This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/6oH-q1WmgKlbF7oPFf0VCjT4cP4.roa File: 6oH-q1WmgKlbF7oPFf0VCjT4cP4.roa (raw, json) Hash identifier: 8fxRfcDqePTH9D6GcvyAsB8XOQ2tsAsMINyYJwfwjDA= Subject key identifier: EA:81:FE:AB:55:A6:80:A9:5B:17:BA:0F:15:FD:15:0A:34:F8:70:FE Certificate issuer: /CN=dd5ee65ba368ad74d9a03ff282440c8577a21596 Certificate serial: 019B7834F63A897492B79C20B21FFFE39E83 Authority key identifier: DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/6oH-q1WmgKlbF7oPFf0VCjT4cP4.roa Signing time: Thu 01 Jan 2026 06:18:15 +0000 ROA not before: Thu 01 Jan 2026 06:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204726 IP address blocks: 91.219.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f6:3a:89:74:92:b7:9c:20:b2:1f:ff:e3:9e:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd5ee65ba368ad74d9a03ff282440c8577a21596 Validity Not Before: Jan 1 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea81feab55a680a95b17ba0f15fd150a34f870fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f1:d0:16:34:3e:90:bb:d7:14:d0:d5:d8:60: 50:27:b0:b3:2d:a6:fb:6e:57:9e:00:05:99:dd:67: 5b:f6:29:cd:14:b4:1d:cb:fa:bd:a3:2b:b1:00:7d: 0b:a1:83:65:c9:ab:9b:be:65:2a:c1:f6:f6:74:29: 1d:92:b5:fa:bd:57:b2:3e:95:74:3a:ac:e8:35:80: e5:4e:bf:26:9b:39:56:5c:95:74:3f:1a:f4:a1:44: f3:e1:d1:25:b3:02:cd:56:26:23:4c:ec:fe:59:56: f6:90:ed:b8:df:ef:83:4d:6f:3b:be:d6:0b:10:2a: ab:14:a8:4d:1f:be:62:8b:6f:30:3a:33:c7:2e:d6: 47:68:32:e1:3e:14:4b:52:94:af:24:2c:44:df:49: c9:42:ea:66:fe:0a:ca:fe:18:09:82:d6:20:ab:4d: 16:ce:b1:4f:34:f9:d6:4d:83:3f:fa:3a:66:74:9f: 73:6d:1a:69:29:29:5b:e7:b8:94:ec:ec:92:c1:8d: 42:9d:68:c9:98:54:3e:b3:f2:b0:3f:03:f6:56:49: 11:5b:dd:4e:c2:6b:3f:92:13:9d:a9:eb:2f:47:f8: f1:90:02:c5:07:29:7c:23:3a:57:31:7d:f7:df:7b: ba:a7:28:2e:11:42:05:02:bd:ec:37:8f:01:00:1c: 09:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:81:FE:AB:55:A6:80:A9:5B:17:BA:0F:15:FD:15:0A:34:F8:70:FE X509v3 Authority Key Identifier: keyid:DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/6oH-q1WmgKlbF7oPFf0VCjT4cP4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.219.22.0/24 Signature Algorithm: sha256WithRSAEncryption 22:ee:24:ad:64:7c:9b:d1:bf:c9:c4:ab:06:c7:9d:f7:85:26: fb:36:ca:b9:66:89:a4:6b:35:23:e1:ef:34:26:b8:75:78:de: f0:2c:9a:d3:24:09:79:57:f4:ff:27:71:6b:45:77:09:f5:b9: 5a:06:ee:3e:4c:a9:73:a2:30:e0:37:3c:c2:81:56:65:79:64: 9b:b2:4c:87:bb:0c:df:0a:88:8e:7e:58:88:83:3e:5c:68:a9: ec:57:a1:43:85:bc:68:85:8a:74:92:ab:08:f8:69:0c:9f:06: 5a:65:d1:ac:09:d7:5a:4b:ce:df:ec:47:80:4e:2b:3a:f4:41: 89:6d:79:70:2d:a2:a8:2b:63:a7:5c:13:78:6b:c2:26:25:34: 0f:53:c5:18:03:4d:41:fc:83:34:c9:39:21:bc:d4:8c:6b:fe: e3:de:0f:52:72:00:ca:f3:6a:22:0d:20:76:e4:d0:bf:f2:c6: 20:69:4d:df:b8:21:bf:4a:2e:77:e0:ee:e7:7f:65:8e:a1:88: 93:75:2f:f1:56:d4:d5:93:42:6e:c6:1d:90:bc:92:b7:a0:78: f4:3a:11:53:64:05:3c:63:85:54:2b:67:d3:cf:d7:26:51:10: ab:f4:0e:e7:fa:99:43:63:5a:9b:15:08:6f:41:b4:fc:2a:ba: e1:48:73:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NPY6iXSSt5wgsh//456DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNWVlNjViYTM2OGFkNzRkOWEwM2ZmMjgyNDQwYzg1Nzdh MjE1OTYwHhcNMjYwMTAxMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTgxZmVhYjU1YTY4MGE5NWIxN2JhMGYxNWZkMTUwYTM0Zjg3MGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPHQFjQ+kLvXFNDV2GBQJ7CzLab7 bleeAAWZ3Wdb9inNFLQdy/q9oyuxAH0LoYNlyaubvmUqwfb2dCkdkrX6vVeyPpV0 OqzoNYDlTr8mmzlWXJV0Pxr0oUTz4dElswLNViYjTOz+WVb2kO243++DTW87vtYL ECqrFKhNH75ii28wOjPHLtZHaDLhPhRLUpSvJCxE30nJQupm/grK/hgJgtYgq00W zrFPNPnWTYM/+jpmdJ9zbRppKSlb57iU7OySwY1CnWjJmFQ+s/KwPwP2VkkRW91O wms/khOdqesvR/jxkALFByl8IzpXMX3333u6pyguEUIFAr3sN48BABwJMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOqB/qtVpoCpWxe6DxX9FQo0+HD+MB8GA1UdIwQY MBaAFN1e5lujaK102aA/8oJEDIV3ohWWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1Y3bVc2Tm9yWFRab0RfeWdrUU1oWGVpRlpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kYzY4ZGQtMWRjOC00ODg4LWEzZWQt ZWJkNzNiMTllYWU0LzEvNm9ILXExV21nS2xiRjdvUEZmMFZDalQ0Y1A0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kYzY4ZGQtMWRjOC00ODg4LWEzZWQtZWJkNzNiMTllYWU0 LzEvM1Y3bVc2Tm9yWFRab0RfeWdrUU1oWGVpRlpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9sWMA0G CSqGSIb3DQEBCwUAA4IBAQAi7iStZHyb0b/JxKsGx533hSb7Nsq5ZomkazUj4e80 Jrh1eN7wLJrTJAl5V/T/J3FrRXcJ9blaBu4+TKlzojDgNzzCgVZleWSbskyHuwzf CoiOfliIgz5caKnsV6FDhbxohYp0kqsI+GkMnwZaZdGsCddaS87f7EeATis69EGJ bXlwLaKoK2OnXBN4a8ImJTQPU8UYA01B/IM0yTkhvNSMa/7j3g9ScgDK82oiDSB2 5NC/8sYgaU3fuCG/Si534O7nf2WOoYiTdS/xVtTVk0Juxh2QvJK3oHj0OhFTZAU8 Y4VUK2fTz9cmURCr9A7n+plDY1qbFQhvQbT8KrrhSHO/ -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:14 2026 by rpki-client