This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/6ptl5zZN6otvqTbmcxR9jeeyPTw.roa File: 6ptl5zZN6otvqTbmcxR9jeeyPTw.roa (raw, json) Hash identifier: eOlv0gEoszbDU9BU/wQCemEUN+a4Reu5tk2gCPSosDY= Subject key identifier: EA:9B:65:E7:36:4D:EA:8B:6F:A9:36:E6:73:14:7D:8D:E7:B2:3D:3C Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25 Certificate serial: 019B7F147025E3B892B1C370844179E156E6 Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/6ptl5zZN6otvqTbmcxR9jeeyPTw.roa Signing time: Fri 02 Jan 2026 14:20:04 +0000 ROA not before: Fri 02 Jan 2026 14:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15576 IP address blocks: 91.198.79.0/24 maxlen: 24 94.176.192.0/23 maxlen: 23 2a05:9040::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:70:25:e3:b8:92:b1:c3:70:84:41:79:e1:56:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61a14553cacf103274d433e6b268066e01541b25 Validity Not Before: Jan 2 14:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea9b65e7364dea8b6fa936e673147d8de7b23d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:78:9e:40:97:08:d2:35:c1:4a:38:87:b7:c8: f7:6c:19:15:46:e9:d0:b5:c7:7e:15:c7:e8:7f:94: d3:57:9d:bc:0f:51:50:1d:fb:6f:30:f4:af:25:f2: 6c:89:f0:99:57:b8:88:63:de:f2:1a:5b:29:6b:b3: 70:82:95:de:e2:2a:70:56:84:fb:cc:2a:50:d8:77: 66:54:75:cc:bc:17:8e:f6:6e:f5:3f:61:50:58:bc: 32:89:f7:c7:55:e9:7c:19:a2:5c:4f:30:b3:13:0d: 36:cb:9a:c6:93:ec:d9:00:49:70:f7:f4:b0:85:4c: 38:6c:a9:e1:24:4c:26:87:2a:a3:d1:60:23:5a:49: 7d:a2:f9:3c:e7:c1:02:90:de:7d:fa:53:10:6f:3c: e0:cf:20:c0:cc:c8:60:14:c7:88:d4:97:ff:c1:d4: db:56:fb:a4:c2:b1:3f:b2:1c:1b:c8:77:59:5b:44: 5c:d8:70:dd:fe:be:e0:b1:72:19:79:71:b7:5d:df: ba:32:80:dd:bd:53:f0:3d:90:d5:67:18:40:de:15: 52:a6:04:1d:50:09:dc:04:43:6e:78:c4:f2:8d:c6: 7d:e1:29:6b:97:2c:f5:a1:ca:2d:62:af:d3:d2:76: 7a:e2:1e:11:0c:66:65:86:15:c4:4b:8e:58:a4:50: 57:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9B:65:E7:36:4D:EA:8B:6F:A9:36:E6:73:14:7D:8D:E7:B2:3D:3C X509v3 Authority Key Identifier: keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/6ptl5zZN6otvqTbmcxR9jeeyPTw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.79.0/24 94.176.192.0/23 IPv6: 2a05:9040::/29 Signature Algorithm: sha256WithRSAEncryption 74:ee:ca:2f:14:24:bf:7e:8f:85:19:96:e9:d5:32:ef:e0:3e: e6:96:39:97:a7:46:20:49:9a:8c:a1:4c:5f:91:85:27:2d:a8: 37:c4:5e:b2:12:7f:4c:93:7f:02:d2:fa:ef:f6:82:a7:e0:09: e3:32:60:27:1c:ae:eb:23:bb:af:8b:86:78:54:5e:cd:6b:14: ed:e7:08:6f:82:49:e3:eb:7e:4b:f5:24:7c:3f:1a:06:52:ac: f3:00:51:67:32:9e:c7:14:96:f9:9e:9a:1d:0d:3a:d2:d1:9e: 74:3f:54:2e:d5:83:5c:cb:b0:03:dd:4d:ad:be:e9:ed:41:a9: e2:e7:cf:b3:27:c3:b8:77:12:ea:ce:9b:4b:be:58:e6:8b:9c: 5b:b9:99:6b:6c:67:f4:73:8e:a0:95:3b:9b:d1:00:df:94:67: e3:f9:6c:f8:61:a1:2b:1c:6d:bf:e7:6a:2a:81:b8:06:89:df: eb:5a:b4:29:b9:fb:f0:b6:92:95:c9:7c:75:83:6e:24:b5:b5: a4:e6:82:b9:06:7a:61:c8:f5:c9:d7:9b:33:06:24:d1:2f:5c: 46:9b:29:28:11:a6:af:f6:3d:b3:ca:5f:93:85:85:3a:a1:10: 33:1c:44:5c:28:19:e9:bd:0b:74:33:29:0f:cf:65:e4:4c:9c: 0d:7e:c6:2a -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/FHAl47iSscNwhEF54VbmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYTE0NTUzY2FjZjEwMzI3NGQ0MzNlNmIyNjgwNjZlMDE1 NDFiMjUwHhcNMjYwMTAyMTQyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTliNjVlNzM2NGRlYThiNmZhOTM2ZTY3MzE0N2Q4ZGU3YjIzZDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HieQJcI0jXBSjiHt8j3bBkVRunQ tcd+Fcfof5TTV528D1FQHftvMPSvJfJsifCZV7iIY97yGlspa7NwgpXe4ipwVoT7 zCpQ2HdmVHXMvBeO9m71P2FQWLwyiffHVel8GaJcTzCzEw02y5rGk+zZAElw9/Sw hUw4bKnhJEwmhyqj0WAjWkl9ovk858ECkN59+lMQbzzgzyDAzMhgFMeI1Jf/wdTb VvukwrE/shwbyHdZW0Rc2HDd/r7gsXIZeXG3Xd+6MoDdvVPwPZDVZxhA3hVSpgQd UAncBENueMTyjcZ94Slrlyz1ocotYq/T0nZ64h4RDGZlhhXES45YpFBXMwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOqbZec2TeqLb6k25nMUfY3nsj08MB8GA1UdIwQY MBaAFGGhRVPKzxAydNQz5rJoBm4BVBslMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC84ZGQwNTEtZTJlNy00OTZjLWE5ZDAt ZmEyNjZiYjcyZjczLzEvNnB0bDV6Wk42b3R2cVRibWN4UjlqZWV5UFR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC84ZGQwNTEtZTJlNy00OTZjLWE5ZDAtZmEyNjZiYjcyZjcz LzEvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW8ZPAwQB XrDAMA0EAgACMAcDBQMqBZBAMA0GCSqGSIb3DQEBCwUAA4IBAQB07sovFCS/fo+F GZbp1TLv4D7mljmXp0YgSZqMoUxfkYUnLag3xF6yEn9Mk38C0vrv9oKn4AnjMmAn HK7rI7uvi4Z4VF7NaxTt5whvgknj635L9SR8PxoGUqzzAFFnMp7HFJb5npodDTrS 0Z50P1Qu1YNcy7AD3U2tvuntQani58+zJ8O4dxLqzptLvljmi5xbuZlrbGf0c46g lTub0QDflGfj+Wz4YaErHG2/52oqgbgGid/rWrQpufvwtpKVyXx1g24ktbWk5oK5 BnphyPXJ15szBiTRL1xGmykoEaav9j2zyl+ThYU6oRAzHERcKBnpvQt0MykPz2Xk TJwNfsYq -----END CERTIFICATE-----Generated at Mon Jan 26 19:19:17 2026 by rpki-client