This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/6iYgbPU30zGkJ-uyC5Is45fVf_Q.roa File: 6iYgbPU30zGkJ-uyC5Is45fVf_Q.roa (raw, json) Hash identifier: m6DWqFrtz4Avnz35xc2cZJHuQVQMGEU2lflbn2CZop4= Subject key identifier: EA:26:20:6C:F5:37:D3:31:A4:27:EB:B2:0B:92:2C:E3:97:D5:7F:F4 Certificate issuer: /CN=617252ebbb33484adcec7405adea4de08a0afb04 Certificate serial: 019B78A2A00F4A24D941D9028ED600F4943E Authority key identifier: 61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/6iYgbPU30zGkJ-uyC5Is45fVf_Q.roa Signing time: Thu 01 Jan 2026 08:18:02 +0000 ROA not before: Thu 01 Jan 2026 08:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34420 IP address blocks: 195.149.119.0/24 maxlen: 24 2a0b:8bc7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:a0:0f:4a:24:d9:41:d9:02:8e:d6:00:f4:94:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=617252ebbb33484adcec7405adea4de08a0afb04 Validity Not Before: Jan 1 08:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea26206cf537d331a427ebb20b922ce397d57ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b2:76:eb:97:96:be:2b:5d:65:c5:37:4a:d9: 7f:b3:fc:d3:33:fa:f1:2a:14:ee:38:ec:13:6a:5b: e5:a1:30:d0:c7:db:15:2f:0a:a2:e7:d3:c1:07:19: 03:ba:ca:22:46:23:1d:6d:cb:2d:9d:b7:9c:bb:56: 66:01:72:ba:07:23:4d:b3:e8:1a:14:5c:92:85:ca: ca:d0:44:e3:5d:5a:93:69:11:e5:b9:c7:a8:af:24: f5:ce:4a:35:85:35:c5:54:46:de:fd:33:1b:f6:e6: 0c:09:14:67:dc:35:fc:51:37:3e:e5:ae:3c:07:ab: df:e5:90:b8:24:68:33:aa:cd:d4:ca:37:8d:9b:7d: 0e:00:98:25:7b:0e:4e:82:7d:0a:5e:13:63:89:bf: 49:b3:bc:13:0d:51:e8:7e:ad:a8:9b:ef:3a:d2:05: 84:77:01:20:c1:6a:9f:18:82:a6:8f:fc:bd:d0:6a: 5b:67:3b:6c:e8:29:85:a5:4c:62:1d:cf:68:b9:5b: 75:78:95:d6:72:a9:01:50:8b:b9:4b:84:ad:cc:44: bd:e9:e8:ea:42:d7:62:c6:85:e7:81:16:20:41:16: 6c:5e:25:8e:9a:68:5b:21:82:68:56:3c:b0:88:54: 73:04:73:f3:73:6a:3b:95:f7:da:50:bc:31:6c:3b: fa:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:26:20:6C:F5:37:D3:31:A4:27:EB:B2:0B:92:2C:E3:97:D5:7F:F4 X509v3 Authority Key Identifier: keyid:61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/6iYgbPU30zGkJ-uyC5Is45fVf_Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.149.119.0/24 IPv6: 2a0b:8bc7::/32 Signature Algorithm: sha256WithRSAEncryption 4b:27:e8:ee:9c:a8:03:11:e0:1b:e7:f6:28:55:57:4e:4e:58: 44:88:fc:05:16:e3:7c:b9:ba:1e:12:68:df:fd:5a:b2:d2:98: 8b:a1:6a:4b:31:65:11:42:2f:db:2f:70:4a:51:9f:80:8e:c4: c7:10:cd:e0:d1:27:cf:85:15:e5:16:96:cd:1f:4c:0f:a7:df: be:0f:64:b9:c4:62:43:70:9b:18:5f:1f:dc:6d:32:95:a9:8d: 1a:bd:de:f7:0a:fa:bb:44:49:cd:e6:27:d3:3e:a5:2d:38:32: ac:69:ca:9d:f8:35:a1:d1:54:48:3c:cf:b5:1d:13:b7:94:39: 9d:3c:a7:d5:44:c4:d2:20:c1:13:43:f2:97:3d:42:8d:fc:0c: 81:72:5d:25:79:b5:22:60:45:07:2f:80:ce:7f:ad:e6:d8:82: 3e:73:58:29:6b:e8:af:2d:03:5b:2c:64:0b:cb:5c:25:9b:06: 18:e2:3a:e5:53:b2:a6:d1:59:20:02:13:e9:1c:29:60:13:6a: 57:b3:d4:3d:19:f8:f9:0f:95:fb:a9:80:21:c6:af:d7:bb:b4: 1d:58:28:aa:d7:88:83:a3:1a:a5:c3:b9:a8:0d:c4:d1:00:79: dc:0b:d7:6a:9b:5d:1a:a3:46:10:73:c3:b8:3f:68:11:d6:d8: 33:b3:e1:79 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4oqAPSiTZQdkCjtYA9JQ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNzI1MmViYmIzMzQ4NGFkY2VjNzQwNWFkZWE0ZGUwOGEw YWZiMDQwHhcNMjYwMTAxMDgxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTI2MjA2Y2Y1MzdkMzMxYTQyN2ViYjIwYjkyMmNlMzk3ZDU3ZmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7J265eWvitdZcU3Stl/s/zTM/rx KhTuOOwTalvloTDQx9sVLwqi59PBBxkDusoiRiMdbcstnbecu1ZmAXK6ByNNs+ga FFyShcrK0ETjXVqTaRHluceoryT1zko1hTXFVEbe/TMb9uYMCRRn3DX8UTc+5a48 B6vf5ZC4JGgzqs3UyjeNm30OAJglew5Ogn0KXhNjib9Js7wTDVHofq2om+860gWE dwEgwWqfGIKmj/y90GpbZzts6CmFpUxiHc9ouVt1eJXWcqkBUIu5S4StzES96ejq QtdixoXngRYgQRZsXiWOmmhbIYJoVjywiFRzBHPzc2o7lffaULwxbDv6DwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOomIGz1N9MxpCfrsguSLOOX1X/0MB8GA1UdIwQY MBaAFGFyUuu7M0hK3Ox0Ba3qTeCKCvsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVhKUzY3c3pTRXJjN0hRRnJlcE40SW9LLXdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zN2E5M2ItODdiNS00OTk1LTllOGMt NjYzNWRlYmMzOTVjLzEvNmlZZ2JQVTMwekdrSi11eUM1SXM0NWZWZl9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8zN2E5M2ItODdiNS00OTk1LTllOGMtNjYzNWRlYmMzOTVj LzEvWVhKUzY3c3pTRXJjN0hRRnJlcE40SW9LLXdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAw5V3MA0E AgACMAcDBQAqC4vHMA0GCSqGSIb3DQEBCwUAA4IBAQBLJ+junKgDEeAb5/YoVVdO TlhEiPwFFuN8uboeEmjf/Vqy0piLoWpLMWURQi/bL3BKUZ+AjsTHEM3g0SfPhRXl FpbNH0wPp9++D2S5xGJDcJsYXx/cbTKVqY0avd73Cvq7REnN5ifTPqUtODKsacqd +DWh0VRIPM+1HRO3lDmdPKfVRMTSIMETQ/KXPUKN/AyBcl0lebUiYEUHL4DOf63m 2II+c1gpa+ivLQNbLGQLy1wlmwYY4jrlU7Km0VkgAhPpHClgE2pXs9Q9Gfj5D5X7 qYAhxq/Xu7QdWCiq14iDoxqlw7moDcTRAHncC9dqm10ao0YQc8O4P2gR1tgzs+F5 -----END CERTIFICATE-----Generated at Tue Feb 10 04:16:53 2026 by rpki-client