This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/xrEy6iUyNKlNRIluwbEEOx9I6H4.roa File: xrEy6iUyNKlNRIluwbEEOx9I6H4.roa (raw, json) Hash identifier: QhXBZ2h3TRqk9pU8GNfzx4oTepVoS1O3YxqP7OBtjQ8= Subject key identifier: C6:B1:32:EA:25:32:34:A9:4D:44:89:6E:C1:B1:04:3B:1F:48:E8:7E Certificate issuer: /CN=932e8078ea420afc1a78bf922a9a2f274679c8a8 Certificate serial: 019B7C131E4BEF0C23747CCB196C1FB898F9 Authority key identifier: 93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/xrEy6iUyNKlNRIluwbEEOx9I6H4.roa Signing time: Fri 02 Jan 2026 00:19:46 +0000 ROA not before: Fri 02 Jan 2026 00:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56748 IP address blocks: 185.231.7.0/24 maxlen: 24 2a0c:3500:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:1e:4b:ef:0c:23:74:7c:cb:19:6c:1f:b8:98:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=932e8078ea420afc1a78bf922a9a2f274679c8a8 Validity Not Before: Jan 2 00:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6b132ea253234a94d44896ec1b1043b1f48e87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:64:2b:ad:bb:60:cc:0e:40:ca:2a:b4:83:ba: 4c:35:85:46:07:b5:48:1c:c0:66:52:e7:11:90:0b: 86:61:f0:e3:dd:ca:eb:59:fc:ca:d8:e4:d5:36:5c: c9:da:ab:c3:22:19:27:d1:f3:07:7a:ad:1d:e9:0d: e9:6b:d6:26:7c:80:e1:53:d9:fa:16:ae:c4:93:bb: c6:e9:d9:d1:68:bf:80:71:3a:1f:1b:d5:4a:77:00: 4e:03:fb:a3:7e:99:a2:97:13:a3:35:a9:06:8d:95: 3d:16:f0:f8:df:dd:4a:e4:e3:fc:c5:69:28:b5:41: 87:e9:84:99:8d:6b:c8:1f:7c:dd:7f:83:21:47:0a: 9d:8f:ef:a3:ff:bd:d7:3f:3f:36:2d:2b:e7:a2:9a: ab:f0:51:e5:50:4e:68:1f:18:56:ab:b7:0b:70:9d: 78:d4:05:6a:dc:7c:7a:31:cd:d1:29:72:e5:f3:df: 81:15:68:7d:0b:c8:26:07:02:25:93:40:80:4b:c7: c6:26:5c:b2:49:9e:36:da:ff:bd:97:e8:f4:fe:06: 34:7c:84:37:33:69:3a:9e:f0:f4:9e:97:93:37:13: ec:f8:c3:5d:97:96:0d:73:cd:38:a3:7e:d6:88:0a: 80:03:77:cc:48:a1:c0:36:cd:28:cc:ee:ee:81:0e: 61:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B1:32:EA:25:32:34:A9:4D:44:89:6E:C1:B1:04:3B:1F:48:E8:7E X509v3 Authority Key Identifier: keyid:93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/xrEy6iUyNKlNRIluwbEEOx9I6H4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.7.0/24 IPv6: 2a0c:3500:3::/48 Signature Algorithm: sha256WithRSAEncryption 2f:0f:26:9f:2d:b9:4e:2a:11:57:6a:b7:ea:23:ce:59:a0:b9: f6:fd:e5:25:78:c0:32:ad:b7:f9:90:df:f4:47:f8:d6:5d:24: 88:2e:59:ae:73:2b:81:95:3a:e9:f8:91:72:96:09:4f:be:40: cd:35:02:ad:fa:eb:dc:55:e9:96:22:0c:8e:69:61:e4:01:40: 99:07:8f:46:a5:47:31:09:7c:7e:ab:72:7d:74:6c:8a:1e:b8: 6c:2f:a0:7e:d8:c9:4e:82:d8:31:b9:4a:12:e6:b3:a0:48:4d: 0d:1f:c7:fd:11:66:86:e3:61:32:b8:71:55:17:c1:65:98:fc: c1:5e:13:80:62:c6:25:ee:b0:26:d2:5a:f9:45:6a:95:9e:c1: 46:4b:93:73:35:27:57:56:e7:ef:70:85:ad:22:1b:da:2e:12: e8:d7:aa:13:15:84:6e:8d:b6:a9:73:df:18:62:f4:f4:00:e5: d6:a5:df:58:ae:9f:f1:b3:1e:8a:b6:b3:1f:82:38:ab:84:ca: e9:c4:cf:a5:02:30:59:82:78:26:f1:3b:6d:1e:bf:fc:0d:21: 93:e3:20:3c:95:68:dc:96:51:04:b6:dc:f1:00:be:dc:c0:9b: 8b:e1:d5:09:db:7f:82:0c:5a:ac:c9:e8:37:f6:63:87:19:61: 98:55:fa:8b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8Ex5L7wwjdHzLGWwfuJj5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMmU4MDc4ZWE0MjBhZmMxYTc4YmY5MjJhOWEyZjI3NDY3 OWM4YTgwHhcNMjYwMTAyMDAxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmIxMzJlYTI1MzIzNGE5NGQ0NDg5NmVjMWIxMDQzYjFmNDhlODdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2QrrbtgzA5Ayiq0g7pMNYVGB7VI HMBmUucRkAuGYfDj3crrWfzK2OTVNlzJ2qvDIhkn0fMHeq0d6Q3pa9YmfIDhU9n6 Fq7Ek7vG6dnRaL+AcTofG9VKdwBOA/ujfpmilxOjNakGjZU9FvD4391K5OP8xWko tUGH6YSZjWvIH3zdf4MhRwqdj++j/73XPz82LSvnopqr8FHlUE5oHxhWq7cLcJ14 1AVq3Hx6Mc3RKXLl89+BFWh9C8gmBwIlk0CAS8fGJlyySZ422v+9l+j0/gY0fIQ3 M2k6nvD0npeTNxPs+MNdl5YNc804o37WiAqAA3fMSKHANs0ozO7ugQ5hIwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMaxMuolMjSpTUSJbsGxBDsfSOh+MB8GA1UdIwQY MBaAFJMugHjqQgr8Gni/kiqaLydGecioMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3k2QWVPcENDdndhZUwtU0twb3ZKMFo1eUtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81ZWVjZjMtNjM3Zi00NTBjLTg0ODkt MzRiYTA3MzhhMzQxLzEveHJFeTZpVXlOS2xOUklsdXdiRUVPeDlJNkg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi81ZWVjZjMtNjM3Zi00NTBjLTg0ODktMzRiYTA3MzhhMzQx LzEva3k2QWVPcENDdndhZUwtU0twb3ZKMFo1eUtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuecHMA8E AgACMAkDBwAqDDUAAAMwDQYJKoZIhvcNAQELBQADggEBAC8PJp8tuU4qEVdqt+oj zlmgufb95SV4wDKtt/mQ3/RH+NZdJIguWa5zK4GVOun4kXKWCU++QM01Aq3669xV 6ZYiDI5pYeQBQJkHj0alRzEJfH6rcn10bIoeuGwvoH7YyU6C2DG5ShLms6BITQ0f x/0RZobjYTK4cVUXwWWY/MFeE4BixiXusCbSWvlFapWewUZLk3M1J1dW5+9wha0i G9ouEujXqhMVhG6Ntqlz3xhi9PQA5dal31iun/GzHoq2sx+COKuEyunEz6UCMFmC eCbxO20ev/wNIZPjIDyVaNyWUQS23PEAvtzAm4vh1Qnbf4IMWqzJ6Df2Y4cZYZhV +os= -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:58 2026 by rpki-client