This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/6wxp6D90PbkCxonPP-7ItR_YqfY.roa File: 6wxp6D90PbkCxonPP-7ItR_YqfY.roa (raw, json) Hash identifier: /lg76dYtxvJCPKRCwUkyQeGdGXsapuk2HDK2CHSLQQA= Subject key identifier: EB:0C:69:E8:3F:74:3D:B9:02:C6:89:CF:3F:EE:C8:B5:1F:D8:A9:F6 Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d Certificate serial: 019B7AC82BF71D138FC41DBE0C3D005843F5 Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/6wxp6D90PbkCxonPP-7ItR_YqfY.roa Signing time: Thu 01 Jan 2026 18:18:17 +0000 ROA not before: Thu 01 Jan 2026 18:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 147049 IP address blocks: 86.38.66.0/24 maxlen: 24 86.38.69.0/24 maxlen: 24 86.38.77.0/24 maxlen: 24 86.38.78.0/24 maxlen: 24 86.38.79.0/24 maxlen: 24 86.38.90.0/24 maxlen: 24 86.38.94.0/24 maxlen: 24 86.38.95.0/24 maxlen: 24 89.117.202.0/24 maxlen: 24 89.117.205.0/24 maxlen: 24 89.117.210.0/24 maxlen: 24 89.117.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:2b:f7:1d:13:8f:c4:1d:be:0c:3d:00:58:43:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d Validity Not Before: Jan 1 18:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb0c69e83f743db902c689cf3feec8b51fd8a9f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bb:ac:21:5a:57:87:0a:4b:c0:6a:19:dc:79: 4b:00:c0:4a:11:4f:e4:19:2e:5e:2c:21:f6:c1:62: 83:a4:e1:7f:9e:21:17:e1:cf:9d:da:d8:5c:fc:b2: 0f:65:51:07:f3:76:e6:6c:12:73:b6:0c:84:71:d2: ac:01:66:52:0b:42:a1:8f:82:29:2f:54:2a:eb:70: 09:e8:7b:ed:96:e8:a9:1b:1b:a7:61:e5:e1:c4:a1: bb:0e:08:ed:eb:2b:e0:04:21:82:be:1b:93:92:2e: 49:c3:aa:fc:dd:90:c5:bf:1b:59:c2:7f:c7:b6:4c: 19:3d:4f:21:e4:6d:de:2a:29:91:04:b2:f5:b6:53: fc:9f:14:50:15:38:72:c0:be:91:96:82:35:16:15: 92:c2:74:f3:6f:b2:99:df:f8:0b:d9:86:64:35:17: 71:e6:f2:8a:52:f5:7f:b4:4d:fd:4f:fa:87:3b:79: fa:09:85:1b:51:7d:8d:4f:fd:08:47:8c:de:d6:4b: a7:16:8b:15:80:04:dc:db:d3:4d:08:b3:38:c2:15: 14:be:b3:77:df:49:5e:f8:e2:92:a9:8f:8b:8e:d8: 33:b3:5b:d8:8e:7a:d5:5e:cc:74:72:6d:a5:81:77: 91:24:91:45:3d:d1:82:b5:a9:ea:a9:f0:b2:7b:2d: f8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0C:69:E8:3F:74:3D:B9:02:C6:89:CF:3F:EE:C8:B5:1F:D8:A9:F6 X509v3 Authority Key Identifier: keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/6wxp6D90PbkCxonPP-7ItR_YqfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.66.0/24 86.38.69.0/24 86.38.77.0-86.38.79.255 86.38.90.0/24 86.38.94.0/23 89.117.202.0/24 89.117.205.0/24 89.117.210.0/24 89.117.232.0/24 Signature Algorithm: sha256WithRSAEncryption 40:f6:d6:3c:7b:1d:70:fc:6e:8f:ae:6b:ab:85:bf:e0:23:4e: 06:f1:28:39:4b:96:a1:98:ad:c5:f0:b4:f8:ec:b8:a3:34:c3: 9e:6a:b3:b8:5f:0a:b5:3e:cb:7a:29:65:76:cd:fb:c4:c5:e0: f4:35:a9:83:3a:fc:44:cd:fe:29:bd:ef:04:2c:f0:e1:28:b0: 6c:e7:40:ae:0e:db:4d:6a:8a:ba:0b:77:89:c1:c0:f9:5c:00: 8f:73:ab:e1:c7:ca:b7:3b:1f:d8:bc:e0:44:ae:82:86:e0:9e: 94:cd:f3:9e:81:00:2a:ab:c1:69:da:5f:7c:35:81:1f:eb:49: f7:ff:72:29:ba:e6:30:f0:01:03:9e:38:2e:31:55:16:07:4d: d5:5f:fd:33:4e:9d:8c:0d:17:f5:07:c7:4d:60:d7:01:4e:a9: e6:e6:60:5f:40:5c:3a:d6:d8:79:27:e7:f0:7e:b5:5e:8e:2d: 72:86:ea:e2:8d:e5:79:58:b4:f6:ac:17:2f:8b:65:ff:15:72: 35:df:8c:a6:3d:ab:e9:b3:a7:51:a6:64:9e:69:21:a0:da:d9: ef:f8:a1:b5:d9:87:21:8f:e0:dd:f2:e0:a9:f2:6f:f9:57:f8: f5:37:f1:d5:07:a3:8f:c6:27:dd:6d:98:8e:1e:e9:93:46:d9: 9f:c2:61:22 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZt6yCv3HROPxB2+DD0AWEP1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3 MTE4MGQwHhcNMjYwMTAxMTgxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjBjNjllODNmNzQzZGI5MDJjNjg5Y2YzZmVlYzhiNTFmZDhhOWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbusIVpXhwpLwGoZ3HlLAMBKEU/k GS5eLCH2wWKDpOF/niEX4c+d2thc/LIPZVEH83bmbBJztgyEcdKsAWZSC0Khj4Ip L1Qq63AJ6HvtluipGxunYeXhxKG7Dgjt6yvgBCGCvhuTki5Jw6r83ZDFvxtZwn/H tkwZPU8h5G3eKimRBLL1tlP8nxRQFThywL6RloI1FhWSwnTzb7KZ3/gL2YZkNRdx 5vKKUvV/tE39T/qHO3n6CYUbUX2NT/0IR4ze1kunFosVgATc29NNCLM4whUUvrN3 30le+OKSqY+Ljtgzs1vYjnrVXsx0cm2lgXeRJJFFPdGCtanqqfCyey34XwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFOsMaeg/dD25AsaJzz/uyLUf2Kn2MB8GA1UdIwQY MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt MDQ2ODA0MjQ4NmRjLzEvNnd4cDZEOTBQYmtDeG9uUFAtN0l0Ul9ZcWZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAViZCAwQA ViZFMAwDBABWJk0DBARWJkADBABWJloDBAFWJl4DBABZdcoDBABZdc0DBABZddID BABZdegwDQYJKoZIhvcNAQELBQADggEBAED21jx7HXD8bo+ua6uFv+AjTgbxKDlL lqGYrcXwtPjsuKM0w55qs7hfCrU+y3opZXbN+8TF4PQ1qYM6/ETN/im97wQs8OEo sGznQK4O201qiroLd4nBwPlcAI9zq+HHyrc7H9i84ESugobgnpTN856BACqrwWna X3w1gR/rSff/cim65jDwAQOeOC4xVRYHTdVf/TNOnYwNF/UHx01g1wFOqebmYF9A XDrW2Hkn5/B+tV6OLXKG6uKN5XlYtPasFy+LZf8VcjXfjKY9q+mzp1GmZJ5pIaDa 2e/4obXZhyGP4N3y4Knyb/lX+PU38dUHo4/GJ91tmI4e6ZNG2Z/CYSI= -----END CERTIFICATE-----Generated at Mon Jan 19 17:29:57 2026 by rpki-client