This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/6HQUO6STMbW7BVm3pNinweHOQTY.roa File: 6HQUO6STMbW7BVm3pNinweHOQTY.roa (raw, json) Hash identifier: 2bOuMAF3TgRjyY2xveVCaA/5uJyPdOr15OyOQ9K3vns= Subject key identifier: E8:74:14:3B:A4:93:31:B5:BB:05:59:B7:A4:D8:A7:C1:E1:CE:41:36 Certificate issuer: /CN=1b420b799c5206a19ef7717ee3c7312fd88330ae Certificate serial: 019B7F13AAFF6CC8B9D702F3D86EC3518C75 Authority key identifier: 1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/6HQUO6STMbW7BVm3pNinweHOQTY.roa Signing time: Fri 02 Jan 2026 14:19:13 +0000 ROA not before: Fri 02 Jan 2026 14:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51067 IP address blocks: 91.216.121.0/24 maxlen: 24 2001:67c:23f8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:aa:ff:6c:c8:b9:d7:02:f3:d8:6e:c3:51:8c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b420b799c5206a19ef7717ee3c7312fd88330ae Validity Not Before: Jan 2 14:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e874143ba49331b5bb0559b7a4d8a7c1e1ce4136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a3:b0:58:86:96:6a:d3:d3:5e:58:f3:61:31: 07:dc:13:5c:6f:c4:69:21:6c:71:8f:e8:82:d4:d4: c7:30:ac:a4:aa:f0:e3:5a:ba:b5:41:cf:a7:8f:27: 5d:c6:aa:d5:0b:d9:3c:91:07:b6:69:3b:61:7a:23: a0:1e:1b:1e:45:c5:d7:6d:1f:47:87:c3:8d:11:c3: 94:f7:5b:c7:6a:d0:20:34:02:d0:51:f3:23:fc:ec: e6:94:73:e3:b4:ae:d2:e6:17:7a:e8:73:e1:8f:47: 5f:53:96:f9:9c:c9:23:b8:91:13:f6:31:84:9d:98: ce:05:db:7c:9f:7c:ca:d1:a1:f6:b2:cd:61:e4:b9: 94:3c:da:e4:e4:a0:fe:44:e8:64:34:24:5a:f0:9b: 64:8c:8a:af:55:0b:58:e9:3c:df:67:c8:a3:e9:e1: 9d:6c:58:46:96:c2:40:c6:91:fc:f7:af:29:e3:fc: 9b:66:60:ea:9f:78:65:8b:b5:20:33:5a:8d:7f:2d: bb:f6:b3:d8:3b:32:2d:a6:8a:6f:16:b9:a0:14:13: 49:ae:a4:ce:8a:e0:c7:62:33:b2:63:af:d2:b3:25: 1a:f4:4e:9f:75:bc:13:8e:c4:c1:8d:0f:90:54:ba: cc:52:f0:f3:81:26:2e:39:2c:14:fe:db:d9:25:a9: f2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:74:14:3B:A4:93:31:B5:BB:05:59:B7:A4:D8:A7:C1:E1:CE:41:36 X509v3 Authority Key Identifier: keyid:1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/6HQUO6STMbW7BVm3pNinweHOQTY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.121.0/24 IPv6: 2001:67c:23f8::/48 Signature Algorithm: sha256WithRSAEncryption 48:ac:51:9f:bc:e6:a4:3c:eb:28:07:2a:5b:7a:e1:3e:21:d0: 4f:51:dd:c4:e2:3e:be:e6:ee:03:71:97:20:80:84:65:2c:03: 5d:b2:ec:ef:ab:a3:67:81:18:a7:ce:3a:83:0c:61:a6:5b:ef: e0:74:c8:df:a7:a3:44:14:fe:15:02:5c:ff:0c:40:a6:fe:90: 0e:66:31:5e:68:76:a0:ad:39:41:54:17:00:a2:c5:88:ad:d6: 03:c1:9d:3f:7c:10:b6:b7:fd:fe:24:10:48:c6:b6:df:05:3a: f7:1e:56:47:0d:8e:1d:0e:51:84:83:4c:9c:6b:66:12:32:ee: 8d:24:f7:18:b0:c8:1a:c9:dd:61:b9:a3:0e:70:2c:13:0e:88: c8:03:da:47:ef:d2:c9:d4:f7:1d:db:bb:1a:42:ed:bd:2a:df: ea:b8:36:9a:08:70:e4:75:dd:ec:83:cb:ec:21:02:76:49:06: 45:27:be:8d:2c:56:c4:3d:bf:37:e6:7d:6b:1f:f0:08:89:51: d4:82:ff:1d:f5:c9:2b:c3:f5:b0:c8:3d:f2:5e:c5:9a:2f:b4: 18:9e:c7:8c:d7:a9:cc:27:95:8a:61:32:be:ce:fd:51:a5:13: d7:46:36:da:81:b1:29:27:b7:b2:18:6d:69:8d:67:1b:e3:c4: 86:09:a1:fc -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/E6r/bMi51wLz2G7DUYx1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNDIwYjc5OWM1MjA2YTE5ZWY3NzE3ZWUzYzczMTJmZDg4 MzMwYWUwHhcNMjYwMTAyMTQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODc0MTQzYmE0OTMzMWI1YmIwNTU5YjdhNGQ4YTdjMWUxY2U0MTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKOwWIaWatPTXljzYTEH3BNcb8Rp IWxxj+iC1NTHMKykqvDjWrq1Qc+njyddxqrVC9k8kQe2aTtheiOgHhseRcXXbR9H h8ONEcOU91vHatAgNALQUfMj/OzmlHPjtK7S5hd66HPhj0dfU5b5nMkjuJET9jGE nZjOBdt8n3zK0aH2ss1h5LmUPNrk5KD+ROhkNCRa8JtkjIqvVQtY6TzfZ8ij6eGd bFhGlsJAxpH8968p4/ybZmDqn3hli7UgM1qNfy279rPYOzItpopvFrmgFBNJrqTO iuDHYjOyY6/SsyUa9E6fdbwTjsTBjQ+QVLrMUvDzgSYuOSwU/tvZJanyFwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOh0FDukkzG1uwVZt6TYp8HhzkE2MB8GA1UdIwQY MBaAFBtCC3mcUgahnvdxfuPHMS/YgzCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzBJTGVaeFNCcUdlOTNGLTQ4Y3hMOWlETUs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80MTdkNzctMGU5ZS00MDkxLWI1MTAt OTQ2MDE4MjQxYzUxLzEvNkhRVU82U1RNYlc3QlZtM3BOaW53ZUhPUVRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi80MTdkNzctMGU5ZS00MDkxLWI1MTAtOTQ2MDE4MjQxYzUx LzEvRzBJTGVaeFNCcUdlOTNGLTQ4Y3hMOWlETUs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9h5MA8E AgACMAkDBwAgAQZ8I/gwDQYJKoZIhvcNAQELBQADggEBAEisUZ+85qQ86ygHKlt6 4T4h0E9R3cTiPr7m7gNxlyCAhGUsA12y7O+ro2eBGKfOOoMMYaZb7+B0yN+no0QU /hUCXP8MQKb+kA5mMV5odqCtOUFUFwCixYit1gPBnT98ELa3/f4kEEjGtt8FOvce VkcNjh0OUYSDTJxrZhIy7o0k9xiwyBrJ3WG5ow5wLBMOiMgD2kfv0snU9x3buxpC 7b0q3+q4NpoIcOR13eyDy+whAnZJBkUnvo0sVsQ9vzfmfWsf8AiJUdSC/x31ySvD 9bDIPfJexZovtBiex4zXqcwnlYphMr7O/VGlE9dGNtqBsSknt7IYbWmNZxvjxIYJ ofw= -----END CERTIFICATE-----Generated at Mon Feb 9 22:57:37 2026 by rpki-client