This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/IR69owtZmR5Fw8ymGUacHCi6F9M.roa File: IR69owtZmR5Fw8ymGUacHCi6F9M.roa (raw, json) Hash identifier: E8A7l8T7M5NMnyj5TeQKcO9RA4EdA0Yrc9i1OKKkoXE= Subject key identifier: 21:1E:BD:A3:0B:59:99:1E:45:C3:CC:A6:19:46:9C:1C:28:BA:17:D3 Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d Certificate serial: 019B7A5B25B6F36C575C7A85131AB74EC16F Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/IR69owtZmR5Fw8ymGUacHCi6F9M.roa Signing time: Thu 01 Jan 2026 16:19:12 +0000 ROA not before: Thu 01 Jan 2026 16:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215179 IP address blocks: 93.92.199.0/24 maxlen: 24 94.125.14.0/24 maxlen: 24 109.71.176.0/24 maxlen: 24 109.71.177.0/24 maxlen: 24 185.42.61.0/24 maxlen: 24 213.108.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:25:b6:f3:6c:57:5c:7a:85:13:1a:b7:4e:c1:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d Validity Not Before: Jan 1 16:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=211ebda30b59991e45c3cca619469c1c28ba17d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4d:63:e4:6b:49:80:92:b3:d3:3a:24:8a:c2: d8:c6:76:fc:66:74:b2:d4:f3:25:d8:3a:b5:8f:c3: ce:b7:da:79:0d:90:74:68:d2:0c:94:52:a3:63:f0: 14:56:f0:1d:0b:b5:2c:eb:7c:aa:53:a5:77:21:59: 0d:ae:b7:9d:51:25:fa:3d:a4:36:84:25:d8:1f:7a: 3e:35:15:45:8c:1c:df:18:b9:9e:d9:5e:e4:60:72: 24:27:a6:23:2c:8e:80:04:50:00:58:4a:ca:6a:da: 42:12:72:f4:e6:18:45:87:76:05:df:90:57:ac:f7: 4a:bc:b0:a8:87:ad:62:31:96:74:3f:44:74:d3:23: e7:15:67:3d:22:5d:56:d8:08:29:ee:52:a6:e5:7e: 82:17:b3:77:cc:5d:a4:bd:23:62:67:02:f2:10:a8: 10:26:07:e6:4f:18:5a:3a:8d:e1:71:c8:fa:57:ca: 76:44:6e:f7:c1:07:1c:a1:76:35:11:18:b9:44:61: 7a:01:ec:4f:b1:3d:27:e4:a0:59:12:78:92:03:86: 2e:90:70:08:0e:f3:3f:15:df:b1:5c:d0:02:c3:8f: d4:9a:14:d1:2e:39:b1:f3:52:1c:7c:be:a1:9f:59: 7a:4f:1e:a4:02:5a:57:ea:02:49:bb:b8:82:c8:66: da:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:1E:BD:A3:0B:59:99:1E:45:C3:CC:A6:19:46:9C:1C:28:BA:17:D3 X509v3 Authority Key Identifier: keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/IR69owtZmR5Fw8ymGUacHCi6F9M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.92.199.0/24 94.125.14.0/24 109.71.176.0/23 185.42.61.0/24 213.108.39.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:89:9c:dd:01:14:8e:47:27:e7:fb:e1:29:b4:e1:b7:47:7b: 1a:ea:51:04:6f:1d:eb:bf:da:7f:1b:97:e3:16:4d:a9:c2:81: 42:b8:fc:8f:d9:e2:91:cd:0a:0b:2e:0b:dd:09:36:54:3f:ec: b1:c7:04:a6:fa:35:6f:a0:d5:cd:72:28:9d:9f:70:8f:f5:30: 02:d6:92:e9:d1:70:de:08:b0:c8:ad:47:7d:c7:25:c3:3f:e4: d8:58:22:a3:74:c2:db:9e:12:87:fa:f5:ae:35:7f:75:68:51: c3:7d:99:cd:c1:1d:7a:2c:f4:bb:da:ff:f7:fb:5b:c0:73:83: ef:51:50:8e:66:20:75:d7:d6:64:76:ec:97:67:4f:07:35:d5: 04:3d:01:07:0e:3c:2a:c9:78:dc:56:d8:94:39:05:53:43:78: f1:a3:c6:43:b6:d6:0c:bd:db:d9:c1:75:35:1b:b4:a7:62:3b: 28:6d:17:d9:f1:82:7c:8d:76:84:1f:b3:16:81:18:af:3e:ec: 62:bc:02:24:17:82:03:9d:c9:b0:37:17:bc:e5:c6:8d:ff:63: ff:c6:e1:d4:d8:01:ba:81:43:4f:4f:09:ee:b8:69:e6:1a:43: c7:d8:79:37:9e:d1:c7:c9:d7:dc:15:ec:55:d8:3d:24:a9:b4: 70:b9:76:a0 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt6WyW282xXXHqFExq3TsFvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYmE0OGM3ZTJjOWUwNWVkYTU0NmQ4OTkxNDZiODlmNzk5 ZGY4NWQwHhcNMjYwMTAxMTYxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTFlYmRhMzBiNTk5OTFlNDVjM2NjYTYxOTQ2OWMxYzI4YmExN2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU1j5GtJgJKz0zokisLYxnb8ZnSy 1PMl2Dq1j8POt9p5DZB0aNIMlFKjY/AUVvAdC7Us63yqU6V3IVkNrredUSX6PaQ2 hCXYH3o+NRVFjBzfGLme2V7kYHIkJ6YjLI6ABFAAWErKatpCEnL05hhFh3YF35BX rPdKvLCoh61iMZZ0P0R00yPnFWc9Il1W2Agp7lKm5X6CF7N3zF2kvSNiZwLyEKgQ JgfmTxhaOo3hccj6V8p2RG73wQccoXY1ERi5RGF6AexPsT0n5KBZEniSA4YukHAI DvM/Fd+xXNACw4/UmhTRLjmx81IcfL6hn1l6Tx6kAlpX6gJJu7iCyGba0wIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFCEevaMLWZkeRcPMphlGnBwouhfTMB8GA1UdIwQY MBaAFL66SMfiyeBe2lRtiZFGuJ95nfhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYt M2Q1MjIxODFhMmM0LzEvSVI2OW93dFptUjVGdzh5bUdVYWNIQ2k2RjlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYtM2Q1MjIxODFhMmM0 LzEvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAXVzHAwQA Xn0OAwQBbUewAwQAuSo9AwQA1WwnMA0GCSqGSIb3DQEBCwUAA4IBAQBaiZzdARSO Ryfn++EptOG3R3sa6lEEbx3rv9p/G5fjFk2pwoFCuPyP2eKRzQoLLgvdCTZUP+yx xwSm+jVvoNXNciidn3CP9TAC1pLp0XDeCLDIrUd9xyXDP+TYWCKjdMLbnhKH+vWu NX91aFHDfZnNwR16LPS72v/3+1vAc4PvUVCOZiB119ZkduyXZ08HNdUEPQEHDjwq yXjcVtiUOQVTQ3jxo8ZDttYMvdvZwXU1G7SnYjsobRfZ8YJ8jXaEH7MWgRivPuxi vAIkF4IDncmwNxe85caN/2P/xuHU2AG6gUNPTwnuuGnmGkPH2Hk3ntHHydfcFexV 2D0kqbRwuXag -----END CERTIFICATE-----Generated at Mon Jan 26 23:43:24 2026 by rpki-client