This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/lZT1fZgUQ-ZPsP-PoHQBy-u9gnU.roa File: lZT1fZgUQ-ZPsP-PoHQBy-u9gnU.roa (raw, json) Hash identifier: 9BM64257Y/MfjC+0Pp/O4gJQJeSisM84XVJJJ+9Ww8c= Subject key identifier: 95:94:F5:7D:98:14:43:E6:4F:B0:FF:8F:A0:74:01:CB:EB:BD:82:75 Certificate issuer: /CN=6d7ea43a1c4755787d491fba563b88811dccc5f8 Certificate serial: 019B7BA5422A92E66C024D4BD1941760230E Authority key identifier: 6D:7E:A4:3A:1C:47:55:78:7D:49:1F:BA:56:3B:88:81:1D:CC:C5:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/lZT1fZgUQ-ZPsP-PoHQBy-u9gnU.roa Signing time: Thu 01 Jan 2026 22:19:46 +0000 ROA not before: Thu 01 Jan 2026 22:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29686 IP address blocks: 91.199.225.0/24 maxlen: 24 195.28.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft rsync://rpki.ripe.net/repository/DEFAULT/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:42:2a:92:e6:6c:02:4d:4b:d1:94:17:60:23:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d7ea43a1c4755787d491fba563b88811dccc5f8 Validity Not Before: Jan 1 22:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9594f57d981443e64fb0ff8fa07401cbebbd8275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4b:c6:ca:30:7c:0e:63:02:ed:bd:41:26:bc: a4:26:ea:93:62:7b:34:69:4e:6f:4b:9f:3e:c8:35: 98:20:c4:d1:11:f4:38:2a:7d:d0:33:0b:37:55:7a: 4a:44:01:4a:5f:3f:a2:12:0b:24:28:4f:3a:ea:a3: 4c:9e:53:08:45:83:b3:80:44:23:e5:48:64:f9:1c: b1:6b:23:ae:86:4f:d5:92:8e:b2:40:88:ff:aa:e7: 15:e6:97:35:85:2b:15:55:91:00:9f:35:41:67:ab: 6b:88:4e:05:30:c5:b6:79:a3:16:c4:21:54:d0:03: 15:fd:a5:c9:31:f4:60:a7:87:4f:d7:23:57:06:07: 2f:a0:a1:75:80:16:a3:bc:9c:ea:b7:1b:da:a5:3c: fb:6e:64:d4:56:7a:ae:2f:34:a5:0f:df:31:20:63: 03:24:33:72:9d:77:53:df:e6:fa:3c:89:85:5e:dd: 54:3a:ce:ba:00:95:90:ff:8d:e3:e2:12:72:91:bc: 89:8a:6c:f1:c2:d6:4c:07:71:da:e0:91:61:d7:14: 77:4e:ca:31:19:bb:63:fa:20:de:6e:06:d2:d1:c1: ba:ba:6e:9e:fd:c0:d9:70:47:7e:0a:d1:0f:f2:f2: 98:fd:df:48:63:ea:7a:6a:1f:82:5a:a4:ea:08:21: ff:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:94:F5:7D:98:14:43:E6:4F:B0:FF:8F:A0:74:01:CB:EB:BD:82:75 X509v3 Authority Key Identifier: keyid:6D:7E:A4:3A:1C:47:55:78:7D:49:1F:BA:56:3B:88:81:1D:CC:C5:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/lZT1fZgUQ-ZPsP-PoHQBy-u9gnU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.225.0/24 195.28.12.0/23 Signature Algorithm: sha256WithRSAEncryption 17:36:03:31:6d:a9:b4:51:db:1b:0b:83:74:25:a0:d6:e6:50: 55:63:7a:64:ab:7e:f1:d8:74:33:1e:65:27:49:a2:b2:24:ca: 83:1b:a0:ec:48:7c:5c:32:c4:0f:1a:c6:5b:b3:2c:70:e9:b9: 1f:02:cb:7a:75:9b:f8:f5:e4:eb:11:1d:4c:61:de:bb:24:34: ab:ea:8f:f3:f7:45:75:82:7a:5b:6a:3d:50:08:1c:99:45:f8: c7:28:40:e8:fb:73:5d:9c:4b:97:4a:44:32:54:c1:80:c7:c9: cf:4e:e3:a3:b9:2a:73:a3:02:09:08:a9:d7:1f:1a:97:a5:ea: 3a:69:d3:d7:aa:f5:41:fa:64:46:65:eb:3a:17:39:94:60:d0: 6f:dd:b2:49:e7:d3:42:fb:5f:00:dc:f4:fa:8f:b7:99:a2:e5: af:05:60:6a:f5:e2:14:bb:af:a4:eb:52:07:50:44:65:d4:41: d5:e8:6c:0a:7e:89:8b:57:56:f5:e5:09:15:49:e5:e4:9c:5c: eb:91:b7:7d:6f:33:4f:4a:c4:8a:48:1e:33:5c:70:06:93:70: 25:30:07:b0:69:b2:51:08:72:a8:a7:97:8a:9c:40:bb:3b:f2: 16:c6:2d:38:bd:e6:6b:38:dc:70:8b:76:7f:9c:78:16:cd:e6: 27:28:86:4d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pUIqkuZsAk1L0ZQXYCMOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkN2VhNDNhMWM0NzU1Nzg3ZDQ5MWZiYTU2M2I4ODgxMWRj Y2M1ZjgwHhcNMjYwMTAxMjIxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTk0ZjU3ZDk4MTQ0M2U2NGZiMGZmOGZhMDc0MDFjYmViYmQ4Mjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkvGyjB8DmMC7b1BJrykJuqTYns0 aU5vS58+yDWYIMTREfQ4Kn3QMws3VXpKRAFKXz+iEgskKE866qNMnlMIRYOzgEQj 5Uhk+RyxayOuhk/Vko6yQIj/qucV5pc1hSsVVZEAnzVBZ6triE4FMMW2eaMWxCFU 0AMV/aXJMfRgp4dP1yNXBgcvoKF1gBajvJzqtxvapTz7bmTUVnquLzSlD98xIGMD JDNynXdT3+b6PImFXt1UOs66AJWQ/43j4hJykbyJimzxwtZMB3Ha4JFh1xR3Tsox Gbtj+iDebgbS0cG6um6e/cDZcEd+CtEP8vKY/d9IY+p6ah+CWqTqCCH/nQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJWU9X2YFEPmT7D/j6B0AcvrvYJ1MB8GA1UdIwQY MBaAFG1+pDocR1V4fUkfulY7iIEdzMX4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlg2a09oeEhWWGg5U1ItNlZqdUlnUjNNeGZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi81Yzk5OTYtNmY2Yi00YzMxLTg2M2Ut NTg5ZDMwZmZhYThjLzEvbFpUMWZaZ1VRLVpQc1AtUG9IUUJ5LXU5Z25VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi81Yzk5OTYtNmY2Yi00YzMxLTg2M2UtNTg5ZDMwZmZhYThj LzEvYlg2a09oeEhWWGg5U1ItNlZqdUlnUjNNeGZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8fhAwQB wxwMMA0GCSqGSIb3DQEBCwUAA4IBAQAXNgMxbam0UdsbC4N0JaDW5lBVY3pkq37x 2HQzHmUnSaKyJMqDG6DsSHxcMsQPGsZbsyxw6bkfAst6dZv49eTrER1MYd67JDSr 6o/z90V1gnpbaj1QCByZRfjHKEDo+3NdnEuXSkQyVMGAx8nPTuOjuSpzowIJCKnX HxqXpeo6adPXqvVB+mRGZes6FzmUYNBv3bJJ59NC+18A3PT6j7eZouWvBWBq9eIU u6+k61IHUERl1EHV6GwKfomLV1b15QkVSeXknFzrkbd9bzNPSsSKSB4zXHAGk3Al MAewabJRCHKop5eKnEC7O/IWxi04veZrONxwi3Z/nHgWzeYnKIZN -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:58 2026 by rpki-client