This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/v_6hfKyRVIjeJvA7Hn7c_7uLcEI.roa File: v_6hfKyRVIjeJvA7Hn7c_7uLcEI.roa (raw, json) Hash identifier: AjN5pZH9Vkd0aFs/22Tncp1jiELMZjwI4H52yGKSq88= Subject key identifier: BF:FE:A1:7C:AC:91:54:88:DE:26:F0:3B:1E:7E:DC:FF:BB:8B:70:42 Certificate issuer: /CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6 Certificate serial: 019B79ED012046740204B2B6F4812D00D13F Authority key identifier: 3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/v_6hfKyRVIjeJvA7Hn7c_7uLcEI.roa Signing time: Thu 01 Jan 2026 14:18:54 +0000 ROA not before: Thu 01 Jan 2026 14:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43260 IP address blocks: 91.151.94.0/24 maxlen: 24 185.137.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:01:20:46:74:02:04:b2:b6:f4:81:2d:00:d1:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6 Validity Not Before: Jan 1 14:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bffea17cac915488de26f03b1e7edcffbb8b7042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6b:ed:f7:34:d0:8b:0d:d1:cd:a3:34:aa:ac: ee:e7:a0:da:42:72:16:57:e7:f6:ab:7a:33:96:d8: 2d:f7:01:b7:e3:2f:27:90:7c:f4:f8:7b:96:b0:ac: 82:f7:c4:21:5c:b8:d7:38:85:83:ce:1d:7d:70:0a: 7e:d6:ac:ee:48:24:e3:72:11:6a:11:0e:2a:fd:d8: 66:38:9a:5a:83:e7:98:cd:90:c4:c0:10:d4:47:17: 0d:d6:eb:87:0d:77:a5:18:69:a7:8a:82:11:fe:6c: 1d:75:11:4a:1d:03:cb:dc:fe:77:fa:3a:e8:d4:59: 63:47:07:77:be:1c:76:2b:c1:d8:bc:d5:fc:8e:fb: 9e:db:11:a2:96:e0:21:29:5c:3d:e4:b5:66:dd:da: 1b:d4:62:de:74:76:b2:8c:5c:4d:e3:2e:c9:c7:6f: 5a:e2:1c:f9:fa:d1:ce:84:07:07:2a:cc:64:bc:00: 90:e2:c0:f3:20:ae:8f:28:0b:d6:b4:25:b6:58:e0: b4:0f:73:c2:d6:67:03:19:66:60:76:e9:3e:77:b7: eb:71:54:10:25:23:eb:c7:38:07:1f:c1:17:6b:73: 84:7f:74:4b:b7:d2:cc:4e:59:d5:e5:2c:d5:ca:a8: d9:3d:41:88:c0:9f:71:8f:46:b1:b8:98:f1:bc:2f: 5a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FE:A1:7C:AC:91:54:88:DE:26:F0:3B:1E:7E:DC:FF:BB:8B:70:42 X509v3 Authority Key Identifier: keyid:3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/v_6hfKyRVIjeJvA7Hn7c_7uLcEI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.151.94.0/24 185.137.98.0/24 Signature Algorithm: sha256WithRSAEncryption 97:5f:95:b9:f2:a3:c9:a5:e6:2c:32:26:1d:99:80:58:f3:14: 0e:2d:b5:3b:6f:d7:72:08:ff:82:ed:36:2c:47:f0:9c:1e:07: 3d:12:43:44:46:00:d0:cf:82:72:d6:ab:d2:93:da:8c:f1:df: 5c:5a:ae:94:fe:03:2c:dd:e7:ba:7b:ec:dd:ce:05:d4:8e:29: 01:bc:a2:3a:cf:e4:ca:c6:81:19:c7:b9:7f:31:7a:27:57:ad: 00:b5:53:1e:2e:bf:3e:0b:52:c1:fc:dc:6b:e7:7e:9a:7e:1c: 1c:15:1b:60:8c:31:b9:bf:8d:da:12:c5:e5:b5:ae:9a:4b:9b: fe:0e:5c:1e:c9:d8:24:9c:fd:65:a3:ab:60:47:65:d7:da:17: 0c:18:9f:5d:24:af:29:53:dd:bb:b9:4e:56:04:d4:a6:7c:43: 30:55:ff:57:b9:8e:04:eb:a4:24:03:7c:9c:5b:d1:c6:e4:dd: 4c:88:0b:7a:5a:7e:e0:56:48:83:45:91:6e:4b:74:71:6d:75: 07:c8:88:47:d5:ce:ee:c6:77:ef:fe:50:ad:92:70:23:3d:6e: 2d:4a:21:76:98:6f:ed:aa:db:2d:0e:3a:be:f5:c2:dd:57:9a: a5:e5:6a:d4:d4:f3:4b:ea:09:05:5d:45:25:5d:c7:b3:a5:12: bf:63:cc:02 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57QEgRnQCBLK29IEtANE/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMjVhYjY5ODVmNzljYTlkZTA2ZTk4ZThiOWRhMjQ1ZDg1 NTlhYjYwHhcNMjYwMTAxMTQxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmZlYTE3Y2FjOTE1NDg4ZGUyNmYwM2IxZTdlZGNmZmJiOGI3MDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGvt9zTQiw3RzaM0qqzu56DaQnIW V+f2q3ozltgt9wG34y8nkHz0+HuWsKyC98QhXLjXOIWDzh19cAp+1qzuSCTjchFq EQ4q/dhmOJpag+eYzZDEwBDURxcN1uuHDXelGGmnioIR/mwddRFKHQPL3P53+jro 1FljRwd3vhx2K8HYvNX8jvue2xGiluAhKVw95LVm3dob1GLedHayjFxN4y7Jx29a 4hz5+tHOhAcHKsxkvACQ4sDzIK6PKAvWtCW2WOC0D3PC1mcDGWZgduk+d7frcVQQ JSPrxzgHH8EXa3OEf3RLt9LMTlnV5SzVyqjZPUGIwJ9xj0axuJjxvC9a2wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL/+oXyskVSI3ibwOx5+3P+7i3BCMB8GA1UdIwQY MBaAFD4lq2mF95yp3gbpjoudokXYVZq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGlXcmFZWDNuS25lQnVtT2k1MmlSZGhWbXJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8yMmQxNzUtYzcxZC00NjM3LWEwOTAt YjE5YWQ1NDU1YmZkLzEvdl82aGZLeVJWSWplSnZBN0huN2NfN3VMY0VJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8yMmQxNzUtYzcxZC00NjM3LWEwOTAtYjE5YWQ1NDU1YmZk LzEvUGlXcmFZWDNuS25lQnVtT2k1MmlSZGhWbXJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW5deAwQA uYliMA0GCSqGSIb3DQEBCwUAA4IBAQCXX5W58qPJpeYsMiYdmYBY8xQOLbU7b9dy CP+C7TYsR/CcHgc9EkNERgDQz4Jy1qvSk9qM8d9cWq6U/gMs3ee6e+zdzgXUjikB vKI6z+TKxoEZx7l/MXonV60AtVMeLr8+C1LB/Nxr536afhwcFRtgjDG5v43aEsXl ta6aS5v+DlweydgknP1lo6tgR2XX2hcMGJ9dJK8pU927uU5WBNSmfEMwVf9XuY4E 66QkA3ycW9HG5N1MiAt6Wn7gVkiDRZFuS3RxbXUHyIhH1c7uxnfv/lCtknAjPW4t SiF2mG/tqtstDjq+9cLdV5ql5WrU1PNL6gkFXUUlXcezpRK/Y8wC -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:22 2026 by rpki-client