This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/6yx-hlX2k3FRL0OGcdbdnhCXDLc.roa File: 6yx-hlX2k3FRL0OGcdbdnhCXDLc.roa (raw, json) Hash identifier: hiif9D0W/a5cIuWmQF/v/caYp1mtbUtJIKKVOQpQZ+w= Subject key identifier: EB:2C:7E:86:55:F6:93:71:51:2F:43:86:71:D6:DD:9E:10:97:0C:B7 Certificate issuer: /CN=f7c722dae270868a19838a7cd499d59c2679d891 Certificate serial: 019B7DCAD82AD79527F16029E4F8037CB90B Authority key identifier: F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/6yx-hlX2k3FRL0OGcdbdnhCXDLc.roa Signing time: Fri 02 Jan 2026 08:20:04 +0000 ROA not before: Fri 02 Jan 2026 08:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200406 IP address blocks: 194.5.176.0/24 maxlen: 24 194.5.177.0/24 maxlen: 24 194.5.178.0/24 maxlen: 24 194.5.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:d8:2a:d7:95:27:f1:60:29:e4:f8:03:7c:b9:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7c722dae270868a19838a7cd499d59c2679d891 Validity Not Before: Jan 2 08:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb2c7e8655f69371512f438671d6dd9e10970cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3f:d6:12:27:9f:d2:af:83:a1:80:28:cb:db: cd:aa:48:cf:da:bc:8d:ac:45:e0:8b:ea:a5:d0:0b: 83:97:d5:98:c3:7f:3e:a1:73:c6:d6:ad:f5:d2:fd: 2e:93:87:01:32:fc:19:7b:48:e2:a3:04:71:95:6a: a6:bf:23:15:00:5a:c4:ab:f9:74:b3:8e:6e:d5:49: 85:29:07:88:b5:c7:c0:b1:56:8b:d2:98:a0:85:1c: 4e:e4:d4:ab:29:37:cb:3c:c9:89:79:b7:31:c0:01: 1f:76:3c:55:b2:fb:31:42:01:3e:77:9d:a9:15:ef: 30:2a:aa:dc:0b:65:2d:d8:41:d3:68:18:a2:46:25: c0:89:c5:3c:af:d9:a1:57:35:43:a7:e4:64:41:e5: e9:3b:b9:7b:90:45:bb:c3:8f:cc:22:1c:5d:1f:13: 49:c9:8e:9b:9e:8d:6e:4c:5e:cd:0f:1b:d7:db:e7: 5a:79:18:86:20:fb:61:d2:fd:e8:f1:19:98:f4:92: 6b:5e:7a:90:59:39:bf:10:c9:19:91:5f:4d:8e:64: db:64:21:5b:0a:a2:80:28:df:b5:f2:e3:90:a6:6f: 69:d5:11:41:e7:9c:7d:61:0f:b1:62:47:7d:61:ea: 4f:f7:03:91:b2:98:b5:92:77:dc:77:f0:27:c0:65: 6b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:2C:7E:86:55:F6:93:71:51:2F:43:86:71:D6:DD:9E:10:97:0C:B7 X509v3 Authority Key Identifier: keyid:F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/6yx-hlX2k3FRL0OGcdbdnhCXDLc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.5.176.0/22 Signature Algorithm: sha256WithRSAEncryption 85:2e:bf:14:ac:92:52:e1:0d:19:88:c7:ba:de:23:4e:79:e9: 86:6e:1f:ec:9f:34:54:0c:d6:a4:0d:1b:ab:4b:51:68:a9:23: 80:ab:c2:22:99:4d:24:57:d2:76:9a:fe:1c:83:60:f2:01:f4: d2:17:4a:2a:ef:db:10:5d:a7:95:74:89:9a:35:bc:1c:7d:25: b9:f7:07:3d:21:ad:4d:4b:da:1e:0a:12:ef:56:60:ca:e8:82: b0:15:ed:25:1f:79:9f:de:4b:d6:78:4a:f0:f6:ba:15:ff:65: 41:79:01:7d:82:c8:12:09:fd:d3:bf:40:4a:0d:49:66:d3:a7: 7c:be:45:14:c5:10:84:b6:11:b2:db:ec:cd:89:be:7b:4b:76: 39:12:d6:23:7f:58:6e:f4:a5:60:83:ae:83:35:83:19:d8:80: 87:e2:0e:02:41:bd:c3:28:01:82:12:94:5a:03:9b:63:89:46: 31:c7:63:46:05:ff:69:95:2b:0f:81:49:14:5e:58:92:98:24: 87:8f:00:d4:aa:7c:f2:94:10:15:82:38:af:98:0d:6b:ed:ef: dc:71:30:a4:b6:6e:9d:8b:8f:eb:26:a1:80:1c:49:05:3b:61: 09:f3:14:1d:9d:8d:b7:08:a3:42:2f:f1:ef:a3:5a:ec:c7:d2: 79:f8:27:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ytgq15Un8WAp5PgDfLkLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YzcyMmRhZTI3MDg2OGExOTgzOGE3Y2Q0OTlkNTljMjY3 OWQ4OTEwHhcNMjYwMTAyMDgyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjJjN2U4NjU1ZjY5MzcxNTEyZjQzODY3MWQ2ZGQ5ZTEwOTcwY2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT/WEief0q+DoYAoy9vNqkjP2ryN rEXgi+ql0AuDl9WYw38+oXPG1q310v0uk4cBMvwZe0jiowRxlWqmvyMVAFrEq/l0 s45u1UmFKQeItcfAsVaL0pighRxO5NSrKTfLPMmJebcxwAEfdjxVsvsxQgE+d52p Fe8wKqrcC2Ut2EHTaBiiRiXAicU8r9mhVzVDp+RkQeXpO7l7kEW7w4/MIhxdHxNJ yY6bno1uTF7NDxvX2+daeRiGIPth0v3o8RmY9JJrXnqQWTm/EMkZkV9NjmTbZCFb CqKAKN+18uOQpm9p1RFB55x9YQ+xYkd9YepP9wORspi1knfcd/AnwGVrsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOssfoZV9pNxUS9DhnHW3Z4Qlwy3MB8GA1UdIwQY MBaAFPfHItricIaKGYOKfNSZ1ZwmediRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOThjaTJ1Sndob29aZzRwODFKblZuQ1o1MkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81MGUwZjEtNDYxNC00MzU4LTkzN2Et MmVkZTY3MjdlMTM5LzEvNnl4LWhsWDJrM0ZSTDBPR2NkYmRuaENYRExjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni81MGUwZjEtNDYxNC00MzU4LTkzN2EtMmVkZTY3MjdlMTM5 LzEvOThjaTJ1Sndob29aZzRwODFKblZuQ1o1MkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwgWwMA0G CSqGSIb3DQEBCwUAA4IBAQCFLr8UrJJS4Q0ZiMe63iNOeemGbh/snzRUDNakDRur S1FoqSOAq8IimU0kV9J2mv4cg2DyAfTSF0oq79sQXaeVdImaNbwcfSW59wc9Ia1N S9oeChLvVmDK6IKwFe0lH3mf3kvWeErw9roV/2VBeQF9gsgSCf3Tv0BKDUlm06d8 vkUUxRCEthGy2+zNib57S3Y5EtYjf1hu9KVgg66DNYMZ2ICH4g4CQb3DKAGCEpRa A5tjiUYxx2NGBf9plSsPgUkUXliSmCSHjwDUqnzylBAVgjivmA1r7e/ccTCktm6d i4/rJqGAHEkFO2EJ8xQdnY23CKNCL/Hvo1rsx9J5+CdE -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:54 2026 by rpki-client