This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/6peY1TEqHH80anLsclgkAToCzbY.roa File: 6peY1TEqHH80anLsclgkAToCzbY.roa (raw, json) Hash identifier: rKRFe1VNHcfwzDcQpuj4ZPyX0PRg2tw1Mga6ks1XLaA= Subject key identifier: EA:97:98:D5:31:2A:1C:7F:34:6A:72:EC:72:58:24:01:3A:02:CD:B6 Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622 Certificate serial: 019B7D5CD10346E3C4D19D44C259E36776BF Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/6peY1TEqHH80anLsclgkAToCzbY.roa Signing time: Fri 02 Jan 2026 06:19:53 +0000 ROA not before: Fri 02 Jan 2026 06:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 2.57.180.0/22 maxlen: 24 2.59.116.0/24 maxlen: 24 45.12.44.0/22 maxlen: 24 45.15.52.0/22 maxlen: 22 45.67.44.0/22 maxlen: 22 45.86.192.0/22 maxlen: 22 45.95.140.0/22 maxlen: 24 45.130.204.0/22 maxlen: 24 45.136.60.0/22 maxlen: 24 45.145.192.0/22 maxlen: 24 45.151.204.0/22 maxlen: 24 91.225.0.0/24 maxlen: 24 91.227.240.0/23 maxlen: 23 94.142.164.0/22 maxlen: 22 103.82.160.0/22 maxlen: 22 185.39.11.0/24 maxlen: 24 185.57.176.0/22 maxlen: 22 185.157.123.0/24 maxlen: 24 185.232.89.0/24 maxlen: 24 193.3.158.0/24 maxlen: 24 194.99.66.0/23 maxlen: 23 195.244.14.0/23 maxlen: 23 212.52.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d1:03:46:e3:c4:d1:9d:44:c2:59:e3:67:76:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622 Validity Not Before: Jan 2 06:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea9798d5312a1c7f346a72ec725824013a02cdb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c7:55:f6:ad:37:67:e2:35:f7:d4:be:d5:4d: a5:9c:91:02:e0:97:d4:1c:2e:b2:e3:d4:06:09:1f: 33:5a:dc:05:b9:79:7f:70:0e:28:cc:32:7d:d0:09: e7:bc:07:b1:58:49:d0:b6:3a:d3:73:0a:33:d0:a6: 43:04:ff:7d:8f:01:4d:9f:5d:c5:5c:74:ca:71:e1: 1a:c6:0e:9f:bc:b8:7f:18:04:c3:bc:c5:83:9a:7d: c1:2f:a9:66:06:42:3d:d0:b5:04:46:5a:a3:08:95: f1:20:3d:9e:67:60:97:ba:d0:84:71:eb:5b:3c:c6: 83:7e:6e:23:56:48:61:e7:72:3f:f3:bf:10:6f:31: f2:4b:79:d7:6d:3c:2b:08:13:f3:ce:36:b1:5b:55: 8f:07:6c:cf:17:3a:26:98:6d:f5:3b:0c:57:1b:a3: 43:f9:c2:3a:56:c9:dd:2b:ad:85:e0:fd:23:50:23: fa:2b:32:b9:4c:08:ee:be:fb:fe:91:3b:e0:cd:0e: 9d:03:12:68:34:d4:f6:17:10:69:79:21:76:4a:81: 0c:fe:03:4b:60:71:22:4e:95:f3:91:dc:cb:80:35: dc:46:71:30:c3:cb:69:f4:1a:96:cd:73:4c:80:95: 77:25:1f:bf:c9:40:60:4f:6a:a9:ae:3f:ac:8e:fd: 46:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:97:98:D5:31:2A:1C:7F:34:6A:72:EC:72:58:24:01:3A:02:CD:B6 X509v3 Authority Key Identifier: keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/6peY1TEqHH80anLsclgkAToCzbY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.180.0/22 2.59.116.0/24 45.12.44.0/22 45.15.52.0/22 45.67.44.0/22 45.86.192.0/22 45.95.140.0/22 45.130.204.0/22 45.136.60.0/22 45.145.192.0/22 45.151.204.0/22 91.225.0.0/24 91.227.240.0/23 94.142.164.0/22 103.82.160.0/22 185.39.11.0/24 185.57.176.0/22 185.157.123.0/24 185.232.89.0/24 193.3.158.0/24 194.99.66.0/23 195.244.14.0/23 212.52.3.0/24 Signature Algorithm: sha256WithRSAEncryption 73:9f:81:41:cd:7a:d3:be:a0:aa:3c:d7:5f:57:07:63:da:44: a7:4c:48:2b:dd:d6:80:4a:9c:5d:0e:bd:7f:bc:24:25:2e:c5: f6:17:2f:f1:bf:b9:f2:45:56:a7:9c:22:4e:0b:e3:7d:05:64: c8:49:83:73:33:36:5e:51:77:3a:5b:ba:f5:2e:a2:e9:72:41: e8:cc:07:31:cb:e2:81:d5:32:2e:f2:e0:5a:cc:c1:c1:f3:0b: 23:c4:b5:69:c3:a6:4d:dc:bd:2c:f4:53:bd:d2:ca:41:dd:f4: d4:39:ee:77:d5:c8:3e:5c:63:fa:b7:5c:46:b1:d3:e6:18:e6: 9c:95:34:1c:c2:f0:be:35:8b:90:81:4c:17:e4:b3:39:ec:98: e1:0a:b0:6e:4a:21:5f:e8:a1:4d:ea:5a:1f:af:38:bc:cc:58: ca:85:1f:17:8e:cc:6d:90:d5:8d:a6:d9:c8:09:49:f9:78:f6: 7e:eb:c0:0d:c4:0f:15:dc:6d:33:1a:25:af:26:e5:3b:00:26: 69:18:54:94:d0:ae:72:0f:3b:80:6b:76:01:0f:e8:01:b6:91: 2a:f3:0d:83:ab:86:55:2b:8c:e6:a4:2e:91:1f:4b:62:a9:75: 49:36:8a:d1:97:f7:d8:2e:49:3e:b1:c7:2f:76:40:6a:12:9c: da:e5:9c:11 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgISAZt9XNEDRuPE0Z1EwlnjZ3a/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZDVlMzcxNzhkODUyNGM3MjY2MGExZDc5NjE2NTk5OWU1 ODY2MjIwHhcNMjYwMTAyMDYxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTk3OThkNTMxMmExYzdmMzQ2YTcyZWM3MjU4MjQwMTNhMDJjZGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8dV9q03Z+I199S+1U2lnJEC4JfU HC6y49QGCR8zWtwFuXl/cA4ozDJ90AnnvAexWEnQtjrTcwoz0KZDBP99jwFNn13F XHTKceEaxg6fvLh/GATDvMWDmn3BL6lmBkI90LUERlqjCJXxID2eZ2CXutCEcetb PMaDfm4jVkhh53I/878QbzHyS3nXbTwrCBPzzjaxW1WPB2zPFzommG31OwxXG6ND +cI6VsndK62F4P0jUCP6KzK5TAjuvvv+kTvgzQ6dAxJoNNT2FxBpeSF2SoEM/gNL YHEiTpXzkdzLgDXcRnEww8tp9BqWzXNMgJV3JR+/yUBgT2qprj+sjv1GiQIDAQAB o4ICkjCCAo4wHQYDVR0OBBYEFOqXmNUxKhx/NGpy7HJYJAE6As22MB8GA1UdIwQY MBaAFMjV43F42FJMcmYKHXlhZZmeWGYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODIt OWUwYWVkMmZiOGVjLzEvNnBlWTFURXFISDgwYW5Mc2NsZ2tBVG9DemJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODItOWUwYWVkMmZiOGVj LzEveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGnBggrBgEFBQcBBwEB/wSBlzCBlDCBkQQCAAEwgYoDBAIC ObQDBAACO3QDBAItDCwDBAItDzQDBAItQywDBAItVsADBAItX4wDBAItgswDBAIt iDwDBAItkcADBAItl8wDBABb4QADBAFb4/ADBAJejqQDBAJnUqADBAC5JwsDBAK5 ObADBAC5nXsDBAC56FkDBADBA54DBAHCY0IDBAHD9A4DBADUNAMwDQYJKoZIhvcN AQELBQADggEBAHOfgUHNetO+oKo8119XB2PaRKdMSCvd1oBKnF0OvX+8JCUuxfYX L/G/ufJFVqecIk4L430FZMhJg3MzNl5RdzpbuvUuoulyQejMBzHL4oHVMi7y4FrM wcHzCyPEtWnDpk3cvSz0U73SykHd9NQ57nfVyD5cY/q3XEax0+YY5pyVNBzC8L41 i5CBTBfksznsmOEKsG5KIV/ooU3qWh+vOLzMWMqFHxeOzG2Q1Y2m2cgJSfl49n7r wA3EDxXcbTMaJa8m5TsAJmkYVJTQrnIPO4BrdgEP6AG2kSrzDYOrhlUrjOakLpEf S2KpdUk2itGX99guST6xxy92QGoSnNrlnBE= -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:49 2026 by rpki-client