This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/rvG6Pqknht3C9PPJsjRV_-EkR94.roa File: rvG6Pqknht3C9PPJsjRV_-EkR94.roa (raw, json) Hash identifier: imN0OYjaMMnMPtfQkitSZR5ocmTWX3N8NSgzVWFNEvA= Subject key identifier: AE:F1:BA:3E:A9:27:86:DD:C2:F4:F3:C9:B2:34:55:FF:E1:24:47:DE Certificate issuer: /CN=6e3ee2b8400208a7eea45060f4b7a83c43e8de7c Certificate serial: 019B7758E6E13EF600E9AB0CC66C6C80F475 Authority key identifier: 6E:3E:E2:B8:40:02:08:A7:EE:A4:50:60:F4:B7:A8:3C:43:E8:DE:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/rvG6Pqknht3C9PPJsjRV_-EkR94.roa Signing time: Thu 01 Jan 2026 02:17:53 +0000 ROA not before: Thu 01 Jan 2026 02:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205234 IP address blocks: 91.201.32.0/24 maxlen: 24 91.201.33.0/24 maxlen: 24 91.201.34.0/24 maxlen: 24 91.201.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e6:e1:3e:f6:00:e9:ab:0c:c6:6c:6c:80:f4:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e3ee2b8400208a7eea45060f4b7a83c43e8de7c Validity Not Before: Jan 1 02:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aef1ba3ea92786ddc2f4f3c9b23455ffe12447de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a7:62:b6:27:5d:b9:2d:14:03:65:61:f5:b7: d3:be:32:1f:8e:09:2e:37:83:d0:9c:42:80:5e:aa: bf:03:fb:51:84:bf:ea:d9:9e:48:1d:f8:f5:15:8d: 62:a4:1e:c0:84:d1:57:9c:eb:56:2f:82:29:84:aa: 68:23:e2:15:ba:3d:aa:c1:94:fd:07:ea:19:98:68: 11:eb:65:e3:c1:4e:ab:1d:7e:ad:7c:d6:89:f0:35: 68:1c:a3:05:32:fc:ce:0f:d1:a5:d8:b6:0e:e6:03: ac:44:47:f4:75:dc:65:79:da:78:7e:40:97:fa:b2: 78:11:97:1d:d0:b1:86:74:75:75:04:24:a7:4c:f8: ad:09:58:e0:c5:6b:ea:93:2b:a8:8c:8d:6d:f2:68: de:bc:a9:2e:69:99:35:0a:bf:d7:4f:56:c0:dd:74: 42:7c:a4:8b:59:f9:c7:40:d3:f6:0f:b3:90:5b:0e: ab:ca:85:37:0c:04:3d:02:67:2b:e7:4e:fd:a0:5b: 27:0f:30:eb:e0:d3:fb:3b:d8:05:b6:8b:68:1d:c2: 23:df:6a:f8:ea:64:f7:48:4b:5d:97:15:4b:7c:52: b8:eb:b2:04:5a:88:63:13:a2:2a:74:ff:40:88:6b: 30:0a:ce:af:fb:82:71:46:e5:bd:0e:75:9e:2a:eb: 95:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F1:BA:3E:A9:27:86:DD:C2:F4:F3:C9:B2:34:55:FF:E1:24:47:DE X509v3 Authority Key Identifier: keyid:6E:3E:E2:B8:40:02:08:A7:EE:A4:50:60:F4:B7:A8:3C:43:E8:DE:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/rvG6Pqknht3C9PPJsjRV_-EkR94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.201.32.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:e6:5f:7e:f9:c7:58:39:bf:56:6e:a0:97:64:a4:db:23:de: 54:23:17:8b:b2:19:f8:34:17:3e:cd:11:8f:c4:e7:6a:95:62: 9a:2b:e1:27:b7:38:04:a3:38:7b:50:62:a1:e3:4e:5d:56:79: 02:75:3d:c6:92:02:1e:f8:1d:a8:84:c9:cf:a5:f3:01:6b:fe: 2f:13:c6:e4:72:ca:79:0a:5c:26:70:ad:e1:98:a2:17:f4:59: 55:d7:81:a3:b7:f1:cb:92:45:c7:b7:67:92:2a:f8:64:56:76: 43:bb:f0:21:72:25:5e:81:88:c7:02:d8:8b:3d:ea:49:75:c8: f0:b2:34:fc:98:f3:ef:dd:53:78:03:2b:13:28:75:ac:ec:a3: 2c:05:2c:c7:40:dd:72:53:88:c7:4d:d6:c1:c6:4f:8a:f3:cb: e2:7c:50:bf:13:f3:98:02:6e:14:27:18:1b:e0:48:d8:01:97: d3:b8:4f:88:bc:31:20:62:ef:08:de:0d:e0:6d:95:56:71:b7: c8:b1:a6:af:66:70:21:e3:91:5f:03:2f:d2:34:64:97:34:bc: 04:90:28:82:9d:47:44:b2:69:f8:90:6c:ec:65:09:66:79:47: 77:d1:76:ee:03:21:52:66:cf:9f:53:c8:a7:bb:66:6e:d8:a2: f2:45:aa:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WObhPvYA6asMxmxsgPR1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlM2VlMmI4NDAwMjA4YTdlZWE0NTA2MGY0YjdhODNjNDNl OGRlN2MwHhcNMjYwMTAxMDIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWYxYmEzZWE5Mjc4NmRkYzJmNGYzYzliMjM0NTVmZmUxMjQ0N2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6ditidduS0UA2Vh9bfTvjIfjgku N4PQnEKAXqq/A/tRhL/q2Z5IHfj1FY1ipB7AhNFXnOtWL4IphKpoI+IVuj2qwZT9 B+oZmGgR62XjwU6rHX6tfNaJ8DVoHKMFMvzOD9Gl2LYO5gOsREf0ddxledp4fkCX +rJ4EZcd0LGGdHV1BCSnTPitCVjgxWvqkyuojI1t8mjevKkuaZk1Cr/XT1bA3XRC fKSLWfnHQNP2D7OQWw6ryoU3DAQ9Amcr5079oFsnDzDr4NP7O9gFtotoHcIj32r4 6mT3SEtdlxVLfFK467IEWohjE6IqdP9AiGswCs6v+4JxRuW9DnWeKuuVGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK7xuj6pJ4bdwvTzybI0Vf/hJEfeMB8GA1UdIwQY MBaAFG4+4rhAAgin7qRQYPS3qDxD6N58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmo3aXVFQUNDS2Z1cEZCZzlMZW9QRVBvM253LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9lNGYyZGItNmY0Ni00NzYxLWFkZmUt NzMyN2RmNmJkZDEwLzEvcnZHNlBxa25odDNDOVBQSnNqUlZfLUVrUjk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9lNGYyZGItNmY0Ni00NzYxLWFkZmUtNzMyN2RmNmJkZDEw LzEvYmo3aXVFQUNDS2Z1cEZCZzlMZW9QRVBvM253LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8kgMA0G CSqGSIb3DQEBCwUAA4IBAQAa5l9++cdYOb9WbqCXZKTbI95UIxeLshn4NBc+zRGP xOdqlWKaK+EntzgEozh7UGKh405dVnkCdT3GkgIe+B2ohMnPpfMBa/4vE8bkcsp5 ClwmcK3hmKIX9FlV14Gjt/HLkkXHt2eSKvhkVnZDu/AhciVegYjHAtiLPepJdcjw sjT8mPPv3VN4AysTKHWs7KMsBSzHQN1yU4jHTdbBxk+K88vifFC/E/OYAm4UJxgb 4EjYAZfTuE+IvDEgYu8I3g3gbZVWcbfIsaavZnAh45FfAy/SNGSXNLwEkCiCnUdE smn4kGzsZQlmeUd30XbuAyFSZs+fU8inu2Zu2KLyRapi -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:40 2026 by rpki-client