This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/6bZLoAsiuD7u4TsiKdKZiFMS8wg.roa File: 6bZLoAsiuD7u4TsiKdKZiFMS8wg.roa (raw, json) Hash identifier: YcDjRze4iyKPM9dw93kDNAJsoNt848x2xiKGlnWWZSI= Subject key identifier: E9:B6:4B:A0:0B:22:B8:3E:EE:E1:3B:22:29:D2:99:88:53:12:F3:08 Certificate issuer: /CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32 Certificate serial: 019B7EA4D50A622144532E52A13073129953 Authority key identifier: 4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/6bZLoAsiuD7u4TsiKdKZiFMS8wg.roa Signing time: Fri 02 Jan 2026 12:18:10 +0000 ROA not before: Fri 02 Jan 2026 12:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35701 IP address blocks: 62.122.36.0/22 maxlen: 22 62.122.39.0/24 maxlen: 24 2a05:7300::/30 maxlen: 30 2a05:7300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:d5:0a:62:21:44:53:2e:52:a1:30:73:12:99:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32 Validity Not Before: Jan 2 12:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9b64ba00b22b83eeee13b2229d299885312f308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ae:8d:d9:e0:68:6b:31:bf:7f:4b:2a:a8:83: 8b:d8:6b:f2:af:1c:b7:fe:41:d0:46:b4:e7:80:4e: f9:c8:07:6e:65:0c:87:83:af:27:78:0d:aa:68:5d: 9c:32:98:90:92:ab:f6:f7:b2:0f:c4:65:cd:61:d8: be:23:27:40:9f:4c:3f:e4:b3:af:74:bf:c1:de:93: 2d:d9:ae:68:b3:9f:b6:54:95:45:ef:6a:26:18:e5: 64:db:af:4b:b2:b4:95:4c:a3:ab:ee:25:83:2e:2b: 81:14:b6:f9:60:68:12:f1:73:e4:2a:4e:d8:46:98: 54:09:a9:05:42:90:57:f4:23:9c:44:e7:d7:08:0c: f9:e8:93:09:f6:75:49:27:ba:44:09:76:f8:f1:20: 25:4b:db:47:e6:49:8a:af:3e:2e:6e:c5:08:9a:7f: a3:50:a4:b9:b0:08:4a:ad:41:82:57:fb:2f:58:3f: 8e:8e:63:cc:53:9d:87:40:c7:42:f6:cd:0c:7f:8d: c2:42:77:e0:2f:66:66:2f:f1:ea:83:bf:fb:23:02: 43:07:42:56:72:2c:24:af:f9:3e:8c:1e:04:fd:1c: 29:15:25:ca:09:0d:ec:d3:54:8c:70:0c:44:78:85: 31:52:03:32:c7:05:6d:50:93:c6:30:0c:f3:2e:78: 79:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B6:4B:A0:0B:22:B8:3E:EE:E1:3B:22:29:D2:99:88:53:12:F3:08 X509v3 Authority Key Identifier: keyid:4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/6bZLoAsiuD7u4TsiKdKZiFMS8wg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.122.36.0/22 IPv6: 2a05:7300::/30 Signature Algorithm: sha256WithRSAEncryption 60:88:09:68:13:d0:92:0a:26:d5:b3:31:ea:3c:e9:0d:22:41: 20:29:24:c0:e3:e1:73:4e:23:58:09:30:f3:41:b6:cf:58:4c: df:d2:2f:2f:a4:96:18:2a:56:40:32:be:fa:e8:ad:fc:32:62: 66:1c:9a:cd:42:e9:67:b8:64:42:52:f2:ad:f3:f4:31:c3:e9: 0d:c9:97:bb:03:2f:a3:fd:dc:29:ac:26:44:81:1e:8e:d1:20: 78:4a:64:5c:86:b7:bf:96:f1:ca:01:5f:ea:05:3f:a3:78:aa: 44:98:3b:ee:87:c7:5f:0b:f6:e6:38:ba:dd:4a:43:16:3a:d1: f8:6f:df:2e:51:33:3b:33:b2:80:4f:4d:f7:2a:cf:cd:55:0b: 88:05:1f:97:df:8e:8d:91:de:64:00:f5:38:50:67:f3:51:b4: e4:eb:a2:ca:cf:b2:ab:25:e7:63:29:57:66:62:b8:80:b4:d8: c6:6c:fb:58:6b:31:6a:b8:02:ab:38:16:e2:47:33:65:1e:a1: 25:78:c7:be:0e:f0:e7:de:cc:8e:7d:f5:89:f4:d4:d4:1e:71: cd:9f:bc:a2:b2:20:05:62:d1:f5:87:ac:6d:f8:76:ea:7b:b8: ba:1c:f4:14:31:33:c6:a6:93:c5:e5:74:5a:aa:9d:30:2a:a7: 87:1b:31:53 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pNUKYiFEUy5SoTBzEplTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkOGE5ODc1ZDdkMGQxMmJjNDdhNzBiN2VkZTlhM2NhNjRk ODJkMzIwHhcNMjYwMTAyMTIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWI2NGJhMDBiMjJiODNlZWVlMTNiMjIyOWQyOTk4ODUzMTJmMzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj66N2eBoazG/f0sqqIOL2Gvyrxy3 /kHQRrTngE75yAduZQyHg68neA2qaF2cMpiQkqv297IPxGXNYdi+IydAn0w/5LOv dL/B3pMt2a5os5+2VJVF72omGOVk269LsrSVTKOr7iWDLiuBFLb5YGgS8XPkKk7Y RphUCakFQpBX9COcROfXCAz56JMJ9nVJJ7pECXb48SAlS9tH5kmKrz4ubsUImn+j UKS5sAhKrUGCV/svWD+OjmPMU52HQMdC9s0Mf43CQnfgL2ZmL/Hqg7/7IwJDB0JW ciwkr/k+jB4E/RwpFSXKCQ3s01SMcAxEeIUxUgMyxwVtUJPGMAzzLnh5nQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOm2S6ALIrg+7uE7IinSmYhTEvMIMB8GA1UdIwQY MBaAFE2KmHXX0NErxHpwt+3po8pk2C0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFlxWWRkZlEwU3ZFZW5DMzdlbWp5bVRZTFRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi85NWQ3ODAtYmFhZC00ZGI3LWJlYjUt NDU0NTk5YTRkMjJjLzEvNmJaTG9Bc2l1RDd1NFRzaUtkS1ppRk1TOHdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi85NWQ3ODAtYmFhZC00ZGI3LWJlYjUtNDU0NTk5YTRkMjJj LzEvVFlxWWRkZlEwU3ZFZW5DMzdlbWp5bVRZTFRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCPnokMA0E AgACMAcDBQIqBXMAMA0GCSqGSIb3DQEBCwUAA4IBAQBgiAloE9CSCibVszHqPOkN IkEgKSTA4+FzTiNYCTDzQbbPWEzf0i8vpJYYKlZAMr766K38MmJmHJrNQulnuGRC UvKt8/Qxw+kNyZe7Ay+j/dwprCZEgR6O0SB4SmRchre/lvHKAV/qBT+jeKpEmDvu h8dfC/bmOLrdSkMWOtH4b98uUTM7M7KAT033Ks/NVQuIBR+X346Nkd5kAPU4UGfz UbTk66LKz7KrJedjKVdmYriAtNjGbPtYazFquAKrOBbiRzNlHqEleMe+DvDn3syO ffWJ9NTUHnHNn7yisiAFYtH1h6xt+Hbqe7i6HPQUMTPGppPF5XRaqp0wKqeHGzFT -----END CERTIFICATE-----Generated at Tue Feb 10 02:33:31 2026 by rpki-client