This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/6EaN192CjrCwlHATB-QjEseTMPI.roa File: 6EaN192CjrCwlHATB-QjEseTMPI.roa (raw, json) Hash identifier: gRsvMkimlDX2AdHsbVLZmaIf2SyXZuU/L2zLOOUZzvk= Subject key identifier: E8:46:8D:D7:DD:82:8E:B0:B0:94:70:13:07:E4:23:12:C7:93:30:F2 Certificate issuer: /CN=39d43c26468819c07b1925115fe4921f84203d16 Certificate serial: 019B7C805CC29FC9315C1108A5CE0190EEC6 Authority key identifier: 39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/6EaN192CjrCwlHATB-QjEseTMPI.roa Signing time: Fri 02 Jan 2026 02:19:05 +0000 ROA not before: Fri 02 Jan 2026 02:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59970 IP address blocks: 185.61.84.0/22 maxlen: 22 185.219.16.0/22 maxlen: 22 185.244.188.0/22 maxlen: 22 2a02:78a0::/29 maxlen: 29 2a0b:ddc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:5c:c2:9f:c9:31:5c:11:08:a5:ce:01:90:ee:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39d43c26468819c07b1925115fe4921f84203d16 Validity Not Before: Jan 2 02:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8468dd7dd828eb0b094701307e42312c79330f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3e:f0:a5:b8:a5:34:8a:c2:5c:30:a8:4b:37: 2c:9b:46:ab:30:26:ec:64:bf:c6:5d:e6:60:ad:ff: bd:e0:66:5e:17:e7:4b:21:5a:a4:38:7d:ed:b4:d7: cb:5e:2f:92:cd:c6:10:fa:10:da:50:3d:77:2f:6e: 2a:f1:4c:dd:94:60:f8:17:ef:e1:67:5c:6f:d9:60: 2c:6c:17:cd:81:ec:51:61:65:6c:f0:2a:9b:8c:9e: 52:39:33:ae:7c:99:15:1b:16:14:df:f9:6f:ee:2e: 05:20:ac:46:fc:9f:22:9a:bd:ec:e2:f5:2d:4a:0b: f9:d0:da:79:cd:41:1f:1a:e4:7e:a2:30:68:97:90: 4e:36:77:77:6b:3b:76:8f:02:6d:06:04:fe:9a:2f: 63:c0:bb:47:07:82:3b:c5:f8:d9:21:09:71:87:26: 5a:44:b7:5a:33:2a:a8:36:5c:c4:78:d1:40:c6:13: 2c:16:01:4b:85:9d:b7:7c:fe:a6:0c:73:c1:51:8c: 52:a0:7e:0d:fa:e2:5a:d3:7d:5d:7d:be:44:ef:a8: 34:75:7e:92:a5:79:e9:58:25:41:a1:a5:22:44:8d: c3:9a:43:de:77:32:f3:81:3d:b4:64:53:43:7a:5a: fa:a7:17:24:cc:c9:3a:ad:49:13:05:25:78:f5:bf: 1a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:46:8D:D7:DD:82:8E:B0:B0:94:70:13:07:E4:23:12:C7:93:30:F2 X509v3 Authority Key Identifier: keyid:39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/6EaN192CjrCwlHATB-QjEseTMPI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.61.84.0/22 185.219.16.0/22 185.244.188.0/22 IPv6: 2a02:78a0::/29 2a0b:ddc0::/29 Signature Algorithm: sha256WithRSAEncryption 14:a1:88:34:68:f8:4d:48:59:90:58:36:0d:a8:f0:f1:7d:db: 06:fd:6a:d6:ca:86:5d:3d:af:98:0d:97:21:25:5d:3c:0a:5d: 80:5e:9e:91:e0:6a:f3:35:09:5a:65:82:eb:3b:6b:b4:67:d5: dc:5e:4c:3c:35:2b:11:92:b9:6d:d4:be:00:09:98:b3:57:f9: 1b:f4:ed:0b:4e:69:fc:e0:28:cc:f9:36:58:8d:7f:1a:43:47: fe:f7:de:f6:69:aa:46:18:58:19:e4:80:5a:a9:01:4a:01:01: cf:45:5a:ea:c8:40:59:2c:93:97:83:f9:25:b0:a1:78:a7:b0: b3:04:e6:77:f9:5c:e9:77:ef:05:d6:71:ed:c7:43:14:99:dd: 8c:dc:d2:6c:c6:78:d6:07:f1:98:ea:77:72:f4:91:a1:23:8a: 77:7b:42:39:30:72:6e:39:1e:82:f3:ab:db:bd:a6:96:05:a1: 6b:9e:15:be:89:d4:ce:42:3c:7f:ea:bb:ae:3f:3e:c9:1f:fd: c0:da:3f:36:5b:9e:c8:c4:d3:65:fd:3b:75:48:9d:de:49:9b: a1:ba:72:05:eb:f8:96:f9:44:00:4b:72:52:97:c6:ef:c3:6e: 98:6a:8f:51:43:da:1a:63:ef:07:ee:1d:1c:eb:0b:6e:3a:ed: 0c:2a:ea:a0 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt8gFzCn8kxXBEIpc4BkO7GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZDQzYzI2NDY4ODE5YzA3YjE5MjUxMTVmZTQ5MjFmODQy MDNkMTYwHhcNMjYwMTAyMDIxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODQ2OGRkN2RkODI4ZWIwYjA5NDcwMTMwN2U0MjMxMmM3OTMzMGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD7wpbilNIrCXDCoSzcsm0arMCbs ZL/GXeZgrf+94GZeF+dLIVqkOH3ttNfLXi+SzcYQ+hDaUD13L24q8UzdlGD4F+/h Z1xv2WAsbBfNgexRYWVs8CqbjJ5SOTOufJkVGxYU3/lv7i4FIKxG/J8imr3s4vUt Sgv50Np5zUEfGuR+ojBol5BONnd3azt2jwJtBgT+mi9jwLtHB4I7xfjZIQlxhyZa RLdaMyqoNlzEeNFAxhMsFgFLhZ23fP6mDHPBUYxSoH4N+uJa031dfb5E76g0dX6S pXnpWCVBoaUiRI3DmkPedzLzgT20ZFNDelr6pxckzMk6rUkTBSV49b8apwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFOhGjdfdgo6wsJRwEwfkIxLHkzDyMB8GA1UdIwQY MBaAFDnUPCZGiBnAexklEV/kkh+EID0WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2RROEprYUlHY0I3R1NVUlgtU1NINFFnUFJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hZmZjMDEtYTU4Zi00ZjcwLWE0MDQt YWJmMGVhMDdlZmFmLzEvNkVhTjE5MkNqckN3bEhBVEItUWpFc2VUTVBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9hZmZjMDEtYTU4Zi00ZjcwLWE0MDQtYWJmMGVhMDdlZmFm LzEvT2RROEprYUlHY0I3R1NVUlgtU1NINFFnUFJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQCuT1UAwQC udsQAwQCufS8MBQEAgACMA4DBQMqAnigAwUDKgvdwDANBgkqhkiG9w0BAQsFAAOC AQEAFKGINGj4TUhZkFg2Dajw8X3bBv1q1sqGXT2vmA2XISVdPApdgF6ekeBq8zUJ WmWC6ztrtGfV3F5MPDUrEZK5bdS+AAmYs1f5G/TtC05p/OAozPk2WI1/GkNH/vfe 9mmqRhhYGeSAWqkBSgEBz0Va6shAWSyTl4P5JbCheKewswTmd/lc6XfvBdZx7cdD FJndjNzSbMZ41gfxmOp3cvSRoSOKd3tCOTBybjkegvOr272mlgWha54VvonUzkI8 f+q7rj8+yR/9wNo/NlueyMTTZf07dUid3kmbobpyBev4lvlEAEtyUpfG78NumGqP UUPaGmPvB+4dHOsLbjrtDCrqoA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:31 2026 by rpki-client