzeGlzZGVKdUxDby0zdExvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9hMWVlOTYtMmVlZC00NTMzLThhZmQtYTk1OGJmNWFjYmVh LzEvcDcyeXg3TTB1VXZOUXppUElmZ2drdHRzX1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDJXtgAwQD shTgAwQCuQmcAwQAuXaMAwQBuXaOMA0EAgACMAcDBQAqAJvAMA0GCSqGSIb3DQEB CwUAA4IBAQBH/C4GMjpHvqhCS59MEVebOBa/Gi8SBQ9FBRBRx4drIzn2N+oLVRBg IbJtA9CHZivQAfcEKZkJkARaOkypxGqz0yPXEllJnaj55Zx/Zp9wZBCD8UiZosQb /8LN18OKA92xOi9X0Tmhk0v4rkZEF5OmuGnAl4YTP+s4w1uRdHULcSEKykBznFom 1RV7HjnOkE8csmsXEJvJ81ljxeSpp0+u47JsQoca2I7nnlgZQbQEcEax4w1Q+sIP IBHD+JiZ+Dmrwqm7ETba1TXbXOeAFvCJRdIbOih65oTcwI1fUqyEI1q6mjkCgyfJ g19Z2Jcbhg+v5mR4q22xaas92m1IcSu2 -----END CERTIFICATE-----Generated at Wed Jan 21 15:36:53 2026 by rpki-client