This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/6qGUPCLSi43UStT-BJ4g4tZDV9M.roa File: 6qGUPCLSi43UStT-BJ4g4tZDV9M.roa (raw, json) Hash identifier: HDKK+4SxJUjTqGYrMjwsdWSR0sAb33j+TagY0rttyN4= Subject key identifier: EA:A1:94:3C:22:D2:8B:8D:D4:4A:D4:FE:04:9E:20:E2:D6:43:57:D3 Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808 Certificate serial: 019B7EA66F9BF382CF7FBBD49D92A2F9A76F Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/6qGUPCLSi43UStT-BJ4g4tZDV9M.roa Signing time: Fri 02 Jan 2026 12:19:55 +0000 ROA not before: Fri 02 Jan 2026 12:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41341 IP address blocks: 37.114.16.0/20 maxlen: 32 81.18.130.0/23 maxlen: 32 89.28.192.0/21 maxlen: 32 91.211.128.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 23:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:6f:9b:f3:82:cf:7f:bb:d4:9d:92:a2:f9:a7:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808 Validity Not Before: Jan 2 12:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eaa1943c22d28b8dd44ad4fe049e20e2d64357d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0d:c7:8c:78:ee:3a:2a:b5:ab:d4:eb:a6:17: 7e:39:fe:c3:ab:19:a9:28:42:69:e2:e1:c3:45:22: e8:76:1b:7d:2e:7b:0d:2b:2c:c2:16:78:b9:97:2e: 38:eb:6d:ad:a0:13:cc:1c:be:8d:92:cd:04:1f:59: 66:1a:81:c9:10:0b:4d:79:1e:0b:2d:78:83:ab:31: 09:7b:41:a8:0c:3a:8c:52:e5:53:fc:ec:f6:fe:20: 78:77:9c:30:e9:45:e3:bf:39:2e:7e:21:b7:12:00: b3:3f:39:31:91:68:fd:31:d9:74:0f:7e:f7:17:4c: 4b:5c:53:52:47:10:5a:16:47:58:cb:d3:1b:1a:0c: 12:4c:98:c8:e9:d0:11:46:bf:76:6f:e9:5e:36:1c: fa:89:56:1e:1f:9f:53:f2:18:4a:d5:f1:ae:fc:41: 05:7f:5f:c6:2d:ec:3b:e2:a1:cf:c0:a1:9b:83:85: 6e:60:af:0a:a8:9e:af:f5:b4:c8:76:df:57:f7:bb: 56:52:4e:fa:1f:5b:8a:fa:11:8a:55:b2:dc:17:b1: 7d:2d:bf:bd:6b:8e:14:15:75:fd:38:50:dc:42:2c: 9e:d2:fa:4f:da:85:08:44:a3:04:6e:75:42:4f:fd: 9f:4f:d6:6e:f1:41:24:60:c2:ec:c1:77:b2:d4:c8: ec:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A1:94:3C:22:D2:8B:8D:D4:4A:D4:FE:04:9E:20:E2:D6:43:57:D3 X509v3 Authority Key Identifier: keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/6qGUPCLSi43UStT-BJ4g4tZDV9M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.114.16.0/20 81.18.130.0/23 89.28.192.0/21 91.211.128.0/22 Signature Algorithm: sha256WithRSAEncryption ba:8b:63:68:a0:22:92:41:84:38:52:e2:a6:08:a5:cf:45:de: 2a:12:d3:0e:ff:02:15:84:9a:db:e4:2b:66:77:57:ce:8c:22: 03:98:24:bf:1a:37:69:26:6d:f1:d1:3c:1f:0c:6f:ec:00:e7: 3d:f2:2e:b4:7e:46:09:2a:84:2a:41:60:c1:c2:8c:8a:03:e7: 08:44:65:67:b2:fd:7a:c6:c1:d4:a7:b0:16:af:c1:47:d7:32: 6a:6e:af:56:c1:d3:2f:b5:7d:f7:cf:6d:12:49:3e:bc:99:7a: 48:5e:c5:e0:53:0b:8b:7d:c5:59:93:79:02:89:e3:2f:db:36: 54:65:e1:89:d0:13:b4:6b:b0:25:da:24:69:fc:cf:ae:c8:8a: dc:55:dd:b4:ea:06:9a:2d:ce:9b:da:29:28:9f:86:cd:b0:92: a8:5b:b8:bf:2d:5b:85:31:be:00:b8:55:22:b8:49:2e:9b:b2: c4:cf:27:b9:79:d2:f2:cb:e0:f0:b2:db:a1:e3:a1:bd:50:4b: 44:86:2a:fa:a9:19:bf:50:be:bf:84:ec:02:bd:06:8e:80:6d: 06:8a:b3:9e:b6:06:3c:74:18:7a:39:4c:74:d4:4f:88:73:ad: 76:91:fa:b6:4b:bf:45:3f:06:22:6c:b9:c9:63:fd:6c:19:fd: 7c:4e:37:36 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+pm+b84LPf7vUnZKi+advMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYWM4MzBjY2FhNzQ3ODNkZDk2MWZhYjI0MWEyMjhkN2Nj NmY4MDgwHhcNMjYwMTAyMTIxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWExOTQzYzIyZDI4YjhkZDQ0YWQ0ZmUwNDllMjBlMmQ2NDM1N2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg3HjHjuOiq1q9Trphd+Of7Dqxmp KEJp4uHDRSLodht9LnsNKyzCFni5ly44622toBPMHL6Nks0EH1lmGoHJEAtNeR4L LXiDqzEJe0GoDDqMUuVT/Oz2/iB4d5ww6UXjvzkufiG3EgCzPzkxkWj9Mdl0D373 F0xLXFNSRxBaFkdYy9MbGgwSTJjI6dARRr92b+leNhz6iVYeH59T8hhK1fGu/EEF f1/GLew74qHPwKGbg4VuYK8KqJ6v9bTIdt9X97tWUk76H1uK+hGKVbLcF7F9Lb+9 a44UFXX9OFDcQiye0vpP2oUIRKMEbnVCT/2fT9Zu8UEkYMLswXey1MjsFwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFOqhlDwi0ouN1ErU/gSeIOLWQ1fTMB8GA1UdIwQY MBaAFK2sgwzKp0eD3ZYfqyQaIo18xvgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgt OTI5ZjdkNjM1ZjRiLzEvNnFHVVBDTFNpNDNVU3RULUJKNGc0dFpEVjlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgtOTI5ZjdkNjM1ZjRi LzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQEJXIQAwQB URKCAwQDWRzAAwQCW9OAMA0GCSqGSIb3DQEBCwUAA4IBAQC6i2NooCKSQYQ4UuKm CKXPRd4qEtMO/wIVhJrb5Ctmd1fOjCIDmCS/GjdpJm3x0TwfDG/sAOc98i60fkYJ KoQqQWDBwoyKA+cIRGVnsv16xsHUp7AWr8FH1zJqbq9WwdMvtX33z20SST68mXpI XsXgUwuLfcVZk3kCieMv2zZUZeGJ0BO0a7Al2iRp/M+uyIrcVd206gaaLc6b2iko n4bNsJKoW7i/LVuFMb4AuFUiuEkum7LEzye5edLyy+Dwstuh46G9UEtEhir6qRm/ UL6/hOwCvQaOgG0GirOetgY8dBh6OUx01E+Ic612kfq2S79FPwYibLnJY/1sGf18 Tjc2 -----END CERTIFICATE-----Generated at Sat Jan 31 07:26:32 2026 by rpki-client