This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/x-Z6tL-vvX_mJLHlb9B7x-d3eps.roa File: x-Z6tL-vvX_mJLHlb9B7x-d3eps.roa (raw, json) Hash identifier: zHvZuxQOM2V/TXUiqeY3qlcrNS+y8gi7iI41siwUvv0= Subject key identifier: C7:E6:7A:B4:BF:AF:BD:7F:E6:24:B1:E5:6F:D0:7B:C7:E7:77:7A:9B Certificate issuer: /CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412 Certificate serial: 019B77C7441E2023BA60BCB029CB34114137 Authority key identifier: 6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/x-Z6tL-vvX_mJLHlb9B7x-d3eps.roa Signing time: Thu 01 Jan 2026 04:18:26 +0000 ROA not before: Thu 01 Jan 2026 04:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24768 IP address blocks: 85.116.200.0/22 maxlen: 22 85.116.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:44:1e:20:23:ba:60:bc:b0:29:cb:34:11:41:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412 Validity Not Before: Jan 1 04:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7e67ab4bfafbd7fe624b1e56fd07bc7e7777a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:58:50:19:fa:6a:83:12:a0:a0:44:0b:a5:12: 84:8f:d1:8f:02:bc:6a:cb:9b:80:39:27:ff:eb:76: 2c:5b:d9:eb:be:c6:78:a4:9a:49:a6:bb:42:f7:28: 4c:65:58:94:23:db:3e:ca:85:45:db:ed:4f:a8:6a: c0:be:d8:24:20:8d:1b:29:f3:45:26:69:89:f0:f4: f6:16:68:40:72:98:92:04:c3:f9:5d:a1:f2:81:94: 38:ce:50:c7:6c:fe:98:3f:d0:b7:84:f8:af:14:cb: 6e:96:b2:fc:70:eb:89:47:1e:b6:b9:91:0c:bd:a4: 74:95:17:39:a2:9c:d0:32:56:d7:f8:f7:ab:49:c2: 49:d4:5e:7a:02:ad:bf:5d:db:0d:2a:27:b2:75:1c: 05:5d:c4:45:b9:c3:97:3f:a7:6a:d4:74:a8:57:7b: 55:a3:54:ae:dc:b3:01:b4:f3:9f:b7:c9:28:5d:3f: 34:c0:60:33:75:09:a4:f5:1d:77:68:fb:76:b3:30: e1:5c:47:7e:87:ba:b4:6d:ba:1d:24:a6:85:d0:93: d5:50:8b:10:c1:4d:04:03:1d:03:a5:5b:57:9d:fb: 64:8d:b4:c4:18:8e:ea:9d:d7:d1:91:13:d9:63:36: 1f:27:2d:7a:39:b2:22:d8:72:f2:8c:9d:4a:93:1c: b3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E6:7A:B4:BF:AF:BD:7F:E6:24:B1:E5:6F:D0:7B:C7:E7:77:7A:9B X509v3 Authority Key Identifier: keyid:6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/x-Z6tL-vvX_mJLHlb9B7x-d3eps.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.116.200.0/22 85.116.212.0/22 Signature Algorithm: sha256WithRSAEncryption 9c:58:49:8b:5b:bd:68:5d:70:f9:47:5f:6b:06:4a:d7:1c:e4: b9:d2:6b:fe:d7:28:d1:45:fa:86:fe:1f:1d:15:7b:34:65:a9: 0a:e6:54:e7:90:29:e2:5c:3f:47:4c:ad:44:ad:2e:02:c7:bc: 4c:73:3b:aa:d5:3f:ee:57:6d:71:ef:b2:e1:62:f0:58:28:ea: 3c:61:4e:f0:21:6e:7f:26:8b:01:c6:f1:ed:a4:46:9a:af:72: a2:64:9a:53:4b:b6:3f:76:e1:27:53:96:bd:da:de:1b:12:3e: fb:ca:64:e4:3f:8d:56:3f:e3:ae:c4:6d:ba:c8:65:ce:35:cf: bb:1b:69:7f:55:c1:42:b1:da:12:47:c8:3d:8d:f0:fc:f9:44: 66:4f:50:7e:1e:ab:05:01:b9:d2:38:51:06:cf:37:08:d8:cd: 5a:5e:4e:99:d9:14:c2:b0:e2:53:5c:2d:29:85:89:f5:ad:a2: 1f:49:c7:3b:d6:ba:af:8c:97:33:ce:8c:2f:67:74:14:2b:c7: b9:4b:cd:23:58:3a:b3:05:e9:91:22:65:fc:c9:4b:d2:4d:7e: 72:3e:ce:c0:c9:9c:91:0f:fc:e9:1e:70:9f:31:15:19:32:30: 57:33:bf:32:de:73:83:a0:c0:41:31:df:88:51:6e:5b:88:95: e8:d2:2b:f9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x0QeICO6YLywKcs0EUE3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlZDAzOTJhYzc2NjBiZDE0NjBmYTFkNTAzMWQxODQwZDAx Yjk0MTIwHhcNMjYwMTAxMDQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2U2N2FiNGJmYWZiZDdmZTYyNGIxZTU2ZmQwN2JjN2U3Nzc3YTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1hQGfpqgxKgoEQLpRKEj9GPArxq y5uAOSf/63YsW9nrvsZ4pJpJprtC9yhMZViUI9s+yoVF2+1PqGrAvtgkII0bKfNF JmmJ8PT2FmhAcpiSBMP5XaHygZQ4zlDHbP6YP9C3hPivFMtulrL8cOuJRx62uZEM vaR0lRc5opzQMlbX+PerScJJ1F56Aq2/XdsNKieydRwFXcRFucOXP6dq1HSoV3tV o1Su3LMBtPOft8koXT80wGAzdQmk9R13aPt2szDhXEd+h7q0bbodJKaF0JPVUIsQ wU0EAx0DpVtXnftkjbTEGI7qndfRkRPZYzYfJy16ObIi2HLyjJ1KkxyzdwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMfmerS/r71/5iSx5W/Qe8fnd3qbMB8GA1UdIwQY MBaAFG7QOSrHZgvRRg+h1QMdGEDQG5QSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnRBNUtzZG1DOUZHRDZIVkF4MFlRTkFibEJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83OGUwM2MtYzljNy00Yzg1LWJmZGQt ZThiYWY5ZmZhZGY4LzEveC1aNnRMLXZ2WF9tSkxIbGI5Qjd4LWQzZXBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83OGUwM2MtYzljNy00Yzg1LWJmZGQtZThiYWY5ZmZhZGY4 LzEvYnRBNUtzZG1DOUZHRDZIVkF4MFlRTkFibEJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCVXTIAwQC VXTUMA0GCSqGSIb3DQEBCwUAA4IBAQCcWEmLW71oXXD5R19rBkrXHOS50mv+1yjR RfqG/h8dFXs0ZakK5lTnkCniXD9HTK1ErS4Cx7xMczuq1T/uV21x77LhYvBYKOo8 YU7wIW5/JosBxvHtpEaar3KiZJpTS7Y/duEnU5a92t4bEj77ymTkP41WP+OuxG26 yGXONc+7G2l/VcFCsdoSR8g9jfD8+URmT1B+HqsFAbnSOFEGzzcI2M1aXk6Z2RTC sOJTXC0phYn1raIfScc71rqvjJczzowvZ3QUK8e5S80jWDqzBemRImX8yUvSTX5y Ps7AyZyRD/zpHnCfMRUZMjBXM78y3nODoMBBMd+IUW5biJXo0iv5 -----END CERTIFICATE-----Generated at Mon Jan 19 20:15:50 2026 by rpki-client