This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/a27a03-f645-462b-94e7-66c5ae8a36b4/1/6y5zOsV9mgf7F2BHXrtRk7xzs4U.roa File: 6y5zOsV9mgf7F2BHXrtRk7xzs4U.roa (raw, json) Hash identifier: u0j0WMKCrPC+ARtOidkhhJpiGvpkSNz5tPW2s6UUp9I= Subject key identifier: EB:2E:73:3A:C5:7D:9A:07:FB:17:60:47:5E:BB:51:93:BC:73:B3:85 Certificate issuer: /CN=5c791a1ba09b9d4d358ef05aaded7f0e85e881b6 Certificate serial: 019B7C116EB0CC8E4BC08AF73D8AB5B08D1B Authority key identifier: 5C:79:1A:1B:A0:9B:9D:4D:35:8E:F0:5A:AD:ED:7F:0E:85:E8:81:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHkaG6CbnU01jvBare1_DoXogbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/a27a03-f645-462b-94e7-66c5ae8a36b4/1/6y5zOsV9mgf7F2BHXrtRk7xzs4U.roa Signing time: Fri 02 Jan 2026 00:17:55 +0000 ROA not before: Fri 02 Jan 2026 00:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44640 IP address blocks: 91.202.44.0/22 maxlen: 24 185.56.116.0/22 maxlen: 24 2a04:c340::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/a27a03-f645-462b-94e7-66c5ae8a36b4/1/XHkaG6CbnU01jvBare1_DoXogbY.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/a27a03-f645-462b-94e7-66c5ae8a36b4/1/XHkaG6CbnU01jvBare1_DoXogbY.mft rsync://rpki.ripe.net/repository/DEFAULT/XHkaG6CbnU01jvBare1_DoXogbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 03:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:6e:b0:cc:8e:4b:c0:8a:f7:3d:8a:b5:b0:8d:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c791a1ba09b9d4d358ef05aaded7f0e85e881b6 Validity Not Before: Jan 2 00:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb2e733ac57d9a07fb1760475ebb5193bc73b385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d9:24:5e:0e:1b:db:9b:a6:fd:f5:05:af:71: b2:27:5c:3e:a7:1e:da:12:8d:f8:b0:95:d3:76:51: a2:44:0f:e9:8a:22:08:ff:49:cc:b5:0f:e8:26:19: f0:0d:ad:67:88:23:ad:23:04:c2:a6:48:13:17:96: ec:fe:9a:cd:6a:9c:fd:1f:ef:1f:b9:a9:b5:f9:43: 2d:61:e5:cd:f6:34:ec:1b:52:f5:08:4d:2e:4a:25: bf:d8:b2:64:18:ba:e0:44:bb:15:11:93:d3:f4:b9: 11:dc:aa:40:40:97:1b:e0:37:ce:80:48:a6:7c:85: 02:cf:01:3d:90:43:cb:60:9b:2c:94:1a:30:4f:d5: 2d:a4:6a:64:1a:60:41:84:a8:9f:8b:74:6e:f8:81: 5c:fa:57:e6:43:b2:51:d1:0b:a6:0d:1c:1f:8b:9f: 35:30:79:98:51:fa:e7:6e:f6:63:37:db:1c:2a:c9: 96:70:e6:05:e4:a7:f0:4b:3b:83:64:81:59:3d:ec: af:80:ec:d3:ce:0a:e4:15:0b:52:6a:e5:de:39:0e: ab:84:a6:9a:e9:bc:16:a7:e4:67:ed:91:85:fc:8f: db:a4:16:fb:33:9f:de:18:61:c5:fb:87:8a:cc:4b: 79:89:61:83:d1:21:0b:9d:d6:cb:03:f8:e3:23:ce: 23:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:2E:73:3A:C5:7D:9A:07:FB:17:60:47:5E:BB:51:93:BC:73:B3:85 X509v3 Authority Key Identifier: keyid:5C:79:1A:1B:A0:9B:9D:4D:35:8E:F0:5A:AD:ED:7F:0E:85:E8:81:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHkaG6CbnU01jvBare1_DoXogbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a27a03-f645-462b-94e7-66c5ae8a36b4/1/6y5zOsV9mgf7F2BHXrtRk7xzs4U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a27a03-f645-462b-94e7-66c5ae8a36b4/1/XHkaG6CbnU01jvBare1_DoXogbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.202.44.0/22 185.56.116.0/22 IPv6: 2a04:c340::/29 Signature Algorithm: sha256WithRSAEncryption 69:b1:0a:2b:46:d1:5e:f9:bc:96:01:2f:34:20:0b:a1:da:ab: d9:8e:68:46:c2:d4:06:d1:7a:2c:de:48:c4:52:22:b6:5b:f2: fc:23:95:78:5d:48:9e:57:55:8e:cd:8e:14:ad:68:9b:20:f9: 11:62:5d:02:bb:e3:24:83:e3:2c:e3:73:ee:0a:9a:4f:ef:fc: d5:87:d8:f6:92:d9:c9:53:32:5a:c3:db:b8:d0:2d:bc:5a:3f: ac:53:2b:3f:86:78:1b:a1:f1:7a:30:92:c1:12:a6:24:90:cb: 7b:07:6f:3f:4c:90:db:50:fa:26:02:0f:78:2f:f7:44:bc:8c: b3:cb:51:20:e8:f2:bc:d4:94:c3:1e:84:77:10:79:92:0b:27: c0:24:2b:8c:22:b5:ff:7f:3e:ec:b0:cc:e8:98:d3:ad:e2:35: 42:56:29:7f:c1:43:f6:2d:8a:73:b5:79:11:d1:4e:2a:8c:1c: b4:1e:b2:4e:88:a5:35:56:0c:39:3b:e0:ac:4b:13:f8:7b:7f: f0:ab:81:c3:d4:43:31:cd:af:21:46:32:60:c0:2d:5f:14:79: 83:f8:02:cf:fd:d9:5c:2d:85:d6:57:a7:82:fa:a2:9d:f8:f7: cb:03:24:88:81:e3:98:0f:b9:6f:d2:fe:a9:06:e3:ee:3c:88: 0e:a3:d4:cf -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8EW6wzI5LwIr3PYq1sI0bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNzkxYTFiYTA5YjlkNGQzNThlZjA1YWFkZWQ3ZjBlODVl ODgxYjYwHhcNMjYwMTAyMDAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjJlNzMzYWM1N2Q5YTA3ZmIxNzYwNDc1ZWJiNTE5M2JjNzNiMzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9kkXg4b25um/fUFr3GyJ1w+px7a Eo34sJXTdlGiRA/piiII/0nMtQ/oJhnwDa1niCOtIwTCpkgTF5bs/prNapz9H+8f uam1+UMtYeXN9jTsG1L1CE0uSiW/2LJkGLrgRLsVEZPT9LkR3KpAQJcb4DfOgEim fIUCzwE9kEPLYJsslBowT9UtpGpkGmBBhKifi3Ru+IFc+lfmQ7JR0QumDRwfi581 MHmYUfrnbvZjN9scKsmWcOYF5KfwSzuDZIFZPeyvgOzTzgrkFQtSauXeOQ6rhKaa 6bwWp+Rn7ZGF/I/bpBb7M5/eGGHF+4eKzEt5iWGD0SELndbLA/jjI84jkwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOsuczrFfZoH+xdgR167UZO8c7OFMB8GA1UdIwQY MBaAFFx5Ghugm51NNY7wWq3tfw6F6IG2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEhrYUc2Q2JuVTAxanZCYXJlMV9Eb1hvZ2JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9hMjdhMDMtZjY0NS00NjJiLTk0ZTct NjZjNWFlOGEzNmI0LzEvNnk1ek9zVjltZ2Y3RjJCSFhydFJrN3h6czRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9hMjdhMDMtZjY0NS00NjJiLTk0ZTctNjZjNWFlOGEzNmI0 LzEvWEhrYUc2Q2JuVTAxanZCYXJlMV9Eb1hvZ2JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCW8osAwQC uTh0MA0EAgACMAcDBQMqBMNAMA0GCSqGSIb3DQEBCwUAA4IBAQBpsQorRtFe+byW AS80IAuh2qvZjmhGwtQG0Xos3kjEUiK2W/L8I5V4XUieV1WOzY4UrWibIPkRYl0C u+Mkg+Ms43PuCppP7/zVh9j2ktnJUzJaw9u40C28Wj+sUys/hngbofF6MJLBEqYk kMt7B28/TJDbUPomAg94L/dEvIyzy1Eg6PK81JTDHoR3EHmSCyfAJCuMIrX/fz7s sMzomNOt4jVCVil/wUP2LYpztXkR0U4qjBy0HrJOiKU1Vgw5O+CsSxP4e3/wq4HD 1EMxza8hRjJgwC1fFHmD+ALP/dlcLYXWV6eC+qKd+PfLAySIgeOYD7lv0v6pBuPu PIgOo9TP -----END CERTIFICATE-----Generated at Tue Jan 27 13:02:10 2026 by rpki-client