This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/rAid6SWBifBeRfH_M1UAs5DcdRw.roa File: rAid6SWBifBeRfH_M1UAs5DcdRw.roa (raw, json) Hash identifier: FzoFH/XQPycD4zEWka8Y3TTeasXdHpRVco1PTcTkVs4= Subject key identifier: AC:08:9D:E9:25:81:89:F0:5E:45:F1:FF:33:55:00:B3:90:DC:75:1C Certificate issuer: /CN=bdd017dd6d7cbfe8266154c1ae434c4cf8b68a57 Certificate serial: 019B7F15531513AF7BD518947D9C71E5B35D Authority key identifier: BD:D0:17:DD:6D:7C:BF:E8:26:61:54:C1:AE:43:4C:4C:F8:B6:8A:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdAX3W18v-gmYVTBrkNMTPi2ilc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/rAid6SWBifBeRfH_M1UAs5DcdRw.roa Signing time: Fri 02 Jan 2026 14:21:02 +0000 ROA not before: Fri 02 Jan 2026 14:21:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60213 IP address blocks: 91.145.32.0/19 maxlen: 19 185.247.108.0/22 maxlen: 22 2a01:b6c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.crl rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.mft rsync://rpki.ripe.net/repository/DEFAULT/vdAX3W18v-gmYVTBrkNMTPi2ilc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:53:15:13:af:7b:d5:18:94:7d:9c:71:e5:b3:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd017dd6d7cbfe8266154c1ae434c4cf8b68a57 Validity Not Before: Jan 2 14:21:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac089de9258189f05e45f1ff335500b390dc751c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:88:64:f5:c9:dd:ef:34:59:02:5c:e1:f8:50: 9c:5e:44:65:82:90:c8:d5:62:35:76:81:2a:0b:9c: dc:df:bc:a7:0b:49:5a:fe:83:b7:eb:30:d0:8b:6a: 68:1a:04:ef:14:5e:b8:47:c4:ea:08:00:86:60:2f: a8:ed:ea:fb:0f:08:19:90:00:4f:78:c7:e3:0a:c8: 8e:20:16:7e:13:2a:b9:e1:95:3c:ba:0b:68:ff:1c: 9b:26:ed:2e:32:ac:e4:62:b4:c0:04:d8:e0:39:c7: d8:a0:eb:62:74:3b:a6:bf:a0:bb:46:21:39:10:04: 39:3e:bb:c6:9b:a1:cd:a7:0a:d9:4b:48:a1:43:a8: 58:4d:7b:26:02:6d:2b:72:a0:31:3e:6d:28:40:4b: e9:81:40:93:f1:f3:0e:75:36:a1:0b:20:b7:55:30: c2:ff:a6:23:e8:61:cb:2e:8b:ed:55:36:5a:26:90: 78:dc:41:66:e5:1c:ea:5b:0d:b6:c7:c7:fd:d8:38: 71:be:2f:f4:bd:59:70:de:d8:22:d1:46:cb:41:f7: 9c:9c:c6:c8:07:87:f5:ff:bd:0f:c3:bf:85:96:5e: 86:79:c6:05:0f:40:50:74:20:b2:6c:fb:6f:60:d3: 19:df:7b:57:2e:3b:1f:19:9c:ad:9f:a7:99:a5:da: 19:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:08:9D:E9:25:81:89:F0:5E:45:F1:FF:33:55:00:B3:90:DC:75:1C X509v3 Authority Key Identifier: keyid:BD:D0:17:DD:6D:7C:BF:E8:26:61:54:C1:AE:43:4C:4C:F8:B6:8A:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdAX3W18v-gmYVTBrkNMTPi2ilc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/rAid6SWBifBeRfH_M1UAs5DcdRw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.145.32.0/19 185.247.108.0/22 IPv6: 2a01:b6c0::/29 Signature Algorithm: sha256WithRSAEncryption 8f:6e:f2:bf:ce:62:c5:dd:45:14:99:6a:d3:39:e1:ba:5c:cc: df:00:4c:9e:b0:f1:00:6b:0d:62:a3:ee:07:ac:f8:9a:c8:3d: 89:25:25:14:dc:74:10:87:70:4a:f0:1c:17:be:da:3a:af:78: 38:4e:a2:89:33:a8:40:30:47:aa:ba:39:52:3a:ab:6f:42:92: 43:cc:03:b3:63:23:86:85:cf:07:8e:e1:21:cd:38:2d:c9:43: 79:65:e4:93:28:e5:5b:3f:f5:51:ec:3b:76:bf:1c:2c:c6:da: 50:ce:94:36:f9:12:23:b1:07:f3:ab:08:c6:25:a5:50:b3:11: 34:7a:c9:be:28:9b:68:e6:fd:14:19:80:5e:21:4d:00:b3:e0: 85:ed:0f:2f:65:02:a3:6a:1c:0c:a8:1b:5e:ee:42:75:94:b3: 0b:ce:0f:51:d8:9f:d4:26:23:3a:5f:46:37:33:48:d9:c3:f0: b6:89:1d:20:be:b5:25:d5:1a:60:18:9b:a7:46:84:51:ce:fa: 6e:14:48:b5:0f:f3:2c:32:44:95:aa:28:25:c9:b2:95:4c:8e: 99:17:9e:b5:c5:90:86:f0:80:84:44:07:8b:68:b7:3d:b7:8d: 02:4e:77:f5:0b:ef:0a:83:bf:ec:2e:51:34:57:1b:6c:e1:04: 9a:2a:d4:03 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/FVMVE6971RiUfZxx5bNdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZDAxN2RkNmQ3Y2JmZTgyNjYxNTRjMWFlNDM0YzRjZjhi NjhhNTcwHhcNMjYwMTAyMTQyMTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzA4OWRlOTI1ODE4OWYwNWU0NWYxZmYzMzU1MDBiMzkwZGM3NTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYhk9cnd7zRZAlzh+FCcXkRlgpDI 1WI1doEqC5zc37ynC0la/oO36zDQi2poGgTvFF64R8TqCACGYC+o7er7DwgZkABP eMfjCsiOIBZ+Eyq54ZU8ugto/xybJu0uMqzkYrTABNjgOcfYoOtidDumv6C7RiE5 EAQ5PrvGm6HNpwrZS0ihQ6hYTXsmAm0rcqAxPm0oQEvpgUCT8fMOdTahCyC3VTDC /6Yj6GHLLovtVTZaJpB43EFm5RzqWw22x8f92Dhxvi/0vVlw3tgi0UbLQfecnMbI B4f1/70Pw7+Fll6GecYFD0BQdCCybPtvYNMZ33tXLjsfGZytn6eZpdoZWQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKwIneklgYnwXkXx/zNVALOQ3HUcMB8GA1UdIwQY MBaAFL3QF91tfL/oJmFUwa5DTEz4topXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmRBWDNXMTh2LWdtWVZUQnJrTk1UUGkyaWxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9iZTdiYTAtMTA3Yy00MmI2LTg0ZTUt MzM2MjM4YWI2ZGJhLzEvckFpZDZTV0JpZkJlUmZIX00xVUFzNURjZFJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9iZTdiYTAtMTA3Yy00MmI2LTg0ZTUtMzM2MjM4YWI2ZGJh LzEvdmRBWDNXMTh2LWdtWVZUQnJrTk1UUGkyaWxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFW5EgAwQC ufdsMA0EAgACMAcDBQMqAbbAMA0GCSqGSIb3DQEBCwUAA4IBAQCPbvK/zmLF3UUU mWrTOeG6XMzfAEyesPEAaw1io+4HrPiayD2JJSUU3HQQh3BK8BwXvto6r3g4TqKJ M6hAMEequjlSOqtvQpJDzAOzYyOGhc8HjuEhzTgtyUN5ZeSTKOVbP/VR7Dt2vxws xtpQzpQ2+RIjsQfzqwjGJaVQsxE0esm+KJto5v0UGYBeIU0As+CF7Q8vZQKjahwM qBte7kJ1lLMLzg9R2J/UJiM6X0Y3M0jZw/C2iR0gvrUl1RpgGJunRoRRzvpuFEi1 D/MsMkSVqiglybKVTI6ZF561xZCG8ICERAeLaLc9t40CTnf1C+8Kg7/sLlE0Vxts 4QSaKtQD -----END CERTIFICATE-----Generated at Mon Feb 9 22:14:53 2026 by rpki-client