This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/6v2it1qTQM_G9sWb1tDinWYpODY.roa File: 6v2it1qTQM_G9sWb1tDinWYpODY.roa (raw, json) Hash identifier: kiBDfwv0URUTmxQqj/IJZu5OTfVLSt/qbBsgaeH3VdA= Subject key identifier: EA:FD:A2:B7:5A:93:40:CF:C6:F6:C5:9B:D6:D0:E2:9D:66:29:38:36 Certificate issuer: /CN=a5d08b3150ad34de2b88592174192408396f11fb Certificate serial: 019B7EA48F679F313E594D58B79470A0F8EB Authority key identifier: A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/6v2it1qTQM_G9sWb1tDinWYpODY.roa Signing time: Fri 02 Jan 2026 12:17:52 +0000 ROA not before: Fri 02 Jan 2026 12:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12414 IP address blocks: 81.24.96.0/20 maxlen: 24 83.247.0.0/17 maxlen: 24 87.195.0.0/16 maxlen: 24 185.83.32.0/22 maxlen: 24 212.45.32.0/19 maxlen: 24 212.84.128.0/19 maxlen: 24 213.134.224.0/19 maxlen: 24 213.233.192.0/18 maxlen: 24 2001:9e0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:8f:67:9f:31:3e:59:4d:58:b7:94:70:a0:f8:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5d08b3150ad34de2b88592174192408396f11fb Validity Not Before: Jan 2 12:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eafda2b75a9340cfc6f6c59bd6d0e29d66293836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:14:66:a9:8b:a2:b9:b0:5f:7d:9d:a4:a2:a7: f3:b0:63:4d:f4:f5:b0:40:d1:d7:a5:8e:3d:e9:18: 64:38:be:45:4b:ce:c1:4c:2f:77:28:66:47:b7:89: 8a:fd:c3:cf:e4:ea:80:ac:d3:eb:71:c6:28:52:39: df:a7:85:db:3c:60:1f:62:bc:66:22:df:f4:7a:0c: 59:3d:ca:8b:8e:2f:9b:cf:f4:d4:34:43:df:57:7c: 71:36:f2:f4:34:ec:58:8e:04:5d:31:12:a2:d3:ae: a8:9d:18:17:c0:cb:b5:7e:07:1a:c8:33:db:9d:36: a5:75:f5:d4:50:e1:fd:ea:2f:82:88:8d:c2:2f:72: f7:43:f7:df:86:64:85:d1:9b:08:84:8d:97:2d:10: bc:0b:cc:9d:58:34:80:d3:05:e9:bf:45:3b:e0:41: 4a:a0:3f:73:68:8a:a1:6f:44:20:eb:e8:a3:62:2f: 5a:81:66:44:ee:aa:4b:08:3a:09:18:de:83:2c:7c: 86:14:01:14:3c:c0:71:31:fb:14:dd:ff:ff:4c:07: 95:3a:45:8c:ba:52:82:b0:02:27:df:2e:9f:a1:1e: 68:d4:dd:ab:a5:6f:f7:05:5a:28:a8:7c:c3:63:5f: 7c:45:f6:bf:60:8b:b6:f3:01:2a:32:ea:e4:74:ce: 41:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FD:A2:B7:5A:93:40:CF:C6:F6:C5:9B:D6:D0:E2:9D:66:29:38:36 X509v3 Authority Key Identifier: keyid:A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/6v2it1qTQM_G9sWb1tDinWYpODY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.24.96.0/20 83.247.0.0/17 87.195.0.0/16 185.83.32.0/22 212.45.32.0/19 212.84.128.0/19 213.134.224.0/19 213.233.192.0/18 IPv6: 2001:9e0::/29 Signature Algorithm: sha256WithRSAEncryption 22:d4:7f:8c:c0:90:ba:bf:52:d5:2d:92:0b:a5:2c:ab:cd:4b: b5:c1:36:ac:13:e2:14:01:ee:a8:9e:92:43:9c:ec:d1:48:1e: 20:e2:ab:ae:e4:f0:ca:a6:69:0d:f8:5f:e1:0a:4b:8f:02:92: 5e:d2:cb:f6:e5:85:0a:d7:93:cd:ba:2c:27:12:63:a9:7a:10: 3c:9a:05:c2:4f:33:cd:31:82:31:b9:db:a7:90:3f:01:98:ce: de:c8:cc:24:f5:d1:46:48:76:62:d5:90:d8:f8:d1:df:ac:35: 38:d8:6e:00:9a:0b:4c:35:31:41:87:a6:b7:55:68:75:3b:1f: bb:cb:97:2b:31:a2:4d:85:ee:12:be:67:c7:39:bd:04:4c:cb: 70:69:6e:c4:71:67:97:78:6b:e6:65:bf:5d:97:35:3e:b5:0a: 6d:60:fc:63:63:7f:3b:83:9d:38:15:97:83:5c:ed:e2:68:b0: 85:01:de:85:c3:44:8b:2f:83:99:58:79:d8:70:e4:16:19:f9: e1:ef:67:d1:28:e4:74:9b:ff:82:0b:e4:71:b6:1d:fb:bc:b3: f1:26:f9:68:21:62:1b:0d:5e:96:17:d7:7b:72:90:f5:66:03: 9d:bb:16:f5:b1:f0:6c:bf:68:e1:d0:96:e5:d2:07:22:5a:8c: 5c:91:62:71 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZt+pI9nnzE+WU1Yt5RwoPjrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZDA4YjMxNTBhZDM0ZGUyYjg4NTkyMTc0MTkyNDA4Mzk2 ZjExZmIwHhcNMjYwMTAyMTIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWZkYTJiNzVhOTM0MGNmYzZmNmM1OWJkNmQwZTI5ZDY2MjkzODM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxRmqYuiubBffZ2koqfzsGNN9PWw QNHXpY496RhkOL5FS87BTC93KGZHt4mK/cPP5OqArNPrccYoUjnfp4XbPGAfYrxm It/0egxZPcqLji+bz/TUNEPfV3xxNvL0NOxYjgRdMRKi066onRgXwMu1fgcayDPb nTaldfXUUOH96i+CiI3CL3L3Q/ffhmSF0ZsIhI2XLRC8C8ydWDSA0wXpv0U74EFK oD9zaIqhb0Qg6+ijYi9agWZE7qpLCDoJGN6DLHyGFAEUPMBxMfsU3f//TAeVOkWM ulKCsAIn3y6foR5o1N2rpW/3BVooqHzDY198Rfa/YIu28wEqMurkdM5BWQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFOr9ordak0DPxvbFm9bQ4p1mKTg2MB8GA1UdIwQY MBaAFKXQizFQrTTeK4hZIXQZJAg5bxH7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGRDTE1WQ3ROTjRyaUZraGRCa2tDRGx2RWZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85MDE4MzktMGVmMi00MGVjLTk5YjMt NDNjYzViNDZkNWIyLzEvNnYyaXQxcVRRTV9HOXNXYjF0RGluV1lwT0RZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85MDE4MzktMGVmMi00MGVjLTk5YjMtNDNjYzViNDZkNWIy LzEvcGRDTE1WQ3ROTjRyaUZraGRCa2tDRGx2RWZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjA1BAIAATAvAwQEURhgAwQH U/cAAwMAV8MDBAK5UyADBAXULSADBAXUVIADBAXVhuADBAbV6cAwDQQCAAIwBwMF AyABCeAwDQYJKoZIhvcNAQELBQADggEBACLUf4zAkLq/UtUtkgulLKvNS7XBNqwT 4hQB7qiekkOc7NFIHiDiq67k8MqmaQ34X+EKS48Ckl7Sy/blhQrXk826LCcSY6l6 EDyaBcJPM80xgjG526eQPwGYzt7IzCT10UZIdmLVkNj40d+sNTjYbgCaC0w1MUGH prdVaHU7H7vLlysxok2F7hK+Z8c5vQRMy3BpbsRxZ5d4a+Zlv12XNT61Cm1g/GNj fzuDnTgVl4Nc7eJosIUB3oXDRIsvg5lYedhw5BYZ+eHvZ9Eo5HSb/4IL5HG2Hfu8 s/Em+WghYhsNXpYX13tykPVmA527FvWx8Gy/aOHQluXSByJajFyRYnE= -----END CERTIFICATE-----Generated at Mon Jan 26 20:41:34 2026 by rpki-client