This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/6athwBrtylH9PrTB1To_GHuyoLk.roa File: 6athwBrtylH9PrTB1To_GHuyoLk.roa (raw, json) Hash identifier: KvX3mkFuSj/fSyt2Atm7Fel+40as+0+gYyexQT4CePY= Subject key identifier: E9:AB:61:C0:1A:ED:CA:51:FD:3E:B4:C1:D5:3A:3F:18:7B:B2:A0:B9 Certificate issuer: /CN=666d97ceb84e9c616bfe6d93576cc33bbf4b63ef Certificate serial: 019B7EA72461B81C4F82F9A529E2EAB9D9FF Authority key identifier: 66:6D:97:CE:B8:4E:9C:61:6B:FE:6D:93:57:6C:C3:3B:BF:4B:63:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/6athwBrtylH9PrTB1To_GHuyoLk.roa Signing time: Fri 02 Jan 2026 12:20:41 +0000 ROA not before: Fri 02 Jan 2026 12:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16141 IP address blocks: 212.70.224.0/19 maxlen: 24 212.70.226.0/24 maxlen: 24 212.70.228.0/22 maxlen: 22 212.70.232.0/21 maxlen: 21 212.70.240.0/22 maxlen: 22 212.70.244.0/22 maxlen: 22 212.70.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.crl rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:24:61:b8:1c:4f:82:f9:a5:29:e2:ea:b9:d9:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=666d97ceb84e9c616bfe6d93576cc33bbf4b63ef Validity Not Before: Jan 2 12:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9ab61c01aedca51fd3eb4c1d53a3f187bb2a0b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c4:1b:8b:5f:ba:ee:41:57:92:34:70:2b:e0: c0:7f:3c:c0:61:1d:6e:03:48:ed:19:96:d4:f2:b3: 77:f7:ca:77:9b:3b:7f:21:db:c5:3a:e6:ab:6f:59: 34:a1:b6:a8:94:d8:27:ea:d4:12:d0:75:7c:30:95: c4:a3:0f:08:f0:e6:60:91:c5:68:1e:57:1c:77:85: 9f:be:d6:e4:48:f6:4c:78:13:e9:80:63:fe:5e:7f: 09:ec:1e:2e:c9:68:2d:75:b4:95:ba:f4:a7:3c:49: 2b:9d:0c:51:7b:81:ee:d2:fa:49:ce:f3:41:8e:99: 23:8b:b5:a9:ad:d5:00:b8:b2:65:7a:de:76:aa:0c: f1:fe:0e:49:eb:75:a3:e3:b1:5a:bd:2e:0c:70:59: 93:9a:df:9f:a0:73:ad:eb:fc:f7:88:ba:4b:4f:f0: 8c:d8:ee:56:54:8f:0e:64:f3:d2:a2:7c:cf:b9:ae: fa:6c:6f:c8:fa:0b:32:15:d0:cd:05:37:25:58:d4: 56:a5:cc:f9:79:b0:dd:3b:96:4b:2e:25:ff:cf:1c: ee:c5:9b:11:bf:39:60:35:82:8a:bd:47:d5:64:be: ae:ba:4e:87:53:42:c7:24:35:2e:f2:a9:29:13:e0: 9c:c7:dc:3f:0d:1f:52:72:77:6d:67:bb:93:68:ee: fb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:AB:61:C0:1A:ED:CA:51:FD:3E:B4:C1:D5:3A:3F:18:7B:B2:A0:B9 X509v3 Authority Key Identifier: keyid:66:6D:97:CE:B8:4E:9C:61:6B:FE:6D:93:57:6C:C3:3B:BF:4B:63:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/6athwBrtylH9PrTB1To_GHuyoLk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.70.224.0/19 Signature Algorithm: sha256WithRSAEncryption 2d:4f:9f:67:f0:a6:ea:bd:c7:d9:c9:d3:13:ca:cd:f7:36:e5: 3a:f3:23:47:6f:ce:40:8c:fb:5f:17:48:9f:e0:b7:33:04:80: 6a:90:8b:03:18:6e:08:cd:fc:33:ee:bd:ae:82:8e:ec:e7:b6: 2d:bb:5a:81:11:04:80:a0:be:a6:04:d7:fb:33:4e:65:9e:f9: 82:4e:bb:d1:ad:5a:43:53:06:e9:6e:c3:12:4a:77:23:e9:f0: 1e:7d:d1:04:0e:ec:aa:81:26:8a:f7:9b:d2:4b:94:6b:b9:98: 7f:f5:73:24:b1:72:65:fe:90:af:1a:03:d4:e8:04:b1:0d:eb: 23:13:80:06:99:fc:39:25:93:6f:6a:3d:27:68:48:18:1e:53: 17:da:e4:c0:32:fd:eb:20:78:e7:c3:6c:5b:ba:bb:c2:76:ef: a9:d7:6e:7a:b3:e0:4b:0a:1d:ff:57:ab:f0:40:74:2d:42:3b: bd:5c:8c:8c:06:6a:43:6b:ff:28:9e:fd:e2:51:1b:3e:fc:2c: 58:7c:bf:93:cd:2c:4a:9a:e8:d2:38:19:cf:1c:3b:28:84:fb: 64:d9:03:24:bc:1f:83:15:78:a0:a9:09:f1:25:61:fe:0f:cf: e7:1a:8e:6d:34:ed:a6:37:eb:4e:1c:99:6e:f7:6a:56:9a:dd: 6f:3c:8b:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pyRhuBxPgvmlKeLqudn/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NmQ5N2NlYjg0ZTljNjE2YmZlNmQ5MzU3NmNjMzNiYmY0 YjYzZWYwHhcNMjYwMTAyMTIyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWFiNjFjMDFhZWRjYTUxZmQzZWI0YzFkNTNhM2YxODdiYjJhMGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68Qbi1+67kFXkjRwK+DAfzzAYR1u A0jtGZbU8rN398p3mzt/IdvFOuarb1k0obaolNgn6tQS0HV8MJXEow8I8OZgkcVo Hlccd4WfvtbkSPZMeBPpgGP+Xn8J7B4uyWgtdbSVuvSnPEkrnQxRe4Hu0vpJzvNB jpkji7WprdUAuLJlet52qgzx/g5J63Wj47FavS4McFmTmt+foHOt6/z3iLpLT/CM 2O5WVI8OZPPSonzPua76bG/I+gsyFdDNBTclWNRWpcz5ebDdO5ZLLiX/zxzuxZsR vzlgNYKKvUfVZL6uuk6HU0LHJDUu8qkpE+Ccx9w/DR9ScndtZ7uTaO77RwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOmrYcAa7cpR/T60wdU6Pxh7sqC5MB8GA1UdIwQY MBaAFGZtl864Tpxha/5tk1dswzu/S2PvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm0yWHpyaE9uR0ZyX20yVFYyekRPNzlMWS04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84MTIzNWItMmUwNC00NzFmLTg2ODkt NjliYWFmZGQ5YTZlLzEvNmF0aHdCcnR5bEg5UHJUQjFUb19HSHV5b0xrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC84MTIzNWItMmUwNC00NzFmLTg2ODktNjliYWFmZGQ5YTZl LzEvWm0yWHpyaE9uR0ZyX20yVFYyekRPNzlMWS04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1EbgMA0G CSqGSIb3DQEBCwUAA4IBAQAtT59n8KbqvcfZydMTys33NuU68yNHb85AjPtfF0if 4LczBIBqkIsDGG4Izfwz7r2ugo7s57Ytu1qBEQSAoL6mBNf7M05lnvmCTrvRrVpD UwbpbsMSSncj6fAefdEEDuyqgSaK95vSS5RruZh/9XMksXJl/pCvGgPU6ASxDesj E4AGmfw5JZNvaj0naEgYHlMX2uTAMv3rIHjnw2xburvCdu+p1256s+BLCh3/V6vw QHQtQju9XIyMBmpDa/8onv3iURs+/CxYfL+TzSxKmujSOBnPHDsohPtk2QMkvB+D FXigqQnxJWH+D8/nGo5tNO2mN+tOHJlu92pWmt1vPItt -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:58 2026 by rpki-client